Function at 0x42e5f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe4
mov eax, dword [0x46759c]
xor eax, ebp
mov dword [ebp - 0xc], eax
call fcn.00429b00
mov dword [ebp - 4], eax
mov dword [ebp - 8], 1
mov eax, dword [ebp + 0xc]
cmp dword [eax + 4], 0x100
jne 0x42e782
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 8
jne 0x42e782
push 0x32
lea edx, [ebp - 0xe0]
push edx
push 0x32
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
call fcn.00403da0
movzx edx, al
test edx, edx
je 0x42e782
push 0x32
lea eax, [ebp - 0x78]
push eax
call fcn.0043aac6
add esp, 8
push 0x32
lea ecx, [ebp - 0xe0]
push ecx
call fcn.0043aac6
add esp, 8
push str.INPUT
lea edx, [ebp - 0x78]
push edx
call fcn.00432511
add esp, 8
test eax, eax
jne 0x42e75d
push str.TEXT
lea eax, [ebp - 0xe0]
push eax
call fcn.00432511
add esp, 8
test eax, eax
je 0x42e754
push str.PASSWORD
lea ecx, [ebp - 0xe0]
push ecx
call fcn.00432511
add esp, 8
test eax, eax
je 0x42e754
push str.SEARCH
lea edx, [ebp - 0xe0]
push edx
call fcn.00432511
add esp, 8
test eax, eax
je 0x42e754
push str.EMAIL
lea eax, [ebp - 0xe0]
push eax
call fcn.00432511
add esp, 8
test eax, eax
je 0x42e754
push 0x4563f8
lea ecx, [ebp - 0xe0]
push ecx
call fcn.00432511
add esp, 8
test eax, eax
je 0x42e754
push 0x456400
lea edx, [ebp - 0xe0]
push edx
call fcn.00432511
add esp, 8
test eax, eax
je 0x42e754
push str.NUMBER
lea eax, [ebp - 0xe0]
push eax
call fcn.00432511
add esp, 8
test eax, eax
je 0x42e754
push str.TIME
lea ecx, [ebp - 0xe0]
push ecx
call fcn.00432511
add esp, 8
test eax, eax
jne 0x42e75d
mov dword [ebp - 8], 1
jmp 0x42e782
push str.TEXTAREA
lea edx, [ebp - 0x78]
push edx
call fcn.00432511
add esp, 8
test eax, eax
jne 0x42e77b
mov dword [ebp - 8], 1
jmp 0x42e782
mov dword [ebp - 8], 0
mov eax, dword [ebp + 0xc]
cmp dword [eax + 4], 0x100
jne 0x42e7d8
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0x74
jne 0x42e7d8
push str.enable_f5_refresh
push 0x456438
mov ecx, dword [ebp - 4]
call fcn.00406640
mov ecx, eax
call fcn.00406640
mov ecx, eax
call fcn.004066b0
mov byte [ebp - 0xe1], al
movzx edx, byte [ebp - 0xe1]
test edx, edx
je 0x42e7d1
mov dword [ebp - 8], 1
jmp 0x42e7d8
mov dword [ebp - 8], 0
mov eax, dword [ebp + 0xc]
cmp dword [eax + 4], 0x100
jne 0x42e893
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0xa6
je 0x42e88c
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 0xab
je 0x42e88c
mov eax, dword [ebp + 0xc]
cmp dword [eax + 8], 0xa7
je 0x42e88c
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0xac
je 0x42e88c
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 0xa8
je 0x42e88c
mov eax, dword [ebp + 0xc]
cmp dword [eax + 8], 0xaa
je 0x42e88c
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0xa9
je 0x42e88c
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 0x70
je 0x42e88c
mov eax, dword [ebp + 0xc]
cmp dword [eax + 8], 0x2f
je 0x42e88c
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0x12
je 0x42e88c
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 0x2a
je 0x42e88c
mov eax, dword [ebp + 0xc]
cmp dword [eax + 8], 0xa5
je 0x42e88c
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0xa4
je 0x42e88c
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 0xfb
jne 0x42e893
mov dword [ebp - 8], 0
mov eax, dword [ebp + 0xc]
cmp dword [eax + 4], 0x104
jne 0x42e8b8
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0x25
je 0x42e8b1
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 0x27
jne 0x42e8b8
mov dword [ebp - 8], 0
mov eax, dword [ebp + 0xc]
cmp dword [eax + 4], 0x100
jne 0x42e8fe
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0x50
je 0x42e8e8
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 0x4f
je 0x42e8e8
mov eax, dword [ebp + 0xc]
cmp dword [eax + 8], 0x4c
je 0x42e8e8
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 8], 0x4e
jne 0x42e8fe
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
test edx, edx
jge 0x42e8fe
mov dword [ebp - 8], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.004320d5
mov esp, ebp
pop ebp
ret 0x10