Function at 0x414340
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47749d
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x48f120]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [ebp + 0x1c], 0
jne 0x414944
mov eax, dword [ebp + 0xc]
cmp eax, 1
jne 0x4143ab
lea eax, [ebp + 0x1c]
push eax
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 1
call fcn.00413260
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0x138
jne 0x41443e
mov eax, dword [ebp + 0x14]
cmp eax, dword [edi + 0x50]
jne 0x41440e
mov esi, dword [ebp + 0x10]
push 1
push esi
call dword [sym.imp.GDI32.dll_SetBkMode]
mov edx, dword [edi + 0x64]
mov eax, edx
shr eax, 0x10
movzx ecx, al
movzx eax, dl
and edx, 0xff00
shl eax, 0x10
or ecx, eax
or ecx, edx
push ecx
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [ebp + 0x18]
mov eax, dword [edi + 0x54]
mov dword [ecx], eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
push eax
push dword [ebp + 0x10]
push 0x138
push dword [edi + 4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0x100
jne 0x4144a5
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov eax, dword [ebp + 0x10]
cmp eax, 0x43
je 0x41445e
cmp eax, 0x63
jne 0x4147c0
cmp dword [edi + 0xdc], 8
lea eax, [edi + 0xc8]
mov ecx, dword [eax + 0x10]
jb 0x414472
mov eax, dword [eax]
push ecx
push eax
mov ecx, edi
call fcn.00412840
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 5
jne 0x4144f3
mov eax, dword [ebp + 0x14]
mov ecx, dword [edi + 0x28]
movzx edx, ax
shr eax, 0x10
test ecx, ecx
je 0x4147c0
mov dword [ebp - 0x14], edx
lea edx, [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0xe8]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0xf
jne 0x41452a
call fcn.00413780
push 0
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ValidateRect]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0x7e
je 0x4147b3
cmp eax, 0x2e0
jne 0x41456c
lea eax, [ebp + 0x1c]
push eax
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x2e0
call fcn.00413510
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0x233
jne 0x4145a5
lea eax, [ebp + 0x1c]
push eax
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x233
call fcn.004136e0
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0x10
jne 0x4145d5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 2
jne 0x414612
mov eax, dword [edi + 0x54]
test eax, eax
je 0x4145e8
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0x205
jne 0x4146fb
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x1c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x14], eax
lea eax, [ebp - 0x14]
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x10]
cmp eax, dword [edi + 0xf8]
jge 0x4147c0
push 0x78
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadMenuW]
push 0
push eax
mov dword [ebp + 0xc], eax
call dword [sym.imp.USER32.dll_GetSubMenu]
xor esi, esi
mov ebx, eax
cmp dword [edi + 0xd8], esi
jne 0x414685
push 2
push 0x7a
push ebx
call dword [sym.imp.USER32.dll_EnableMenuItem]
jmp 0x4146ad
push 0
push 0x7a
push ebx
call dword [sym.imp.USER32.dll_EnableMenuItem]
push 0x68
lea ecx, [ebp + 0x13]
call fcn.004117b0
mov esi, eax
test esi, esi
je 0x4146ad
push esi
push esi
push 0
push 0x7a
push ebx
call dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push 0
push dword [edi + 4]
push dword [ebp + 0x14]
push dword [ebp + 0x1c]
push 2
push ebx
call dword [sym.imp.USER32.dll_TrackPopupMenuEx]
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_DestroyMenu]
test esi, esi
je 0x4147c0
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0x111
jne 0x4148b0
movzx eax, word [ebp + 0x10]
mov ecx, 0x3eb
cmp cx, ax
jne 0x4147e2
mov al, byte [edi + 0xe4]
test al, al
jne 0x4147c0
cmp dword [edi + 0xac], 8
lea ecx, [edi + 0x98]
jb 0x41473b
mov ecx, dword [edi + 0x98]
xor eax, eax
mov dword [edi + 0xa8], 0
mov word [ecx], ax
lea ecx, [edi + 0xb0]
cmp dword [edi + 0xc4], 8
jb 0x41475f
mov ecx, dword [edi + 0xb0]
mov dword [edi + 0xc0], eax
xor eax, eax
mov word [ecx], ax
lea ecx, [edi + 0xc8]
cmp dword [edi + 0xdc], 8
jb 0x41477f
mov ecx, dword [edi + 0xc8]
mov dword [edi + 0xd8], eax
xor eax, eax
mov word [ecx], ax
xor ecx, ecx
mov byte [edi + 0x104], al
lea eax, [edi + 0xe0]
xchg dword [eax], ecx
sub esp, 8
mov ecx, edi
mov eax, esp
mov dword [eax], 0x479498
mov dword [eax + 4], 0
call fcn.004149d0
push 0
push 0
push dword [edi + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
mov ecx, 0x3ec
cmp cx, ax
jne 0x414863
push 1
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x47b5b4
push eax
push str.Open_File
push dword [edi + 4]
lea eax, [ebp - 0x30]
mov dword [ebp - 0x10], 0x47b5d4
push eax
call fcn.00419970
add esp, 0x14
cmp byte [ebp - 0x18], 0
mov dword [ebp - 4], 0
jne 0x414825
xor esi, esi
jmp 0x41483d
cmp dword [ebp - 0x1c], 8
lea eax, [ebp - 0x30]
push dword [ebp - 0x20]
cmovae eax, dword [ebp - 0x30]
mov ecx, edi
push eax
call fcn.00412c50
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.00406680
mov ecx, dword [ebp + 0x18]
mov eax, 1
mov dword [ecx], esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
mov ecx, 0x7a
cmp cx, ax
jne 0x414944
cmp dword [edi + 0xdc], 8
lea eax, [edi + 0xc8]
mov ecx, dword [eax + 0x10]
jb 0x414885
mov eax, dword [eax]
push ecx
push eax
mov ecx, edi
call fcn.00412840
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
cmp eax, 0x112
jne 0x414944
mov eax, dword [ebp + 0x10]
mov edx, 0x6e
movzx ecx, ax
cmp dx, cx
jne 0x4148fc
lea ecx, [ebp + 0x1c]
shr eax, 0x10
push ecx
push dword [ebp + 0x14]
mov ecx, edi
push edx
push eax
call fcn.00414170
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
mov eax, 0x6f
cmp ax, cx
jne 0x414944
push 3
push str.For_more_information_about_this_tool.__nVisit:__a_href_https:__github.com_fcharlie_belautils__BelaUtils__a__nVisit:__a_href_https:__forcemz.net___forcemz.net__a_
push str.Version:_1.1.0_nCopyright
push str.About_Kisasum_Hash_Utilities
push dword [edi + 4]
call fcn.00419860
mov eax, dword [ebp + 0x18]
add esp, 0x14
mov dword [eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18