Function at 0x41d9d0
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
mov eax, dword [0x6319d0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 0x110], ebx
call fcn.0046d4f0
test eax, eax
je 0x41da73
push 0
push str.CCPanel::SendF5ToWindow_n
push 0x64c588
call fcn.00599ee3
mov eax, dword [str.ENTRY:]
mov ecx, dword [0x5ccf7c]
mov dword [0x64c488], eax
mov eax, 0x64c588
mov dword [0x64c48c], ecx
add esp, 0xc
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41da28
mov edi, 0x64c488
sub eax, ecx
mov esi, ecx
dec edi
lea esp, [esp]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41da40
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d500
push 0x64c488
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d9d0
call fcn.0049d320
lea edx, [ebp - 0x108]
push edx
mov ecx, ebx
mov edi, eax
call fcn.0041d780
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov esi, eax
test esi, esi
je 0x41dbca
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0
push esi
mov dword [ebp - 0x10c], eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
call fcn.0046d4f0
test eax, eax
je 0x41daf5
push edi
push str.OSType___x_n
push 0x64c388
call fcn.00599ee3
add esp, 0xc
push 0x64c388
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d9d0
cmp edi, 8
je 0x41db6e
cmp edi, 9
je 0x41db6e
cmp edi, 0xa
je 0x41db6e
cmp edi, 0xb
je 0x41db6e
cmp edi, 6
je 0x41db3f
cmp edi, 7
je 0x41db3f
call fcn.0046d4f0
test eax, eax
je 0x41db2d
push str.WinXP_n
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d9d0
push 0
push 0x74
push 0x100
push esi
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x41dbb8
call fcn.0046d4f0
test eax, eax
je 0x41db59
push str.WinVista_n
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d9d0
push 0
push 0xa220
push 0x111
push esi
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x41dbb8
call fcn.0046d4f0
test eax, eax
je 0x41db88
push str.Win7_n
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d9d0
push 0
push 0
push 0x10
push esi
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [ebp - 0x110]
call fcn.0041d600
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x10c]
push ecx
call dword [sym.imp.USER32.dll_BringWindowToTop]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
jmp 0x41dbe4
call fcn.0046d4f0
test eax, eax
je 0x41dbe4
push str.No_Window_n
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d9d0
call fcn.0046d4f0
test eax, eax
je 0x41dc64
push 0
push str.CCPanel::SendF5ToWindow_n
push 0x64c288
call fcn.00599ee3
mov eax, dword [0x5ccefc]
mov edx, dword [str.EXIT:]
mov dword [0x64c18c], eax
mov eax, 0x64c288
add esp, 0xc
mov dword [0x64c188], edx
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41dc20
mov edi, 0x64c188
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x41dc31
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 0x64c188
rep movsb byte es:[edi], byte [esi]
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d9d0
call fcn.0046d6a0
mov ecx, eax
call fcn.0046d510
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00599ed4
mov esp, ebp
pop ebp
ret