Function at 0x10001920
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x1009dd38
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
push esi
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x100c31b0
call sub.mfc42.dll_CString::CString_1
mov ecx, dword [esp + 0x3c]
call dword [sym.imp.exstage.dll_public:_class_CxFXSurface____thiscall_CRLEManager::GetSurface_class_CString_]
push eax
mov ecx, 0x100c6ac0
call fcn.10001660
push 6
xor ebx, ebx
push 6
push ebx
push ebx
push ebx
mov ecx, 0x100c6ac0
call fcn.10001630
push 6
push 0xc
push ebx
push 6
push 1
mov ecx, 0x100c6ac0
call fcn.10001630
push 6
push 0x13
push ebx
push 0xc
push 2
mov ecx, 0x100c6ac0
call fcn.10001630
push 0xc
push 6
push 6
push ebx
push 3
mov ecx, 0x100c6ac0
call fcn.10001630
push 0xc
push 0xc
push 6
push 6
push 4
mov ecx, 0x100c6ac0
call fcn.10001630
push 0xc
push 0x13
push 6
push 0xc
push 5
mov ecx, 0x100c6ac0
call fcn.10001630
push 0x13
push 6
push 0xc
push ebx
push 6
mov ecx, 0x100c6ac0
call fcn.10001630
push 0x13
push 0xc
push 0xc
push 6
push 7
mov ecx, 0x100c6ac0
call fcn.10001630
push 0x13
push 0x13
push 0xc
push 0xc
push 8
mov ecx, 0x100c6ac0
call fcn.10001630
push 0x17
push 0x1a
push 0xc
push 0x14
push 9
mov ecx, 0x100c6ac0
call fcn.10001630
mov ebp, dword [sym.imp.message.dll_char_const____cdecl_MESSAGEGetString_int__int_]
push 0x1b8
push ebx
mov dword [0x100c6ab4], ebx
mov dword [0x100c6a70], 0xfffffff4
mov dword [0x100c6a74], ebx
mov dword [0x100c6a78], ebx
mov dword [0x100c6a7c], ebx
mov dword [0x100c6a80], 0x190
mov byte [0x100c6a84], bl
mov byte [0x100c6a85], bl
mov byte [0x100c6a86], bl
mov byte [0x100c6a89], 2
mov byte [0x100c6a8a], 1
call ebp
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
push 0x1b9
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebx
mov eax, ecx
mov esi, edi
mov edi, 0x100c6a8c
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call ebp
mov esi, dword [sym.imp.msvcrt.dll_atoi]
push eax
call esi
push 0x1ba
push ebx
mov byte [0x100c6a87], al
call ebp
push eax
call esi
push 0x1bb
push ebx
mov byte [0x100c6a8b], al
call ebp
push eax
call esi
add esp, 0x2c
mov byte [0x100c6a88], al
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], 0x100ab874
push 0x100c6a70
mov dword [esp + 0x34], ebx
call dword [sym.imp.gdi32.dll_CreateFontIndirectA]
push eax
lea ecx, [esp + 0x14]
call sub.mfc42.dll_CGdiObject::Attach
lea ecx, [esp + 0x18]
call sub.mfc42.dll_CDC::CDC
push ebx
push ebx
push ebx
push 0x100c31a8
mov byte [esp + 0x40], 1
call dword [sym.imp.gdi32.dll_CreateDCA]
push eax
lea ecx, [esp + 0x1c]
call sub.mfc42.dll_CDC::Attach
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x1c]
call sub.mfc42.dll_CDC::SelectObject
push 0x100c6ab0
push 0x61
push 0x61
mov edx, dword [esp + 0x28]
push edx
call dword [sym.imp.gdi32.dll_GetCharWidthA]
lea ecx, [esp + 0x18]
call sub.mfc42.dll_CDC::DeleteDC
lea ecx, [esp + 0x10]
call sub.mfc42.dll_CGdiObject::DeleteObject
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
mov dword [0x100c6aac], eax
mov byte [esp + 0x30], bl
call fcn.1009d01e
mov dword [esp + 0x10], 0x100ab860
lea ecx, [esp + 0x10]
mov dword [esp + 0x30], 2
call sub.mfc42.dll_CGdiObject::DeleteObject
mov ecx, dword [esp + 0x28]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x24
ret