Function at 0x45accc
Capabilities:
Get graphical window text
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov esi, 0x50c344
mov edi, 0x50c348
cmp dword [0x4f5368], 0
je 0x45acef
xor eax, eax
jmp 0x45b4ef
mov eax, dword [0x4f2d18]
cmp ebx, eax
jne 0x45acfe
push eax
call fcn.0042ede8
push ebx
call fcn.004eae80
mov dword [0x50c33c], eax
cmp dword [0x50c33c], 0
jne 0x45ad20
push 0
call sub.USER32.dll_MessageBeep
xor eax, eax
jmp 0x45b4ef
mov edx, dword [0x50c33c]
cmp byte [edx + 0x4e7], 0
je 0x45ae65
push 0
push 0
push 0xb0
mov ecx, dword [0x50c33c]
mov eax, dword [ecx + 0x5d0]
push eax
call sub.USER32.dll_SendMessageA
mov dword [0x50c354], eax
push 0
push 0
push 0xe
mov edx, dword [0x50c33c]
mov ecx, dword [edx + 0x5d0]
push ecx
call sub.USER32.dll_SendMessageA
mov edx, dword [0x50c354]
shr edx, 0x10
and dx, 0xffff
movzx ecx, dx
cmp eax, ecx
jle 0x45ad87
xor eax, eax
jmp 0x45b4ef
cmp dword [ebp + 0xc], 3
jne 0x45ae65
push 0x50c777
push 0x3b5
push 0xd
mov eax, dword [0x50c33c]
mov edx, dword [eax + 0x5d0]
push edx
call sub.USER32.dll_SendMessageA
mov dword [0x50c354], eax
cmp dword [0x50c354], 0
jle 0x45ae5e
mov ecx, dword [0x50c354]
mov byte [ecx + 0x50c777], 0
push 0x4f536c
push 0x50c777
call fcn.0040123c
add esp, 8
push 0x50c777
push 0
push 0xc
mov eax, dword [0x50c33c]
mov edx, dword [eax + 0x5d0]
push edx
call sub.USER32.dll_SendMessageA
mov ecx, dword [0x50c33c]
mov eax, dword [ecx + 0x5d0]
push eax
call sub.USER32.dll_UpdateWindow
push 0x50c777
call fcn.00401318
pop ecx
push eax
push 0x50c777
call fcn.00401318
pop ecx
push eax
push 0xb1
mov edx, dword [0x50c33c]
mov ecx, dword [edx + 0x5d0]
push ecx
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
mov eax, dword [0x50c33c]
mov edx, dword [eax + 0x5d0]
push edx
call sub.USER32.dll_SendMessageA
mov eax, 2
jmp 0x45b4ef
xor eax, eax
jmp 0x45b4ef
cmp dword [ebp + 0xc], 2
jl 0x45ae75
mov eax, 1
jmp 0x45b4ef
push 0x50c777
push 0x3b5
push 0xd
mov edx, dword [0x50c33c]
mov ecx, dword [edx + 0x5d0]
push ecx
call sub.USER32.dll_SendMessageA
mov dword [0x50c354], eax
cmp dword [0x50c354], 0
jg 0x45aed2
push 0x4f5370
push 0
push 0xc
mov eax, dword [0x50c33c]
mov edx, dword [eax + 0x5d0]
push edx
call sub.USER32.dll_SendMessageA
cmp dword [ebp + 0xc], 0
je 0x45aec8
push 0
call sub.USER32.dll_MessageBeep
mov eax, 1
jmp 0x45b4ef
mov edx, dword [0x50c354]
mov byte [edx + 0x50c777], 0
push 0x4f5374
push 0
push 0xc
mov ecx, dword [0x50c33c]
mov eax, dword [ecx + 0x5d0]
push eax
call sub.USER32.dll_SendMessageA
mov edx, dword [0x50c33c]
mov ecx, dword [edx + 0x5d0]
push ecx
call sub.USER32.dll_UpdateWindow
cmp dword [0x4f9f54], 0
je 0x45af3b
mov eax, dword [0x4fd9ec]
push eax
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x45af34
mov edx, dword [0x4fd9ec]
push edx
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x45af3b
xor eax, eax
jmp 0x45b4ef
mov edx, dword [0x50c33c]
cmp byte [edx + 0x4e7], 0
jne 0x45afe7
cmp dword [0x4f5360], 0
je 0x45afe7
jmp 0x45afc7
push 0x4f5378
push 0x50c777
call fcn.004015f8
add esp, 8
mov dword [esi], eax
cmp dword [esi], 0
je 0x45af84
mov ecx, dword [esi]
mov byte [ecx], 0
mov eax, dword [esi]
add eax, 2
mov dword [edi], eax
jmp 0x45afa7
push 0x4f537c
push 0x50c777
call fcn.004015f8
add esp, 8
mov dword [esi], eax
cmp dword [esi], 0
je 0x45afd0
mov edx, dword [esi]
mov byte [edx], 0
mov ecx, dword [esi]
inc ecx
mov dword [edi], ecx
mov eax, dword [edi]
cmp byte [eax], 0
je 0x45afc7
mov edx, dword [edi]
push edx
call fcn.00401318
pop ecx
inc eax
push eax
mov ecx, dword [edi]
push ecx
mov eax, dword [esi]
push eax
call fcn.0040114c
add esp, 0xc
cmp byte [0x50c777], 0
jne 0x45af5d
cmp byte [0x50c777], 0
jne 0x45afe7
push 0
call sub.USER32.dll_MessageBeep
xor eax, eax
jmp 0x45b4ef
mov eax, 0x50c777
mov edx, 0x4f537f
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x45b00d
test cl, cl
je 0x45b05f
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x45b00d
add eax, 2
add edx, 2
test cl, cl
jne 0x45aff1
je 0x45b05f
mov eax, 0x50c777
mov edx, 0x4f5382
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x45b035
test cl, cl
je 0x45b05f
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x45b035
add eax, 2
add edx, 2
test cl, cl
jne 0x45b019
je 0x45b05f
mov eax, 0x50c777
mov edx, 0x4f5387
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x45b06f
test cl, cl
je 0x45b05d
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x45b06f
add eax, 2
add edx, 2
test cl, cl
jne 0x45b041
jne 0x45b06f
push ebx
call fcn.00421788
mov eax, 1
jmp 0x45b4ef
mov eax, 0x50c777
mov edx, 0x4f538b
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x45b095
test cl, cl
je 0x45b0f3
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x45b095
add eax, 2
add edx, 2
test cl, cl
jne 0x45b079
je 0x45b0f3
mov eax, 0x50c777
mov edx, 0x4f538f
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x45b0bd
test cl, cl
je 0x45b0f3
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x45b0bd
add eax, 2
add edx, 2
test cl, cl
jne 0x45b0a1
je 0x45b0f3
mov eax, 0x50c777
mov edx, 0x4f5395
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x45b19c
test cl, cl
je 0x45b0ed
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x45b19c
add eax, 2
add edx, 2
test cl, cl
jne 0x45b0c9
jne 0x45b19c
cmp dword [0x4f5354], 0
jne 0x45b10a
push 0
call sub.USER32.dll_MessageBeep
xor eax, eax
jmp 0x45b4ef
push 0x4f539a
mov edx, dword [0x4f5354]
push edx
call fcn.004015f8
add esp, 8
mov ebx, eax
mov dword [edi], ebx
test ebx, ebx
je 0x45b129
mov byte [ebx], 0
mov eax, dword [0x4f5354]
push eax
push 0
push 0xc
mov edx, dword [0x50c33c]
mov ecx, dword [edx + 0x5d0]
push ecx
call sub.USER32.dll_SendMessageA
mov eax, dword [0x4f5354]
push eax
call fcn.00401318
pop ecx
push eax
mov edx, dword [0x4f5354]
push edx
call fcn.00401318
pop ecx
push eax
push 0xb1
mov ecx, dword [0x50c33c]
mov eax, dword [ecx + 0x5d0]
push eax
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
mov edx, dword [0x50c33c]
mov ecx, dword [edx + 0x5d0]
push ecx
call sub.USER32.dll_SendMessageA
mov eax, 1
jmp 0x45b4ef
cmp dword [0x4fcdb0], 0
je 0x45b1c9
mov edx, dword [0x4fcdb0]
mov dword [0x50c34c], edx
jmp 0x45b1c0
xor ecx, ecx
mov dword [eax + 0x18], ecx
mov eax, dword [eax + 0x30]
mov dword [0x50c34c], eax
mov eax, dword [0x50c34c]
test eax, eax
jne 0x45b1b3
xor edx, edx
mov dword [0x4f535c], edx
mov al, byte [0x50c777]
cmp al, 0x2f
je 0x45b213
cmp al, byte [0x4fb0c8]
je 0x45b213
push ebx
call fcn.00427074
mov dword [0x50c340], eax
cmp dword [0x50c340], 0
je 0x45b213
mov edx, dword [0x50c340]
cmp dword [edx + 0x51c], 3
je 0x45b213
push 0
call sub.USER32.dll_MessageBeep
xor eax, eax
jmp 0x45b4ef
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x45b22b
mov dword [0x4f5364], 1
jmp 0x45b233
xor edx, edx
mov dword [0x4f5364], edx
mov dword [0x4f5368], 1
mov dword [esi], 0x50c777
jmp 0x45b4d0
push 0x4f539e
mov ecx, dword [esi]
push ecx
call fcn.004015f8
add esp, 8
mov dword [edi], eax
cmp dword [edi], 0
je 0x45b269
mov eax, dword [edi]
mov byte [eax], 0
add dword [edi], 2
jmp 0x45b287
push 0x4f53a2
mov edx, dword [esi]
push edx
call fcn.004015f8
add esp, 8
mov dword [edi], eax
cmp dword [edi], 0
je 0x45b287
mov ecx, dword [edi]
mov byte [ecx], 0
inc dword [edi]
mov eax, dword [esi]
push eax
call fcn.00401318
pop ecx
mov dword [0x50c35c], eax
cmp dword [0x50c35c], 0
jle 0x45b420
cmp dword [0x50c35c], 0x3b5
jle 0x45b2b8
mov dword [0x50c35c], 0x3b5
mov eax, dword [esi]
mov edx, dword [0x50c35c]
mov cl, byte [eax + edx]
mov byte [0x50c358], cl
mov edx, dword [0x50c35c]
mov byte [eax + edx], 0
mov eax, dword [esi]
push esi
push edi
mov esi, 0x50c390
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [esi]
mov edx, dword [0x50c35c]
mov cl, byte [0x50c358]
mov byte [eax + edx], cl
mov eax, dword [0x4f5354]
test eax, eax
je 0x45b31e
push eax
call fcn.0040c454
pop ecx
push 0x50c390
call fcn.00401318
pop ecx
add eax, 5
push eax
call fcn.0040c55c
pop ecx
mov dword [0x4f5354], eax
cmp dword [0x4f5354], 0
je 0x45b36f
mov edx, dword [0x4f5354]
push esi
push edi
mov esi, edx
mov edi, 0x50c390
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push 0x50c390
push ebx
call fcn.00421668
mov dword [0x50c350], 1
cmp dword [0x4fb7f4], 0
je 0x45b3bc
mov dword [0x4f5358], ebx
xor eax, eax
mov dword [0x4fba24], eax
push 0
push 0x1a
push 0x4f53a5
call fcn.004ca178
test eax, eax
jne 0x45b3b4
xor edx, edx
mov dword [0x50c350], edx
xor ecx, ecx
mov dword [0x4f5358], ecx
push ebx
call sub.USER32.dll_IsWindow
test eax, eax
je 0x45b3d5
mov eax, dword [0x50c33c]
push eax
call fcn.004e8a54
test eax, eax
jne 0x45b3de
xor ebx, ebx
xor eax, eax
mov dword [0x50c33c], eax
cmp dword [0x50c350], 0
je 0x45b418
test ebx, ebx
je 0x45b418
cmp dword [0x4f5364], 0
je 0x45b407
push 0
push 3
push 0
push 0x50c390
push ebx
call fcn.004864e8
jmp 0x45b418
push 0
push 0
push 0
push 0x50c390
push ebx
call fcn.004864e8
test ebx, ebx
je 0x45b4db
mov edx, dword [0x50c33c]
push edx
call fcn.004e8a54
test eax, eax
je 0x45b4c8
mov ecx, dword [0x50c33c]
cmp dword [ecx + 0x5d0], 0
je 0x45b4c8
mov eax, dword [0x50c33c]
cmp byte [eax + 0x7c4], 0
je 0x45b4c8
mov eax, dword [0x50c33c]
mov edx, eax
add edx, 0x7c4
push edx
push 0
push 0xc
mov ecx, dword [eax + 0x5d0]
push ecx
call sub.USER32.dll_SendMessageA
mov eax, dword [0x50c33c]
add eax, 0x7c4
push eax
call fcn.00401318
pop ecx
push eax
mov ebx, dword [0x50c33c]
mov eax, ebx
add eax, 0x7c4
push eax
call fcn.00401318
pop ecx
push eax
push 0xb1
mov edx, dword [ebx + 0x5d0]
push edx
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
mov ecx, dword [0x50c33c]
mov eax, dword [ecx + 0x5d0]
push eax
call sub.USER32.dll_SendMessageA
jmp 0x45b4db
mov eax, dword [edi]
test eax, eax
je 0x45b4db
mov dword [esi], eax
mov edx, dword [esi]
cmp byte [edx], 0
jne 0x45b248
xor ecx, ecx
mov dword [0x4f5364], ecx
xor eax, eax
mov dword [0x4f5368], eax
mov eax, 1
pop edi
pop esi
pop ebx
pop ebp
ret 8