Function at 0x406300
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x475b50
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
push eax
mov esi, ecx
push 0x425
mov dword [esp + 0x18], esi
call fcn.0046162d
xor ebx, ebx
lea edi, [esi + 0x84]
mov dword [esi], 0x47e460
mov dword [esp + 0x1c], ebx
mov dword [edi + 4], ebx
mov dword [edi], vtable.CFont.0
lea ebp, [esi + 0x8c]
mov dword [ebp + 4], ebx
mov dword [ebp], vtable.CFont.0
mov dword [esi + 0x98], ebx
mov dword [esi + 0x94], vtable.CPen.0
push fcn.00440160
push 0x440090
push 0xa
push 0x74
lea ecx, [esi + 0x9c]
push ecx
mov byte [esp + 0x30], 3
call fcn.004510bd
push fcn.0043fff0
push 0x43ff20
push 0xa
push 0x74
lea edx, [esi + 0x524]
push edx
mov byte [esp + 0x30], 4
call fcn.004510bd
push fcn.0043fff0
push 0x43ff20
push 0xa
push 0x74
lea eax, [esi + 0x9ac]
push eax
mov byte [esp + 0x30], 5
call fcn.004510bd
push fcn.0043fff0
push 0x43ff20
push 0xa
push 0x74
lea ecx, [esi + 0xe34]
push ecx
mov byte [esp + 0x30], 6
call fcn.004510bd
lea ecx, [esi + 0x12bc]
mov byte [esp + 0x1c], 7
call fcn.0043c880
lea ecx, [esi + 0x1330]
mov byte [esp + 0x1c], 8
call fcn.0043fd10
lea ecx, [esi + 0x13a4]
mov byte [esp + 0x1c], 9
call fcn.0043fd10
lea ecx, [esi + 0x1418]
mov byte [esp + 0x1c], 0xa
call fcn.0043fd10
lea ecx, [esi + 0x148c]
mov byte [esp + 0x1c], 0xb
call fcn.0043fd10
push fcn.00440160
push 0x440090
push 7
push 0x74
lea edx, [esi + 0x1500]
push edx
mov byte [esp + 0x30], 0xc
call fcn.004510bd
mov dword [esi + 0x1830], ebx
mov dword [esi + 0x1834], ebx
mov dword [esi + 0x1838], ebx
lea ecx, [esi + 0x183c]
mov byte [esp + 0x1c], 0xe
call fcn.004384e0
lea ecx, [esi + 0x1908]
mov byte [esp + 0x1c], 0xf
call fcn.0045edea
lea ecx, [esi + 0x1974]
mov byte [esp + 0x1c], 0x10
call fcn.0043e4f0
lea ecx, [esi + 0x19dc]
mov byte [esp + 0x1c], 0x11
call fcn.0043c880
push fcn.0046cb27
push 0x4042a0
push 4
push 0x50
lea eax, [esi + 0x1a50]
push eax
mov byte [esp + 0x30], 0x12
call fcn.004510bd
mov byte [esp + 0x1c], 0x13
call fcn.004601e6
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x1bb4], eax
mov byte [esp + 0x1c], 0x14
call fcn.004601e6
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x1bb8], eax
lea ecx, [esi + 0x1bc0]
mov byte [esp + 0x1c], 0x15
call fcn.00439240
lea ecx, [esi + 0x1bd4]
mov byte [esp + 0x1c], 0x16
call fcn.00439240
mov dword [esi + 0x1bec], ebx
mov dword [esi + 0x1be8], 0x487048
lea ecx, [esi + 0x1c08]
mov byte [esp + 0x1c], 0x18
call fcn.00468915
lea ecx, [esi + 0x1c18]
mov byte [esp + 0x1c], 0x19
call fcn.00468915
push ebx
push 0x47dd3c
push 0x5a
mov ecx, edi
mov byte [esp + 0x28], 0x1a
mov dword [esi + 0x70], ebx
call fcn.0046cab0
push ebx
push ebx
push ebx
push ebx
lea eax, [esi + 0x74]
push eax
call dword [sym.imp.USER32.dll_SetRect]
push 0x47dd3c
push ebx
push ebx
push ebx
push ebx
mov edi, 1
push edi
push ebx
push ebx
push ebx
push 0x384
push ebx
push ebx
push ebx
push 0xa
mov dword [esi + 0x1ba4], edi
mov dword [esi + 0x1ba8], edi
mov dword [esi + 0x1bac], ebx
mov dword [esi + 0x1bb0], ebx
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
mov ecx, ebp
call fcn.004690a4
push ebx
push 0x47e1c1
lea ecx, [esi + 0x1bb4]
call fcn.00401fe0
push ebx
push 0x47e1c1
lea ecx, [esi + 0x1bb8]
call fcn.00401fe0
push 0x96ff
push 2
push edi
mov byte [esi + 0x1bbc], bl
mov dword [esi + 0x1b90], 0x63c
mov dword [esi + 0x1b94], 0xb79
mov dword [esi + 0x1b98], 0x759
mov dword [esi + 0x1b9c], 0x697
mov dword [esi + 0x1ba0], ebx
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
lea ecx, [esi + 0x94]
call fcn.004690a4
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4