Function at 0x44a2f8
Capabilities:
Check for time delay via gettickcount
Log keystrokes

Disassembly:
sub esp, 0x24
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetWindowLongA]
push ebp
push esi
mov esi, dword [esp + 0x34]
push edi
xor edx, edx
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x18]
mov dword [esp + 0x14], edx
rep stosd dword es:[edi], eax
mov dword [esp + 0x10], edx
mov edi, 0x400000
mov ebp, 0x40000
cmp byte [0x4840a0], al
je 0x44a3e3
cmp dword [0x480260], edx
je 0x44a3e3
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x44a352
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x44a372
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x44a372
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x44a372
mov dword [esp + 0x38], 1
jmp 0x44a377
and dword [esp + 0x38], 0
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x44a389
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x44a399
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x44a399
xor ebp, ebp
inc ebp
jmp 0x44a39b
xor ebp, ebp
test esi, esi
je 0x44a3af
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44a3af
xor edi, edi
inc edi
jmp 0x44a3b1
xor edi, edi
push dword [esp + 0x3c]
push dword [esp + 0x3c]
push ebp
push esi
call dword [sym.imp.USER32.dll_IsIconic]
push eax
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
push eax
push edi
push esi
push str.____Activate:_HWND_lu__IsWindow_d__IsWindowVisible_d__IsIconic_d__is_popup_d__is_real_app_window_d__Force_d
call fcn.0042604a
add esp, 0x20
mov ebp, 0x40000
mov edi, 0x400000
test esi, esi
je 0x44a840
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44a840
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp esi, eax
jne 0x44a44b
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x44a44b
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x44a44b
cmp byte [0x4840a0], 2
jb 0x44a43f
cmp dword [0x480260], 0
je 0x44a43f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__1_:__lu
call fcn.0042604a
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
jmp 0x44a839
cmp dword [esp + 0x3c], 0
jne 0x44a4bb
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x44a464
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x44a4bb
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x44a4bb
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x44a4bb
cmp byte [0x4840a0], 2
jb 0x44a49e
cmp dword [0x480260], eax
je 0x44a49e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__2_:__lu
call fcn.0042604a
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
je 0x44a4bb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
jne 0x44a559
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x44a4db
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x44a559
mov edi, dword [sym.imp.USER32.dll_IsWindowVisible]
push esi
call edi
test eax, eax
je 0x44a559
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x44a559
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x44a559
push esi
call edi
test eax, eax
je 0x44a559
xor edi, edi
cmp dword [esp + 0x3c], edi
jne 0x44a559
cmp byte [0x4840a0], 2
jb 0x44a531
cmp dword [0x480260], edi
je 0x44a531
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__3_:__lu
call fcn.0042604a
pop ecx
pop ecx
cmp byte [0x4840a0], 0
je 0x44a54d
cmp dword [0x480260], edi
je 0x44a54d
push str.____Activate:_MethodQuick_Foreground
call fcn.0042604a
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetActiveWindow]
jmp 0x44a839
cmp byte [0x4840a0], 2
jb 0x44a57e
cmp dword [0x480260], 0
je 0x44a57e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__4_:__lu
call fcn.0042604a
pop ecx
pop ecx
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push esi
push 0xf150
push 0x112
push esi
call edi
push esi
call fcn.00447303
cmp eax, 1
jne 0x44a5bc
push esi
call fcn.0044a28c
mov esi, eax
push esi
call fcn.00447303
cmp eax, 2
jne 0x44a5bc
push 0xffffffffffffffff
push 0
push 0xb1
push esi
call edi
cmp byte [0x4840a0], 2
jb 0x44a5e1
cmp dword [0x480260], 0
je 0x44a5e1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__5_:__lu
call fcn.0042604a
pop ecx
pop ecx
cmp byte [0x4840a0], 0
je 0x44a611
cmp dword [0x480260], 0
je 0x44a611
cmp dword [esp + 0x3c], 0
mov eax, str.Force
jne 0x44a604
mov eax, str.Normal
push eax
push str.____Activate:_Method_s
call fcn.0042604a
pop ecx
pop ecx
cmp dword [esp + 0x3c], 0
je 0x44a6d0
cmp byte [0x4840a0], 2
jb 0x44a641
cmp dword [0x480260], 0
je 0x44a641
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__6_:__lu
call fcn.0042604a
pop ecx
pop ecx
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 1
mov dword [esp + 0x40], eax
call edi
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push eax
push dword [esp + 0x44]
call ebp
test eax, eax
jne 0x44a67d
push 1
push dword [esp + 0x40]
call edi
push eax
call ebp
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push 0
call edi
push eax
push dword [esp + 0x44]
call ebp
test eax, eax
jne 0x44a6ab
push eax
push dword [esp + 0x40]
call edi
push eax
call ebp
cmp byte [0x4840a0], 2
jb 0x44a6d0
cmp dword [0x480260], 0
je 0x44a6d0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__7_:__lu
call fcn.0042604a
pop ecx
pop ecx
push 0xfffffffffffffff0
push esi
call ebx
push 0xfffffffffffffff0
push esi
mov edi, eax
call ebx
mov ebp, dword [sym.imp.USER32.dll_ShowWindow]
test eax, 0x400000
jne 0x44a6f5
push 0xfffffffffffffff0
push esi
call ebx
test eax, 0x40000
je 0x44a70c
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x44a70c
test edi, 0x40000000
je 0x44a7ea
mov edi, dword [sym.imp.USER32.dll_GetParent]
push esi
call edi
test eax, eax
je 0x44a7ea
push esi
call edi
test eax, eax
je 0x44a7ea
push esi
call edi
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
push eax
call ebx
test eax, eax
je 0x44a7ea
push esi
call edi
push eax
mov dword [esp + 0x18], eax
call edi
push eax
mov dword [esp + 0x1c], eax
call edi
push eax
mov dword [esp + 0x20], eax
call edi
push eax
mov dword [esp + 0x24], eax
call edi
push 4
mov dword [esp + 0x28], eax
pop edi
mov eax, dword [esp + edi*4 + 0x14]
test eax, eax
je 0x44a771
push eax
call ebx
test eax, eax
jne 0x44a779
dec edi
jns 0x44a762
jmp 0x44a824
cmp byte [0x4840a0], 0
je 0x44a7a7
cmp dword [0x480260], 0
je 0x44a7a7
push dword [esp + edi*4 + 0x14]
call dword [sym.imp.USER32.dll_IsIconic]
push eax
lea eax, [edi + 1]
push eax
push str.____Activate:_Parent_level__d_activation__IsIconic_d
call fcn.0042604a
add esp, 0xc
cmp byte [0x4840a0], 2
jb 0x44a7cc
cmp dword [0x480260], 0
je 0x44a7cc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__8_:__lu
call fcn.0042604a
pop ecx
pop ecx
mov edi, dword [esp + edi*4 + 0x14]
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x44a7e0
push 9
push edi
call ebp
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push edi
jmp 0x44a817
cmp byte [0x4840a0], 2
jb 0x44a80f
cmp dword [0x480260], 0
je 0x44a80f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__9_:__lu
call fcn.0042604a
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
push esi
call dword [sym.imp.USER32.dll_SetActiveWindow]
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x44a834
push 9
push esi
call ebp
push 5
push esi
call ebp
push esi
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 8