Function at 0x4296bd
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x552a93
call fcn.004fa22e
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4296d9
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x429a1f
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5a4d04
call fcn.0047bb9a
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x42970d
cmp dword [0x5a4d08], eax
jne 0x42970d
call fcn.0042cb2b
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00427045
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x429756
mov eax, edi
sub eax, 8
je 0x42996b
dec eax
je 0x4297ef
sub eax, 0xa
je 0x429762
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040e36d
jmp 0x429a2d
push esi
call fcn.004134fe
mov edi, eax
pop ecx
test edi, edi
je 0x4297e0
push edi
push 0x56165c
call fcn.0042bc86
pop ecx
pop ecx
test eax, eax
je 0x42978d
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4297d8
push edi
push 0x568bac
call fcn.0042bc86
pop ecx
pop ecx
test eax, eax
je 0x4297ab
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4297d8
push edi
push 0x568824
call fcn.0042bc86
pop ecx
pop ecx
test eax, eax
jne 0x4297cd
push edi
push 0x568494
call fcn.0042bc86
pop ecx
pop ecx
test eax, eax
je 0x4297e0
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x429756
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x429756
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x429914
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x429914
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00406d1a
cmp dword [esi + 0x2c4], edi
jne 0x4298ac
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00483e2c
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0049ecaf
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x42989e
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00406a21
push dword [eax]
push 0x5a3b24
call fcn.0042bc86
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x429896
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x42984b
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00483e54
jmp 0x4298d3
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x56d18c
call fcn.0042bc86
pop ecx
pop ecx
cmp eax, edi
je 0x4298d3
push edi
mov ecx, eax
call fcn.004a0a61
mov ecx, dword [esi + 0x78]
push 1
call fcn.00406d1a
push dword [esi + 0x78]
push 0x55c4c8
call fcn.0042bc86
pop ecx
pop ecx
cmp eax, edi
je 0x4298fc
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x429a2d
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x429a2d
test ebx, ebx
je 0x429a2d
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x429a2d
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x429a2d
cmp dword [0x5ab788], 0
je 0x429a2d
push 8
mov ecx, esi
call fcn.00429077
mov edi, eax
test edi, edi
je 0x429a2d
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0042e504
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0042e545
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.004131fb
test eax, 0x400000
je 0x4299f0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x429a2d
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00428c33
jmp 0x429a2d
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004248cd
call fcn.004fa306
ret 0xc