Function at 0x440998
Capabilities:
Check for time delay via gettickcount
Log keystrokes

Disassembly:
sub esp, 0x24
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetWindowLongA]
push ebp
push esi
mov esi, dword [esp + 0x34]
push edi
xor edx, edx
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x18]
mov dword [esp + 0x14], edx
rep stosd dword es:[edi], eax
mov dword [esp + 0x10], edx
mov edi, 0x400000
mov ebp, 0x40000
cmp byte [0x476258], al
je 0x440a83
cmp dword [0x4725c0], edx
je 0x440a83
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x4409f2
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x440a12
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x440a12
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x440a12
mov dword [esp + 0x38], 1
jmp 0x440a17
and dword [esp + 0x38], 0
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x440a29
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x440a39
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x440a39
xor ebp, ebp
inc ebp
jmp 0x440a3b
xor ebp, ebp
test esi, esi
je 0x440a4f
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x440a4f
xor edi, edi
inc edi
jmp 0x440a51
xor edi, edi
push dword [esp + 0x3c]
push dword [esp + 0x3c]
push ebp
push esi
call dword [sym.imp.USER32.dll_IsIconic]
push eax
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
push eax
push edi
push esi
push str.____Activate:_HWND_lu__IsWindow_d__IsWindowVisible_d__IsIconic_d__is_popup_d__is_real_app_window_d__Force_d
call fcn.0042036e
add esp, 0x20
mov ebp, 0x40000
mov edi, 0x400000
test esi, esi
je 0x440ee0
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x440ee0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp esi, eax
jne 0x440aeb
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x440aeb
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x440aeb
cmp byte [0x476258], 2
jb 0x440adf
cmp dword [0x4725c0], 0
je 0x440adf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__1_:__lu
call fcn.0042036e
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
jmp 0x440ed9
cmp dword [esp + 0x3c], 0
jne 0x440b5b
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x440b04
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x440b5b
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x440b5b
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x440b5b
cmp byte [0x476258], 2
jb 0x440b3e
cmp dword [0x4725c0], eax
je 0x440b3e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__2_:__lu
call fcn.0042036e
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
je 0x440b5b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
jne 0x440bf9
push 0xfffffffffffffff0
push esi
call ebx
test edi, eax
jne 0x440b7b
push 0xfffffffffffffff0
push esi
call ebx
test ebp, eax
je 0x440bf9
mov edi, dword [sym.imp.USER32.dll_IsWindowVisible]
push esi
call edi
test eax, eax
je 0x440bf9
push esi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x440bf9
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x440bf9
push esi
call edi
test eax, eax
je 0x440bf9
xor edi, edi
cmp dword [esp + 0x3c], edi
jne 0x440bf9
cmp byte [0x476258], 2
jb 0x440bd1
cmp dword [0x4725c0], edi
je 0x440bd1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__3_:__lu
call fcn.0042036e
pop ecx
pop ecx
cmp byte [0x476258], 0
je 0x440bed
cmp dword [0x4725c0], edi
je 0x440bed
push str.____Activate:_MethodQuick_Foreground
call fcn.0042036e
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetActiveWindow]
jmp 0x440ed9
cmp byte [0x476258], 2
jb 0x440c1e
cmp dword [0x4725c0], 0
je 0x440c1e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__4_:__lu
call fcn.0042036e
pop ecx
pop ecx
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push esi
push 0xf150
push 0x112
push esi
call edi
push esi
call fcn.0043e233
cmp eax, 1
jne 0x440c5c
push esi
call fcn.0044092c
mov esi, eax
push esi
call fcn.0043e233
cmp eax, 2
jne 0x440c5c
push 0xffffffffffffffff
push 0
push 0xb1
push esi
call edi
cmp byte [0x476258], 2
jb 0x440c81
cmp dword [0x4725c0], 0
je 0x440c81
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__5_:__lu
call fcn.0042036e
pop ecx
pop ecx
cmp byte [0x476258], 0
je 0x440cb1
cmp dword [0x4725c0], 0
je 0x440cb1
cmp dword [esp + 0x3c], 0
mov eax, str.Force
jne 0x440ca4
mov eax, str.Normal
push eax
push str.____Activate:_Method_s
call fcn.0042036e
pop ecx
pop ecx
cmp dword [esp + 0x3c], 0
je 0x440d70
cmp byte [0x476258], 2
jb 0x440ce1
cmp dword [0x4725c0], 0
je 0x440ce1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__6_:__lu
call fcn.0042036e
pop ecx
pop ecx
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 1
mov dword [esp + 0x40], eax
call edi
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push eax
push dword [esp + 0x44]
call ebp
test eax, eax
jne 0x440d1d
push 1
push dword [esp + 0x40]
call edi
push eax
call ebp
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push 0
call edi
push eax
push dword [esp + 0x44]
call ebp
test eax, eax
jne 0x440d4b
push eax
push dword [esp + 0x40]
call edi
push eax
call ebp
cmp byte [0x476258], 2
jb 0x440d70
cmp dword [0x4725c0], 0
je 0x440d70
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__7_:__lu
call fcn.0042036e
pop ecx
pop ecx
push 0xfffffffffffffff0
push esi
call ebx
push 0xfffffffffffffff0
push esi
mov edi, eax
call ebx
mov ebp, dword [sym.imp.USER32.dll_ShowWindow]
test eax, 0x400000
jne 0x440d95
push 0xfffffffffffffff0
push esi
call ebx
test eax, 0x40000
je 0x440dac
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x440dac
test edi, 0x40000000
je 0x440e8a
mov edi, dword [sym.imp.USER32.dll_GetParent]
push esi
call edi
test eax, eax
je 0x440e8a
push esi
call edi
test eax, eax
je 0x440e8a
push esi
call edi
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
push eax
call ebx
test eax, eax
je 0x440e8a
push esi
call edi
push eax
mov dword [esp + 0x18], eax
call edi
push eax
mov dword [esp + 0x1c], eax
call edi
push eax
mov dword [esp + 0x20], eax
call edi
push eax
mov dword [esp + 0x24], eax
call edi
push 4
mov dword [esp + 0x28], eax
pop edi
mov eax, dword [esp + edi*4 + 0x14]
test eax, eax
je 0x440e11
push eax
call ebx
test eax, eax
jne 0x440e19
dec edi
jns 0x440e02
jmp 0x440ec4
cmp byte [0x476258], 0
je 0x440e47
cmp dword [0x4725c0], 0
je 0x440e47
push dword [esp + edi*4 + 0x14]
call dword [sym.imp.USER32.dll_IsIconic]
push eax
lea eax, [edi + 1]
push eax
push str.____Activate:_Parent_level__d_activation__IsIconic_d
call fcn.0042036e
add esp, 0xc
cmp byte [0x476258], 2
jb 0x440e6c
cmp dword [0x4725c0], 0
je 0x440e6c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__8_:__lu
call fcn.0042036e
pop ecx
pop ecx
mov edi, dword [esp + edi*4 + 0x14]
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x440e80
push 9
push edi
call ebp
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push edi
jmp 0x440eb7
cmp byte [0x476258], 2
jb 0x440eaf
cmp dword [0x4725c0], 0
je 0x440eaf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.____TRACE__9_:__lu
call fcn.0042036e
pop ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
push esi
call dword [sym.imp.USER32.dll_SetActiveWindow]
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x440ed4
push 9
push esi
call ebp
push 5
push esi
call ebp
push esi
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 8