Function at 0x429470
Capabilities:
Hide graphical window
Log keystrokes

Disassembly:
mov eax, dword [esp + 0xc]
push ebx
push ebp
push esi
test eax, eax
push edi
jne 0x429495
push eax
push eax
mov eax, dword [esp + 0x20]
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 1
jne 0x429527
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004296f0
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
add esp, 4
mov esi, eax
push 4
push esi
call edi
push 5
push esi
call edi
mov ebp, dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call ebp
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
push ebx
mov edi, eax
call fcn.004286d0
mov ebx, eax
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call ebp
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 2
jne 0x429543
mov edx, dword [esp + 0x18]
push 7
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 3
jne 0x429568
mov eax, dword [esp + 0x18]
push 0
push 0xf020
push 0x112
push eax
call fcn.004286e0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 4
jne 0x429584
mov ecx, dword [esp + 0x18]
push 3
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 5
jne 0x4295a0
mov edx, dword [esp + 0x18]
push 4
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 6
jne 0x4295bc
mov eax, dword [esp + 0x18]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 7
jne 0x4295d8
mov ecx, dword [esp + 0x18]
push 5
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 8
jne 0x429613
mov esi, dword [esp + 0x18]
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
or al, 8
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 9
jne 0x42964e
mov esi, dword [esp + 0x18]
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and al, 0xf7
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 0xa
jne 0x42966a
mov edx, dword [esp + 0x18]
push 0
push edx
call dword [sym.imp.USER32.dll_EnableWindow]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 0xb
jne 0x429686
mov eax, dword [esp + 0x18]
push 1
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp eax, 0xc
jne 0x4296df
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004296f0
mov edx, dword [esp + 0x18]
mov esi, eax
push esi
push edx
call fcn.00429430
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
add esp, 0xc
push esi
call ebp
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
push ebx
mov edi, eax
call fcn.004286d0
mov ebx, eax
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
push esi
call ebp
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret