Function at 0x429ff0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4fa188
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
push esi
mov ecx, dword [esi + 0xc0]
call fcn.004aeca0
push str.title_bar.bmp
lea eax, [esp + 0x10]
push 0x5da564
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esi + 0xc0]
push 0x167
push eax
add ecx, 0x68
mov dword [esp + 0x2c], 0
call fcn.004b0340
or edi, 0xffffffff
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], edi
call sub.MFC42.DLL_CString::CString
push 0x5b2c3c
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_1
push str.Title_SoftSetting.bmp
lea ecx, [esp + 0x18]
push 0x5da564
push ecx
mov dword [esp + 0x30], 1
call sub.MFC42.DLL_operator_1
mov ecx, dword [esi + 0xc0]
mov ebx, 3
push ebx
push ebx
mov edx, dword [ecx]
push 0x187
push eax
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x38], 2
call dword [edx + 0x28]
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], edi
call sub.MFC42.DLL_CString::CString
push 0x5b2c3c
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_1
push str.Title_Suggestion.bmp
lea ecx, [esp + 0x18]
push 0x5da564
push ecx
mov dword [esp + 0x30], ebx
call sub.MFC42.DLL_operator_1
mov ecx, dword [esi + 0xc0]
push ebx
push ebx
push 0x188
mov edx, dword [ecx]
push eax
lea eax, [esp + 0x1c]
mov byte [esp + 0x34], 4
push eax
call dword [edx + 0x28]
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], edi
call sub.MFC42.DLL_CString::CString
push 0x5b2c3c
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_1
push str.Title_MoreSetting.bmp
lea ecx, [esp + 0x18]
mov ebx, 5
push 0x5da564
push ecx
mov dword [esp + 0x30], ebx
call sub.MFC42.DLL_operator_1
mov ecx, dword [esi + 0xc0]
push 4
push 4
push 0x186
mov edx, dword [ecx]
push eax
lea eax, [esp + 0x1c]
mov byte [esp + 0x34], 6
push eax
call dword [edx + 0x28]
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], edi
call sub.MFC42.DLL_CString::CString
push 0x5b2c3c
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_1
push str.Title_Min_Btn.bmp
lea ecx, [esp + 0x18]
mov ebx, 7
push 0x5da564
push ecx
mov dword [esp + 0x30], ebx
call sub.MFC42.DLL_operator_1
mov ecx, dword [esi + 0xc0]
push 4
push 4
push 0x16a
mov edx, dword [ecx]
push eax
lea eax, [esp + 0x1c]
mov byte [esp + 0x34], 8
push eax
call dword [edx + 0x28]
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], edi
call sub.MFC42.DLL_CString::CString
push 0x5b2c3c
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_1
push str.Title_Max_Btn.bmp
lea ecx, [esp + 0x18]
mov ebx, 9
push 0x5da564
push ecx
mov dword [esp + 0x30], ebx
call sub.MFC42.DLL_operator_1
mov ecx, dword [esi + 0xc0]
push 4
push 4
push 0x169
mov edx, dword [ecx]
push eax
lea eax, [esp + 0x1c]
mov byte [esp + 0x34], 0xa
push eax
call dword [edx + 0x28]
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], edi
call sub.MFC42.DLL_CString::CString
push 0x5b2c3c
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::CString_1
push str.Title_Exit_Btn.bmp
lea ecx, [esp + 0x1c]
mov ebx, 0xb
push 0x5da564
push ecx
mov dword [esp + 0x30], ebx
call sub.MFC42.DLL_operator_1
mov ecx, dword [esi + 0xc0]
push 4
push 4
push 0x168
mov edx, dword [ecx]
push eax
lea eax, [esp + 0x20]
mov byte [esp + 0x34], 0xc
push eax
call dword [edx + 0x28]
lea ecx, [esp + 0x18]
mov byte [esp + 0x24], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x24], edi
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esi + 0xc0]
push 0x480
call fcn.004b78e0
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret