Function at 0x424840
Capabilities:
Log keystrokes via application hook
Set global application hook

Disassembly:
sub esp, 0x128
mov eax, dword [0x4642d0]
xor eax, esp
mov dword [esp + 0x124], eax
push ebx
mov ebx, dword [esp + 0x130]
lea eax, [esp + 8]
push ebp
push esi
push edi
push eax
mov dword [esp + 0x14], ebx
mov dword [0x464d0c], ebx
mov dword [esp + 0x18], 8
mov dword [esp + 0x1c], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 5
push ebx
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call dword [sym.imp.USER32.dll_GetSubMenu]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x464d08]
mov dword [esp + 0x28], 0xa028
push 0
push ebx
push 0
push 0
push 0
push 0
push 0x52000000
push 0
push str.MDICLIENT
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0x32
push 0x100
mov ecx, 0x470198
mov dword [0x464d10], eax
call fcn.00433f80
push 0x14
push 0x100
mov ecx, 0x4701a8
call fcn.00433f80
push 0x14
push 0x100
mov ecx, 0x4701b8
call fcn.00433f80
push 0x14
push 0x100
mov ecx, 0x4701c8
call fcn.00433f80
push 0x3e8
push str.StartAction
push 0x453fb0
push 0x80000001
call fcn.0043fb40
add esp, 0x10
mov ecx, 0x464ea8
cmp eax, 0x3e8
jne 0x4249a6
call fcn.00434320
mov ecx, 0x4701e8
call fcn.0043c720
push 0x4540a8
push 0
mov ecx, 0x4701c8
mov dword [0x464d30], 0x68
mov dword [0x4701d0], 2
call fcn.00434210
push str..cpp_.hpp_.c_.h_.inl
push 1
mov ecx, 0x4701c8
call fcn.00434210
mov dword [0x464ea8], 1
mov dword [0x4701e4], 1
mov dword [0x4701ec], 1
jmp 0x424a90
push str.SoftwareMiyoungsoftDangeun1.2_
call fcn.00434980
push str.SoftwareMiyoungsoftDangeun1.2_
mov ecx, 0x4701e8
call fcn.0043c770
push str.SoftwareMiyoungsoftDangeun1.2_
mov ecx, 0x4701d8
call fcn.00432990
push 0
push str.Flag
push str.SoftwareMiyoungsoftDangeun1.2Search
push 0x80000001
call fcn.0043fb40
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov dword [0x464d30], eax
xor ebx, ebx
mov edi, 0x4701a0
nop dword [eax]
push ebx
lea eax, [esp + 0x28]
push str.Find_d_num
push eax
call ebp
push 0
lea eax, [esp + 0x34]
push eax
push str.SoftwareMiyoungsoftDangeun1.2Search
push 0x80000001
call fcn.0043fb40
add esp, 0x1c
mov dword [edi], eax
xor esi, esi
test eax, eax
jle 0x424a77
nop
push esi
push ebx
lea eax, [esp + 0x2c]
push str.Find_d__d
push eax
call ebp
push 0x100
lea eax, [esp + 0x48]
push eax
push 0x45279c
lea eax, [esp + 0x40]
push eax
push str.SoftwareMiyoungsoftDangeun1.2Search
push 0x80000001
call fcn.0043fbc0
add esp, 0x28
lea eax, [esp + 0x34]
lea ecx, [edi - 8]
push eax
push esi
call fcn.00434210
inc esi
cmp esi, dword [edi]
jl 0x424a30
add edi, 0x10
inc ebx
cmp edi, 0x4701e0
jl 0x424a00
call fcn.00429070
mov ebx, dword [esp + 0x10]
mov eax, dword [0x46a3a8]
test eax, eax
je 0x424aab
imul eax, eax, 0xea60
push 0
push eax
push 1
push ebx
call dword [sym.imp.USER32.dll_SetTimer]
mov esi, dword [sym.imp.USER32.dll_LoadCursorA]
push 0x6b
push dword [0x464d08]
call esi
push 0x6a
push dword [0x464d08]
mov dword [0x464e58], eax
call esi
push 0
mov dword [0x464e5c], eax
call dword [sym.imp.USER32.dll_GetDC]
mov ebp, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edi, eax
mov esi, 0x462a0c
push 0x5a
push edi
call ebp
mov ecx, eax
mov eax, 0x38e38e39
imul ecx, dword [esi]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esi], eax
add esi, 0x3c
cmp esi, 0x462c28
jl 0x424ae4
push 0x452c7c
push 0x12
push 1
push 2
push 3
push 0x81
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5a
push edi
call ebp
lea ecx, [eax + eax*8]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push edi
push 0
mov dword [0x464e70], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0
push dword [0x464d08]
mov ebp, dword [sym.imp.USER32.dll_CreateWindowExA]
push 0
push ebx
push 0
push 0
push 0
push 0
push 0x50000000
push 0
push str.DGOutput
push 0x200
call ebp
push dword [0x464efc]
mov dword [0x464d34], eax
push dword [0x464f00]
call fcn.0043d960
add esp, 8
push 0
push ebx
push 0x45279c
push 0x50000000
call dword [sym.imp.COMCTL32.dll_CreateStatusWindowA]
push 0
push dword [0x464d08]
mov dword [0x464e48], eax
push 0
push ebx
push 0
push 0
push 0
push 0
push 0x50000000
push 0
push str.DGFile
push 0x200
call ebp
push 0
push dword [0x464d08]
mov dword [0x464e4c], eax
push 0
push ebx
push 0x19
push 0
push 0
push 0
push 0x52000000
push 0
push str.DGTabFrame
push 0
call ebp
push 0
push dword [0x464d08]
mov dword [0x464e50], eax
push 0
push ebx
push 0
push 0
push 0
push 0
push 0x50000000
push 0
push str.DGClipFrame
push 0x200
call ebp
push 1
push ebx
mov dword [0x464e8c], eax
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
mov ecx, 0x464ea8
call fcn.004342b0
push eax
push 0xafc8
push 7
push 0
push ebx
call dword [sym.imp.USER32.dll_GetMenu]
mov esi, dword [sym.imp.USER32.dll_GetSubMenu]
push eax
call esi
push eax
call esi
push eax
push str.SoftwareMiyoungsoftDangeun1.2MRU
mov ecx, 0x470078
call fcn.00433fe0
mov ecx, 0x470078
call fcn.00434020
push 0
push 0x45415c
push 0x453fb0
push 0x80000001
call fcn.0043fb40
add esp, 0x10
mov dword [0x464d24], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0
push 0x421a00
push 5
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 0x46a524
mov dword [0x464e98], eax
call fcn.0043f0e0
add esp, 4
test eax, eax
jne 0x424dcf
push 5
push 0x453fdc
push 0x46a524
call fcn.00444120
add esp, 0xc
test eax, eax
jne 0x424dbd
mov ecx, 0x4539e8
mov eax, 0x46a529
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x424d13
test dl, dl
je 0x424d0f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x424d13
add eax, 2
add ecx, 2
test dl, dl
jne 0x424cf3
xor eax, eax
jmp 0x424d18
sbb eax, eax
or eax, 1
mov esi, dword [sym.imp.USER32.dll_LoadBitmapA]
test eax, eax
jne 0x424d34
push 0x13a
push dword [0x464d08]
call esi
mov dword [0x464e94], eax
mov ecx, 0x4539f0
mov eax, 0x46a529
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x424d60
test dl, dl
je 0x424d5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x424d60
add eax, 2
add ecx, 2
test dl, dl
jne 0x424d40
xor eax, eax
jmp 0x424d65
sbb eax, eax
or eax, 1
test eax, eax
jne 0x424d7b
push 0x13b
push dword [0x464d08]
call esi
mov dword [0x464e94], eax
mov ecx, 0x4539f4
mov eax, 0x46a529
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x424da5
test dl, dl
je 0x424da1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x424da5
add eax, 2
add ecx, 2
test dl, dl
jne 0x424d85
xor eax, eax
jmp 0x424daa
sbb eax, eax
or eax, 1
test eax, eax
jne 0x424dcf
push 0x13c
push dword [0x464d08]
call esi
jmp 0x424dca
push 0x46a524
call fcn.0043f2f0
add esp, 4
mov dword [0x464e94], eax
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 1
push 0x64
push ebx
call esi
push 0
push 0xbb8
push 3
push ebx
call esi
mov ecx, dword [esp + 0x134]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0043fe9e
add esp, 0x128
ret