Function at 0x428a50
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x479645
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
push eax
mov esi, ecx
push 0x422
mov dword [esp + 0x18], esi
call fcn.0046162d
xor edi, edi
lea ebx, [esi + 0x80]
mov dword [esi], 0x482da8
mov dword [esp + 0x1c], edi
mov dword [ebx + 4], edi
mov dword [ebx], vtable.CFont.0
lea ebp, [esi + 0x88]
mov dword [ebp + 4], edi
mov dword [ebp], vtable.CFont.0
lea ecx, [esi + 0x94]
mov byte [esp + 0x1c], 2
call fcn.0045edea
push fcn.0043fff0
push 0x43ff20
push 8
push 0x74
lea ecx, [esi + 0x100]
push ecx
mov byte [esp + 0x30], 3
call fcn.004510bd
push fcn.0043fff0
push 0x43ff20
push 8
push 0x74
lea edx, [esi + 0x4a0]
push edx
mov byte [esp + 0x30], 4
call fcn.004510bd
push fcn.0043fff0
push 0x43ff20
push 8
push 0x74
lea eax, [esi + 0x840]
push eax
mov byte [esp + 0x30], 5
call fcn.004510bd
push fcn.0043fff0
push 0x43ff20
push 8
push 0x74
lea ecx, [esi + 0xbe0]
push ecx
mov byte [esp + 0x30], 6
call fcn.004510bd
lea ecx, [esi + 0xf80]
mov byte [esp + 0x1c], 7
call fcn.0043fd10
lea ecx, [esi + 0xff4]
mov byte [esp + 0x1c], 8
call fcn.0043fd10
push fcn.00440160
push 0x440090
push 7
push 0x74
lea edx, [esi + 0x1068]
push edx
mov byte [esp + 0x30], 9
call fcn.004510bd
mov dword [esi + 0x1398], edi
mov dword [esi + 0x139c], edi
mov dword [esi + 0x13a0], edi
mov dword [esi + 0x13a8], edi
mov dword [esi + 0x13ac], edi
mov dword [esi + 0x13b0], edi
mov dword [esi + 0x13b8], edi
mov dword [esi + 0x13bc], edi
mov dword [esi + 0x13c0], edi
mov dword [esi + 0x13c8], edi
mov dword [esi + 0x13cc], edi
mov dword [esi + 0x13d0], edi
lea ecx, [esi + 0x13d4]
mov byte [esp + 0x1c], 0xe
call fcn.004384e0
lea ecx, [esi + 0x14a0]
mov byte [esp + 0x1c], 0xf
call fcn.0043e4f0
lea ecx, [esi + 0x1508]
mov byte [esp + 0x1c], 0x10
call fcn.0043c880
push fcn.00440920
push fcn.00440740
push 8
push 0xb8
lea eax, [esi + 0x157c]
push eax
mov byte [esp + 0x30], 0x11
call fcn.004510bd
push fcn.004019d0
push fcn.00401b40
push 8
push 4
lea ecx, [esi + 0x1b3c]
push ecx
mov byte [esp + 0x30], 0x12
call fcn.004510bd
mov dword [esi + 0x1b60], edi
mov dword [esi + 0x1b64], edi
mov dword [esi + 0x1b68], edi
lea ecx, [esi + 0x1b70]
mov byte [esp + 0x1c], 0x14
call fcn.00463423
mov dword [esi + 0x1b70], 0x48711c
mov dword [esi + 0x1bc0], 0x48788c
mov dword [esi + 0x1bc4], edi
mov byte [esp + 0x1c], 0x16
call fcn.004601e6
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x1bdc], eax
lea ecx, [esi + 0x1be0]
mov byte [esp + 0x1c], 0x17
call fcn.00439240
lea ecx, [esi + 0x1bf4]
mov byte [esp + 0x1c], 0x18
call fcn.00439240
lea ecx, [esi + 0x1c08]
mov byte [esp + 0x1c], 0x19
call fcn.00439240
lea ecx, [esi + 0x1c1c]
mov byte [esp + 0x1c], 0x1a
call fcn.00439240
mov dword [esi + 0x1c34], edi
mov dword [esi + 0x1c30], 0x487048
lea ecx, [esi + 0x1c38]
mov byte [esp + 0x1c], 0x1c
call fcn.00468915
lea ecx, [esi + 0x1c48]
mov byte [esp + 0x1c], 0x1d
call fcn.00468915
push edi
push edi
push edi
push edi
lea eax, [esi + 0x70]
push eax
mov byte [esp + 0x30], 0x1e
call dword [sym.imp.USER32.dll_SetRect]
push edi
push 0x47dd3c
push 0x5a
mov ecx, ebx
call fcn.0046cab0
push 0x47e1a4
push edi
push edi
push edi
push edi
mov ebx, 1
push ebx
push edi
push edi
push edi
push 0x384
push edi
push edi
push edi
push 0xf
mov dword [esi + 0x90], edi
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
mov ecx, ebp
call fcn.004690a4
push edi
push 0x47e1c1
lea ecx, [esi + 0x1bdc]
mov dword [esi + 0x1bc8], ebx
mov dword [esi + 0x1bcc], ebx
mov dword [esi + 0x1bd0], edi
mov dword [esi + 0x1bd4], edi
mov dword [esi + 0x1bd8], ebx
mov dword [esi + 0x1b6c], 0xbb8
call fcn.00401fe0
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4