Function at 0x4809d0
Capabilities:
Log keystrokes

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, ecx
push edi
test esi, esi
je 0x480c14
mov ebx, dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 0
push esi
call ebx
mov dword [esp + 0x18], eax
cmp eax, dword [0x4ddc88]
je 0x480a07
mov ecx, esi
call fcn.00481c20
test al, al
jne 0x480c14
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call edi
push esi
mov ebp, eax
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x480a25
push 9
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
cmp esi, ebp
jne 0x480a33
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
cmp byte [0x4dcd9f], 0
jne 0x480a89
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, 1
mov dword [0x4d98d0], 0
lea ecx, [edx + 9]
call fcn.004015d0
mov dword [0x4d98d0], 1
call edi
mov edi, eax
cmp edi, esi
jne 0x480a70
mov edi, esi
jmp 0x480a81
cmp edi, ebp
je 0x480a89
push 4
push edi
call dword [sym.imp.USER32.dll_GetWindow]
cmp esi, eax
jne 0x480a89
test edi, edi
jne 0x480c0a
mov byte [esp + 0x12], 0
mov byte [esp + 0x13], 0
test ebp, ebp
je 0x480af4
push 0
push ebp
call ebx
mov edi, eax
mov dword [esp + 0x14], edi
test edi, edi
je 0x480afc
cmp dword [0x4ddc88], edi
je 0x480ad3
mov ecx, ebp
call fcn.00481c20
mov ebx, dword [sym.imp.USER32.dll_AttachThreadInput]
test al, al
jne 0x480ad9
push 1
push edi
push dword [0x4ddc88]
call ebx
test eax, eax
setne byte [esp + 0x12]
jmp 0x480ad9
mov ebx, dword [sym.imp.USER32.dll_AttachThreadInput]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x480afc
cmp edi, eax
je 0x480afc
push 1
push eax
push edi
call ebx
test eax, eax
setne byte [esp + 0x13]
jmp 0x480afc
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
xor ebx, ebx
nop
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, 1
mov dword [0x4d98d0], 0
lea ecx, [edx + 9]
call fcn.004015d0
mov dword [0x4d98d0], 1
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
cmp edi, esi
jne 0x480b38
mov edi, esi
jmp 0x480b49
cmp edi, ebp
je 0x480b51
push 4
push edi
call dword [sym.imp.USER32.dll_GetWindow]
cmp esi, eax
jne 0x480b51
test edi, edi
jne 0x480bd3
inc ebx
cmp ebx, 5
jl 0x480b00
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
mov ecx, 2
call fcn.00411080
push 0xffc3d44d
push 0
push 0
push 0
mov dl, 0x12
mov ecx, 2
call fcn.00411080
add esp, 0x20
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, 1
mov dword [0x4d98d0], 0
lea ecx, [edx + 9]
call fcn.004015d0
mov dword [0x4d98d0], 1
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
cmp edi, esi
jne 0x480bc0
mov edi, esi
jmp 0x480bd3
cmp edi, ebp
je 0x480bd1
push 4
push edi
call dword [sym.imp.USER32.dll_GetWindow]
cmp esi, eax
je 0x480bd3
xor edi, edi
cmp byte [esp + 0x12], 0
mov ebx, dword [esp + 0x14]
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
je 0x480bef
push 0
push ebx
push dword [0x4ddc88]
call ebp
cmp byte [esp + 0x13], 0
je 0x480bff
push 0
push dword [esp + 0x1c]
push ebx
call ebp
test edi, edi
je 0x480c14
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xc
ret