Function at 0x404da0
Capabilities:
Access peb ldr_data
Get ntdll base address
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4367d5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push ebp
push esi
push edi
mov esi, ecx
push eax
push 0x66
mov dword [esp + 0x14], esi
call fcn.00429ee0
lea ecx, [esi + 0x5c]
mov dword [esp + 0x2c], 0
call fcn.00402cd0
lea ecx, [esi + 0xd0]
mov byte [esp + 0x2c], 1
call fcn.00402cd0
lea ecx, [esi + 0x144]
mov byte [esp + 0x2c], 2
call fcn.00402cd0
lea ecx, [esi + 0x1b8]
mov byte [esp + 0x2c], 3
call fcn.00402cd0
lea ecx, [esi + 0x22c]
mov byte [esp + 0x2c], 4
call fcn.00402cd0
lea ecx, [esi + 0x2a0]
mov byte [esp + 0x2c], 5
call fcn.0040b570
lea ecx, [esi + 0x2fc]
mov byte [esp + 0x2c], 6
call fcn.004092a0
lea ecx, [esi + 0x51c]
mov byte [esp + 0x2c], 7
call fcn.00402cd0
lea ecx, [esi + 0x590]
mov byte [esp + 0x2c], 8
call fcn.00402cd0
lea ecx, [esi + 0x604]
mov byte [esp + 0x2c], 9
call fcn.00402cd0
lea ecx, [esi + 0x678]
mov byte [esp + 0x2c], 0xa
call fcn.00402cd0
lea ecx, [esi + 0x6ec]
mov byte [esp + 0x2c], 0xb
call fcn.00402cd0
lea ecx, [esi + 0x768]
mov byte [esp + 0x2c], 0xc
call fcn.00401000
mov ecx, dword [0x44c730]
mov dword [esi + 0x7a0], ecx
mov edx, dword [0x44c730]
mov dword [esi + 0x7f0], edx
push 0
lea ecx, [esi + 0x7f4]
mov byte [esp + 0x30], 0xf
call fcn.00406f60
mov dword [esi], method.CDialog.virtual_0
mov dword [esi + 0x760], 0
mov byte [esp + 0x2c], 0x10
mov byte [0x44e608], 0
call fcn.00432e9f
call fcn.00432e9f
mov eax, dword [eax + 0xc]
push 0x80
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov edi, dword [sym.imp.USER32.dll_SetRect]
push 0x198
mov dword [esi + 0x764], eax
push 0x2bc
push 0x17a
lea eax, [esi + 0x7a4]
push 0x1f4
push eax
call edi
push 0x6c
push 0x294
push 0x5e
lea ecx, [esi + 0x7e0]
push 0xe
push ecx
call edi
push 0x1d4
push 0x2a8
push 0x102
lea edx, [esi + 0x7b4]
push 0x212
push edx
call edi
call fcn.00432e9f
mov edi, dword [eax + 0xc]
mov ebp, dword [sym.imp.USER32.dll_LoadImageA]
push 0
push 0
push 0
push 1
push 0xa5
push edi
call ebp
push 0
push 0
push 0
push 1
push 0xa1
push edi
mov dword [esi + 0x7c8], eax
call ebp
push 0
push 0
push 0
push 1
push 0xa3
push edi
mov dword [esi + 0x7cc], eax
call ebp
push 0
push 0
push 0
push 1
push 0xa3
push edi
mov dword [esi + 0x7d0], eax
call ebp
push 0
push 0
push 0
push 1
push 0x9f
push edi
mov dword [esi + 0x7d4], eax
call ebp
push 0
push 0
push 0
push 1
push 0xa4
push edi
mov dword [esi + 0x7d8], eax
call ebp
mov dword [esi + 0x7dc], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov edx, dword [esi + 0x7c8]
lea ecx, [esp + 0x10]
push ecx
push edx
mov dword [esp + 0x28], eax
call dword [sym.imp.USER32.dll_GetIconInfo]
mov al, byte [esp + 0x14]
mov cl, byte [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
shl al, 1
shl cl, 1
push edx
mov byte [esi + 0x7c4], al
mov byte [esi + 0x7c5], cl
call edi
mov eax, dword [esp + 0x20]
push eax
call edi
mov ecx, dword [esp + 0x24]
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x24
ret 4