Function at 0x4138d5
Capabilities:
Log keystrokes via polling
Reference sql statements

Disassembly:
push ebp
push ebx
mov edx, 0xc
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4138dc
call fcn.0048d6d0
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0x4e
call fcn.00473529
call fcn.0042e5e2
add dword [esp], edx
call fcn.0041a15d
call fcn.0048d660
push edx
call fcn.0048d530
pop edx
push eax
mov edx, 0x5d1a70
push edx
call fcn.0048d570
mov edx, dword [0x8f9b58]
push edx
call fcn.0048d570
call fcn.0042e600
mov edx, eax
pop ecx
push ecx
call fcn.0042e600
mov ecx, eax
call fcn.0042e590
je 0x413992
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0x42
call fcn.00473529
call fcn.0048d660
mov edx, dword [0x8f9b9c]
pop ecx
push ecx
call fcn.0042e600
mov ecx, eax
call fcn.0042e590
jne 0x413992
jmp 0x413f78
push 1
call fcn.0040e3ec
push 7
push 0x5de530
lea eax, [esp + 8]
push eax
push 0x1c
call fcn.00486c28
mov dword [esp + 8], 0
jmp 0x4139bf
push 0x4d
call fcn.00478744
cmp eax, dword [esp + 8]
jl 0x413c94
push dword [esp + 8]
push 0x4d
call fcn.00473779
mov ebx, eax
and ebx, 1
and ebx, ebx
je 0x413c8a
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0
push dword [esp + 0x18]
push 0x4d
call fcn.00478771
call fcn.0042e5e2
add dword [esp], edx
call fcn.0041a15d
lea eax, [esp + 0x10]
push eax
call fcn.0048d5d0
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0x42
call fcn.00473529
call fcn.0048d660
mov edx, dword [0x8f9b9c]
pop ecx
push ecx
call fcn.0042e600
mov ecx, eax
call fcn.0042e590
je 0x413a99
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.SELECT_key__Description__Lic__Blocked__ActivCount__Comment_FROM_keys_WHERE_key
push edx
call fcn.0048d570
mov edx, dword [esp + 0x10]
push edx
call fcn.0048d570
mov edx, 0x5cf830
push edx
call fcn.0048d570
lea eax, [esp + 0x14]
push eax
call fcn.0048d5d0
jmp 0x413ae0
push edx
call fcn.0048d530
pop edx
push eax
mov edx, 0x5dbb08
push edx
call fcn.0048d570
mov edx, dword [esp + 0x10]
push edx
call fcn.0048d570
mov edx, str._OR_Description
push edx
call fcn.0048d570
mov edx, dword [esp + 0x10]
push edx
call fcn.0048d570
mov edx, 0x5d5c64
push edx
call fcn.0048d570
lea eax, [esp + 0x14]
push eax
call fcn.0048d5d0
push dword [esp + 0x10]
push dword [0x8f9c3c]
call fcn.0047f11d
mov ebx, eax
and ebx, ebx
je 0x413c8a
push dword [0x8f9c3c]
call fcn.0047f12f
and eax, eax
je 0x413c7f
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0
push dword [0x8f9c3c]
call fcn.0047f157
lea eax, [esp + 0x18]
push eax
call fcn.0048d5d0
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 1
push dword [0x8f9c3c]
call fcn.0047f157
lea eax, [esp + 0x1c]
push eax
call fcn.0048d5d0
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 2
push dword [0x8f9c3c]
call fcn.0047f157
lea eax, [esp + 0x20]
push eax
call fcn.0048d5d0
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 3
push dword [0x8f9c3c]
call fcn.0047f157
lea eax, [esp + 0x24]
push eax
call fcn.0048d5d0
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 4
push dword [0x8f9c3c]
call fcn.0047f157
lea eax, [esp + 0x28]
push eax
call fcn.0048d5d0
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 5
push dword [0x8f9c3c]
call fcn.0047f157
lea eax, [esp + 0x2c]
push eax
call fcn.0048d5d0
push dword [esp + 0x20]
mov edx, 0x5cf064
pop ecx
call fcn.0042e590
je 0x413c2d
push dword [esp + 0x14]
call fcn.00413fd1
and eax, eax
je 0x413c2d
mov eax, 1
jmp 0x413c2f
xor eax, eax
and eax, eax
je 0x413c75
push dword [esp]
call fcn.00486cba
mov edx, dword [esp + 0x14]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
mov ebp, dword [esp + 8]
lea eax, [ebp + 8]
push eax
call fcn.0048d5d0
mov edx, dword [esp + 0x18]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d570
lea eax, [ebp + 0xc]
push eax
call fcn.0048d5d0
call fcn.0041a818
jmp 0x413af9
push dword [0x8f9c3c]
call fcn.0047f184
inc dword [esp + 8]
jno 0x4139bf
push dword [esp]
call fcn.00486d58
mov ebx, eax
and ebx, ebx
jle 0x413f3f
mov eax, str.Block_key:
push eax
call fcn.0040d182
mov eax, str.Begin_Transaction
push eax
push dword [0x8f9c3c]
call fcn.0047f005
mov ebx, eax
and ebx, ebx
jne 0x413d0b
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.Add_link_error
push edx
call fcn.0048d570
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
call fcn.0047f041
pop eax
call fcn.0042e5e2
add dword [esp], edx
call fcn.00420059
call fcn.0042e610
push 0
push 0x68
call fcn.00471d63
mov dword [esp + 0x2c], 0
push dword [esp]
call fcn.00486d62
push dword [esp]
call fcn.00486d77
or eax, eax
je 0x413eda
mov ebp, dword [esp + 4]
push dword [ebp + 8]
push dword [0x8f9c3c]
call fcn.00417669
mov ebp, dword [esp + 4]
push dword [ebp + 8]
call fcn.0040d182
mov ebx, dword [esp + 0x2c]
inc ebx
mov dword [esp + 0x2c], ebx
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
mov edx, 0x5cfa2e
push edx
call fcn.0048d570
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
mov eax, dword [esp + 0x3c]
cdq
push edx
push eax
call fcn.0048ad90
pop eax
call fcn.0048d660
push 0x68
call fcn.0042e5e2
add dword [esp + 4], edx
call fcn.004734ac
call fcn.0042e610
push 0x4d
call fcn.00478744
mov dword [esp + 8], eax
jmp 0x413dc6
xor eax, eax
cmp eax, dword [esp + 8]
jg 0x413eb7
push dword [esp + 8]
push 0x4d
call fcn.00473779
mov ebx, eax
and ebx, 1
and ebx, ebx
je 0x413ea8
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0
push dword [esp + 0x14]
push 0x4d
call fcn.00478771
call fcn.0048d660
mov ebp, dword [esp + 8]
mov edx, dword [ebp + 8]
pop ecx
push ecx
call fcn.0042e600
mov ecx, eax
call fcn.0042e590
jne 0x413e8d
push edx
call fcn.0048d530
pop edx
push eax
mov ebp, dword [esp + 8]
push dword [ebp + 0xc]
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
push 0
push dword [esp + 0x20]
push 0x4d
call fcn.00478771
call fcn.0042e5e2
add dword [esp], edx
call fcn.0041a15d
call fcn.0042e5e2
add dword [esp], edx
call fcn.0048ad20
call fcn.0042e610
mov ebx, eax
and ebx, ebx
jg 0x413e8d
jmp 0x413e94
mov eax, 1
jmp 0x413e96
xor eax, eax
and eax, eax
je 0x413ea8
push dword [esp + 8]
push 0x4d
call fcn.004787bd
call fcn.0041a818
dec dword [esp + 8]
jno 0x413dc6
push 0x1b
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x413ed5
call fcn.0047af05
mov ebx, eax
and ebx, ebx
jne 0x413ed5
jmp 0x413eda
jmp 0x413d2a
mov eax, str.Commit
push eax
push dword [0x8f9c3c]
call fcn.0047f005
mov ebx, eax
and ebx, ebx
jne 0x413f34
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
mov edx, str.Add_link_error
push edx
call fcn.0048d570
push edx
call fcn.0048d530
pop edx
push eax
push edx
call fcn.0048d530
pop edx
push eax
call fcn.0047f041
pop eax
call fcn.0042e5e2
add dword [esp], edx
call fcn.00420059
call fcn.0042e610
mov eax, 0x5cf064
push eax
call fcn.0040d182
push dword [esp]
call fcn.00486dab
push 0x4d
call fcn.004735b4
push dword [0x8f9c3c]
call fcn.00411392
push 0
call fcn.0040e3ec
mov eax, 0x5cf064
push eax
push 0x68
call fcn.004734ac
xor eax, eax
push dword [esp + 0x24]
call fcn.0048d760
push dword [esp + 0x1c]
call fcn.0048d760
push dword [esp + 0xc]
call fcn.0048d760
push dword [esp + 0x18]
call fcn.0048d760
push dword [esp + 0x10]
call fcn.0048d760
push dword [esp + 0x28]
call fcn.0048d760
push dword [esp + 0x14]
call fcn.0048d760
push dword [esp + 0x20]
call fcn.0048d760
push eax
push dword [esp + 4]
call fcn.00486dab
pop eax
add esp, 0x30
pop ebx
pop ebp
ret