Function at 0x435cc0
Capabilities:
Log keystrokes
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x60
mov eax, dword [esp + 0x78]
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x80]
push eax
mov eax, dword [esp + 0x90]
call fcn.00444510
xor ebp, ebp
mov dword [esp + 0x8c], eax
cmp eax, ebp
je case.0x4360a1.3
mov ecx, SysReAllocString
mov dword [esp + 0x18], 2
mov byte [esp + 0x80], 0
mov byte [esp + 0x88], 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ecx
mov esi, edi
cmp word [edi], bp
je 0x435dfd
lea ebx, [edi + 2]
movzx edi, word [esi]
test edi, 0xffffff80
jne 0x435d40
push 2
push edi
call fcn.0048d76e
add esp, 8
cmp eax, ebp
je 0x435d40
and edi, 0xffffffdf
movzx eax, di
add eax, 0xffffffbc
cmp eax, 0x15
ja case.0x435d56.69
movzx ecx, byte [eax + 0x4362e8]
jmp dword [ecx*4 + 0x4362cc]
mov dword [esp + 0x18], ebp
jmp case.0x435d56.69
mov dword [esp + 0x18], 1
jmp case.0x435d56.69
movzx edi, word [ebx]
test edi, 0xffffff80
jne 0x435d8a
push 2
push edi
call fcn.0048d76e
add esp, 8
cmp eax, ebp
je 0x435d8a
and edi, 0xffffffdf
cmp di, 0x41
jne case.0x435d56.69
add esi, 2
add ebx, 2
mov byte [esp + 0x88], 0
jmp case.0x435d56.69
push 3
push 0x4a807c
push esi
call fcn.0048cd67
add esp, 0xc
test eax, eax
jne case.0x435d56.69
add esi, 4
add ebx, 4
mov byte [esp + 0x80], 1
jmp case.0x435d56.69
push ebx
call fcn.0048d7b6
mov dword [esp + 0x24], eax
jmp 0x435dda
push ebx
call fcn.0048d7b6
mov dword [esp + 0x28], eax
add esp, 4
add esi, 2
add ebx, 2
cmp word [esi], bp
jne 0x435d23
cmp byte [esp + 0x80], 0
jne 0x435e1b
mov eax, dword [esp + 0x8c]
mov esi, dword [esp + 0x84]
push eax
call fcn.00477880
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
cmp esi, ebp
jne 0x435f7f
mov edi, dword [esp + 0x84]
xor eax, eax
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
lea esp, [esp]
movzx eax, word [edi]
cmp eax, 0x20
je 0x435e5d
cmp eax, 9
jne 0x435e62
add edi, 2
jmp 0x435e50
movzx esi, word [edi]
test esi, 0xffffff80
jne 0x435e7f
push 2
push esi
call fcn.0048d76e
add esp, 8
cmp eax, ebp
je 0x435e7f
and esi, 0xffffffdf
cmp si, 0x58
jne case.0x4360a1.3
cmp word [edi + 2], bp
lea esi, [edi + 2]
je case.0x4360a1.3
mov eax, esi
call fcn.0040cc50
test al, al
je 0x435eaf
push 0x10
push ebp
push esi
call fcn.0048db4b
add esp, 0xc
jmp 0x435eb8
push esi
call fcn.0048d7b6
add esp, 4
mov dword [esp + 0x48], eax
mov ebx, 0x4a2534
mov eax, esi
call fcn.00409160
test eax, eax
je case.0x4360a1.3
lea esi, [eax + 2]
movzx eax, word [esi]
cmp eax, 0x20
je 0x435ee0
cmp eax, 9
jne 0x435ee5
add esi, 2
jmp 0x435ed3
movzx eax, word [esi]
test ax, ax
je case.0x4360a1.3
push eax
call fcn.0048e66d
add esp, 4
cmp ax, 0x59
jne case.0x4360a1.3
add esi, 2
cmp word [esi], bp
je case.0x4360a1.3
call fcn.0040ccb0
mov edi, dword [esp + 0x8c]
lea edx, [esp + 0x38]
push edx
push edi
mov dword [esp + 0x54], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
add dword [esp + 0x48], eax
add dword [esp + 0x4c], ecx
lea edx, [esp + 0x48]
push edx
push 0x43cbf0
push edi
call dword [sym.imp.USER32.dll_EnumChildWindows]
mov esi, dword [esp + 0x60]
test esi, esi
je 0x435f5b
mov dword [esp + 0x14], esi
jmp 0x435f61
mov esi, edi
mov dword [esp + 0x14], edi
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
lea edx, [esp + 0x20]
push edx
push esi
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
xor ebp, ebp
cmp dword [esp + 0x7c], 1
jge 0x435fa5
mov eax, dword [0x4c5774]
push 1
push ebp
push 0xffffffffffffffff
push 0x49f8e0
push eax
call fcn.00475ef0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x1c
mov ecx, dword [esp + 0x20]
cmp ecx, 0x80000000
je 0x435fbc
mov eax, dword [esp + 0x24]
cmp eax, 0x80000000
jne 0x43600b
lea ecx, [esp + 0x28]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je case.0x4360a1.3
mov ecx, dword [esp + 0x20]
cmp ecx, 0x80000000
jne 0x435fef
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x24]
cmp eax, 0x80000000
jne 0x43600b
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0x2c]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x24], eax
movzx ebp, ax
mov al, byte [esp + 0x78]
movzx edx, cx
shl ebp, 0x10
or ebp, edx
mov dword [esp + 0x1c], 0
cmp al, 0x9f
je 0x43602e
cmp al, 0x9e
je 0x43602e
xor dl, dl
jmp 0x436030
mov dl, 1
mov byte [esp + 0x78], dl
cmp al, 0x9c
je 0x436040
cmp al, 0x9d
je 0x436040
xor cl, cl
jmp 0x436042
mov cl, 1
mov byte [esp + 0x84], cl
test dl, dl
je 0x436070
xor ebx, ebx
cmp al, 0x9f
setne bl
mov edi, 0x20a
dec ebx
and ebx, 0xf0
add ebx, 0xffffff88
imul ebx, dword [esp + 0x7c]
shl ebx, 0x10
jmp 0x43610d
test cl, cl
je 0x436094
xor ebx, ebx
cmp al, 0x9c
setne bl
mov edi, 0x20e
dec ebx
and ebx, 0xffffff10
add ebx, 0x78
imul ebx, dword [esp + 0x7c]
shl ebx, 0x10
jmp 0x43610d
movzx eax, al
dec eax
cmp eax, 5
ja case.0x4360a1.3
jmp dword [eax*4 + 0x436300]
mov edi, 0x201
mov dword [esp + 0x74], 0x202
mov ebx, 1
jmp 0x43610d
mov edi, 0x204
mov dword [esp + 0x74], 0x205
mov ebx, 2
jmp 0x43610d
mov edi, 0x207
mov dword [esp + 0x74], 0x208
mov ebx, 0x10
jmp 0x43610d
mov dword [esp + 0x1c], 0x10000
mov ebx, 0x10020
jmp 0x436100
mov dword [esp + 0x1c], 0x20000
mov ebx, 0x20040
mov dword [esp + 0x74], 0x20c
mov edi, 0x20b
cmp byte [esp + 0x88], 0
mov byte [esp + 0x80], 0
je 0x436181
mov eax, dword [esp + 0x8c]
push 0
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [esp + 0x88], eax
test eax, eax
je 0x436173
cmp eax, dword [0x4c708c]
je 0x436173
mov esi, dword [esp + 0x8c]
call fcn.00477dc0
test al, al
jne 0x436173
mov ecx, dword [esp + 0x88]
mov edx, dword [0x4c708c]
push 1
push ecx
push edx
call dword [sym.imp.USER32.dll_AttachThreadInput]
test eax, eax
setne byte [esp + 0x80]
mov eax, dword [esp + 0x8c]
push eax
call dword [sym.imp.USER32.dll_SetActiveWindow]
cmp byte [esp + 0x78], 0
jne 0x436213
cmp byte [esp + 0x84], 0
jne 0x436213
mov eax, dword [esp + 0x7c]
test eax, eax
jle 0x43623a
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
mov dword [esp + 0x78], eax
lea esp, [esp]
cmp dword [esp + 0x18], 1
je 0x4361da
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push edi
push ecx
call esi
mov edx, dword [0x4c140c]
mov eax, dword [edx + 0x58]
cmp eax, 0xffffffff
jle 0x4361da
push 1
push eax
call fcn.00401290
add esp, 8
cmp dword [esp + 0x18], 0
je 0x43620b
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x14]
push ebp
push eax
push ecx
push edx
call esi
mov eax, dword [0x4c140c]
mov eax, dword [eax + 0x58]
cmp eax, 0xffffffff
jle 0x43620b
push 1
push eax
call fcn.00401290
add esp, 8
dec dword [esp + 0x78]
jne 0x4361b0
jmp 0x43623a
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push edi
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [0x4c140c]
mov eax, dword [edx + 0x58]
cmp eax, 0xffffffff
jle 0x43623a
push 1
push eax
call fcn.00401290
add esp, 8
cmp byte [esp + 0x80], 0
je 0x43625b
mov eax, dword [esp + 0x88]
mov ecx, dword [0x4c708c]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov edx, dword [0x4c5774]
push 1
push 0
push 0xffffffffffffffff
push 0x49f8e0
push edx
call fcn.00475ef0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x1c
mov eax, dword [0x4c140c]
cmp byte [eax + 0x104], 0
jne 0x4362ab
mov ecx, dword [0x4c5774]
push 1
push 0
push 0xffffffffffffffff
push 0x4a2324
push ecx
call fcn.00475ef0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x1c
mov ecx, dword [esp + 0x74]
push 0x4a9e04
push 0
push 0x4a2324
call fcn.0042f7f0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x1c