Function at 0x46ca00
Capabilities:
Get graphical window text
Log keystrokes via application hook

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x580aad
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xa98
push esi
push edi
mov dword [ebp - 0x1c], ecx
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x46cf15
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2c], eax
push str.MHZK6V1wfMJDwN
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0
call fcn.0042f1c0
test al, al
jne 0x46ca7a
push 0xe
push str.MHZK6V1wfMJDwN
lea ecx, [ebp - 0x2c]
call fcn.0042f4f0
mov dword [ebp - 4], 1
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x46cf1f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.SWpoeZCQPeBhEWHGQ0FTOwkA
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.0042f1c0
test al, al
jne 0x46cac1
push 0x18
push str.SWpoeZCQPeBhEWHGQ0FTOwkA
lea ecx, [ebp - 0x28]
call fcn.0042f4f0
mov byte [ebp - 4], 3
call fcn.0042ef50
mov ecx, eax
test ecx, ecx
je 0x46cf29
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push str.ejdENRRVH5ISsl4Wy0rjEQ
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.0042f1c0
test al, al
jne 0x46cb05
push 0x18
push str.ejdENRRVH5ISsl4Wy0rjEQ
lea ecx, [ebp - 0x24]
call fcn.0042f4f0
xorps xmm0, xmm0
mov byte [ebp - 4], 5
push 0x80
movups xmmword [ebp - 0x74], xmm0
call fcn.0054f7c4
mov ecx, 0x1d
mov dword [ebp - 0x74], eax
mov esi, str.d1Z09NQx0SFUUHcdE5OZVTsRPWwIJKB1AWZJBddxVWwPPFwM5gBBdNzcxAZlVToRqUwN0HThATwelZXaGCIATWhp0GThATyelZHDHjEcSQVVsfUVEKwKwk
mov dword [ebp - 0x64], 0x77
mov edi, eax
mov dword [ebp - 0x60], 0x7f
rep movsd dword es:[edi], dword [esi]
add esp, 4
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov byte [eax + 0x77], 0
push 0
push 0
push 0x46c4f0
push 0xd
mov byte [ebp - 4], 6
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
mov esi, dword [ebp - 0x1c]
mov ecx, esi
mov dword [ebp - 0x5c], eax
call fcn.0046cf40
mov edi, dword [esi + 4]
mov dword [ebp - 0x20], 0
test edi, edi
je 0x46cbfc
push 0x100
lea eax, [ebp - 0x2a8]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, dword [esi + 8]
lea edx, [ebp - 0x14]
push edx
push edi
push ecx
mov eax, dword [ecx]
call dword [eax + 0x18]
test eax, eax
jne 0x46cbfc
mov edx, dword [esi + 8]
mov eax, 3
mov word [ebp - 0x50], ax
mov dword [ebp - 0x48], 0xc354
movups xmm0, xmmword [ebp - 0x50]
mov eax, dword [edx]
mov ecx, dword [eax + 0x5c]
lea eax, [ebp - 0x18]
push eax
sub esp, 0x10
mov eax, esp
push 0x7533
push edx
movups xmmword [eax], xmm0
call ecx
test eax, eax
jne 0x46cbf3
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x20]
push edx
push dword [ebp - 0x18]
mov eax, dword [ecx]
push 2
push ecx
call dword [eax + 0x14]
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 0x3c]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.0044b9e0
movaps xmm1, xmm0
lea ecx, [ebp - 0x3c]
call fcn.0044bb20
push dword [ebp - 0x34]
lea eax, [ebp - 0x74]
push dword [ebp - 0x30]
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0042d160
lea ecx, [ebp - 0x58]
call fcn.00444cb0
add esp, 0x18
cmp dword [eax + 0x14], 0x10
jb 0x46cc46
mov eax, dword [eax]
push eax
lea eax, [ebp - 0xaa8]
push eax
call fcn.0045a380
mov ecx, dword [ebp - 0x44]
add esp, 0x18
cmp ecx, 0x10
jb 0x46cc8a
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46cc80
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46cf33
push ecx
push edx
call fcn.0054f7f4
add esp, 8
mov esi, dword [esi]
lea eax, [ebp - 0xaa8]
push eax
lea ecx, [ebp - 0x14]
call fcn.0042df00
mov byte [ebp - 4], 7
mov edi, dword [esi + 0x4c]
push 0x20
push ecx
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00464270
mov byte [ebp - 4], 6
or edi, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46cce2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1c]
mov eax, dword [esi]
cmp byte [eax + 0x109], 0
jne 0x46ce6c
lea eax, [ebp - 0x50]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.0044b9e0
movaps xmm1, xmm0
lea ecx, [ebp - 0x50]
call fcn.0044bb20
mov edi, dword [ebp - 0x50]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
cmp edi, dword [ebp - 0x3c]
jne 0x46cd35
cmp edx, dword [ebp - 0x38]
jne 0x46cd35
cmp ecx, dword [ebp - 0x34]
jne 0x46cd35
cmp eax, dword [ebp - 0x30]
je 0x46ce09
movups xmm0, xmmword [ebp - 0x50]
push ecx
push eax
push edi
push edx
sub esp, 0x18
lea eax, [ebp - 0x74]
mov ecx, esp
movups xmmword [ebp - 0x3c], xmm0
push eax
call fcn.0042d160
lea ecx, [ebp - 0x8c]
call fcn.00444cb0
add esp, 0x18
cmp dword [eax + 0x14], 0x10
jb 0x46cd65
mov eax, dword [eax]
push eax
lea eax, [ebp - 0xaa8]
push eax
call fcn.0045a380
mov ecx, dword [ebp - 0x78]
add esp, 0x18
cmp ecx, 0x10
jb 0x46cdac
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46cda2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46cf33
push ecx
push edx
call fcn.0054f7f4
add esp, 8
mov esi, dword [esi]
lea eax, [ebp - 0xaa8]
push eax
lea ecx, [ebp - 0x14]
call fcn.0042df00
mov byte [ebp - 4], 8
mov edi, dword [esi + 0x4c]
push 0x20
push ecx
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.0042e860
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00464270
mov byte [ebp - 4], 6
or edi, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46ce04
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1c]
jmp 0x46ce0c
or edi, 0xffffffff
push dword [ebp - 0x20]
mov ecx, esi
call fcn.0046d1f0
push 1
push 0
push 0
push 0
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jle 0x46ce49
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov ecx, esi
call fcn.0046cf40
cmp dword [esi + 4], eax
jne 0x46ce6c
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi]
cmp byte [eax + 0x109], 0
je 0x46ccf4
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x46ce79
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push dword [ebp - 0x5c]
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x46ceb6
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46ceac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46cf38
push ecx
push edx
call fcn.0054f7f4
add esp, 8
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46ced0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46ceea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x46cf02
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
push 0x80004005
call fcn.0042f4d0
call fcn.005546cf
call fcn.005546cf
int3