Function at 0x5dde38
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
xor edx, edx
mov dword [ebp - 8], edx
mov ebx, eax
mov esi, dword [ebp + 8]
add esi, 0xffffffa4
xor eax, eax
push ebp
push 0x5de01b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x60]
call fcn.00460284
mov eax, dword [eax + 0x40]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 0x64]
mov edx, dword [edx + 0x30]
mov edx, dword [edx + 0x78]
mov edx, dword [edx + 0x10]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x68]
call fcn.004b2c54
call fcn.0051cda4
mov edx, dword [ebp + 8]
mov dword [edx - 0x6c], eax
mov eax, dword [ebp + 8]
cmp dword [eax - 0x6c], 0
je 0x5ddebf
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x6c]
mov eax, dword [eax + 0x64]
call fcn.00458d38
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x60]
call fcn.00460284
mov eax, dword [eax + 0x40]
pop edx
call fcn.00458d40
mov eax, dword [ebp + 8]
mov dword [eax - 0x70], esi
lea edx, [ebp - 8]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x64]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x10]
call fcn.00458bc0
mov edx, dword [ebp - 8]
lea eax, [esi + 0x1c]
call fcn.00415838
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x70]
push eax
push 0x5c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x60]
call fcn.00460284
call fcn.0045a64c
push eax
call sub.gdi32.dll_GetObjectW
mov dword [esi + 8], ebx
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x64]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x78]
mov ebx, dword [eax + 0x10]
mov eax, ebx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esi], eax
mov eax, dword [ebp + 8]
mov eax, ebx
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x1d]
mov byte [ebp - 1], al
test byte [ebp - 1], 8
setne al
mov byte [esi + 0x16], al
mov eax, dword [ebp + 8]
mov eax, ebx
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x1d]
mov byte [ebp - 2], al
test byte [ebp - 2], 2
setne al
mov byte [esi + 0x14], al
mov eax, dword [ebp + 8]
mov eax, ebx
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x1d]
mov byte [ebp - 3], al
test byte [ebp - 3], 4
setne al
mov byte [esi + 0x15], al
mov eax, dword [ebp + 8]
mov eax, ebx
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x1d]
mov byte [ebp - 4], al
test byte [ebp - 4], 1
je 0x5ddf8b
mov dword [esi + 0x10], 0x2bc
jmp 0x5ddf92
mov dword [esi + 0x10], 0x190
mov eax, dword [ebp + 8]
mov eax, ebx
call fcn.00458d38
mov byte [esi + 0x17], al
xor eax, eax
mov dword [esi + 4], eax
mov byte [esi + 0x18], 0
mov byte [esi + 0x19], 0
mov eax, dword [esi + 8]
mov dword [esi + 0xc], eax
mov byte [esi + 0x1b], 0
mov byte [esi + 0x1a], 0
push esi
call sub.gdi32.dll_CreateFontIndirectW
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x60]
call fcn.00460284
mov eax, dword [eax + 0x40]
pop edx
call fcn.00458b5c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x60]
call fcn.00460284
mov eax, dword [eax + 0x40]
mov edx, dword [ebp + 8]
imul edx, dword [edx - 0x74], 0x43
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx - 0x64]
mov ecx, dword [ecx + 0x30]
mov ecx, dword [ecx + 0xd8]
mov edx, dword [ecx + edx*4 + 0xb8]
call fcn.004588f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5de022
lea eax, [ebp - 8]
call fcn.00406e64
ret