Function at 0x41a8e0
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x4778ab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
push eax
mov esi, ecx
push 0x421
mov dword [esp + 0x18], esi
call fcn.0046162d
xor ebx, ebx
lea edi, [esi + 0x80]
mov dword [esi], 0x480a90
mov dword [esp + 0x1c], ebx
mov dword [edi + 4], ebx
mov dword [edi], vtable.CFont.0
lea ebp, [esi + 0x88]
mov dword [ebp + 4], ebx
mov dword [ebp], vtable.CFont.0
lea ecx, [esi + 0x94]
mov byte [esp + 0x1c], 2
call fcn.0045edea
push fcn.0043baa0
push 0x43c240
push 0xf
push 0x14c
lea ecx, [esi + 0x100]
push ecx
mov byte [esp + 0x30], 3
call fcn.004510bd
lea ecx, [esi + 0x1474]
mov byte [esp + 0x1c], 4
call fcn.0043c880
lea ecx, [esi + 0x14e8]
mov byte [esp + 0x1c], 5
call fcn.0043c880
mov dword [esi + 0x1560], ebx
mov dword [esi + 0x1564], ebx
mov dword [esi + 0x1568], ebx
lea ecx, [esi + 0x156c]
mov byte [esp + 0x1c], 7
call fcn.004384e0
lea ecx, [esi + 0x1638]
mov byte [esp + 0x1c], 8
call fcn.0043fd10
lea ecx, [esi + 0x16ac]
mov byte [esp + 0x1c], 9
call fcn.0043fd10
lea ecx, [esi + 0x1720]
mov byte [esp + 0x1c], 0xa
call fcn.0043fd10
lea ecx, [esi + 0x1794]
mov byte [esp + 0x1c], 0xb
call fcn.0043fd10
push fcn.00440160
push 0x440090
push 7
push 0x74
lea edx, [esi + 0x1808]
push edx
mov byte [esp + 0x30], 0xc
call fcn.004510bd
lea ecx, [esi + 0x1b34]
mov byte [esp + 0x1c], 0xd
call fcn.0043e4f0
mov byte [esp + 0x1c], 0xe
lea ecx, [esi + 0x1b9c]
call fcn.0043c880
push ebx
lea ecx, [esi + 0x1c10]
mov byte [esp + 0x20], 0xf
call fcn.0041c610
mov dword [esi + 0x1f80], ebx
mov dword [esi + 0x1f84], ebx
mov dword [esi + 0x1f88], ebx
mov dword [esi + 0x1f90], ebx
mov dword [esi + 0x1f94], ebx
mov dword [esi + 0x1f98], ebx
lea ecx, [esi + 0x1fa4]
mov byte [esp + 0x1c], 0x12
call fcn.0043c880
mov dword [esi + 0x2018], 0x48788c
mov dword [esi + 0x201c], ebx
mov dword [esi + 0x203c], ebx
mov dword [esi + 0x2038], 0x487058
lea ecx, [esi + 0x2044]
mov byte [esp + 0x1c], 0x15
call fcn.00439240
lea ecx, [esi + 0x2058]
mov byte [esp + 0x1c], 0x16
call fcn.00439240
mov dword [esi + 0x2070], ebx
mov dword [esi + 0x206c], 0x487048
lea ecx, [esi + 0x2074]
mov byte [esp + 0x1c], 0x18
call fcn.00468915
lea ecx, [esi + 0x2084]
mov byte [esp + 0x1c], 0x19
call fcn.00468915
push ebx
push ebx
push ebx
push ebx
lea eax, [esi + 0x70]
push eax
mov byte [esp + 0x30], 0x1a
call dword [sym.imp.USER32.dll_SetRect]
push ebx
push 0x47dd3c
push 0x5a
mov ecx, edi
call fcn.0046cab0
push 0x47dd3c
push ebx
push ebx
push ebx
push ebx
mov edi, 1
push edi
push ebx
push ebx
push ebx
push 0x384
push ebx
push ebx
push ebx
push 0xa
mov dword [esi + 0x90], ebx
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
mov ecx, ebp
call fcn.004690a4
mov dword [esi + 0x2024], edi
mov dword [esi + 0x2028], edi
mov dword [esi + 0x202c], ebx
push 0xe0dbd8
push edi
push ebx
mov dword [esi + 0x2030], ebx
mov dword [esi + 0x2034], edi
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
lea ecx, [esi + 0x2038]
call fcn.004690a4
mov ecx, dword [esp + 0x14]
pop edi
mov byte [esi + 0x1fa0], bl
mov dword [esi + 0x1f9c], ebx
mov dword [esi + 0x2020], ebx
mov dword [esi + 0x2040], 0x3e8
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4