Function at 0x42abe0
Capabilities:
Get graphical window text
Log keystrokes via polling

Disassembly:
sub esp, 0x60
mov eax, dword [0x570f20]
xor eax, esp
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x64]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x78]
push edi
push esi
push str.lpCmdLine:__s_n
mov dword [esp + 0x1c], eax
call fcn.004a7323
mov eax, esi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42ac11
sub eax, edx
je 0x42ad6a
mov ebp, 0xf
mov eax, esi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], cl
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42ac40
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x20]
call fcn.0040f1e0
push 6
push 0
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x40]
push edx
call fcn.004117b0
mov edi, 0x10
add esp, 0x10
cmp dword [eax + 0x14], edi
jb 0x42ac76
mov eax, dword [eax]
mov ecx, str.unlock
jmp 0x42ac80
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42aca0
test dl, dl
je 0x42ac9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x42aca0
add eax, 2
add ecx, 2
test dl, dl
jne 0x42ac80
xor eax, eax
jmp 0x42aca5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete bl
cmp dword [esp + 0x48], edi
jb 0x42acbd
mov eax, dword [esp + 0x34]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x48], ebp
mov dword [esp + 0x44], 0
mov byte [esp + 0x34], 0
cmp dword [esp + 0x2c], edi
jb 0x42ace1
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004a684d
add esp, 4
test bl, bl
je 0x42ad1e
push 0
sub esp, 0x1c
mov ecx, esp
mov eax, esi
mov dword [ecx + 0x14], ebp
mov dword [ecx + 0x10], 0
mov dword [esp + 0x30], esp
mov byte [ecx], 0
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x42ad02
sub eax, edi
push eax
push esi
call fcn.0040f1e0
mov ecx, 0x6bb4f0
call fcn.004218c0
jmp 0x42ad6a
cmp byte [esi], 0x22
jne 0x42ad52
inc esi
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42ad30
sub eax, edx
cmp byte [esi + eax - 1], 0x22
jne 0x42ad52
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42ad45
sub eax, edx
mov byte [esi + eax - 1], cl
mov edx, 0x6bbd66
mov eax, esi
sub edx, esi
jmp 0x42ad60
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x42ad60
mov edx, dword [esp + 0x14]
push edx
mov ecx, 0x6bbebc
call fcn.0042aa70
test eax, eax
js 0x42aedb
push 0
push 0
push 0
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x42aec2
mov edi, dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov ebx, dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebp, dword [sym.imp.USER32.dll_TranslateMessage]
lea esp, [esp]
cmp dword [esp + 0x1c], 0x100
jne case.0x42ae58.66
mov eax, dword [esp + 0x20]
cmp eax, 0x20
jne 0x42ade3
cmp byte [0x6bbe70], 0
mov ecx, 0x6bb4f0
je 0x42addc
push 0xb
jmp 0x42ae92
push 0xa
jmp 0x42ae92
cmp eax, 0xd
jne 0x42ae33
cmp dword [0x6bb57c], 0
jl case.0x42ae58.66
mov ecx, dword [esp + 0x18]
push ecx
call edi
push 0x37
lea edx, [esp + 0x38]
mov esi, eax
mov eax, dword [esp + 0x1c]
push edx
push eax
call ebx
mov eax, dword [0x6bb57c]
sub eax, dword [0x570124]
mov edx, dword [0x6bb5ac]
lea ecx, [eax + eax*4]
mov ecx, dword [edx + ecx*4 + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
lea edx, [esp + 0x34]
push edx
push esi
call eax
jmp case.0x42ae58.66
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je case.0x42ae58.66
mov eax, dword [esp + 0x20]
add eax, 0xffffffbf
cmp eax, 0x19
ja case.0x42ae58.66
movzx edx, byte [eax + 0x42af28]
jmp dword [edx*4 + 0x42aef4]
push 1
jmp 0x42ae8d
push 2
jmp 0x42ae8d
push 3
jmp 0x42ae8d
push 5
jmp 0x42ae8d
push 6
jmp 0x42ae8d
push 7
jmp 0x42ae8d
push 8
jmp 0x42ae8d
push 9
jmp 0x42ae8d
push 0xf
jmp 0x42ae8d
push 0xe
jmp 0x42ae8d
push 0x10
jmp 0x42ae8d
push 0x11
mov ecx, 0x6bb4f0
call fcn.004266a0
lea eax, [esp + 0x18]
push eax
call ebp
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea edx, [esp + 0x24]
push edx
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x42adb0
mov eax, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x5c]
xor ecx, esp
call fcn.004a7314
add esp, 0x60
ret 0x10
mov ecx, dword [esp + 0x6c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
or eax, 0xffffffff
call fcn.004a7314
add esp, 0x60
ret 0x10