Function at 0x42b5fd
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
mov ebx, ecx
mov eax, dword [ebx + 0x41c]
mov ecx, dword [ebx + 0x420]
push esi
push edi
test eax, eax
jl 0x42b592
cmp eax, dword [ebx + 0x26c]
jge 0x42b592
test ecx, ecx
jl 0x42b592
cmp ecx, dword [ebx + 0x274]
jl 0x42b5a2
mov ecx, ebx
call fcn.00449c14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edi, dword [ebx + 0x41c]
mov esi, dword [ebx + 0x420]
xor eax, eax
push 0x11
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je case.0x42b5e8.46
mov eax, dword [ebp + 8]
add eax, 0xffffffd3
cmp eax, 0x3e
ja case.0x42b5e8.46
movzx edx, byte [eax + 0x42be88]
jmp dword [edx*4 + 0x42be70]
mov eax, dword [ebx]
mov edx, dword [eax + 0x168]
mov ecx, ebx
call edx
jmp case.0x42b5e8.46
mov esi, ebx
call fcn.00432500
mov eax, dword [ebx + 0x20]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov esi, dword [esp + 0x2c]
jmp case.0x42b5e8.46
mov edx, dword [ebx]
mov eax, dword [edx + 0x15c]
jmp 0x42b634
mov edx, dword [ebx]
mov eax, dword [edx + 0x160]
jmp 0x42b634
mov edx, dword [ebx]
mov eax, dword [edx + 0x164]
mov ecx, ebx
call eax
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
mov eax, dword [ebp + 8]
je 0x42b66e
cmp eax, 0x2d
jne 0x42b66e
mov edx, dword [ebx]
mov eax, dword [edx + 0x164]
mov ecx, ebx
call eax
mov ecx, ebx
call fcn.00449c14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp eax, 0x2e
jne 0x42b684
mov edx, dword [ebx]
mov eax, dword [edx + 0x13c]
mov ecx, ebx
call eax
jmp 0x42b727
cmp eax, 0x28
jne 0x42b6d6
mov eax, dword [ebx + 0x26c]
mov ecx, edi
inc edi
cmp edi, eax
mov dword [esp + 0x28], edi
jge 0x42b6c9
lea ebx, [ebx]
test edi, edi
jl 0x42b6bc
cmp edi, eax
jge 0x42b6bc
cmp edi, dword [ebx + 0x284]
jge 0x42b6cd
mov edx, dword [ebx + 0x280]
cmp dword [edx + edi*4], 0
jg 0x42b723
inc edi
cmp edi, dword [ebx + 0x26c]
jl 0x42b6a0
mov dword [esp + 0x28], edi
mov edi, ecx
jmp 0x42b723
mov dword [esp + 0x28], edi
call fcn.00443573
cmp eax, 0x26
jne 0x42b7a4
mov eax, edi
dec edi
cmp edi, dword [ebx + 0x270]
mov dword [esp + 0x28], edi
jl 0x42b721
mov edi, edi
test edi, edi
jl 0x42b714
cmp edi, dword [ebx + 0x26c]
jge 0x42b714
cmp edi, dword [ebx + 0x284]
jge 0x42b79b
mov ecx, dword [ebx + 0x280]
cmp dword [ecx + edi*4], 0
jg 0x42b723
dec edi
cmp edi, dword [ebx + 0x270]
jge 0x42b6f0
mov dword [esp + 0x28], edi
mov edi, eax
mov dword [esp + 0x28], edi
cmp edi, dword [ebx + 0x41c]
jne 0x42b73f
mov eax, dword [esp + 0x2c]
cmp eax, dword [ebx + 0x420]
je 0x42be64
cmp dword [ebx + 0x3f0], 0
jne 0x42bcdc
lea esi, [ebx + 0x460]
call fcn.00439800
mov ecx, dword [ebx + 0x218]
neg ecx
sbb ecx, ecx
add ecx, 4
push 0x10
mov dword [ebx + 0x3f0], ecx
call dword [sym.imp.USER32.dll_GetKeyState]
mov edx, 0x8000
test dx, ax
je 0x42b786
cmp dword [ebp + 8], 9
jne 0x42bcad
mov esi, dword [esp + 0x2c]
mov dword [ebx + 0x414], edi
mov dword [ebx + 0x418], esi
jmp 0x42bcb1
mov dword [esp + 0x28], edi
call fcn.00443573
cmp eax, 0x27
je 0x42bbd9
mov eax, dword [ebp + 8]
cmp eax, 9
jne 0x42b84f
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov edx, 0x8000
test dx, ax
je 0x42bba8
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x42b592
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], esi
dec esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x2c], esi
cmp eax, 9
jne 0x42bb4f
mov eax, dword [ebx + 0x278]
dec eax
cmp esi, eax
jne 0x42bb48
mov eax, dword [ebx + 0x270]
cmp edi, eax
jle 0x42bb48
dec edi
cmp edi, eax
mov dword [esp + 0x28], edi
jle 0x42bb33
test edi, edi
jl 0x42b841
mov eax, edi
mov ecx, ebx
call fcn.00432060
test eax, eax
jg 0x42bb27
dec edi
cmp edi, dword [ebx + 0x270]
jg 0x42b82c
jmp 0x42bb2f
cmp eax, 0x25
je 0x42b7e8
cmp eax, 0x22
jne 0x42b8ba
lea edx, [esp + 0x14]
push edx
mov esi, ebx
call fcn.0042f9a0
mov eax, dword [ebx + 0x20]
push 0
push 3
push 0x115
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x14], 1
call fcn.0042f9a0
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x14]
je 0x42b8ae
add edi, eax
mov eax, dword [ebx + 0x26c]
dec eax
cmp edi, eax
mov dword [esp + 0x28], edi
jle 0x42b727
jmp 0x42b721
mov edi, dword [ebx + 0x26c]
dec edi
jmp 0x42b723
cmp eax, 0x21
jne 0x42b91e
lea edx, [esp + 0x14]
push edx
mov esi, ebx
call fcn.0042f9a0
mov eax, dword [ebx + 0x20]
push 0
push 2
push 0x115
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x14], 1
call fcn.0042f9a0
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x14]
je 0x42b913
add edi, eax
mov eax, dword [ebx + 0x270]
cmp edi, eax
mov dword [esp + 0x28], edi
jge 0x42b727
jmp 0x42b721
mov edi, dword [ebx + 0x270]
jmp 0x42b723
cmp eax, 0x24
jne 0x42ba06
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov edx, 0x8000
push 0
push 6
test dx, ax
je 0x42b972
mov eax, dword [ebx + 0x20]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x115
push eax
call esi
mov ecx, dword [ebx + 0x20]
push 0
push 6
push 0x114
push ecx
call esi
mov edi, dword [ebx + 0x270]
mov ecx, 1
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], edi
jmp 0x42b986
mov edx, dword [ebx + 0x20]
push 0x114
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, 1
mov edx, dword [ebx + 0x274]
mov eax, dword [ebx + 0x278]
sub edx, ecx
cmp eax, edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0xc], ecx
jge 0x42b9ce
cmp dword [esp + 0x2c], 0
jl 0x42b9ba
mov edi, dword [esp + 0x2c]
mov esi, ebx
call fcn.00432090
mov edi, dword [esp + 0x28]
test eax, eax
jg 0x42b9ce
mov eax, dword [esp + 0x2c]
mov ecx, dword [ebx + 0x274]
inc eax
dec ecx
cmp eax, ecx
mov dword [esp + 0x2c], eax
jl 0x42b9a0
mov edx, dword [ebx + 0x26c]
dec edx
cmp edi, edx
jge 0x42b727
lea ecx, [ecx]
test edi, edi
jl 0x42b9f5
mov eax, edi
mov ecx, ebx
call fcn.00432060
test eax, eax
jg 0x42b723
mov eax, dword [ebx + 0x26c]
inc edi
dec eax
cmp edi, eax
jl 0x42b9e0
jmp 0x42b723
cmp eax, 0x23
jne 0x42baf6
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
push 0
push 7
test cx, ax
je 0x42ba5c
mov edx, dword [ebx + 0x20]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x115
push edx
call esi
mov eax, dword [ebx + 0x20]
push 0
push 7
push 0x114
push eax
call esi
mov edi, dword [ebx + 0x26c]
mov ecx, 1
sub edi, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], edi
jmp 0x42ba70
mov ecx, dword [ebx + 0x20]
push 0x114
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, 1
mov eax, dword [ebx + 0x274]
mov edx, dword [ebx + 0x278]
sub eax, ecx
add edx, ecx
cmp eax, edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0xc], ecx
jle 0x42babe
lea esp, [esp]
cmp dword [esp + 0x2c], 0
jl 0x42baaa
mov edi, dword [esp + 0x2c]
mov esi, ebx
call fcn.00432090
mov edi, dword [esp + 0x28]
test eax, eax
jg 0x42babe
mov eax, dword [esp + 0x2c]
mov ecx, dword [ebx + 0x278]
dec eax
inc ecx
cmp eax, ecx
mov dword [esp + 0x2c], eax
jg 0x42ba90
mov edx, dword [ebx + 0x270]
inc edx
cmp edi, edx
jle 0x42b727
lea ecx, [ecx]
test edi, edi
jl 0x42bae5
mov eax, edi
mov ecx, ebx
call fcn.00432060
test eax, eax
jg 0x42b723
mov eax, dword [ebx + 0x270]
dec edi
inc eax
cmp edi, eax
jg 0x42bad0
jmp 0x42b723
cmp eax, 0x71
jne 0x42b592
mov edx, dword [ebx]
mov edx, dword [edx + 0x198]
or eax, 0xffffffff
or ecx, eax
push 1
push ecx
mov ecx, dword [ebx + 0x41c]
push eax
mov eax, dword [ebx + 0x420]
push eax
push ecx
mov ecx, ebx
call edx
jmp 0x42b727
mov dword [esp + 0x14], 1
mov dword [esp + 0x28], edi
mov esi, dword [ebx + 0x274]
dec esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x1c], 1
jmp 0x42bb4f
mov ecx, ebx
call fcn.00449c14
cmp esi, dword [ebx + 0x278]
jl 0x42bb90
jmp 0x42bb64
mov esi, dword [esp + 0x2c]
test esi, esi
jl 0x42bb7f
mov edi, dword [esp + 0x2c]
mov esi, ebx
call fcn.00432090
test eax, eax
jg 0x42bca4
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
dec eax
cmp eax, dword [ebx + 0x278]
mov dword [esp + 0x2c], eax
jge 0x42bb60
cmp dword [esp + 0x14], 0
jne 0x42b727
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x2c], ecx
jmp 0x42b727
cmp byte [ebx + 0x60a], 0
je 0x42bbd9
mov ecx, ebx
call fcn.0041a280
test eax, eax
je 0x42be64
mov edx, dword [eax + 0x20]
push 0
push 0
push 0x28
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [esp + 0x20], esi
inc esi
cmp dword [ebp + 8], 9
mov dword [esp + 0x14], 0
mov dword [esp + 0x2c], esi
jne 0x42bc51
cmp esi, dword [ebx + 0x274]
jne 0x42bc4a
mov eax, dword [ebx + 0x26c]
lea ecx, [eax - 1]
cmp edi, ecx
jge 0x42bc4a
inc edi
cmp edi, eax
mov dword [esp + 0x28], edi
jge 0x42bc36
test edi, edi
jl 0x42bc1f
mov eax, edi
mov ecx, ebx
call fcn.00432060
test eax, eax
jg 0x42bc2a
inc edi
cmp edi, dword [ebx + 0x26c]
jl 0x42bc0e
jmp 0x42bc32
mov dword [esp + 0x14], 1
mov dword [esp + 0x28], edi
mov esi, dword [ebx + 0x278]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x1c], 1
jmp 0x42bc51
mov ecx, ebx
call fcn.00449c14
cmp esi, dword [ebx + 0x274]
jge 0x42bc8c
jmp 0x42bc64
mov esi, dword [esp + 0x2c]
test esi, esi
jl 0x42bc7b
mov edi, dword [esp + 0x2c]
mov esi, ebx
call fcn.00432090
test eax, eax
jg 0x42bca4
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
inc eax
cmp eax, dword [ebx + 0x274]
mov dword [esp + 0x2c], eax
jl 0x42bc60
cmp dword [esp + 0x14], 0
jne 0x42b727
mov edx, dword [esp + 0x20]
mov dword [esp + 0x2c], edx
jmp 0x42b727
mov edi, dword [esp + 0x28]
jmp 0x42b727
mov esi, dword [esp + 0x2c]
push 0xffffffffffffff9c
push esi
push edi
mov eax, ebx
call fcn.0042abe0
lea ecx, [esp + 0x28]
mov eax, ebx
call fcn.0042ddb0
push 0xffffffffffffff9b
push esi
push edi
mov eax, ebx
call fcn.0042abe0
mov dword [ebx + 0x3f0], 0
mov eax, dword [esp + 0x2c]
push eax
push edi
lea ecx, [esp + 0x28]
push ecx
mov esi, ebx
call fcn.0042d500
mov eax, dword [esp + 0x2c]
push edi
mov ecx, ebx
call fcn.004329b0
test eax, eax
jne 0x42be23
mov eax, dword [ebp + 8]
add eax, 0xfffffff7
cmp eax, 0x1f
ja case.0x42bd18.10
movzx edx, byte [eax + 0x42bee0]
jmp dword [edx*4 + 0x42bec8]
push 0
push 1
mov eax, dword [ebx + 0x20]
push 0x114
push eax
jmp 0x42bdfa
mov ecx, dword [ebx + 0x20]
push 0
push 0
push 0x114
push ecx
jmp 0x42bdfa
mov edx, dword [ebx + 0x20]
push 0
push 1
push 0x115
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0x10], 1
jmp case.0x42bd18.10
mov eax, dword [ebx + 0x20]
push 0
push 0
push 0x115
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0x10], 1
jmp case.0x42bd18.10
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
push 0
test cx, ax
je 0x42bdc6
cmp dword [esp + 0x20], 0
push 0
je 0x42bd23
mov edx, dword [ebx + 0x20]
push 0x115
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebx + 0x2a8]
mov ecx, ebx
mov dword [esp + 0x10], 1
call fcn.0042fe20
jmp case.0x42bd18.10
cmp dword [esp + 0x20], 0
push 1
je 0x42bdf1
mov ecx, dword [ebx + 0x20]
push 0x115
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
mov ecx, ebx
mov dword [esp + 0x10], 1
call fcn.0042fe20
jmp case.0x42bd18.10
mov edx, dword [ebx + 0x20]
push 0x114
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0xc], 1
mov eax, dword [esp + 0x2c]
push eax
push edi
mov eax, ebx
call fcn.00432610
mov ecx, dword [ebx + 0x20]
push 1
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov edx, dword [esp + 0x2c]
push edx
push edi
mov eax, ebx
call fcn.00432610
cmp dword [esp + 0xc], 0
je 0x42be4a
mov eax, dword [ebx + 0x20]
push 0
push 8
push 0x114
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [esp + 0x10], 0
je 0x42be64
mov ecx, dword [ebx + 0x20]
push 0
push 8
push 0x115
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc