Function at 0x413900
Capabilities:
Create process on windows
Find taskbar
Open clipboard
Read clipboard data
Write clipboard data

Disassembly:
sub esp, 0xc2c
mov eax, dword [0x451050]
xor eax, esp
mov dword [esp + 0xc24], eax
mov eax, dword [esp + 0xc3c]
push ebx
push ebp
mov ebp, dword [esp + 0xc38]
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x14], ebp
cmp eax, ebx
je 0x413939
cmp eax, 1
jne 0x4146eb
mov esi, dword [esp + 0xc44]
cmp esi, 0x4f4d
mov ecx, dword [0x459fc0]
jg 0x413cdf
je 0x413c1c
cmp esi, 0x3f2
jg 0x4139f9
je 0x4139c0
cmp esi, 0x3e8
jg 0x413987
je 0x413c1c
mov eax, esi
sub eax, 1
je 0x413c1c
sub eax, 1
jmp 0x41468f
mov eax, esi
sub eax, 0x3e9
je case.0x413d09.20304
sub eax, 1
jne case.default.0x4145ba
mov eax, dword [0x452498]
cmp esi, 0x3ea
jne 0x41449c
test eax, 0x8000
je 0x41449c
push 1
jmp 0x4146dd
push 0x3f2
push ebp
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x4139e5
or dword [0x4524a0], 0x100
call fcn.00413890
jmp 0x4146eb
and dword [0x4524a0], 0xfffffeff
call fcn.00413890
jmp 0x4146eb
lea eax, [esi - 0x3f3]
cmp eax, 4
ja case.default.0x4145ba
jmp dword [eax*4 + 0x414704]
cmp esi, 0x3f3
jne 0x413a4c
push esi
push ebp
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x413a38
or dword [0x4524a0], 0x10000000
call fcn.00413890
jmp 0x4146eb
and dword [0x4524a0], 0xefffffff
call fcn.00413890
jmp 0x4146eb
mov eax, dword [0x4524a0]
xor eax, 0x10000000
mov dword [0x4524a0], eax
shr eax, 0x1c
and eax, 1
push eax
push 0x3f3
push ebp
call dword [sym.imp.USER32.dll_CheckDlgButton]
call fcn.00413890
jmp 0x4146eb
cmp esi, 0x3f4
jne 0x413ab5
push esi
push ebp
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x413aa1
or dword [0x4524a0], 0x10000
call fcn.00413890
jmp 0x4146eb
and dword [0x4524a0], 0xfffeffff
call fcn.00413890
jmp 0x4146eb
mov eax, dword [0x4524a0]
xor eax, 0x10000
mov dword [0x4524a0], eax
shr eax, 0x10
and eax, 1
push eax
push 0x3f4
push ebp
call dword [sym.imp.USER32.dll_CheckDlgButton]
call fcn.00413890
jmp 0x4146eb
cmp esi, 0x3f7
jne 0x413b1e
push esi
push ebp
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x413b0a
or dword [0x4524a0], 0x100000
call fcn.00413890
jmp 0x4146eb
and dword [0x4524a0], 0xffefffff
call fcn.00413890
jmp 0x4146eb
mov eax, dword [0x4524a0]
xor eax, 0x100000
mov dword [0x4524a0], eax
shr eax, 0x14
and eax, 1
push eax
push 0x3f7
push ebp
call dword [sym.imp.USER32.dll_CheckDlgButton]
call fcn.00413890
jmp 0x4146eb
cmp esi, 0x3f5
jne 0x413b87
push esi
push ebp
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x413b73
or dword [0x4524a0], 0x1000000
call fcn.00413890
jmp 0x4146eb
and dword [0x4524a0], 0xfeffffff
call fcn.00413890
jmp 0x4146eb
mov eax, dword [0x4524a0]
xor eax, 0x1000000
mov dword [0x4524a0], eax
shr eax, 0x18
and eax, 1
push eax
push 0x3f5
push ebp
call dword [sym.imp.USER32.dll_CheckDlgButton]
call fcn.00413890
jmp 0x4146eb
cmp esi, 0x3f6
jne 0x413bf0
push esi
push ebp
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x413bdc
or dword [0x4524a0], 0x2000000
call fcn.00413890
jmp 0x4146eb
and dword [0x4524a0], 0xfdffffff
call fcn.00413890
jmp 0x4146eb
mov eax, dword [0x4524a0]
xor eax, 0x2000000
mov dword [0x4524a0], eax
shr eax, 0x19
and eax, 1
push eax
push 0x3f6
push ebp
call dword [sym.imp.USER32.dll_CheckDlgButton]
call fcn.00413890
jmp 0x4146eb
push ebp
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edi, eax
xor eax, eax
cmp dword [0x459fa4], ebx
setne al
mov ebp, eax
mov eax, dword [0x452498]
cmp edi, ebx
je 0x413c49
test eax, 0x10000000
jne 0x413c49
mov ebx, 1
jmp 0x413c4b
xor ebx, ebx
test ebp, ebp
je 0x413c5d
test eax, 0x20000000
jne 0x413c5d
mov esi, 1
jmp 0x413c5f
xor esi, esi
push esi
push ebx
xor eax, eax
call fcn.00416ab0
add esp, 8
test edi, edi
je 0x413c73
test ebx, ebx
je 0x413c83
test ebp, ebp
je 0x413d63
test esi, esi
jne 0x413d63
mov eax, dword [0x459f90]
cmp eax, 1
je 0x413c92
cmp eax, 2
jne 0x413cc1
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
test esi, esi
je 0x413cbc
push 0x447354
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
cmp esi, eax
je 0x413cbc
call dword [sym.imp.USER32.dll_GetShellWindow]
cmp esi, eax
jne 0x413cc1
call fcn.00408e60
mov ecx, dword [0x4524a4]
mov edx, dword [esp + 0x14]
push 0
push ecx
push 0x1b0
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4146eb
cmp esi, 0x5047
jg 0x414599
je 0x41458f
lea eax, [esi - 0x4f4e]
cmp eax, 0xdf
ja case.default.0x4145ba
movzx eax, byte [eax + 0x414764]
jmp dword [eax*4 + 0x414718]
add esi, 0xffffafd7
mov ecx, ebp
mov dword [0x459f90], esi
call fcn.00415530
test dword [0x459f8c], 0x400
je 0x413d3e
and dword [0x459f8c], 0xfffffbff
call fcn.00408e60
mov ecx, ebp
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
xor edx, edx
cmp dword [0x459fa4], edx
mov edi, eax
mov eax, dword [0x452498]
setne dl
mov ebp, edx
test edi, edi
jne 0x413d75
test ebp, ebp
jne 0x413d83
push 0
or ecx, 0xffffffff
call fcn.0040fe00
add esp, 4
jmp 0x4146eb
test eax, 0x10000000
jne 0x413d83
mov ebx, 1
jmp 0x413d85
xor ebx, ebx
test ebp, ebp
je 0x413d97
test eax, 0x20000000
jne 0x413d97
mov esi, 1
jmp 0x413d99
xor esi, esi
push esi
push ebx
xor eax, eax
call fcn.00416ab0
add esp, 8
test edi, edi
je 0x413dad
test ebx, ebx
je 0x413db5
test ebp, ebp
je 0x413d63
test esi, esi
jne 0x413d63
mov eax, dword [0x459f90]
cmp eax, 1
je 0x413dc4
cmp eax, 2
jne 0x413df3
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
test esi, esi
je 0x413dee
push 0x447354
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
cmp esi, eax
je 0x413dee
call dword [sym.imp.USER32.dll_GetShellWindow]
cmp esi, eax
jne 0x413df3
call fcn.00408e60
mov eax, dword [0x4524a4]
mov ecx, dword [esp + 0x14]
push 0
push eax
push 0x1b0
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4146eb
lea eax, [esi - 0x501f]
cmp eax, dword [0x459f90]
jne 0x413e42
cmp dword [0x45a48c], esi
jne 0x413e4e
push ebx
push ebx
add eax, 0x5029
push eax
push ebp
call fcn.00413900
add esp, 0x10
mov dword [0x45a48c], ebx
jmp 0x4146eb
mov ecx, ebp
mov dword [0x459f90], eax
call fcn.00415530
mov dword [0x45a48c], esi
jmp 0x4146eb
lea edx, [esp + 0x428]
push edx
xor edx, edx
mov ecx, ebp
call fcn.00412590
add esp, 4
test eax, eax
je 0x4146eb
lea ecx, [esp + 0x428]
call fcn.00412a50
jmp 0x4146eb
cmp ecx, ebx
je 0x4146eb
cmp dword [0x4587d8], ebx
jbe case.0x413d09.20304
cmp dword [0x459f9c], ebx
jne 0x4146eb
mov ecx, dword [0x452504]
lea eax, [ecx - 1]
cmp eax, 4
ja 0x413f06
cmp dword [0x4587dc], 8
mov eax, dword [0x4587c8]
jae 0x413ec7
mov eax, 0x4587c8
mov edx, dword [0x452508]
push edx
push ecx
push eax
xor ecx, ecx
call fcn.0040faf0
add esp, 0xc
test eax, eax
je 0x413fbe
push 1
call fcn.004113b0
add esp, 4
test dword [0x452498], 0x800
je 0x41406a
call fcn.00413350
jmp 0x41406a
cmp dword [0x4587dc], 8
mov esi, dword [0x4587c8]
jae 0x413f1a
mov esi, 0x4587c8
lea eax, [esp + 0x428]
mov ecx, eax
mov edx, 0x400
sub esi, ecx
lea ebx, [ebx]
lea ecx, [edx + 0x7ffffbfe]
test ecx, ecx
je 0x413f50
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x413f50
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x413f30
jmp 0x413f54
cmp edx, ebx
jne 0x413f57
sub eax, 2
xor edx, edx
mov word [eax], dx
mov eax, dword [0x4524fc]
push eax
mov edi, 0x400
lea eax, [esp + 0x42c]
call fcn.00430b30
mov ecx, dword [0x452500]
mov edx, dword [0x4524fc]
add esp, 4
push ecx
push edx
lea eax, [esp + 0x430]
push eax
xor ecx, ecx
call fcn.0040faf0
add esp, 0xc
test eax, eax
je 0x413fbe
mov ecx, dword [0x452500]
mov edx, dword [0x4524fc]
push 1
push ecx
push edx
lea eax, [esp + 0x434]
call fcn.00411580
add esp, 0xc
jmp 0x413eec
mov ecx, 0x7d2b
mov esi, ebp
call fcn.00408930
jmp 0x4146eb
cmp ecx, ebx
je 0x4146eb
lea eax, [esp + 0x428]
push eax
xor edx, edx
mov ecx, ebp
call fcn.004127e0
add esp, 4
test eax, eax
je 0x4146eb
mov edx, dword [0x452500]
mov eax, dword [0x4524fc]
xor ecx, ecx
cmp esi, 0x4f51
push edx
sete cl
push eax
lea edx, [esp + 0x430]
push edx
call fcn.0040faf0
add esp, 0xc
test eax, eax
je 0x413fbe
mov eax, dword [0x452500]
mov ecx, dword [0x4524fc]
push 1
push eax
push ecx
lea eax, [esp + 0x434]
call fcn.00411580
add esp, 0xc
jmp 0x413eec
cmp dword [0x459fc0], ebx
je 0x4146eb
xor edx, edx
cmp esi, 0x4f52
sete dl
push edx
call fcn.0041f100
add esp, 4
test eax, eax
je 0x4146eb
mov eax, dword [0x459cd0]
cmp eax, ebx
je 0x41407b
cmp dword [eax], ebx
jne 0x4146eb
test byte [0x452498], 0x40
jne 0x4146eb
push 0x6c
mov ecx, 0x402bd0
mov edx, ebp
call fcn.00408750
add esp, 4
jmp 0x4146eb
call fcn.0041ee70
jmp 0x4146eb
cmp dword [0x459fc0], ebx
je 0x4146eb
push ebp
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x4146eb
call dword [sym.imp.USER32.dll_EmptyClipboard]
xor eax, eax
cmp esi, 0x4f80
sete al
push ebx
mov edi, eax
call fcn.0040f850
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x414109
mov eax, dword [esi]
push eax
call fcn.004307c0
add esp, 4
mov edi, eax
call fcn.00407990
call fcn.00409900
cmp edi, ebx
je 0x414109
push edi
push 8
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x41406a
push 8
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
je 0x4146eb
push ebp
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x4146eb
push 8
call dword [sym.imp.USER32.dll_GetClipboardData]
mov esi, eax
cmp esi, ebx
je 0x414193
call fcn.0040fd60
push esi
call fcn.00430720
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x414193
push esi
call fcn.00430510
add esp, 4
push esi
mov dword [0x459fc0], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x459ff0], 4
je 0x41417d
mov dword [0x459ff0], 2
mov ecx, dword [0x459fe4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
call fcn.004113b0
add esp, 4
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x4146eb
call fcn.0040fd60
push ebx
call fcn.00410330
add esp, 4
push ebx
call fcn.004113b0
add esp, 4
jmp 0x4146eb
cmp dword [0x4587d8], ebx
je 0x4146eb
push ebp
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x4146eb
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov edi, dword [0x4587d8]
lea edx, [edi + edi + 2]
push edx
push 2
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
cmp esi, ebx
je 0x41422a
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
cmp dword [0x4587dc], 8
mov ecx, dword [0x4587c8]
jae 0x41420f
mov ecx, 0x4587c8
push ecx
lea ecx, [edi + 1]
mov edx, eax
call fcn.00401220
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
push 0xd
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x4146eb
cmp dword [0x4587d8], ebx
je 0x4146eb
mov edx, dword [0x448300]
mov eax, dword [str._select__]
mov ecx, dword [0x4482fc]
push 0x3ec
mov dword [esp + 0x34], edx
mov dword [esp + 0x2c], eax
mov eax, dword [0x448304]
mov dword [esp + 0x30], ecx
mov ecx, dword [0x448308]
lea edx, [esp + 0x40]
push ebx
push edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
call fcn.00437610
mov eax, dword [0x4587c8]
add esp, 0xc
cmp dword [0x4587dc], 8
jae 0x414297
mov eax, 0x4587c8
mov esi, 0x200
lea ecx, [esp + 0x28]
cmp word [ecx], bx
je 0x4142af
add ecx, 2
sub esi, 1
jne 0x4142a0
jmp 0x4142ca
cmp esi, ebx
je 0x4142ca
mov edx, 0x200
sub edx, esi
mov ecx, 0x200
sub ecx, edx
lea edx, [esp + edx*2 + 0x28]
call fcn.0040d850
mov ecx, 0x200
lea eax, [esp + 0x28]
cmp word [eax], bx
je 0x4142e2
add eax, 2
sub ecx, 1
jne 0x4142d3
jmp 0x414302
cmp ecx, ebx
je 0x414302
mov eax, 0x200
sub eax, ecx
mov ecx, 0x200
sub ecx, eax
lea edx, [esp + eax*2 + 0x28]
mov eax, 0x44740c
call fcn.0040d850
push 1
push ebx
lea eax, [esp + 0x30]
push eax
push str.explorer.exe
push str.open
push ebp
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4146eb
xor dword [0x452498], 0x80000
cmp dword [0x459fc0], ebx
je 0x414352
cmp dword [0x459ff0], 4
je 0x414345
mov dword [0x459ff0], 2
mov ecx, dword [0x459fe4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
call fcn.004113b0
add esp, 4
mov dword [0x459fa0], ebx
jmp 0x4146eb
xor dword [0x452498], 0x400000
jmp 0x4146eb
mov eax, dword [0x452498]
xor eax, 0x2000000
mov dword [0x452498], eax
test eax, 0x2000000
je 0x4146eb
cmp dword [0x4587d8], ebx
je 0x4143a3
cmp dword [0x459f9c], ebx
jne 0x4146eb
push ebx
push 0xa
push 0x28e
push ebp
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4146eb
mov eax, dword [0x452498]
xor eax, 0x1000000
mov dword [0x452498], eax
test eax, 0x1000000
je 0x4146eb
push ebx
push 0xa
push 0x28e
push ebp
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4146eb
push ebp
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41440f
lea edx, [esp + 0x18]
push edx
push ebp
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [0x45250c], eax
mov dword [0x452510], ecx
push 0x65
mov ecx, 0x42b9e0
mov edx, ebp
call fcn.00408750
add esp, 4
test eax, eax
je 0x414455
call fcn.00403d80
cmp dword [0x459ff0], 4
je 0x41443c
mov dword [0x459ff0], 2
mov edx, dword [0x459fe4]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov esi, ebp
call fcn.004100b0
call fcn.004243f0
push 1
push ebp
call dword [sym.imp.USER32.dll_EnableWindow]
test dword [0x452498], 0x3000000
je 0x4146eb
mov eax, dword [0x459f80]
push 0x28e
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x459f80]
push ebx
push 0xc8
push 0x28e
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4146eb
test al, al
jns 0x414559
cmp dword [0x4587d8], ebx
jbe 0x414559
cmp dword [0x459f9c], ebx
jne 0x414559
cmp dword [0x4587dc], 8
mov eax, dword [0x4587c8]
jae 0x4144cf
mov eax, 0x4587c8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov esi, eax
cmp esi, ebx
je 0x414559
lea edx, [esp + 0x28]
push edx
push 0x7ca1
mov ebx, 0x100
call fcn.0040af30
lea eax, [esp + 0x30]
push esi
push eax
mov ecx, 0x200
lea ebx, [esp + 0x438]
call fcn.00401250
push 0x33
push 0x447ce8
mov ecx, ebx
push ecx
mov esi, ebp
push esi
call fcn.004087f0
add esp, 0x20
cmp eax, 6
jne 0x41454e
push 0
push 0
push 0x4f4f
push esi
call fcn.00413900
add esp, 0x10
cmp dword [0x4587d8], 0
je 0x4146eb
cmp dword [0x459f9c], 0
jne 0x414557
jmp 0x4146eb
cmp eax, 2
je 0x4146eb
mov ebp, esi
push ebp
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x414583
lea edx, [esp + 0x18]
push edx
push ebp
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [0x45250c], eax
mov dword [0x452510], ecx
push ebp
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4146eb
call fcn.0040ed80
jmp 0x4146eb
cmp esi, 0x5079
jg 0x414689
je 0x414671
lea eax, [esi - 0x5048]
cmp eax, 5
ja case.default.0x4145ba
jmp dword [eax*4 + 0x414844]
push 0xb4
mov ecx, 0x402710
mov edx, ebp
call fcn.00408750
add esp, 4
jmp 0x4146eb
push 1
push ebx
push ebx
push str.http:__www.ntwind.com_software_winsnap.html
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4146eb
push 1
push ebx
push ebx
push str.http:__www.ntwind.com_forum_
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4146eb
push 1
call fcn.00403400
add esp, 4
jmp 0x4146eb
push 1
push ebx
push ebx
push str.http:__www.ntwind.com_software_winsnap_register.html
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4146eb
push 0xb6
mov ecx, 0x401e70
mov edx, ebp
call fcn.00408750
add esp, 4
test eax, eax
je 0x4146eb
mov eax, dword [0x459cd0]
cmp eax, ebx
je 0x4146eb
cmp dword [eax], ebx
je 0x4146eb
mov esi, ebp
call fcn.00408860
jmp 0x4146eb
push 0x68
mov ecx, 0x432970
mov edx, ebp
call fcn.00408750
add esp, 4
call fcn.0040ee10
jmp 0x4146eb
cmp esi, 0x51a4
je 0x4146c5
lea ecx, [esi - 0x507a]
cmp ecx, ebx
jl 0x4146eb
mov esi, dword [0x45a44c]
sub esi, dword [0x45a448]
mov eax, 0xb60b60b7
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jge 0x4146eb
call fcn.00412fc0
jmp 0x4146eb
push ebp
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4146eb
mov ecx, dword [0x452498]
and ecx, 0x1000
push ecx
push ebx
mov eax, 1
call fcn.00416ab0
add esp, 8
mov ecx, dword [esp + 0xc34]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00433c32
add esp, 0xc2c
ret