Function at 0x40f015
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x458b92
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x47d9a0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ebx, ecx
lea esi, [ebx + 0x2e0]
push esi
push dword [ebx + 0x20]
call dword [sym.imp.USER32.dll_GetClientRect]
lea edi, [ebx + 0x2d0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1c
pop esi
add dword [ebx + 0x2ec], esi
lea eax, [ebx + 0x2e0]
mov ecx, dword [eax + 4]
mov edi, dword [eax + 0xc]
mov edx, dword [eax]
mov eax, dword [eax + 8]
push 1
sub edi, ecx
push edi
sub eax, edx
push eax
push ecx
push edx
mov ecx, ebx
call fcn.00426927
xor edi, edi
push edi
push edi
push esi
push edi
mov ecx, ebx
call fcn.0042299f
mov dword [ebx + 0x2dc], esi
xor ecx, ecx
mov dword [0x48224c], edi
mov dword [0x482250], edi
movzx ax, byte [ebx + 0x29c]
mov ch, al
xor esi, esi
inc esi
mov dword [0x48226c], edi
mov dword [0x482270], esi
or ecx, eax
mov word [0x482254], cx
movzx ax, byte [ebx + 0x29d]
xor ecx, ecx
mov ch, al
or ecx, eax
mov word [0x482256], cx
movzx ax, byte [ebx + 0x29e]
xor ecx, ecx
mov ch, al
mov word [0x48225a], di
or ecx, eax
mov word [0x482258], cx
lea eax, [ebx + 0x2d0]
mov ecx, dword [eax + 8]
sub ecx, dword [eax]
mov dword [0x48225c], ecx
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 4]
mov dword [0x482260], ecx
movzx ax, byte [ebx + 0x29c]
xor ecx, ecx
mov ch, al
or ecx, eax
mov word [0x482264], cx
movzx ax, byte [ebx + 0x29d]
xor ecx, ecx
mov ch, al
or ecx, eax
mov word [0x482266], cx
movzx ax, byte [ebx + 0x29e]
xor ecx, ecx
mov ch, al
mov word [0x48226a], di
or ecx, eax
mov word [0x482268], cx
mov eax, dword [ebx + 0x304]
cmp eax, edi
je 0x40f179
push eax
push esi
push 0x80
push dword [ebx + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebx + 0xa8]
mov ecx, ebx
call fcn.004268cb
mov eax, dword [ebx + 0x2d8]
mov ecx, dword [ebx + 0x2d4]
push 0x6f
add eax, 0xffffffd8
inc ecx
push ebx
lea edx, [ebx + 0x2f0]
mov dword [edx], eax
mov dword [ebx + 0x2f4], ecx
push edx
add eax, 0x20
add ecx, 0x15
lea esi, [ebx + 0x10c]
push 0x50000000
mov dword [ebx + 0x2f8], eax
mov eax, dword [esi]
mov dword [ebx + 0x2fc], ecx
push 0x462fac
mov ecx, esi
call dword [eax + 0x134]
test eax, eax
jne 0x40f1e4
push edi
push edi
push str.Btn_failed
call fcn.0041d048
call fcn.004107d2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Close
call fcn.00402eee
call fcn.0041086b
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], vtable.CRgn.0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x3c], edi
push dword [ebx + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x1c]
push 0xa
push 0xa
inc eax
push eax
inc ecx
push ecx
push edi
push edi
call dword [sym.imp.GDI32.dll_CreateRoundRectRgn]
push eax
lea ecx, [esp + 0x18]
call fcn.00420509
push 1
push dword [esp + 0x1c]
push dword [ebx + 0x20]
call dword [sym.imp.USER32.dll_SetWindowRgn]
lea ecx, [esp + 0x14]
call fcn.00420532
mov ecx, ebx
call fcn.0041f1bb
or dword [esp + 0x38], 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], vtable.CGdiObject.0
call fcn.0042055c
xor eax, eax
inc eax
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret