Function at 0x4179a0
Capabilities:
Access peb ldr_data
Get ntdll base address
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x534d69
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x559024]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x10], ebx
mov dword [esi + 4], 0x539d20
mov dword [esi + 0x2c], 0x539d28
mov dword [esi + 0x334b0], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], ebx
mov byte [esi + 0x1c], bl
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov byte [esi + 0x38], bl
mov dword [ebp - 4], ebx
mov dword [esi], vtable.CAdvTabPageWnd.0
mov dword [esi + 0x40], ebx
mov dword [esi + 0x3c], vtable.CMemDc.0
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov byte [esi + 0x4c], bl
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov byte [esi + 0x58], bl
mov dword [esi + 0x60], ebx
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x68], vtable.CDibInfo.0
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x80], ebx
mov dword [esi + 0x84], ebx
mov dword [esi + 0x88], ebx
mov dword [esi + 0x5c], vtable.CImgBltEx.0
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa0], ebx
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], ebx
push 1
lea ecx, [esi + 0xac]
call fcn.004fdd40
push 1
lea ecx, [esi + 0x13c]
call fcn.004fdd40
push 1
lea ecx, [esi + 0x1cc]
call fcn.004fdd40
push 1
lea ecx, [esi + 0x25c]
call fcn.004fdd40
push 1
lea ecx, [esi + 0x2ec]
call fcn.004fdd40
push 1
lea ecx, [esi + 0x37c]
call fcn.004fdd40
lea edi, [esi + 0x40c]
call fcn.004b5a10
add edi, 0xe88
call fcn.004b8170
lea edi, [esi + 0x48d0]
mov dword [ebp - 0x10], edi
call fcn.00412aa0
add edi, 0x1314
push edi
mov byte [ebp - 4], 0xb
call fcn.004a4010
lea edi, [esi + 0x182a8]
mov dword [ebp - 0x10], edi
call fcn.00412aa0
add edi, 0x1314
push edi
mov byte [ebp - 4], 0xd
call fcn.004864c0
lea edi, [esi + 0x21f30]
mov dword [ebp - 0x10], edi
call fcn.00412aa0
add edi, 0x1314
push edi
mov byte [ebp - 4], 0xf
call fcn.004823e0
lea eax, [esi + 0x31974]
call fcn.004b3f80
lea eax, [esi + 0x31a18]
call fcn.004aa550
lea eax, [esi + 0x31ae0]
call fcn.00432620
lea eax, [esi + 0x31bcc]
call fcn.004c84f0
lea eax, [esi + 0x31db4]
call fcn.0046d130
lea eax, [esi + 0x31e80]
call fcn.0042ce20
push 0x4052a0
push 0x435050
push 6
push 0x2ac
lea eax, [esi + 0x31f9c]
push eax
mov byte [ebp - 4], 0x16
call fcn.00513bdf
push 0x405290
push fcn.004fdd40
push 6
push 0x90
lea ecx, [esi + 0x32fa4]
push ecx
mov byte [ebp - 4], 0x17
call fcn.00513bdf
push fcn.004fc190
push 0x43dbb0
push 6
push 0xc
lea edx, [esi + 0x33304]
push edx
mov byte [ebp - 4], 0x18
call fcn.00513b7a
push fcn.004fc190
push 0x43dbb0
push 6
push 0xc
lea eax, [esi + 0x3334c]
push eax
mov byte [ebp - 4], 0x19
call fcn.00513b7a
mov byte [ebp - 4], 0x1a
push 0x427760
push 0x427740
push 6
push 0x18
lea ecx, [esi + 0x33394]
push ecx
call fcn.00513b7a
mov dword [esi + 0x334a4], ebx
mov dword [esi + 0x334a8], ebx
mov dword [esi + 0x334ac], ebx
mov dword [esi + 0x31f70], ebx
mov dword [esi + 0x31f74], ebx
mov dword [esi + 0x3347c], ebx
mov dword [esi + 0x3345c], ebx
mov dword [esi + 0x33478], ebx
mov ecx, 0x18
lea eax, [esi + 0x31f78]
mov byte [eax], bl
inc eax
dec ecx
jne 0x417c67
mov ecx, 0xc
lea eax, [esi + 0x31f90]
mov byte [eax], bl
inc eax
dec ecx
jne 0x417c78
mov ecx, 6
lea eax, [esi + 0x33424]
lea esp, [esp]
mov byte [eax], bl
inc eax
dec ecx
jne 0x417c90
mov ecx, 0x18
lea eax, [esi + 0x33444]
mov byte [eax], bl
inc eax
dec ecx
jne 0x417ca1
mov ecx, 0x18
lea eax, [esi + 0x3342c]
mov byte [eax], bl
inc eax
dec ecx
jne 0x417cb2
mov ecx, 0x18
lea eax, [esi + 0x33460]
mov byte [eax], bl
inc eax
dec ecx
jne 0x417cc3
mov byte [esi + 0x33480], bl
mov ecx, 0x20
lea eax, [esi + 0x33484]
lea ebx, [ebx]
mov byte [eax], bl
inc eax
dec ecx
jne 0x417ce0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4