Function at 0x404110
Capabilities:
Acquire debug privileges
Hide graphical window

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4203c0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x148
mov eax, dword [0x42f068]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x60]
push eax
push 0x20
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x4041b2
lea eax, [ebp - 0x70]
push eax
push str.SeDebugPrivilege
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x4041b2
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
push 0
push 0
push 0x10
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x24]
push eax
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 2
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
call esi
push 1
mov dword [ebp - 0x6c], eax
call esi
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x78], eax
call fcn.004039b0
sub esp, 0x10
lea ecx, [ebp - 0x158]
call fcn.004055b0
cmp dword [ebp - 0x108], 0
je 0x404242
cmp dword [ebp - 0x48], 0x10
lea edx, [ebp - 0x5c]
push dword [ebp - 0x4c]
cmovae edx, dword [ebp - 0x5c]
lea ecx, [ebp - 0x158]
call fcn.00406d70
add esp, 4
push eax
call fcn.004062e0
add esp, 4
lea ecx, [ebp - 0x154]
call fcn.00405fe0
test eax, eax
jne 0x404242
mov eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x158]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00401bd0
mov eax, dword [ebp - 0x158]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x158]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x15c], eax
lea ecx, [ebp - 0x154]
call fcn.00405240
mov eax, dword [ebp - 0x158]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x158]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x15c], eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 4], 0
push eax
mov dword [ebp - 0xf0], vtable.std::ios_base.0
call fcn.00407514
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
mov al, byte [0x42c17c]
add esp, 4
mov ecx, dword [ebp - 0x4c]
movups xmmword [ebp - 0x44], xmm0
mov byte [ebp - 0x3c], al
mov eax, 0x7fffffff
movq xmm0, qword [str._keyauth_]
sub eax, ecx
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x30], 0xf
movq qword [ebp - 0x44], xmm0
mov byte [ebp - 0x3b], 0
mov dword [ebp - 0x64], ecx
cmp eax, 0x11
jae 0x404307
call fcn.004011f0
cmp dword [ebp - 0x48], 0x10
lea edx, [ebp - 0x5c]
mov esi, 0xf
lea edi, [ebp - 0x2c]
cmovae edx, dword [ebp - 0x5c]
xorps xmm0, xmm0
add ecx, 0x11
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x68], ecx
movups xmmword [ebp - 0x2c], xmm0
cmp ecx, esi
jbe 0x4043a6
mov esi, ecx
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x40436a
mov ecx, 0x80000000
mov esi, 0x7fffffff
add ecx, 0x23
push ecx
call fcn.00407dd1
add esp, 4
test eax, eax
je 0x40444f
mov ecx, dword [ebp - 0x68]
lea edi, [eax + 0x23]
mov edx, dword [ebp - 0x60]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x4043a3
mov eax, 0x16
cmp esi, eax
cmovb esi, eax
lea eax, [esi + 1]
cmp eax, 0x1000
jb 0x40438a
lea ecx, [eax + 0x23]
cmp ecx, eax
ja 0x404348
call fcn.00401150
test eax, eax
je 0x4043a1
push eax
call fcn.00407dd1
mov ecx, dword [ebp - 0x68]
add esp, 4
mov edx, dword [ebp - 0x60]
mov edi, eax
jmp 0x4043a3
xor edi, edi
mov dword [ebp - 0x2c], edi
movups xmm0, xmmword [str.keyauth.php_hwid]
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x1c], ecx
movups xmmword [edi], xmm0
mov al, byte [0x42c190]
push esi
mov byte [edi + 0x10], al
lea eax, [edi + 0x11]
push edx
push eax
call fcn.004091f0
mov byte [edi + esi + 0x11], 0
lea edx, [ebp - 0x2c]
mov edi, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x34]
cmovae edx, edi
mov ecx, dword [ebp - 0x1c]
sub eax, esi
push ecx
push edx
cmp ecx, eax
ja 0x404417
cmp dword [ebp - 0x30], 0x10
lea eax, [esi + ecx]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
add esi, eax
push esi
call fcn.004091f0
mov eax, dword [ebp - 0x1c]
add esp, 0xc
mov byte [eax + esi], 0
jmp 0x40442a
mov byte [ebp - 0x64], 0
push dword [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00406560
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x40445e
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x404454
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404454
call fcn.0040e247
push ecx
push edi
call fcn.00408052
add esp, 8
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x430ccc]
cmp eax, dword [ecx + 4]
jle 0x4044b6
push 0x430ccc
call fcn.00407cfb
add esp, 4
cmp dword [0x430ccc], 0xffffffff
jne 0x4044b6
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
push eax
call fcn.00405a00
call fcn.00403bc0
push 0x4207d0
call fcn.0040803d
add esp, 0x1c
push 0x430ccc
call fcn.00407cb1
add esp, 4
cmp dword [0x430cf0], 0x10
mov ecx, 0x430cdc
mov esi, dword [0x430cec]
cmovae ecx, dword [0x430cdc]
cmp esi, 2
jne 0x4046e6
mov edx, 0x42c194
sub esi, 4
jb 0x4044f3
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4044f8
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4044e2
cmp esi, 0xfffffffc
je 0x40452c
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x404525
cmp esi, 0xfffffffd
je 0x40452c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x404525
cmp esi, 0xfffffffe
je 0x40452c
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x404525
cmp esi, 0xffffffff
je 0x40452c
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40452c
sbb eax, eax
or eax, 1
jmp 0x40452e
xor eax, eax
test eax, eax
jne 0x4046e6
push eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa8], 0x30
mov dword [ebp - 0x98], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0x7f00
push 0
mov dword [ebp - 0x88], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push 0
mov dword [ebp - 0x8c], eax
call esi
push 0x7f00
push 0
mov dword [ebp - 0x90], eax
call esi
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa0], 0x403970
mov dword [ebp - 0x80], str.Qt5153QWindowIcon
mov dword [ebp - 0x84], str.Microsoft_OneDrive
mov dword [ebp - 0xa4], 3
call dword [sym.imp.USER32.dll_RegisterClassExA]
test ax, ax
jne 0x4045d4
push 1
call fcn.0040c862
mov eax, dword [ebp - 0x78]
push 0
push 0
push 0
push 0
dec eax
push eax
mov eax, dword [ebp - 0x6c]
dec eax
push eax
push 0x64
push 0x64
push 0x80000008
push str.Microsoft_OneDrive
push str.Qt5153QWindowIcon
push 0x20800a8
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 1
push 0
push 0
push eax
mov dword [0x430c44], eax
call esi
push 2
push 0xff
push 0
push dword [0x430c44]
call esi
push 0x11
push dword [0x430c44]
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
push 5
push dword [0x430c44]
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.00401e80
push ecx
call fcn.00401d10
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
mov edi, dword [sym.imp.USER32.dll_DispatchMessageA]
nop dword [eax]
push 1
push 0
push 0
push dword [0x430c44]
push 0x430c84
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x404689
push 0x430c84
call esi
push 0x430c84
call edi
push 0
push str.RigorZGame
call dword [sym.imp.USER32.dll_FindWindowA]
push 0x430ca0
push eax
mov dword [0x430cb0], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [0x430cac]
mov edx, dword [0x430ca4]
sub eax, edx
mov ecx, dword [0x430ca0]
push 1
push eax
mov eax, dword [0x430ca8]
sub eax, ecx
push eax
push edx
push ecx
push dword [0x430c44]
call dword [sym.imp.USER32.dll_MoveWindow]
cmp dword [0x430cb0], 0
je 0x4046f7
call fcn.00403910
jmp 0x404660
push 0
push 0
push str.Invalid_Hwid
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.0040c862
int3