Function at 0x419ed9
Capabilities:
Compare security identifiers
Get graphical window text
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x258
mov dword [ebp - 0x30], 0xd5e48d32
mov dword [ebp - 0x144], 0xb91359a7
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x214], 0xa53e
mov dword [ebp - 0x30], 0x12
jmp 0x419f17
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x15
je 0x41a368
push 1
lea ecx, [ebp - 0xa8]
call fcn.0040f233
mov dword [ebp - 0xc], 0xee7d214c
mov dword [ebp - 0xdc], 0xa737
mov dword [ebp - 0x15c], 0xec53312a
mov dword [ebp - 0x90], 0
jmp 0x419f62
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x419f84
push dword [ebp - 0x90]
lea ecx, [ebp - 0xa8]
call fcn.0040f321
mov dword [eax], 0x683c8fc5
jmp 0x419f55
mov dword [ebp - 0xc], 0
jmp 0x419f94
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x41a358
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x10c], 7
push 2
lea ecx, [ebp - 0x1dc]
call fcn.0040f233
mov dword [ebp - 0x6c], 0
jmp 0x419fd3
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x419fef
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1dc]
call fcn.0040f321
mov dword [eax], 0xfffffffd
jmp 0x419fcc
mov dword [ebp - 0x14], 0
jmp 0x419fff
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x41a035
push dword [ebp - 0xc]
lea ecx, [ebp - 0xa8]
call fcn.0040f321
cmp dword [eax], 0
je 0x41a01a
jmp 0x41a035
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x41a033
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x419ff8
mov dword [ebp - 0x14], 0
jmp 0x41a045
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x41a348
mov dword [ebp - 0x18], 8
push 3
lea ecx, [ebp - 0x198]
call fcn.0040f233
mov dword [ebp - 0x78], 0
jmp 0x41a073
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x41a08f
push dword [ebp - 0x78]
lea ecx, [ebp - 0x198]
call fcn.0040f321
mov dword [eax], 0x7ba27438
jmp 0x41a06c
mov dword [ebp - 0x18], 0
jmp 0x41a09f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x41a182
push dword [ebp - 0xc]
lea ecx, [ebp - 0xa8]
call fcn.0040f321
cmp dword [eax], 0x35edade0
jl 0x41a0cb
mov dword [ebp - 0xb4], 1
jmp 0x41a0d2
and dword [ebp - 0xb4], 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0xa8]
call fcn.0040f321
cmp dword [eax], 0xaf72b572
jbe 0x41a0f4
mov dword [ebp - 0xec], 1
jmp 0x41a0fb
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xec], eax
jne 0x41a112
mov dword [ebp - 0x140], 1
jmp 0x41a119
and dword [ebp - 0x140], 0
mov dword [ebp - 0x28], 8
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x140]
cmp dword [ebp - 0x28], eax
jg 0x41a13e
mov dword [ebp - 0x124], 1
jmp 0x41a145
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x28], 0
jmp 0x41a161
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x41a17d
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x41a17b
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x41a15a
jmp 0x41a098
push 0
lea ecx, [ebp - 0xa8]
call fcn.0040f321
push 0
lea ecx, [ebp - 0x1dc]
call fcn.0040f321
cmp dword [eax], 0
jne 0x41a257
cmp dword [ebp - 0xc], 0
jne 0x41a220
push 0
lea ecx, [ebp - 0xa8]
call fcn.0040f321
push 0
lea ecx, [ebp - 0xa8]
call fcn.0040f321
mov eax, dword [eax]
sub eax, 0xbd55
je 0x41a1ec
push 0
lea ecx, [ebp - 0xa8]
call fcn.0040f321
cmp dword [eax], 0
je 0x41a1ec
mov dword [ebp - 0xbc], 1
jmp 0x41a1f3
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x30]
jne 0x41a20e
mov dword [ebp - 0x104], 1
jmp 0x41a215
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x104], eax
je 0x41a232
cmp dword [ebp - 0xc], 0
je 0x41a232
mov dword [ebp - 0xc4], 1
jmp 0x41a239
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jne 0x41a257
and dword [ebp - 0xcc], 0
jmp 0x41a261
mov dword [ebp - 0xcc], 1
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x28], 0
jg 0x41a27f
mov dword [ebp - 0xd4], 1
jmp 0x41a286
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x22c], eax
push 2
lea ecx, [ebp - 0x198]
call fcn.0040f321
push 2
lea ecx, [ebp - 0x198]
call fcn.0040f321
cmp dword [eax], 0xffffffff
je 0x41a2d8
mov dword [ebp - 0x12c], 1
jmp 0x41a2df
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0xffffffff
jl 0x41a2f4
mov dword [ebp - 0x150], 1
jmp 0x41a2fb
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x210], eax
mov eax, 0x2e26
test eax, eax
je 0x41a325
cmp dword [ebp - 0x154], 0
je 0x41a325
mov dword [ebp - 0x114], 1
jmp 0x41a32c
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x15c], eax
lea ecx, [ebp - 0x198]
call fcn.0040f305
jmp 0x41a03e
lea ecx, [ebp - 0x1dc]
call fcn.0040f305
jmp 0x419f8d
lea ecx, [ebp - 0xa8]
call fcn.0040f305
jmp 0x419f10
movzx eax, byte [ebp + 8]
test eax, eax
je 0x41a55f
push 1
lea ecx, [ebp - 0x228]
call fcn.0040f233
mov dword [ebp - 0x10], 0
jmp 0x41a391
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x41a3ad
push dword [ebp - 0x10]
lea ecx, [ebp - 0x228]
call fcn.0040f321
mov dword [eax], 0x5b57fd54
jmp 0x41a38a
mov dword [ebp - 0x10], 0
jmp 0x41a3bd
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x41a3d3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x14c], 0x4c506d44
jmp 0x41a3b6
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x14c], 0
jmp 0x41a401
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x14c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x14c], 0
jl 0x41a48c
mov dword [ebp - 0x74], 5
push 1
lea ecx, [ebp - 0x1b8]
call fcn.0040f233
mov dword [ebp - 0x60], 0
jmp 0x41a435
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x41a451
push dword [ebp - 0x60]
lea ecx, [ebp - 0x1b8]
call fcn.0040f321
mov dword [eax], 0x2c36544d
jmp 0x41a42e
mov dword [ebp - 0x74], 0
jmp 0x41a461
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x41a47c
push 0
lea ecx, [ebp - 0x1b8]
call fcn.0040f321
mov dword [eax], 0xfef9d786
jmp 0x41a45a
lea ecx, [ebp - 0x1b8]
call fcn.0040f305
jmp 0x41a3e6
lea ecx, [ebp - 0x228]
call fcn.0040f305
push 4
lea ecx, [ebp - 0x1c4]
call fcn.0040f233
mov dword [ebp - 0x38], 0xa32b1cec
mov dword [ebp - 0x7c], 0
jmp 0x41a4bb
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x41a4d4
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x1c4]
call fcn.0040f321
or dword [eax], 0xffffffff
jmp 0x41a4b4
mov dword [ebp - 0x38], 3
jmp 0x41a4e4
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x41a535
mov dword [ebp - 0x48], 0x48f69f7f
mov dword [ebp - 0x48], 0
jmp 0x41a501
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x41a51d
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1c4]
call fcn.0040f321
mov dword [eax], 6
jmp 0x41a4fa
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x41a533
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x41a4dd
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x1c4]
call fcn.0040f305
push 0x1dc7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x41ae84
push 1
lea ecx, [ebp - 0x168]
call fcn.0040f233
mov dword [ebp - 0x40], 0x61f
mov dword [ebp - 0x234], 0xe0980db9
mov dword [ebp - 0x80], 0
jmp 0x41a58d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x41a5a9
push dword [ebp - 0x80]
lea ecx, [ebp - 0x168]
call fcn.0040f321
mov dword [eax], 0xfffffff9
jmp 0x41a586
push 0
lea ecx, [ebp - 0x168]
call fcn.0040f321
cmp dword [eax], 0
jne 0x41a5c7
mov dword [ebp - 0xe4], 1
jmp 0x41a5ce
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], 0
jmp 0x41a5e7
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x16
jle 0x41a72b
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x64], 0
jmp 0x41a608
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x41a61e
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x250], 0
jmp 0x41a601
mov dword [ebp - 0x58], 0
jmp 0x41a62e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jg 0x41a726
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x50], 0
jmp 0x41a64f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x41a721
mov dword [ebp - 0x68], 0
push dword [ebp - 0x58]
lea ecx, [ebp - 0x168]
call fcn.0040f321
mov dword [ebp - 0x13c], eax
push dword [ebp - 0x50]
lea ecx, [ebp - 0x168]
call fcn.0040f321
mov ecx, dword [ebp - 0x13c]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x13c]
mov ecx, dword [ecx]
mov dword [ebp + eax - 0x250], ecx
mov dword [ebp - 0x68], 0
jmp 0x41a6b1
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffe7
jge 0x41a71c
push 3
lea ecx, [ebp - 0x1d0]
call fcn.0040f233
mov dword [ebp - 0x158], 1
mov dword [ebp - 0x70], 0
jmp 0x41a6de
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x41a6fa
push dword [ebp - 0x70]
lea ecx, [ebp - 0x1d0]
call fcn.0040f321
mov dword [eax], 0xab2a
jmp 0x41a6d7
push 2
lea ecx, [ebp - 0x1d0]
call fcn.0040f321
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x1d0]
call fcn.0040f305
jmp 0x41a6aa
jmp 0x41a648
jmp 0x41a627
jmp 0x41a5e0
lea ecx, [ebp - 0x168]
call fcn.0040f305
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x1a4], 1
mov dword [ebp - 0x1a0], 1
lea ecx, [ebp - 0x95]
call fcn.0040f330
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x258]
call fcn.0040f333
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x178]
call fcn.0040f2df
mov dword [ebp - 0x20], 0x184c506d
mov dword [ebp - 0x20], 0
jmp 0x41a7b3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x41a92c
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x180], 0x64c9d8d9
mov dword [ebp - 0x84], 0
jmp 0x41a7e7
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x41a803
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x240], 0x9c6fec1b
jmp 0x41a7da
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1f4], eax
push 0
lea ecx, [ebp - 0x178]
call fcn.0040f321
push 3
lea ecx, [ebp - 0x178]
call fcn.0040f321
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1f8], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x178]
call fcn.0040f321
mov dword [ebp - 0xac], eax
push 0
lea ecx, [ebp - 0x178]
call fcn.0040f321
mov ecx, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xac]
cmp dword [ecx], eax
jne 0x41a873
mov dword [ebp - 0x11c], 1
jmp 0x41a87a
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x11c], eax
jne 0x41a891
mov dword [ebp - 0xf4], 1
jmp 0x41a898
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xf4]
imul eax, ecx
cmp eax, dword [ebp - 0x1c]
jne 0x41a8b3
push 4
pop eax
test eax, eax
je 0x41a8c5
cmp dword [ebp - 0x20], 0
je 0x41a8c5
mov dword [ebp - 0x134], 1
jmp 0x41a8cc
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x134], eax
jle 0x41a8e3
mov dword [ebp - 0x188], 1
jmp 0x41a8ea
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x180], 0
jne 0x41a90b
cmp dword [ebp - 0x1c], 0
jne 0x41a90b
and dword [ebp - 0xfc], 0
jmp 0x41a915
mov dword [ebp - 0xfc], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x240], ecx
jmp 0x41a7ac
lea ecx, [ebp - 0x178]
call fcn.0040f305
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x4c], 0xe1d925b0
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0xf0], 6
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x8c], 0
jmp 0x41a989
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x41a9a5
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x1f0], 0xf9e6a012
jmp 0x41a97c
mov dword [ebp - 4], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jle 0x41a9cc
mov dword [ebp - 0xb0], 1
jmp 0x41a9d3
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0xb0]
jl 0x41a9ea
mov dword [ebp - 0xc8], 1
jmp 0x41a9f1
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jne 0x41aa05
mov dword [ebp - 0xb8], 1
jmp 0x41aa0c
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
neg eax
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
cmp eax, 0xbf5f
jl 0x41aa2d
mov dword [ebp - 0xc0], 1
jmp 0x41aa34
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x3c], 0xcaea
cmp eax, dword [ebp - 4]
jne 0x41aa55
mov dword [ebp - 0xd0], 1
jmp 0x41aa5c
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x44]
jg 0x41aa79
mov dword [ebp - 0xd8], 1
jmp 0x41aa80
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xd8], eax
jl 0x41aa9a
cmp dword [ebp - 0x4c], 0
jne 0x41aa9a
and dword [ebp - 0xe0], 0
jmp 0x41aaa4
mov dword [ebp - 0xe0], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xe0], eax
jne 0x41aabb
mov dword [ebp - 0xe8], 1
jmp 0x41aac2
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
neg eax
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xf0], eax
jge 0x41aaf6
cmp dword [ebp - 0x4c], 0
jne 0x41aaf6
cmp dword [ebp - 4], 0
jne 0x41aaf6
and dword [ebp - 0xf8], 0
jmp 0x41ab00
mov dword [ebp - 0xf8], 1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xf8]
sub ecx, dword [ebp - 0x54]
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1f0]
je 0x41ab71
mov byte [ebp - 0x24], 0
movzx eax, byte [ebp - 0x24]
test eax, eax
je 0x41ab3a
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x41ab6c
push 0
push 0
push 0
push 0xdef
push 0x1557
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
jmp 0x41ac09
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x3c], 0
jmp 0x41ab8b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x18
jge 0x41ac09
mov dword [ebp - 0x100], 9
mov dword [ebp - 0x20c], 0xffffffff
mov dword [ebp - 0x54], 0xfffffff9
jmp 0x41abb5
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x41abf7
mov dword [ebp - 0x184], 0xfffffff7
mov dword [ebp - 4], 0
jmp 0x41abd5
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jg 0x41abea
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
jmp 0x41abce
cmp dword [ebp - 0x184], 0
je 0x41abf5
jmp 0x41abf7
jmp 0x41abae
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
jmp 0x41ab84
mov eax, dword [ebp - 0x17c]
movzx eax, byte [eax]
test eax, eax
je 0x41addb
mov dword [ebp - 0x18c], 8
mov dword [ebp - 8], 0
jmp 0x41ac34
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x41ac47
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x5c], 0xf782a183
jmp 0x41ac2d
mov dword [ebp - 8], 0
jmp 0x41ac57
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x41ac6d
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x21c], 0x1c03809d
jmp 0x41ac50
mov dword [ebp - 8], 0
jmp 0x41ac7d
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x41ac93
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x200], 0x1da7bc99
jmp 0x41ac76
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x41acac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 0x3717
jl 0x41acc8
mov dword [ebp - 0x9c], 1
jmp 0x41accf
and dword [ebp - 0x9c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
mov dword [ebp + eax - 0x21c], ecx
cmp dword [ebp - 0x9c], 0x93ee3274
je 0x41acfa
mov dword [ebp - 0x110], 1
jmp 0x41ad01
and dword [ebp - 0x110], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
add eax, 0x7540
mov dword [ebp - 0x118], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x200], ecx
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x118]
jg 0x41ad43
mov dword [ebp - 0x120], 1
jmp 0x41ad4a
and dword [ebp - 0x120], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x5c]
add ecx, dword [ebp - 0x120]
cmp dword [ebp + eax - 0x5c], ecx
jne 0x41ad7b
mov eax, 0x8711
test eax, eax
je 0x41ad7b
mov dword [ebp - 0x128], 1
jmp 0x41ad82
and dword [ebp - 0x128], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
cmp dword [ebp - 0x128], eax
je 0x41ada0
mov dword [ebp - 0x130], 1
jmp 0x41ada7
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0
je 0x41adbc
mov dword [ebp - 0x138], 1
jmp 0x41adc3
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x18c], eax
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 0x88], 0xfffffffc
push 1
lea ecx, [ebp - 0x1e8]
call fcn.0040f233
mov dword [ebp - 0x94], 0
jmp 0x41ae0b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x41ae2d
push dword [ebp - 0x94]
lea ecx, [ebp - 0x1e8]
call fcn.0040f321
mov dword [eax], 1
jmp 0x41adfe
mov dword [ebp - 0x88], 0
jmp 0x41ae46
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x13
jl 0x41ae65
push 0
lea ecx, [ebp - 0x1e8]
call fcn.0040f321
cmp dword [eax], 0
je 0x41ae63
jmp 0x41ae65
jmp 0x41ae39
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x41ae79
push 0
call dword [sym.imp.USER32.dll_GetKeyboardState]
lea ecx, [ebp - 0x1e8]
call fcn.0040f305
mov esp, ebp
pop ebp
ret