Function at 0x401920
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x418010]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
clc
jae 0x401938
call 0x405618e2
add byte [ecx], al
call dword [sym.imp.KERNEL32.dll_FreeConsole]
mov eax, 0x23
cmp eax, 0x100
jl 0x40194c
call 0x3dcb7e2b
xor byte [eax], al
add byte [eax], al
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [section..bSS], eax
stc
jb 0x40196a
call 0xf8e201dc
invalid
call 0x401210
call 0x4016e0
lea ecx, [ebp - 0x28]
call fcn.00401160
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp ecx, 0x7fffffff
jg 0x401997
jl 0x401993
cmp eax, 0xfa0a1eff
jae 0x401997
mov dl, 1
jmp 0x401999
xor dl, dl
test dl, dl
je 0x4019ad
add eax, 0x5f5e100
mov dword [ebp - 0x1c], eax
adc ecx, 0
mov dword [ebp - 0x30], ecx
jmp 0x4019c0
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x30], ShowHideMenuCtl
nop dword [eax + eax]
call fcn.00401c0f
mov esi, eax
mov ebx, edx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x2c], ebx
call fcn.00401bf8
mov ecx, eax
cmp esi, 0x989680
jne 0x4019f7
test ebx, ebx
jne 0x4019f7
mov eax, edx
mov esi, 0x64
mul esi
mov ebx, eax
mov eax, ecx
mul esi
add ebx, edx
mov edx, eax
jmp 0x401a41
push ebx
push esi
push edx
push ecx
call fcn.0040ec20
push 0
push 0x3b9aca00
push ebx
push ecx
mov edi, eax
mov esi, edx
call fcn.0040ebb0
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
push edx
push eax
call fcn.0040eee0
mov dword [ebp - 0x24], eax
mov ebx, edx
mov ecx, 0x3b9aca00
mov eax, esi
mul ecx
mov edx, 0x3b9aca00
mov ecx, eax
mov eax, edi
mul edx
add ecx, edx
mov edx, dword [ebp - 0x24]
add edx, eax
adc ebx, ecx
mov esi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
cmp ebx, esi
jg 0x401a55
jl 0x401a51
cmp edx, ecx
jae 0x401a55
mov al, 1
jmp 0x401a57
xor al, al
test al, al
je 0x401ad0
mov edi, ecx
sub edi, edx
sbb esi, ebx
mov dword [ebp - 0x24], esi
call fcn.00401c8c
push 0
push 0x64
push edx
push eax
call fcn.0040ebb0
mov ebx, dword [ebp - 0x24]
mov ecx, edi
mov dword [ebp - 0x2c], edx
mov esi, eax
mov edx, ebx
call fcn.0040ef90
comisd xmm0, xmmword [0x415ad0]
jbe 0x401a99
mov edi, 0xad160000
mov ebx, 0x311cd
mov eax, dword [ebp - 0x2c]
add esi, edi
push 0
push 0x3b9aca00
adc eax, ebx
push eax
push esi
call fcn.0040eee0
mov dword [ebp - 0x18], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x14], edx
sub esi, eax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x10], esi
call fcn.00401df7
add esp, 4
jmp 0x4019c0
push 0
call dword [sym.imp.USER32.dll_SetDoubleClickTime]
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_MapGenericMask]
push 0
push 0
push 0
call dword [sym.imp.COMCTL32.dll_ShowHideMenuCtl]
push 0
call dword [sym.imp.COMCTL32.dll_ImageList_Read]
push 0
call dword [sym.imp.USER32.dll_RegisterShellHookWindow]
call dword [sym.imp.USER32.dll_GetProcessWindowStation]
push 0
call dword [sym.imp.USER32.dll_EnableMouseInPointer]
push 0
push 0
call dword [sym.imp.GDI32.dll_RestoreDC]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InflateRect]
push 0
push 0
call dword [sym.imp.USER32.dll_GetGestureInfo]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetPointerDeviceRects]
push 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401f4a
mov esp, ebp
pop ebp
ret