Function at 0x442631
Capabilities:
Check for time delay via gettickcount
Log keystrokes

Disassembly:
sub esp, 0x24
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetWindowLongA]
push ebp
push esi
mov esi, dword [esp + 0x34]
push edi
xor edx, edx
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x18]
mov dword [esp + 0x14], edx
rep stosd dword es:[edi], eax
mov dword [esp + 0x10], edx
mov edi, 0x400000
mov ebp, 0x40000
cmp byte [0x47b0e0], al
je 0x44271c
cmp dword [0x477340], edx
je 0x44271c
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x44268b
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x4426ab
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4426ab
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x4426ab
mov dword [esp + 0x38], 1
jmp 0x4426b0
and dword [esp + 0x38], 0
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x4426c2
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x4426d2
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4426d2
xor ebp, ebp
inc ebp
jmp 0x4426d4
xor ebp, ebp
test esi, esi
je 0x4426e8
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4426e8
xor edi, edi
inc edi
jmp 0x4426ea
xor edi, edi
push dword [esp + 0x3c]
push dword [esp + 0x3c]
push ebp
push esi
call dword [sym.imp.USER32.dll_IsIconic]
push eax
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
push eax
push edi
push esi
push str.____Activate:_HWND_lu__IsWindow_d__IsWindowVisible_d__IsIconic_d__is_popup_d__is_real_app_window_d__Force_d
call fcn.00421b06
add esp, 0x20
mov ebp, 0x40000
mov edi, 0x400000
test esi, esi
je 0x442b79
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x442b79
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp esi, eax
jne 0x442784
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x442784
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x442784
cmp byte [0x47b0e0], 2
jb 0x442778
cmp dword [0x477340], 0
je 0x442778
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__1_:__lu
call fcn.00421b06
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
jmp 0x442b72
cmp dword [esp + 0x3c], 0
jne 0x4427f4
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x44279d
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x4427f4
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4427f4
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x4427f4
cmp byte [0x47b0e0], 2
jb 0x4427d7
cmp dword [0x477340], eax
je 0x4427d7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__2_:__lu
call fcn.00421b06
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
je 0x4427f4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
jne 0x442892
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x442814
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x442892
mov edi, dword [sym.imp.USER32.dll_IsWindowVisible]
push esi
call edi
test eax, eax
je 0x442892
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x442892
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x442892
push esi
call edi
test eax, eax
je 0x442892
xor edi, edi
cmp dword [esp + 0x3c], edi
jne 0x442892
cmp byte [0x47b0e0], 2
jb 0x44286a
cmp dword [0x477340], edi
je 0x44286a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__3_:__lu
call fcn.00421b06
pop ecx
pop ecx
cmp byte [0x47b0e0], 0
je 0x442886
cmp dword [0x477340], edi
je 0x442886
push str.____Activate:_MethodQuick_Foreground
call fcn.00421b06
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetActiveWindow]
jmp 0x442b72
cmp byte [0x47b0e0], 2
jb 0x4428b7
cmp dword [0x477340], 0
je 0x4428b7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__4_:__lu
call fcn.00421b06
pop ecx
pop ecx
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push esi
push 0xf150
push 0x112
push esi
call edi
push esi
call fcn.0043fd4d
cmp eax, 1
jne 0x4428f5
push esi
call fcn.004425c5
mov esi, eax
push esi
call fcn.0043fd4d
cmp eax, 2
jne 0x4428f5
push 0xffffffffffffffff
push 0
push 0xb1
push esi
call edi
cmp byte [0x47b0e0], 2
jb 0x44291a
cmp dword [0x477340], 0
je 0x44291a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__5_:__lu
call fcn.00421b06
pop ecx
pop ecx
cmp byte [0x47b0e0], 0
je 0x44294a
cmp dword [0x477340], 0
je 0x44294a
cmp dword [esp + 0x3c], 0
mov eax, str.Force
jne 0x44293d
mov eax, str.Normal
push eax
push str.____Activate:_Method_s
call fcn.00421b06
pop ecx
pop ecx
cmp dword [esp + 0x3c], 0
je 0x442a09
cmp byte [0x47b0e0], 2
jb 0x44297a
cmp dword [0x477340], 0
je 0x44297a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__6_:__lu
call fcn.00421b06
pop ecx
pop ecx
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 1
mov dword [esp + 0x40], eax
call edi
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push eax
push dword [esp + 0x44]
call ebp
test eax, eax
jne 0x4429b6
push 1
push dword [esp + 0x40]
call edi
push eax
call ebp
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push 0
call edi
push eax
push dword [esp + 0x44]
call ebp
test eax, eax
jne 0x4429e4
push eax
push dword [esp + 0x40]
call edi
push eax
call ebp
cmp byte [0x47b0e0], 2
jb 0x442a09
cmp dword [0x477340], 0
je 0x442a09
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__7_:__lu
call fcn.00421b06
pop ecx
pop ecx
push 0xfffffffffffffff0
push esi
call ebx
push 0xfffffffffffffff0
push esi
mov edi, eax
call ebx
mov ebp, dword [sym.imp.USER32.dll_ShowWindow]
test eax, 0x400000
jne 0x442a2e
push 0xfffffffffffffff0
push esi
call ebx
test eax, 0x40000
je 0x442a45
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x442a45
test edi, 0x40000000
je 0x442b23
mov edi, dword [sym.imp.USER32.dll_GetParent]
push esi
call edi
test eax, eax
je 0x442b23
push esi
call edi
test eax, eax
je 0x442b23
push esi
call edi
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
push eax
call ebx
test eax, eax
je 0x442b23
push esi
call edi
push eax
mov dword [esp + 0x18], eax
call edi
push eax
mov dword [esp + 0x1c], eax
call edi
push eax
mov dword [esp + 0x20], eax
call edi
push eax
mov dword [esp + 0x24], eax
call edi
push 4
mov dword [esp + 0x28], eax
pop edi
mov eax, dword [esp + edi*4 + 0x14]
test eax, eax
je 0x442aaa
push eax
call ebx
test eax, eax
jne 0x442ab2
dec edi
jns 0x442a9b
jmp 0x442b5d
cmp byte [0x47b0e0], 0
je 0x442ae0
cmp dword [0x477340], 0
je 0x442ae0
push dword [esp + edi*4 + 0x14]
call dword [sym.imp.USER32.dll_IsIconic]
push eax
lea eax, [edi + 1]
push eax
push str.____Activate:_Parent_level__d_activation__IsIconic_d
call fcn.00421b06
add esp, 0xc
cmp byte [0x47b0e0], 2
jb 0x442b05
cmp dword [0x477340], 0
je 0x442b05
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__8_:__lu
call fcn.00421b06
pop ecx
pop ecx
mov edi, dword [esp + edi*4 + 0x14]
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x442b19
push 9
push edi
call ebp
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push edi
jmp 0x442b50
cmp byte [0x47b0e0], 2
jb 0x442b48
cmp dword [0x477340], 0
je 0x442b48
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__9_:__lu
call fcn.00421b06
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
push esi
call dword [sym.imp.USER32.dll_SetActiveWindow]
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x442b6d
push 9
push esi
call ebp
push 5
push esi
call ebp
push esi
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 8