Function at 0x426e50
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x48ae28
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
push ebp
mov ebp, ecx
push esi
push edi
mov eax, dword [ebp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.0047f70e
mov ecx, dword [eax + 8]
push 0x5a
push ecx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x48
push eax
push 0x48
call dword [sym.imp.KERNEL32.dll_MulDiv]
xor ebx, ebx
mov dword [ebp + 0x12d4], eax
mov dword [ebp + 0x12d8], ebx
mov dword [ebp + 0x12dc], ebx
mov dword [ebp + 0x12e0], ebx
mov dword [ebp + 0x12e4], 0x2bc
mov byte [ebp + 0x12e8], bl
mov byte [ebp + 0x12e9], bl
mov byte [ebp + 0x12ea], bl
mov byte [ebp + 0x12eb], 1
mov byte [ebp + 0x12ec], 2
mov byte [ebp + 0x12ed], 1
mov byte [ebp + 0x12ee], bl
mov byte [ebp + 0x12ef], bl
mov edx, dword [0x4b20c8]
mov dword [esp + 0x10], edx
push 0x4b61a0
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x48], ebx
call fcn.00480d27
mov edi, dword [esp + 0x10]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp + 0x12f0]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp + 0x12d4]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp + 0x1310]
mov ecx, edi
call fcn.00481893
mov edx, dword [ebp + 0x1c]
lea ecx, [esp + 0x24]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x471
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x426f6a
xor ecx, ecx
jmp 0x426f6d
mov ecx, dword [edi + 4]
mov eax, dword [eax + 0x1c]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push ecx
push 0x30
push eax
call esi
push 0x475
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x426f92
xor ecx, ecx
jmp 0x426f95
mov ecx, dword [edi + 4]
push 1
push ecx
mov ecx, dword [eax + 0x1c]
push 0x30
push ecx
call esi
push 0x476
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x426fb4
xor ecx, ecx
jmp 0x426fb7
mov ecx, dword [edi + 4]
mov edx, dword [eax + 0x1c]
push 1
push ecx
push 0x30
push edx
call esi
push 0x47b
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x426fd6
xor ecx, ecx
jmp 0x426fd9
mov ecx, dword [edi + 4]
mov eax, dword [eax + 0x1c]
push 1
push ecx
push 0x30
push eax
call esi
push 0x47c
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x426ff8
xor ecx, ecx
jmp 0x426ffb
mov ecx, dword [edi + 4]
push 1
push ecx
mov ecx, dword [eax + 0x1c]
push 0x30
push ecx
call esi
push 0x47d
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x42701a
xor edi, edi
jmp 0x42701d
mov edi, dword [edi + 4]
mov edx, dword [eax + 0x1c]
push 1
push edi
push 0x30
push edx
call esi
push ebx
lea eax, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1320]
push eax
mov edi, 0xa
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0x1e
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x142
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea ecx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x13d8]
push ecx
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0xb5
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x143
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea edx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1b08]
push edx
mov edi, 0x18
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0xd3
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0xbb
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea eax, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1bc0]
push eax
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0x118
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x20e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea ecx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1490]
push ecx
mov edi, 0x66
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0x40
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea edx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1548]
push edx
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0x55
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea eax, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1600]
push eax
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0xd4
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea ecx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x16b8]
push ecx
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0xe5
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
mov dword [esp + 0x14], edi
push ebx
lea edx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1770]
push edx
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x2c], 0x118
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea eax, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1828]
push eax
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0x129
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea ecx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x18e0]
push ecx
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea edx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1998]
push edx
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
lea esi, [ebp + 0x1a50]
push ebx
lea eax, [esp + 0x18]
push ebp
push eax
push 0x50000000
push ebx
mov ecx, esi
call fcn.00481548
push 0x4ad198
push 0x14e
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push 1
push 0x44
lea esi, [ebp + 0x5c]
push 0x43
push 0x37
push 0x11
mov ecx, esi
call fcn.0047b777
push 0xbc
push 0xbc
push 0xbc
push 0xbc
mov ecx, esi
call fcn.00459400
push ebx
lea ecx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x10a4]
push ecx
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x1f6
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea edx, [esp + 0x18]
push ebp
lea esi, [ebp + 0x115c]
push edx
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x1f6
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push ebx
lea eax, [esp + 0x18]
push ebp
lea esi, [ebp + 0x1214]
push eax
push 0x50000000
push ebx
mov ecx, esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x1f6
mov ecx, esi
call fcn.0045a680
mov ecx, esi
call fcn.0045a5b0
push 1
push 0x15
lea esi, [ebp + 0xf30]
push 0x45
push 0x79
push 0xd2
mov ecx, esi
call fcn.0047b777
push 0xc6
push 0x197
push 0x196
push 0xc6
mov ecx, esi
call fcn.00459400
push 1
push 0x15
lea esi, [ebp + 0xdbc]
push 0x54
push 0x79
push 0x11c
mov ecx, esi
call fcn.0047b777
push 0xc8
push 0x194
push 0x193
push 0xc8
mov ecx, esi
call fcn.00459400
push 1
push 0x15
lea esi, [ebp + 0xc48]
push 0x45
push 0xe0
push 0x11c
mov ecx, esi
call fcn.0047b777
push 0xb7
push 0x191
push 0x190
push 0xb7
mov ecx, esi
call fcn.00459400
push 1
push 0x15
lea esi, [ebp + 0xad4]
push 0x45
push 0x123
push 0x11c
mov ecx, esi
call fcn.0047b777
push 0xb7
push 0x191
push 0x190
push 0xb7
mov ecx, esi
call fcn.00459400
push 1
push 0x15
lea esi, [ebp + 0x960]
push 0x54
push ebx
push ebx
mov ecx, esi
call fcn.0047b777
push 0xc8
push 0x194
push 0x193
push 0xc8
mov ecx, esi
call fcn.00459400
push 0x198
push 0x198
push 0x198
push 0x198
lea ecx, [ebp + 0x390]
call fcn.00459400
push 0x199
push 0x199
push 0x199
push 0x199
lea ecx, [ebp + 0x678]
call fcn.00459400
push 0x19a
push 0x19a
push 0x19a
push 0x19a
lea ecx, [ebp + 0x504]
call fcn.00459400
push 0x19b
push 0x19b
push 0x19b
push 0x19b
lea ecx, [ebp + 0x7ec]
call fcn.00459400
push 0x19c
push 0x19c
push 0x19c
push 0x19c
lea ecx, [ebp + 0x21c]
call fcn.00459400
lea ecx, [esp + 0x10]
mov dword [ebp + 0x20c], 1
mov dword [esp + 0x3c], 0xffffffff
call fcn.0047c0f3
mov ecx, dword [esp + 0x34]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x30
ret