Function at 0x406a71
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
call fcn.00401714
mov dword [ebp - 4], eax
push dword [ebp + 0xc]
call fcn.00406ecb
mov dword [ebp - 8], eax
push 9
push dword [ebp + 0xc]
call fcn.00406f17
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 5
call fcn.00402977
push 0x80000301
push 0
push 0x40
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 0x4000
push 4
mov ebx, 0xc8
call fcn.00444640
add esp, 0x34
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_SetWindowPos]
nop
nop
cmp dword [ebp - 0x10], esp
je 0x406b59
push 0xe8
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 5
call fcn.00402977
push 0x80000301
push 0
push 0x40
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 0x4000
push 4
mov ebx, 0xc8
call fcn.00444640
add esp, 0x34
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
push 0
push 0
push 0
push 0
push 0xffffffff
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_SetWindowPos]
nop
nop
cmp dword [ebp - 0x10], esp
je 0x406c0a
push 0x174
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 5
call fcn.00402977
push 0x80000301
push 0
push 0x40
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 0x4000
push 4
mov ebx, 0xc8
call fcn.00444640
add esp, 0x34
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
push 0
push 0
push 0
push 0
push 0xfffffffe
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_SetWindowPos]
nop
nop
cmp dword [ebp - 0x10], esp
je 0x406cbb
push 0x200
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 5
call fcn.00402977
mov dword [ebp - 0xc], esp
push 1
push dword [ebp + 0xc]
xor eax, eax
call dword [0x537840]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x406d10
push 0x246
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
push 0
mov ebx, 0x350
call fcn.00444660
add esp, 4
mov dword [ebp - 0xc], esp
push 1
push dword [ebp - 4]
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x406d56
push 0x276
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
mov dword [ebp - 0xc], esp
push 1
push dword [ebp + 0xc]
xor eax, eax
call dword [0x537840]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x406d87
push 0x29a
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
push 0
mov ebx, 0x350
call fcn.00444660
add esp, 4
mov dword [ebp - 0xc], esp
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_BringWindowToTop]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x406dc5
push 0x2ca
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
push 0
mov ebx, 0x350
call fcn.00444660
add esp, 4
mov dword [ebp - 0xc], esp
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_SetActiveWindow]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x406e03
push 0x300
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
push 0
mov ebx, 0x350
call fcn.00444660
add esp, 4
mov dword [ebp - 0xc], esp
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x406e41
push 0x336
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
push 0
mov ebx, 0x350
call fcn.00444660
add esp, 4
mov dword [ebp - 0xc], esp
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_SetFocus]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x406e7f
push 0x36c
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
push 0
mov ebx, 0x350
call fcn.00444660
add esp, 4
mov dword [ebp - 0xc], esp
push 0
push dword [ebp - 4]
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x406ec5
push 0x3a2
push 0x4095bc5
push 6
call fcn.00443aff
add esp, 0xc
mov esp, ebp
pop ebp
ret 8