Function at 0x401420
Capabilities:
Get graphical window text
Hide graphical window
Log keystrokes via application hook

Disassembly:
push ebp
mov ecx, 0x4018b4
mov ebp, esp
push edi
lea eax, [ebp - 0xbc]
mov edi, 0x40ca80
push esi
mov esi, 0x410604
push ebx
sub esp, 0x10c
lea ebx, [ebp - 0x18]
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0xa4], edi
mov edi, 0x7f00
mov dword [ebp - 0xa0], esi
mov esi, 0xffffffff
mov dword [ebp - 0x9c], ebx
mov ebx, 0x7f00
mov dword [ebp - 0x94], esp
mov dword [esp], eax
call fcn.0040f470
mov dword [ebp - 0x40], 0x411000
mov edx, dword [ebp + 8]
mov dword [ebp - 0x60], 0x4019b0
mov dword [ebp - 0x64], 0x20
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x68], 0x30
mov dword [esp + 4], edi
mov dword [esp], 0
mov dword [ebp - 0xb8], esi
call sub.USER32.dll_LoadIconA
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], 0
call sub.USER32.dll_LoadIconA
mov dword [ebp - 0x3c], eax
sub esp, 8
mov ecx, 0x7f00
mov dword [esp + 4], ecx
mov dword [esp], 0
call sub.USER32.dll_LoadCursorA
mov dword [ebp - 0x4c], eax
sub esp, 8
lea eax, [ebp - 0x68]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x48], 1
mov dword [esp], eax
call sub.USER32.dll_RegisterClassExA
sub esp, 4
test ax, ax
jne 0x401567
mov dword [esp], 0
mov ecx, 0x40
mov edx, str.Erreur_dans_la_cr
mov dword [esp + 0xc], ecx
mov eax, section..data
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call sub.USER32.dll_MessageBoxA
sub esp, 0x10
xor eax, eax
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xc0], eax
mov dword [esp], ecx
call fcn.0040f550
mov eax, dword [ebp - 0xc0]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
xor eax, eax
mov edi, 0x4012f0
mov esi, 0xffffffff
mov dword [esp + 0xc], eax
mov ebx, 1
mov edx, dword [ebp + 8]
mov dword [esp + 4], edi
mov dword [esp], 0xd
mov dword [esp + 8], edx
mov dword [ebp - 0xb8], esi
call sub.USER32.dll_SetWindowsHookExA
mov dword [ebp - 0xc4], eax
sub esp, 0x10
mov dword [esp], 0xc8d0d4
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x413010], eax
sub esp, 4
mov dword [esp], 0x6b3c
call fcn.0040d170
mov dword [ebp - 0xc8], eax
mov dword [esp], eax
mov dword [ebp - 0xb8], ebx
call fcn.004090f0
mov eax, dword [ebp - 0xc8]
xor esi, esi
mov ebx, 0xffffffff
xor edi, edi
mov dword [0x413020], eax
mov dword [esp], eax
mov dword [esp + 4], esi
xor esi, esi
mov dword [ebp - 0xb8], ebx
mov ebx, 0x3a2
call fcn.00408320
call fcn.00402b10
xor edx, edx
mov eax, 0x258
mov dword [esp + 0x2c], edx
mov ecx, dword [ebp + 8]
mov edx, 0x80000000
mov dword [esp + 0x24], edi
mov edi, 0xcf0000
mov dword [esp + 0x28], ecx
mov ecx, 0x80000000
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], eax
mov eax, section..data
mov dword [esp + 0x18], ebx
lea ebx, [ebp - 0x78]
mov dword [esp + 0xc], edi
mov dword [esp + 0x20], esi
mov esi, dword [0x413020]
mov dword [esp + 4], eax
mov dword [esp], 0
add esi, 0xc
mov dword [esp + 8], esi
call sub.USER32.dll_CreateWindowExA
mov dword [ebp - 0xd0], eax
sub esp, 0x30
call sub.USER32.dll_GetDesktopWindow
mov dword [esp], eax
mov dword [esp + 4], ebx
call sub.USER32.dll_GetWindowRect
mov edx, dword [ebp - 0x70]
sub esp, 8
lea eax, [ebp - 0x88]
mov edi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x78]
mov esi, dword [ebp - 0x74]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xd8], edi
sub dword [ebp - 0xd4], ecx
sub dword [ebp - 0xd8], esi
mov dword [esp + 4], eax
mov ebx, dword [ebp - 0xd0]
mov dword [esp], ebx
call sub.USER32.dll_GetWindowRect
mov ecx, dword [ebp - 0x84]
sub esp, 8
mov ebx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x88]
mov edi, dword [ebp - 0x80]
sub ebx, ecx
mov ecx, dword [ebp - 0xd4]
sub edi, edx
mov eax, dword [ebp - 0x78]
sub ecx, edi
mov esi, ecx
mov edi, dword [ebp - 0x74]
shr esi, 0x1f
add ecx, esi
sar ecx, 1
add ecx, eax
mov eax, dword [ebp - 0xd8]
mov esi, 5
mov dword [esp + 8], ecx
sub eax, ebx
mov edx, eax
mov dword [esp + 0x18], esi
shr edx, 0x1f
xor ebx, ebx
mov dword [esp + 0x14], ebx
add eax, edx
sar eax, 1
add eax, edi
xor edx, edx
xor edi, edi
mov dword [esp + 0x10], edx
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
mov esi, dword [ebp - 0xd0]
mov dword [esp], esi
mov esi, 1
call sub.USER32.dll_SetWindowPos
sub esp, 0x1c
mov ecx, 0x401de0
xor ebx, ebx
mov dword [esp + 0xc], ecx
mov edx, 0x3ea
mov dword [esp + 0x10], ebx
mov eax, dword [ebp - 0xd0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov edi, dword [ebp + 8]
mov dword [esp], edi
call sub.USER32.dll_CreateDialogParamA
mov dword [0x413014], eax
sub esp, 0x14
mov dword [esp + 4], esi
mov esi, 0x3e9
mov dword [esp], eax
call sub.USER32.dll_ShowWindow
mov ebx, dword [0x413014]
sub esp, 8
mov edx, 0x4035f0
mov ecx, dword [0x413020]
xor eax, eax
mov dword [ecx + 0x68ec], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov edi, dword [ebp - 0xd0]
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov ebx, dword [ebp + 8]
mov edi, 1
mov dword [esp], ebx
xor ebx, ebx
call sub.USER32.dll_CreateDialogParamA
mov dword [0x41301c], eax
mov ecx, dword [0x413020]
sub esp, 0x14
mov dword [ecx + 0x66c0], eax
mov eax, 1
mov dword [esp + 4], eax
mov edx, dword [ebp - 0xd0]
mov dword [esp], edx
call sub.USER32.dll_ShowWindow
sub esp, 8
mov dword [esp + 4], edi
mov esi, dword [0x41301c]
mov dword [esp], esi
call sub.USER32.dll_ShowWindow
sub esp, 8
mov ecx, 6
mov eax, 0x115
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov edx, dword [0x41301c]
mov dword [esp], edx
call sub.USER32.dll_SendMessageA
sub esp, 0x10
lea esi, [esi]
lea edi, [edi]
xor edx, edx
xor ecx, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
lea edi, [ebp - 0x38]
mov esi, 0xffffffff
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], edi
mov dword [ebp - 0xb8], esi
call sub.USER32.dll_GetMessageA
sub esp, 0x10
test eax, eax
je 0x4018ea
lea edx, [ebp - 0x38]
mov edi, 0xffffffff
mov dword [esp + 4], edx
mov ecx, dword [0x41301c]
mov dword [esp], ecx
mov dword [ebp - 0xb8], edi
call sub.USER32.dll_IsDialogMessageA
sub esp, 8
test eax, eax
jne 0x401840
lea eax, [ebp - 0x38]
lea ebx, [ebp - 0x38]
mov dword [esp], eax
call sub.USER32.dll_TranslateMessage
sub esp, 4
mov dword [esp], ebx
call sub.USER32.dll_DispatchMessageA
sub esp, 4
jmp 0x401840
xor ebx, ebx
mov ecx, 0xffffffff
mov dword [esp + 4], ebx
mov edx, dword [0x41301c]
mov dword [esp], edx
mov dword [ebp - 0xb8], ecx
call sub.USER32.dll_EndDialog
mov edi, dword [0x413014]
sub esp, 8
mov dword [esp], edi
call sub.USER32.dll_DestroyWindow
mov esi, dword [ebp - 0xd0]
sub esp, 4
mov dword [esp], esi
call fcn.00402b80
mov eax, dword [0x413010]
mov dword [esp], eax
call sub.GDI32.dll_DeleteObject
mov eax, dword [0x413020]
sub esp, 4
test eax, eax
mov dword [ebp - 0xdc], eax
jne 0x40198d
mov edi, dword [ebp - 0xc4]
mov esi, 0xffffffff
mov dword [esp], edi
mov dword [ebp - 0xb8], esi
call sub.USER32.dll_UnhookWindowsHookEx
mov eax, dword [ebp - 0x30]
sub esp, 4
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xc0], eax
mov dword [esp], ecx
call fcn.0040f550
mov eax, dword [ebp - 0xc0]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
mov dword [esp], eax
call fcn.00408dd0
mov eax, dword [ebp - 0xdc]
mov dword [esp], eax
call fcn.0040d150
jmp 0x40194a