Function at 0x424a50
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b8
push ebx
push esi
mov esi, ecx
mov ecx, str.VirtualConsoleClass
push edi
mov eax, ecx
mov dx, word [eax]
xor ebx, ebx
cmp dx, word [ecx]
jne 0x424a8d
cmp dx, bx
je 0x424a89
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x424a8d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x424a65
xor eax, eax
jmp 0x424a92
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x424ab3
push 1
push 0xffffffffffffffff
push ebx
push 0x40
push str.Error:_class_names_must_be_equal_
call fcn.004262f0
add esp, 0x14
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x52fe10]
mov ecx, dword [0x52fe38]
mov edi, dword [sym.imp.USER32.dll_LoadCursorW]
push 0x7f00
push ebx
mov dword [ebp - 0xb8], 0x30
mov dword [ebp - 0xb4], 0x28
mov dword [ebp - 0xb0], 0x4249e0
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], 0x10
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], ecx
call edi
mov edx, dword [str.VirtualConsoleClass]
mov ecx, dword [0x52fe10]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x52fe3c]
mov dword [ebp - 0x90], edx
mov edx, dword [0x52fe38]
push 0x7f00
push ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x58], 0x30
mov dword [ebp - 0x54], 0x28
mov dword [ebp - 0x50], 0x4125f0
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0x10
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], edx
call edi
mov ecx, dword [0x52fe3c]
mov edx, dword [0x52fe10]
mov dword [ebp - 0x3c], eax
mov eax, dword [str.VirtualConsoleClassWork]
mov dword [ebp - 0x30], eax
mov eax, dword [0x52fe38]
push 0x7f00
push ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x88], 0x30
mov dword [ebp - 0x84], 0x28
mov dword [ebp - 0x80], 0x4b51d0
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], 0x10
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], eax
call edi
mov ecx, dword [str.VirtualConsoleClassBack]
mov edx, dword [0x52fe3c]
mov edi, dword [sym.imp.USER32.dll_RegisterClassExW]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
call edi
test ax, ax
je 0x424e63
lea ecx, [ebp - 0x58]
push ecx
call edi
test ax, ax
je 0x424e63
lea edx, [ebp - 0x88]
push edx
call edi
test ax, ax
je 0x424e63
mov eax, dword [esi + 0x40a4]
lea ecx, [esi + 0x40a4]
cmp eax, ebx
je 0x424c67
cmp dword [eax + 0x18], ebx
jne 0x424c34
push ecx
call fcn.0040d390
add esp, 4
jmp 0x424c67
mov edx, dword [eax + 0x18]
lea ecx, [ebp - 4]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 1
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
test eax, eax
jne 0x424c67
push ebx
push ebx
push ebx
push ebx
push str.Inside:_AttachThreadInput___failed_
call fcn.004263e0
add esp, 0x14
mov ecx, esi
call fcn.00409240
mov ecx, esi
mov dword [ebp - 4], eax
call fcn.0040d590
mov dword [ebp - 0x10], eax
mov eax, 0xffffff
mov edi, SysReAllocString
mov ebx, edi
test dword [esi + 0x40f0], eax
je 0x424c97
test dword [esi + 0x410c], eax
jne 0x424ca0
cmp dword [esi + 0x40a4], 0
je 0x424cd4
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.004141f0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov edi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], edi
mov ecx, esi
mov dword [eax + 0xc], ebx
call fcn.00409cc0
sub edi, dword [ebp - 0x28]
sub ebx, dword [ebp - 0x24]
mov eax, dword [esi + 0x40a4]
test eax, eax
je 0x424ce6
mov eax, dword [eax + 0x18]
mov dword [ebp - 8], eax
jmp 0x424cef
mov ecx, dword [0x52fe1c]
mov dword [ebp - 8], ecx
mov ecx, dword [0x52fe34]
cmp byte [ecx + 0x125fa], 0
je 0x424de1
call fcn.004588a0
push eax
lea edx, [ebp - 0x1b8]
push str.Current_display_logical_DPI_u
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 1
push 1
lea eax, [ebp - 0x1b8]
push eax
mov ecx, esi
call fcn.00409280
mov eax, dword [0x52fe30]
mov dl, byte [eax + 0x1220]
test dl, dl
je 0x424d46
mov ecx, dword [eax + 0x113f4]
jmp 0x424d4c
mov ecx, dword [esi + 0x40e4]
cmp byte [eax + 0x1236], 0
mov eax, 0x4e5034
mov dword [ebp - 0x18], str._Desktop
jne 0x424d64
mov dword [ebp - 0x18], eax
cmp dword [esi + 0x40a4], 0
mov dword [ebp - 0x14], str._Inside
jne 0x424d77
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], str._Quake
test dl, dl
jne 0x424d85
mov dword [ebp - 0xc], eax
push ecx
call fcn.00424ff0
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
push eax
mov eax, dword [esi + 0x412c]
push ecx
mov ecx, dword [esi + 0x4128]
push edx
mov edx, dword [ebp - 8]
push ebx
push edi
push eax
mov eax, dword [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x14]
push edx
mov edx, dword [ebp - 0xc]
push eax
push ecx
push edx
lea eax, [ebp - 0x1b8]
push str.Creating_main_window._s_s_s_Parentx_08X_X_i_Y_i_W_i_H_i_stylex_08X_exStylex_08X_Mode_s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x38
push 1
push 1
lea ecx, [ebp - 0x1b8]
push ecx
mov ecx, esi
call fcn.00409280
mov ecx, dword [0x52fe34]
mov edx, dword [0x52fe10]
mov eax, dword [ebp - 8]
push 0
push edx
push 0
push eax
mov eax, dword [0x52fe2c]
mov edx, dword [eax + 0x412c]
mov eax, dword [eax + 0x4128]
push ebx
push edi
push edx
mov edx, dword [ebp - 0x10]
push eax
push edx
push 0
push 0
call fcn.0046a740
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [str.VirtualConsoleClass]
push eax
push ecx
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x52fe14], eax
test eax, eax
jne 0x424e49
push 1
push 0xffffffffffffffff
push eax
push 0x40
push str.Cant_create_main_window_
call fcn.004262f0
add esp, 0x14
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.0041dcb0
mov ecx, esi
call fcn.0041cff0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ebx
push ebx
push ebx
push ebx
push str.Failed_to_register_class_names
call fcn.004263e0
add esp, 0x14
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret