Function at 0x406f10
Capabilities:
Access peb ldr_data
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a39a0
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x4be0f0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0x40
xor esi, esi
push esi
push 0x4b25b0
push esi
push esi
push esi
push esi
mov dword [ebp - 0x2c], eax
call fcn.0040dde0
mov ebx, dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x80
mov edi, eax
mov eax, dword [edi + 0xc]
push 0xffffffffffffffec
push eax
call ebx
mov dword [edi + 0x30], esi
mov dword [edi + 0x3c], esi
mov dword [edi + 0x34], esi
mov dword [edi + 0x38], esi
call fcn.00410410
mov dword [edi + 0x2c], esi
call fcn.00410410
cmp dword [edi + 0x60], esi
je 0x406fcf
mov ecx, dword [edi + 0xc]
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x20000
je 0x406f9f
and eax, 0xfffdffff
mov edx, dword [edi + 0xc]
push eax
push 0xfffffffffffffff0
push edx
call ebx
mov eax, dword [edi + 0x60]
push eax
call fcn.0041a130
mov edx, dword [edi + 0xc]
lea ecx, [ebp - 0x24]
push ecx
push edx
mov dword [edi + 0x60], esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
mov ecx, edi
call fcn.00410d70
cmp dword [edi + 0x5c], esi
je 0x40701c
mov eax, dword [edi + 0xc]
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x10000
je 0x406fec
and eax, 0xfffeffff
mov ecx, dword [edi + 0xc]
push eax
push 0xfffffffffffffff0
push ecx
call ebx
mov edx, dword [edi + 0x5c]
push edx
call fcn.0041a130
mov ecx, dword [edi + 0xc]
lea eax, [ebp - 0x24]
push eax
push ecx
mov dword [edi + 0x5c], esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
mov ecx, edi
call fcn.00410d70
mov eax, dword [edi + 0x58]
cmp eax, esi
je 0x407047
push eax
call fcn.0041a130
mov eax, dword [edi + 0xc]
lea edx, [ebp - 0x24]
push edx
push eax
mov dword [edi + 0x58], esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
mov ecx, edi
call fcn.00410d70
cmp dword [edi + 0x10c], 1
je 0x407082
mov ecx, dword [edi + 0xc]
push 0xffffffffffffffec
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x80000
jne 0x407071
mov edx, dword [edi + 0xc]
xor eax, 0x80000
push eax
push 0xffffffffffffffec
push edx
call ebx
mov ecx, edi
mov dword [edi + 0x10c], 1
call fcn.0040eac0
cmp dword [edi + 0x10c], 4
mov dword [edi + 0x110], 0xff
jne 0x4070ae
movzx eax, byte [edi + 0x110]
mov ecx, dword [edi + 0xc]
push 3
push eax
push 0xffffff
push ecx
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, dword [edi + 0xc]
push esi
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x28], vtable.CMini.0
mov dword [ebp - 4], esi
call fcn.0040a7c0
mov dword [0x4c28a0], edi
call fcn.004097d0
mov ebx, dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
je 0x407106
lea eax, [ebp - 0x28]
push eax
call fcn.0040a060
mov edx, dword [0x4c28b4]
mov ecx, dword [0x4c28a4]
imul edx, edx, 0x3e8
mov eax, dword [ecx + 0xc]
push 0x40a2c0
push edx
push 5
push eax
call ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x28], vtable.CPopRightCorner.0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 1
call fcn.0040b260
lea ecx, [ebp - 0x2d]
push ecx
mov dword [ebp - 4], 0xffffffff
call fcn.00401bb0
push 0x4028c0
push 0x2710
push esi
push esi
call ebx
push 0x40
push esi
push 0x4b25b0
push esi
push esi
push esi
push esi
call fcn.0040dde0
mov edx, dword [eax + 0xc]
push esi
push edx
mov dword [0x4c2494], eax
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.00403e20
mov eax, dword [ebp - 0x2c]
mov edi, dword [eax + 0x2cc]
push 8
call fcn.0044f6d6
mov ecx, dword [ebp - 0x2c]
add esp, 4
push eax
mov dword [eax], ecx
mov dword [eax + 4], 0x405bf0
push edi
mov eax, 0x113
call fcn.0040dac0
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x2cc]
mov ecx, dword [eax + 0xc]
push esi
push 0xbb8
push 9
push ecx
call ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0044de17
mov esp, ebp
pop ebp
ret 4