Function at 0x406cf0
Capabilities:
Check for time delay via gettickcount
Enumerate gui resources

Disassembly:
push 0xffffffffffffffff
push 0x4dd206
mov eax, dword fs:[0]
push eax
mov eax, 0x186c
call fcn.0042bac0
mov eax, dword [0x506380]
xor eax, esp
mov dword [esp + 0x1868], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x506380]
xor eax, esp
push eax
lea eax, [esp + 0x1880]
mov dword fs:[0], eax
mov eax, 1
xor ebx, ebx
mov ebp, vtable.t_newsQuery.0
lea esi, [esp + 0x30]
mov dword [esp + 0x1c], ebp
mov byte [esp + 0x20], al
mov byte [esp + 0x21], bl
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
call fcn.004141d0
mov dword [esp + 0x1888], ebx
lea ebx, [esp + 0x1c]
call fcn.00407750
test al, al
jne 0x406af3
push str.query_fail
push 0xa
call fcn.004ce840
add esp, 8
xor esi, esi
jmp 0x406af7
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x9d4]
push 0x4fc8d4
push 0xd
mov dword [esp + 0x20], eax
call fcn.004ce850
add esp, 8
test esi, esi
jne 0x406b3b
mov dword [esp + 0x1888], 0xffffffff
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1c], ebp
test ecx, ecx
je 0x406b34
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
xor eax, eax
jmp 0x406cc7
push 0x4fc8d8
push 0xd
call fcn.004ce850
add esp, 8
cmp byte [esi + 4], 0
je 0x406b15
push 0x4fc8dc
push 0xd
call fcn.004ce850
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 8
call edi
mov ecx, dword [esi + 0xdb8]
imul ecx, ecx, 0x3e8
cmp eax, ecx
jae 0x406ba8
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ecx]
push 0x4fc8e0
push 0xd
call fcn.004ce850
add esp, 8
push 0xbb8
call ebx
call edi
mov edx, dword [esi + 0xdb8]
imul edx, edx, 0x3e8
cmp eax, edx
jb 0x406b80
push 0x4fc8f8
push 0xd
call fcn.004ce850
push 0x4fc8fc
push 0xffffffffffffffff
call fcn.004ce850
call fcn.00406930
mov eax, dword [esi + 0xdb4]
mov ecx, dword [esi + 0xdb0]
push eax
push ecx
push str.width_d__height_d_n
push 0x19
call fcn.004c8fc0
push 0x4fc95c
push 0xd
call fcn.004ce850
mov edx, dword [esi + 0xdd0]
mov eax, dword [esi + 0xdcc]
mov ecx, dword [esi + 0xdc4]
add esp, 0x28
push edx
mov edx, dword [esi + 0xdc0]
push eax
mov eax, dword [esi + 0xdc8]
push ecx
mov ecx, dword [esi + 0xdbc]
push edx
mov edx, dword [esi + 0xdb4]
push eax
mov eax, dword [esi + 0xdb0]
push ecx
push edx
push eax
mov eax, dword [esi + 0xdac]
lea ecx, [esi + 0xb9e]
push ecx
mov ecx, dword [esi + 0xda8]
lea edx, [esi + 0x996]
push edx
push eax
push ecx
lea edx, [esi + 0x196]
push edx
add esi, 6
push esi
lea eax, [esp + 0xa2c]
push eax
call fcn.0040a600
lea eax, [esp + 0x9f4]
mov byte [esp + 0x1888], 1
call fcn.0040b050
push 0
mov dword [esp + 0x9f8], 0x4fd9fc
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0x4fc85c
call dword [sym.imp.USER32.dll_UnregisterClassW]
lea ecx, [esp + 0x9f4]
mov dword [esp + 0x1838], 0x4fed04
call fcn.004c27f0
mov dword [esp + 0x1888], 0xffffffff
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1c], ebp
test ecx, ecx
je 0x406cc3
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1880]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1868]
xor ecx, esp
call fcn.0041a0cf
add esp, 0x1878
ret
push ebx
mov bl, byte [0x51947d]
call fcn.0042e240
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.0042e890
push 0x406a10
push 0x51a4f4
call fcn.0042e950
call fcn.0042e480
test bl, bl
je 0x406d26
pop ebx
jmp 0x406a60
pop ebx
jmp 0x406d30
push 0xffffffffffffffff
push 0x4dd1b6
mov eax, dword fs:[0]
push eax
sub esp, 0xe9c
mov eax, dword [0x506380]
xor eax, esp
mov dword [esp + 0xe98], eax
push esi
push edi
mov eax, dword [0x506380]
xor eax, esp
push eax
lea eax, [esp + 0xea8]
mov dword fs:[0], eax
push 0
push 0x406970
call dword [sym.imp.USER32.dll_EnumWindows]
mov esi, dword [sym.imp.USER32.dll_SystemParametersInfoW]
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0x2000
mov dword [esp + 0x20], 0xffffffff
call esi
cmp dword [esp + 0x10], 0
je 0x406da8
push 3
push 0
push 0
push 0x2001
call esi
lea ecx, [esp + 0x14]
mov byte [esp + 0x10], 0
call fcn.004d37b0
lea edi, [esp + 0x10]
lea esi, [esp + 0x14]
mov dword [esp + 0xeb0], 0
call fcn.00413d90
test al, al
jne 0x406dd9
mov ecx, esi
call fcn.004d3880
mov ecx, dword [esp + 0x10]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.0040a380
lea eax, [esp + 0x1c]
mov byte [esp + 0xeb0], 1
call fcn.0040b050
cmp byte [esp + 0xe9c], 0
mov edi, eax
je 0x406e0e
lea esi, [esp + 0x1c]
call fcn.0040c470
push 0
mov dword [esp + 0x20], vtable.t_bbNews.0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0x4fc85c
call dword [sym.imp.USER32.dll_UnregisterClassW]
lea ecx, [esp + 0x1c]
mov dword [esp + 0xe60], 0x4fed04
call fcn.004c27f0
lea ecx, [esp + 0x14]
call fcn.004d37f0
mov eax, edi
mov ecx, dword [esp + 0xea8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0xe98]
xor ecx, esp
call fcn.0041a0cf
add esp, 0xea8
ret