Function at 0x407060
Capabilities:
Acquire debug privileges
Get keyboard layout

Disassembly:
sub esp, 0x18
push ebx
push esi
push edi
mov esi, ecx
xor edi, edi
mov ebx, 1
push edi
mov dword [esi + 0x34], ebx
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push ebx
mov ecx, esi
mov dword [0x5d6764], eax
call fcn.00406630
test eax, eax
jne 0x407093
pop edi
pop esi
pop ebx
add esp, 0x18
ret 4
cmp dword [0x5b0058], edi
je 0x4070ad
call fcn.00485220
push str.360se.windows7.taskbar
call fcn.004852d0
add esp, 4
push ebp
push edi
push section..taihang
call fcn.00468b80
mov ebp, dword [esp + 0x34]
mov eax, dword [0x5b5094]
lea ecx, [esp + 0x1c]
mov dword [0x5b0490], eax
push ecx
push 0x4c3954
push ebp
mov dword [esp + 0x28], edi
call fcn.00432e60
mov dword [0x5b0494], eax
mov eax, dword [esp + 0x28]
add esp, 0x14
cmp eax, edi
jne 0x4070f7
mov edx, dword [0x5b508c]
mov dword [0x5b0494], edx
mov ecx, esi
call fcn.00406f70
call fcn.0043ed50
call fcn.00413100
test eax, eax
je 0x407115
push ebx
call fcn.00414080
add esp, 4
push 0x5d6548
push 0x4c3944
push str.Main
call fcn.00408330
push 0x103
push 0x5d654c
push str.Skin
push str.Path
call fcn.00408270
mov eax, dword [0x5b50d0]
mov ecx, dword [0x5b36fc]
push str.TheWorld_Default
push eax
push 0x34
push 0x33
push ecx
push 0x64
push 0x66
call fcn.0048b640
add esp, 0x38
push 0x16
push str.FavoriteCY
push str.ToolBar
call fcn.0049cc20
mov ecx, eax
call fcn.0049d710
lea edx, [esp + 0x10]
mov dword [0x5d6520], eax
push edx
push 0x28
mov dword [esp + 0x18], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x4071d9
lea eax, [esp + 0x1c]
push eax
push str.SeDebugPrivilege
push edi
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov edx, dword [esp + 0x10]
push edi
push edi
lea ecx, [esp + 0x20]
push edi
push ecx
push edi
push edx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x3c], 2
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push edi
push 0x1f0fff
mov dword [esi + 0x38], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esi + 0x10], eax
call fcn.0042b970
mov edi, eax
call fcn.00468740
mov ebx, eax
call fcn.00460110
mov ecx, eax
call fcn.00460160
call fcn.0041bd80
mov ecx, eax
call fcn.0041c050
mov ecx, 0x5b0590
call fcn.0047fc10
test edi, edi
je 0x407236
push ebp
mov ecx, esi
call fcn.004072b0
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx]
call fcn.00410900
test eax, eax
pop ebp
je 0x407248
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
test ebx, ebx
je 0x407254
mov eax, dword [ebx]
push 1
mov ecx, ebx
call dword [eax]
mov ecx, 0x5b3820
call fcn.00494d50
call fcn.0048b690
call fcn.00468ff0
push 0
call fcn.00414080
add esp, 4
mov ecx, esi
push 0
call fcn.00406630
mov eax, dword [esi + 0xc]
test eax, eax
je 0x407290
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0xc], 0
mov esi, dword [esi + 0x10]
test esi, esi
je 0x40729e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0x18
ret 4