Function at 0x401390
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x42b0c0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push ebx
mov dword [ebp - 0x2c], ebx
call dword [sym.imp.USER32.dll_GetParent]
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
mov dword [ebp - 0x30], esi
call edi
test eax, eax
je 0x4013d1
cmp eax, ebx
je 0x4014fd
cmp eax, esi
je 0x4014fd
push ebx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
test eax, eax
je 0x4013f2
call edi
test eax, eax
je 0x4013f2
cmp eax, ebx
je 0x4014fd
cmp eax, esi
je 0x4014fd
push 6
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
push 9
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
call edi
test eax, eax
je 0x40141a
cmp eax, ebx
je 0x4014fd
cmp eax, esi
je 0x4014fd
push 0
push 0
push 0
push 0x2001
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
test eax, eax
je 0x401450
push ebx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
test eax, eax
je 0x401450
call edi
test eax, eax
je 0x401450
cmp eax, ebx
je 0x4014fd
cmp eax, esi
je 0x4014fd
push 0x23
push 0
push 0
push 0
push 0
push 0
push ebx
call dword [sym.imp.USER32.dll_SetWindowPos]
call edi
test eax, eax
je 0x401479
cmp eax, ebx
je 0x4014fd
cmp eax, esi
je 0x4014fd
push 0
push ebx
call dword [sym.imp.USER32.dll_SwitchToThisWindow]
call edi
test eax, eax
je 0x401490
cmp eax, ebx
je 0x4014fd
cmp eax, esi
je 0x4014fd
push 1
push ebx
call dword [sym.imp.USER32.dll_SwitchToThisWindow]
call edi
mov edi, eax
mov dword [ebp - 0x34], edi
test edi, edi
je 0x4014ac
cmp edi, ebx
je 0x4014fd
cmp edi, esi
je 0x4014fd
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 1
call ebx
push eax
push 0
push edi
mov edi, dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call edi
mov esi, dword [sym.imp.USER32.dll_AttachThreadInput]
push eax
call esi
push dword [ebp - 0x2c]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
call ebx
push eax
push 0
push dword [ebp - 0x34]
call edi
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
mov ebx, dword [ebp - 0x2c]
test eax, eax
je 0x401513
cmp eax, ebx
je 0x4014fd
mov edi, dword [ebp - 0x30]
cmp eax, edi
jne 0x401516
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00408060
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp - 0x30]
push 6
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call esi
test eax, eax
je 0x40152d
cmp eax, ebx
je 0x4014fd
cmp eax, edi
je 0x4014fd
call esi
test eax, eax
je 0x40157a
cmp eax, ebx
je 0x40157a
cmp eax, edi
je 0x40157a
mov esi, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [ebp - 0x14]
push ecx
push eax
call esi
lea eax, [ebp - 0x28]
push eax
push ebx
call esi
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x14]
jl 0x40157a
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x10]
jl 0x40157a
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xc]
jg 0x40157a
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 8]
jg 0x40157a
push 5
push ebx
call fcn.004011c0
add esp, 8
test edi, edi
je 0x40158e
push 5
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0x14
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], 0xf
mov dword [ebp - 0xc], 0xa
mov dword [ebp - 8], 0
call dword [sym.imp.USER32.dll_FlashWindowEx]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00408060
mov esp, ebp
pop ebp
ret