Function at 0x442740
Capabilities:
Get graphical window text
Log keystrokes
Log keystrokes via polling

Disassembly:
sub esp, 0x520
mov eax, dword [0x47e378]
xor eax, esp
mov dword [esp + 0x51c], eax
push ebx
push ebp
push esi
push edi
push 0x104
xor ebp, ebp
lea eax, [esp + 0x224]
push ebp
push eax
mov ebx, ecx
call fcn.004541e0
push 0x104
lea ecx, [esp + 0x12c]
push ebp
push ecx
call fcn.004541e0
push 0x104
lea edx, [esp + 0x340]
push ebp
push edx
call fcn.004541e0
push 0x104
lea eax, [esp + 0x450]
push ebp
push eax
call fcn.004541e0
mov ecx, dword [ebx + 4]
add esp, 0x30
push 0xeb
push ecx
mov dword [esp + 0x18], ebp
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebp
push ebp
push 0x147
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
sub eax, ebp
je 0x442965
sub eax, 1
je 0x4428a5
sub eax, 1
jne 0x442a20
push 0x104
lea edx, [esp + 0x1c]
push ebp
push edx
mov dword [esp + 0x1c], 5
call fcn.004541e0
mov eax, dword [0x47d414]
mov esi, dword [sym.imp.USER32.dll_MapVirtualKeyA]
add esp, 0xc
push ebp
push eax
call esi
mov edi, dword [sym.imp.USER32.dll_GetKeyNameTextA]
push 0x104
shl eax, 0x10
lea ecx, [esp + 0x1c]
or eax, 1
push ecx
push eax
call edi
lea edx, [esp + 0x18]
push edx
call fcn.00455068
add esp, 4
lea edx, [esp + 0x220]
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x442840
push 0x104
lea eax, [esp + 0x1c]
push ebp
push eax
call fcn.004541e0
mov ecx, dword [0x47d418]
add esp, 0xc
push ebp
push ecx
call esi
push 0x104
shl eax, 0x10
lea edx, [esp + 0x1c]
or eax, 1
push edx
push eax
call edi
lea eax, [esp + 0x18]
push eax
call fcn.00455068
add esp, 4
lea edx, [esp + 0x11c]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x442892
jmp 0x442a20
push 0x104
lea ecx, [esp + 0x1c]
push ebp
push ecx
mov dword [esp + 0x1c], 6
call fcn.004541e0
mov edx, dword [0x47d410]
mov esi, dword [sym.imp.USER32.dll_MapVirtualKeyA]
add esp, 0xc
push ebp
push edx
call esi
mov edi, dword [sym.imp.USER32.dll_GetKeyNameTextA]
push 0x104
shl eax, 0x10
lea ecx, [esp + 0x1c]
or eax, 1
push ecx
push eax
call edi
lea edx, [esp + 0x18]
push edx
call fcn.00455068
add esp, 4
lea edx, [esp + 0x220]
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x442900
push 0x104
lea eax, [esp + 0x1c]
push ebp
push eax
call fcn.004541e0
mov ecx, dword [0x47d418]
add esp, 0xc
push ebp
push ecx
call esi
push 0x104
shl eax, 0x10
lea edx, [esp + 0x1c]
or eax, 1
push edx
push eax
call edi
lea eax, [esp + 0x18]
push eax
call fcn.00455068
add esp, 4
lea edx, [esp + 0x11c]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x442952
jmp 0x442a20
push 0x104
lea ecx, [esp + 0x1c]
push ebp
push ecx
mov dword [esp + 0x1c], 3
call fcn.004541e0
mov edx, dword [0x47d410]
mov esi, dword [sym.imp.USER32.dll_MapVirtualKeyA]
add esp, 0xc
push ebp
push edx
call esi
mov edi, dword [sym.imp.USER32.dll_GetKeyNameTextA]
push 0x104
shl eax, 0x10
lea ecx, [esp + 0x1c]
or eax, 1
push ecx
push eax
call edi
lea edx, [esp + 0x18]
push edx
call fcn.00455068
add esp, 4
lea edx, [esp + 0x220]
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x4429c0
push 0x104
lea eax, [esp + 0x1c]
push ebp
push eax
call fcn.004541e0
mov ecx, dword [0x47d414]
add esp, 0xc
push ebp
push ecx
call esi
push 0x104
shl eax, 0x10
lea edx, [esp + 0x1c]
or eax, 1
push edx
push eax
call edi
lea eax, [esp + 0x18]
push eax
call fcn.00455068
add esp, 4
lea edx, [esp + 0x11c]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x442a12
mov ecx, dword [ebx + 4]
push 0xeb
push ecx
xor edi, edi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x104
lea edx, [esp + 0x42c]
push edx
push eax
call esi
lea eax, [esp + 0x428]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x442a51
sub eax, edx
je 0x442a63
mov edi, 1
mov eax, dword [ebx + 4]
push 0x10d
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x104
lea ecx, [esp + 0x328]
push ecx
push eax
call esi
lea eax, [esp + 0x324]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x442a90
sub eax, edx
je 0x442aa2
mov ebp, 1
xor esi, esi
cmp edi, esi
je 0x442b3e
cmp ebp, esi
je 0x442b3e
lea edx, [esp + 0x324]
push edx
lea eax, [esp + 0x120]
push eax
lea ecx, [esp + 0x228]
push ecx
lea edx, [ebx + 0x24]
push str.__s___s__s
push edx
call fcn.00454ad1
add esp, 0x14
lea ecx, [ebx + 0x138]
call fcn.00416bb0
cmp eax, esi
je 0x442b48
mov ecx, dword [ebx + 4]
push eax
mov eax, dword [esp + 0x14]
push eax
push 0x1234
push ecx
call dword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
push 0x1234
je 0x442b26
mov ecx, dword [ebx + 4]
push ecx
call dword [sym.imp.USER32.dll_UnregisterHotKey]
mov dword [ebx + 0x128], 1
mov dword [ebx + 0x12c], esi
jmp 0x442b48
mov edx, dword [ebx + 4]
push edx
call dword [sym.imp.USER32.dll_UnregisterHotKey]
mov dword [ebx + 0x128], esi
mov dword [ebx + 0x12c], esi
jmp 0x442b48
mov dword [ebx + 0x12c], 1
mov ecx, dword [esp + 0x52c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00454162
add esp, 0x520
ret