Function at 0x4021e3
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x45cd4b
call fcn.0041f258
sub esp, 0x24
push ebx
push edi
mov edi, ecx
xor ebx, ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x18], ebx
push ecx
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x10], ebx
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x44]
test al, al
jne 0x402216
inc al
jmp 0x4023ca
cmp byte [ebp + 8], bl
jne 0x402222
xor al, al
jmp 0x4023ca
mov eax, dword [edi]
mov ecx, edi
push esi
push dword [ebp - 0x18]
call dword [eax + 0x54]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push eax
push 0xbb
push dword [edi + 4]
mov dword [ebp - 0x14], eax
call esi
push dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x54]
push ebx
push eax
push 0xbb
push dword [edi + 4]
mov dword [ebp + 8], eax
mov dword [ebp - 0x20], eax
call esi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], edi
mov esi, eax
mov dword [ebp - 0x2c], ebx
call fcn.004023dc
mov dword [ebp - 4], ebx
cmp esi, dword [ebp - 0x10]
jge 0x4022ac
mov eax, dword [ebp + 8]
push ebx
inc eax
push eax
push 0xbb
push dword [edi + 4]
mov dword [ebp + 8], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x10]
jge 0x4022a0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
jmp 0x4022af
cmp esi, dword [ebp - 0x20]
jne 0x40229b
mov bl, 1
jmp 0x4023ba
mov esi, dword [ebp - 0x14]
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x402373
cmp esi, dword [ebp + 8]
jge 0x4023ac
mov dword [ebp - 0x20], 9
push dword [ebp - 0x2c]
call fcn.0041f2ab
pop ecx
push ebx
push esi
push 0xbb
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], eax
call fcn.004023dc
mov eax, dword [ebp - 0x1c]
mov ecx, ebx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
movzx edx, word [edx + eax*2]
cmp dx, word [ebp - 0x20]
je 0x40233e
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax*2]
mov ecx, ebx
cmp dx, 0x20
jne 0x402342
add eax, 2
inc ecx
mov dword [ebp - 0x24], eax
mov eax, dword [edi]
mov dword [ebp - 0x14], ecx
mov ecx, edi
call dword [eax + 0xa4]
mov ecx, dword [ebp - 0x14]
cmp eax, ecx
jle 0x402342
mov eax, dword [ebp - 0x24]
movzx edx, word [eax]
cmp dx, word [ebp - 0x20]
jne 0x402311
inc ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x1c]
mov edx, dword [edi]
add eax, ecx
push eax
push dword [ebp - 0x1c]
mov ecx, edi
call dword [edx + 0x48]
mov eax, dword [edi]
mov ecx, edi
push 0x463758
call dword [eax + 0x4c]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x10], eax
cmp esi, dword [ebp + 8]
jl 0x4022d0
jmp 0x4023af
cmp esi, dword [ebp + 8]
jge 0x4023ac
push ebx
push esi
push 0xbb
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [edi]
mov ecx, edi
push eax
push eax
call dword [edx + 0x48]
mov eax, dword [edi]
mov ecx, edi
push 0x46375c
call dword [eax + 0x4c]
mov eax, dword [ebp - 0x10]
inc eax
inc esi
mov dword [ebp - 0x10], eax
cmp esi, dword [ebp + 8]
jl 0x402378
jmp 0x4023af
mov eax, dword [ebp - 0x10]
mov edx, dword [edi]
mov ecx, edi
push eax
push dword [ebp - 0x18]
call dword [edx + 0x48]
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x2c]
call fcn.0041f2ab
pop ecx
mov al, bl
pop esi
mov ecx, dword [ebp - 0xc]
pop edi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4