Function at 0x45ac3c
Capabilities:
Hide graphical window
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa4
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], ecx
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x45afda
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 1
inc dword [esi + 0x3a0]
push 0x40
push 0x2c9
push 0x380
push 0
push 0
push 0xfffffffffffffffe
push ebx
call sub.user32.dll_SetWindowPos
push 9
push ebx
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x40]
push eax
push ebx
call sub.user32.dll_GetClientRect
lea edx, [ebp - 0x44]
mov eax, dword [esi + 0x334]
call fcn.00435140
mov eax, dword [ebp - 0x44]
call fcn.004085b0
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x48]
mov eax, dword [esi + 0x338]
call fcn.00435140
mov eax, dword [ebp - 0x48]
call fcn.004085b0
mov dword [ebp - 0xc], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x28]
wait
fild dword [ebp - 0xc]
fstp qword [ebp - 0x30]
wait
fld qword [ebp - 0x28]
fmul dword [0x45afec]
call fcn.00402b24
mov dword [ebp - 0x18], eax
fld qword [ebp - 0x30]
fmul dword [0x45afec]
call fcn.00402b24
mov edi, eax
mov dword [ebp - 0x14], edi
push edi
mov eax, dword [ebp - 0x18]
push eax
call sub.user32.dll_SetCursorPos
push 0x3e8
call sub.kernel32.dll_Sleep_1
push edi
mov eax, dword [ebp - 0x18]
sub eax, 2
push eax
call sub.user32.dll_SetCursorPos
push 0x3e8
call sub.kernel32.dll_Sleep_1
xor eax, eax
call fcn.00456f4c
xor eax, eax
call fcn.00456f78
xor eax, eax
call fcn.00456f4c
xor eax, eax
call fcn.00456f78
xor eax, eax
call fcn.00456f4c
xor eax, eax
call fcn.00456f78
call fcn.00429dfc
mov edx, 0x45aff0
call fcn.00429aa4
push 0
push 0
push 0
push 0x11
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x11
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x56
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x56
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x56
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x56
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x11
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x11
call sub.user32.dll_keybd_event
add edi, 0x1e
push edi
mov eax, dword [ebp - 0x18]
add eax, 0x32
push eax
call sub.user32.dll_SetCursorPos
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [ebp - 0x14]
add eax, 0x1e
push eax
mov eax, dword [ebp - 0x18]
add eax, 0x37
push eax
call sub.user32.dll_SetCursorPos
push 0xc8
call sub.kernel32.dll_Sleep_1
xor eax, eax
call fcn.00456f4c
xor eax, eax
call fcn.00456f78
xor eax, eax
call fcn.00456f4c
xor eax, eax
call fcn.00456f78
xor eax, eax
call fcn.00456f4c
xor eax, eax
call fcn.00456f78
mov eax, dword [ebp - 0x14]
add eax, 0x172
push eax
mov eax, dword [ebp - 0x18]
sub eax, 0x104
push eax
call sub.user32.dll_SetCursorPos
push 0xc8
call sub.kernel32.dll_Sleep_1
xor eax, eax
call fcn.00456f4c
xor eax, eax
call fcn.00456f78
xor eax, eax
call fcn.00456f4c
xor eax, eax
call fcn.00456f78
jmp 0x45afb2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45afe1
lea eax, [ebp - 0x5c]
mov edx, 3
call fcn.0040451c
lea eax, [ebp - 0x50]
mov edx, 4
call fcn.0040451c
ret