Function at 0x5011332a
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0xb0
push ebx
push esi
push edi
push dword [ebp + 0x78]
mov esi, ecx
push dword [ebp + 0x74]
call fcn.50272bbe
xor ebx, ebx
push 0xffffffffffffffeb
push dword [ebp + 0x74]
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x44], ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x24], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x60], ebx
mov dword [ebp + 4], ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edi, eax
cmp edi, ebx
je 0x50113bd0
xor ecx, ecx
inc ecx
cmp dword [ebp + 0x7c], 0x201
jne 0x5011354a
mov dword [ebp + 0x44], ecx
mov eax, dword [ebp + 0x68]
cmp eax, ebx
je 0x50113395
cmp dword [eax], ebx
je 0x50113395
mov dword [edi + 0x14], eax
mov dword [ebp + 0x24], ecx
cmp dword [ebp + 0x44], ebx
je 0x50113b7e
xor ebx, ebx
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_SetCapture]
cmp dword [ebp + 0x44], ebx
je 0x501133ce
push dword [ebp + 0x74]
mov ecx, esi
call fcn.50272bbe
push dword [edi]
mov ecx, esi
call fcn.50272bbe
push dword [ebp + 0x44]
mov ecx, esi
push dword [edi + 0xc]
call fcn.50111124
mov eax, dword [ebp + 0x78]
mov dword [esi + 0x30], eax
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x4c], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x38], ebx
mov dword [ebp + 0x34], ebx
mov dword [esi + 0x678], 1
mov dword [ebp + 0x7c], ebx
xor ebx, ebx
cmp dword [ebp + 0x30], ebx
jne 0x501135a3
push 1
push 0x20a
push 0x200
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push 1
mov eax, 0x215
push eax
push eax
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push ebx
mov eax, 0x202
push eax
push eax
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push ebx
mov eax, 0x201
push eax
push eax
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push ebx
mov eax, 0x205
push eax
push eax
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push ebx
mov eax, 0x204
push eax
push eax
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push ebx
mov eax, 0x100
push eax
push eax
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push ebx
mov eax, 0x104
push eax
push eax
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push 1
push 0x1f
push 0x1f
push ebx
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x501135ad
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x50113598
cmp dword [ebp + 0x4c], ebx
je 0x50113598
mov eax, dword [esi + 0x650]
dec eax
je 0x50113563
dec eax
jne 0x50113598
mov eax, dword [edi + 0x18]
cmp eax, ebx
jge 0x50113598
mov ecx, dword [0x50289ae8]
add eax, ecx
cmp eax, ebx
mov dword [edi + 0x18], eax
jle 0x5011353c
mov dword [edi + 0x18], ebx
push 1
push dword [esi + 0x18]
push dword [edi + 0x1c]
push ebx
push dword [edi + 0x18]
jmp 0x5011358f
cmp dword [ebp + 0x7c], 0x200
jne 0x50113384
mov dword [ebp + 0x30], 1
jmp 0x501133a0
lea eax, [ebp - 0x34]
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [edi + 0x1c]
mov eax, dword [edi + 0x18]
lea edx, [ecx + eax]
cmp edx, dword [ebp - 0x2c]
jle 0x50113598
sub eax, dword [0x50289ae8]
push 1
mov dword [edi + 0x18], eax
push dword [esi + 0x18]
push ecx
push ebx
push eax
push dword [edi + 0xc]
call dword [sym.imp.USER32.dll_MoveWindow]
call dword [sym.imp.USER32.dll_WaitMessage]
jmp 0x501133fe
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0xc], 0x201
cmp dword [ebp + 0x44], ebx
je 0x50113971
mov eax, dword [ebp + 0xc]
sub eax, 0x1f
je 0x501135e4
sub eax, 0xe1
je 0x501135e4
dec eax
je 0x501133fe
sub eax, 3
je 0x501135e4
sub eax, 0xfc
je 0x5011368d
dec eax
dec eax
jne 0x501133fe
cmp dword [ebp + 0x38], ebx
je 0x50113609
cmp dword [ebp + 0x7c], ebx
je 0x50113609
push 1
push dword [esi + 0x674]
mov ecx, esi
push dword [esi + 0x670]
push dword [esi + 0x66c]
call fcn.50272bbe
cmp dword [ebp + 0xc], 0x202
jne 0x50113949
mov eax, dword [ebp + 0x68]
cmp eax, ebx
je 0x50113965
cmp dword [ebp + 0x38], ebx
je 0x50113927
cmp dword [ebp + 0x48], ebx
mov ecx, dword [ebp + 0x34]
mov dword [esi + 0x65c], ecx
je 0x50113902
push eax
mov ecx, esi
call fcn.50112284
mov eax, dword [edi + 0x10]
cmp dword [ebp + 0x68], eax
mov dword [ebp + 0x64], ebx
jne 0x5011365b
cmp dword [eax + 0x2c], ebx
jne 0x5011365b
mov dword [ebp + 0x64], 1
mov eax, dword [ebp + 0x68]
push edi
push dword [eax]
mov ecx, esi
call fcn.50272bbe
cmp dword [ebp + 0x64], ebx
je 0x5011366f
xor edi, edi
mov eax, dword [ebp + 0x5c]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov eax, dword [ebp + 0x68]
push eax
push dword [eax + 0x28]
mov ecx, esi
push ebx
push dword [eax]
call fcn.50272bbe
jmp 0x5011393b
mov eax, dword [ebp + 0x14]
push eax
push dword [ebp + 0x74]
mov ecx, esi
mov dword [ebp + 0x64], eax
call fcn.50272bbe
cmp eax, ebx
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x38], ebx
je 0x5011370e
cmp dword [ebp + 0x60], ebx
je 0x501136c2
push dword [ebp + 0x60]
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp + 0x50], ebx
cmp dword [ebp + 0x7c], ebx
je 0x501136e5
push 1
push dword [esi + 0x674]
mov ecx, esi
push dword [esi + 0x670]
push dword [esi + 0x66c]
call fcn.50272bbe
mov dword [ebp + 0x7c], ebx
push dword [ebp + 0x64]
mov ecx, esi
push dword [ebp + 0x3c]
push dword [ebp + 0x74]
call fcn.50272bbe
test eax, eax
je 0x501133fe
push 1
push dword [edi + 0xc]
mov ecx, esi
call fcn.50111124
jmp 0x501133fe
mov eax, dword [esi + 0x10]
cmp dword [eax + 8], ebx
jne 0x5011372d
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x501133fe
cmp dword [eax + 0x94], ebx
je 0x501133fe
movsx eax, word [ebp + 0x64]
mov dword [ebp + 0x54], eax
movsx eax, word [ebp + 0x66]
push 1
mov dword [ebp + 0x58], eax
lea eax, [ebp + 0x54]
push eax
push dword [edi]
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_MapWindowPoints]
push dword [ebp + 0x58]
push dword [ebp + 0x54]
push dword [edi]
call dword [sym.imp.USER32.dll_ChildWindowFromPoint]
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x54]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x58]
push 1
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
xor ebx, ebx
push ebx
push dword [edi]
call dword [sym.imp.USER32.dll_MapWindowPoints]
lea eax, [ebp - 0x44]
push eax
push dword [0x5029a6e8]
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebp - 8]
lea eax, [ebp - 0x44]
push dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x5011379f
inc ebx
mov eax, dword [ebp + 0x64]
cmp eax, dword [edi + 8]
je 0x501137df
xor eax, eax
test ebx, ebx
je 0x501137c1
mov ecx, dword [esi + 4]
cmp dword [ebp + 0x50], ecx
je 0x501137d4
push ecx
call dword [sym.imp.USER32.dll_SetCursor]
mov ecx, dword [esi + 4]
jmp 0x501137d1
mov ecx, dword [esi]
cmp dword [ebp + 0x50], ecx
je 0x501137d4
push ecx
call dword [sym.imp.USER32.dll_SetCursor]
mov ecx, dword [esi]
mov dword [ebp + 0x50], ecx
cmp dword [ebp + 0x60], 0
jne 0x501137f2
mov dword [ebp + 0x60], eax
jmp 0x501137f2
cmp dword [ebp + 0x60], 0
je 0x501137f2
push dword [ebp + 0x60]
call dword [sym.imp.USER32.dll_SetCursor]
and dword [ebp + 0x50], 0
mov eax, dword [ebp + 0x64]
cmp eax, dword [edi + 8]
je 0x501138d3
xor ebx, ebx
inc ebx
push ebx
lea eax, [ebp + 0x54]
push eax
push 0
push dword [edi]
call dword [sym.imp.USER32.dll_MapWindowPoints]
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x34]
push eax
lea eax, [ebp + 0x48]
push eax
push dword [ebp + 0x58]
mov ecx, esi
push dword [ebp + 0x54]
call fcn.50272bbe
test eax, eax
je 0x501138a6
mov ecx, dword [ebp + 0x5c]
cmp ecx, edi
jne 0x5011384a
mov eax, dword [edi + 0x10]
cmp dword [ebp + 0x68], eax
jne 0x5011384a
cmp dword [eax + 0x2c], 0
je 0x501133fc
cmp dword [ebp + 0x7c], 0
mov dword [ebp + 0x38], ebx
je 0x5011388f
test ecx, ecx
jne 0x5011385a
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 0x66c]
cmp eax, ecx
jne 0x5011387a
mov ecx, dword [esi + 0x670]
cmp ecx, dword [ebp + 0x48]
jne 0x5011387a
mov ecx, dword [esi + 0x674]
cmp ecx, dword [ebp + 0x2c]
je 0x5011388f
push ebx
push dword [esi + 0x674]
mov ecx, esi
push dword [esi + 0x670]
push eax
call fcn.50272bbe
push 0
push dword [ebp + 0x2c]
mov ecx, esi
push dword [ebp + 0x48]
push dword [ebp + 0x5c]
call fcn.50272bbe
jmp 0x501133f9
cmp dword [ebp + 0x7c], 0
je 0x501133fc
push ebx
push dword [esi + 0x674]
mov ecx, esi
push dword [esi + 0x670]
push dword [esi + 0x66c]
call fcn.50272bbe
and dword [ebp + 0x7c], 0
jmp 0x501133fc
cmp dword [ebp + 0x7c], 0
je 0x501133fc
push 1
push dword [esi + 0x674]
mov ecx, esi
push dword [esi + 0x670]
push dword [esi + 0x66c]
call fcn.50272bbe
xor ebx, ebx
mov dword [ebp + 0x7c], ebx
jmp 0x501133fe
cmp edi, dword [ebp + 0x5c]
je 0x5011390c
cmp dword [ebp + 0x5c], ebx
jne 0x50113916
cmp dword [edi + 0x10], eax
jne 0x50113916
cmp dword [eax + 0x2c], ebx
je 0x5011393b
push ebx
push dword [ebp + 0x5c]
mov ecx, esi
push edi
push dword [ebp + 0x68]
call fcn.50272bbe
jmp 0x5011393b
mov eax, dword [ebp + 0x50]
cmp eax, dword [esi]
jne 0x5011393b
mov eax, dword [ebp + 0x14]
mov dword [ebp + 0x78], eax
mov dword [ebp + 4], 1
cmp dword [esi + 0x10], ebx
je 0x50113949
push dword [edi]
mov ecx, esi
call fcn.50111aff
cmp dword [ebp + 0xc], 0x100
je 0x5011395b
cmp dword [ebp + 0xc], 0x104
jne 0x50113965
cmp byte [ebp + 0x10], 0x1b
jne 0x501133fe
mov ecx, esi
call fcn.50111ad7
jmp 0x50113b2e
cmp dword [ebp + 0xc], 0x202
je 0x50113992
cmp dword [ebp + 0xc], 0x203
jbe 0x5011399b
cmp dword [ebp + 0xc], 0x205
jbe 0x50113b2e
jmp 0x5011399b
mov dword [esi + 0x658], ebx
mov dword [ebp + 0x40], ebx
call dword [sym.imp.USER32.dll_GetMessagePos]
mov dword [ebp + 0x3c], eax
movsx eax, ax
mov dword [ebp - 4], eax
movsx eax, word [ebp + 0x3e]
mov dword [ebp], eax
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [esi + 0x650]
cmp eax, ebx
jne 0x501139cd
lea eax, [edi + 0x20]
jmp 0x501139d8
cmp eax, 1
lea eax, [edi + 0x30]
je 0x501139d8
lea eax, [edi + 0x40]
push dword [ebp]
push dword [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
mov dword [ebp + 0x4c], eax
lea eax, [ebp - 0x24]
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_GetClientRect]
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x50113a89
cmp dword [ebp + 0x4c], ebx
je 0x50113a98
cmp dword [ebp + 0xc], 0x201
jne 0x50113a89
xor eax, eax
inc eax
mov dword [ebp + 0x40], eax
mov dword [esi + 0x658], eax
mov dword [ebp + 0x28], eax
mov eax, dword [esi + 0x650]
dec eax
je 0x50113a56
dec eax
jne 0x50113a89
mov eax, dword [edi + 0x18]
cmp eax, ebx
jge 0x50113a89
mov ecx, dword [0x50289ae8]
add eax, ecx
cmp eax, ebx
mov dword [edi + 0x18], eax
jle 0x50113a4c
mov dword [edi + 0x18], ebx
push 1
push dword [esi + 0x18]
push dword [edi + 0x1c]
jmp 0x50113a7c
mov ecx, dword [edi + 0x1c]
mov eax, dword [edi + 0x18]
lea edx, [ecx + eax]
xor ebx, ebx
cmp edx, dword [ebp - 0x1c]
jle 0x50113a89
sub eax, dword [0x50289ae8]
cmp eax, ebx
mov dword [edi + 0x18], eax
jle 0x50113a76
mov dword [edi + 0x18], ebx
push 1
push dword [esi + 0x18]
push ecx
push ebx
push dword [edi + 0x18]
push dword [edi + 0xc]
call dword [sym.imp.USER32.dll_MoveWindow]
cmp dword [ebp + 0x4c], ebx
je 0x50113a98
cmp dword [ebp + 0x40], ebx
je 0x50113a98
xor eax, eax
inc eax
jmp 0x50113a9a
xor eax, eax
cmp dword [ebp + 0x4c], ebx
mov dword [esi + 0x658], eax
jne 0x50113aad
cmp eax, ebx
jne 0x50113aad
xor eax, eax
jmp 0x50113ab0
xor eax, eax
inc eax
cmp eax, ebx
mov dword [esi + 0x654], eax
je 0x50113adc
mov eax, dword [esi + 0x650]
cmp eax, 1
jne 0x50113ad2
mov eax, dword [edi + 0x1c]
add eax, dword [edi + 0x18]
cmp eax, dword [ebp - 0x1c]
jle 0x50113b2e
jmp 0x50113adc
cmp eax, 2
jne 0x50113adc
cmp dword [edi + 0x18], ebx
jge 0x50113b2e
push dword [edi]
mov ecx, esi
call fcn.50272bbe
push ebx
push dword [edi + 0xc]
mov ecx, esi
call fcn.50111124
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jl 0x50113b0b
cmp dword [ebp + 0x28], ebx
je 0x50113b0b
cmp dword [ebp + 0x4c], ebx
jne 0x50113bda
cmp dword [ebp + 0x4c], ebx
jne 0x501133fe
cmp dword [ebp + 0x40], ebx
jne 0x501133fe
call dword [sym.imp.USER32.dll_GetCapture]
cmp eax, dword [ebp + 0x74]
jne 0x50113b2e
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov dword [esi + 0x678], ebx
call dword [sym.imp.USER32.dll_GetCapture]
cmp eax, dword [ebp + 0x74]
jne 0x50113b45
call dword [sym.imp.USER32.dll_ReleaseCapture]
or dword [esi + 0x650], 0xffffffff
cmp edi, ebx
mov dword [esi + 0x654], ebx
mov dword [esi + 0x658], ebx
je 0x50113b70
push dword [edi]
mov ecx, esi
call fcn.50272bbe
push ebx
push dword [edi + 0xc]
mov ecx, esi
call fcn.50111124
cmp dword [ebp + 0x60], ebx
je 0x50113b7e
push dword [ebp + 0x60]
call dword [sym.imp.USER32.dll_SetCursor]
xor edi, edi
cmp dword [ebp + 0x24], edi
je 0x50113b93
mov eax, dword [ebp + 0x68]
mov ecx, dword [eax]
push edi
push edi
push 1
call fcn.5009377b
cmp dword [ebp + 4], edi
je 0x50113bd0
movzx eax, word [ebp + 0x7a]
movzx ecx, word [ebp + 0x78]
mov esi, dword [ebp + 0x74]
push edi
push 1
shl eax, 0x10
or eax, ecx
push eax
push 0x50001f10
push esi
push 0x42c
mov dword [0x5029afd8], esi
call fcn.50272bbe
cmp dword [0x5029afd8], esi
jne 0x50113bd0
mov dword [0x5029afd8], edi
pop edi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc
call dword [sym.imp.USER32.dll_GetCapture]
cmp eax, dword [ebp + 0x74]
jne 0x50113bf3
cmp dword [esi + 0x650], ebx
jne 0x50113bf3
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [edi + 0x14]
cmp eax, ebx
je 0x50113b2e
cmp dword [eax], ebx
je 0x50113b2e
cmp dword [esi + 0x650], ebx
je 0x50113c75
call dword [sym.imp.USER32.dll_GetMessagePos]
mov dword [ebp + 0x7c], eax
movsx eax, ax
mov dword [ebp + 0x54], eax
movsx eax, word [ebp + 0x7e]
mov dword [ebp + 0x58], eax
lea eax, [ebp + 0x54]
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [esi + 0x650]
cmp eax, ebx
jne 0x50113c40
lea eax, [edi + 0x20]
jmp 0x50113c4b
cmp eax, 1
lea eax, [edi + 0x30]
je 0x50113c4b
lea eax, [edi + 0x40]
push dword [ebp + 0x58]
push dword [ebp + 0x54]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
mov ecx, eax
neg ecx
sbb ecx, ecx
and ecx, dword [ebp + 0x54]
neg eax
sbb eax, eax
and eax, dword [ebp + 0x58]
mov word [esi + 0x30], cx
mov word [esi + 0x32], ax
jmp 0x50113b2e
cmp eax, dword [edi + 0x10]
mov dword [ebp + 0x7c], ebx
jne 0x50113c89
cmp dword [eax + 0x2c], ebx
jne 0x50113c89
mov dword [ebp + 0x7c], 1
lea ecx, [ebp + 0x3c]
push ecx
mov ecx, dword [eax]
push ebx
push ebx
push 0x10
push dword [eax + 0x28]
call fcn.50272bbe
cmp dword [ebp + 0x7c], ebx
je 0x50113b2e
xor edi, edi
jmp 0x50113b2e