Function at 0x532e6c
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
mov esi, ecx
cmp dword [ebx + 4], 0x20a
jne 0x532ecc
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0xb4]
test eax, eax
je 0x532ecc
push edi
push edi
push 0x157
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x532ecc
push dword [ebx + 0xc]
mov eax, dword [esi + 0x80]
push dword [ebx + 8]
push dword [ebx + 4]
mov eax, dword [eax + 0xb4]
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
inc eax
jmp 0x533148
cmp dword [ebx + 4], 0x100
jne 0x533140
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x532fe1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x532fe1
mov eax, dword [esi + 0x80]
mov ecx, dword [eax + 0xb4]
test ecx, ecx
je 0x532fe1
mov eax, dword [ebx + 8]
cmp eax, 0xd
je 0x532f4b
cmp eax, 0x20
jbe 0x532fe1
cmp eax, 0x24
jbe 0x532f33
cmp eax, 0x26
je 0x532f33
cmp eax, 0x28
jne 0x532fe1
push edi
push edi
push 0x157
push dword [ecx + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x532fe1
mov ecx, esi
call fcn.004b6e65
mov eax, dword [esi + 0x80]
push edi
push edi
push 0x157
mov eax, dword [eax + 0xb4]
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x532ea6
mov ecx, dword [esi + 0x80]
mov ecx, dword [ecx + 0xb4]
call fcn.004b17a7
test eax, eax
je 0x532ec4
mov eax, dword [esi + 0x80]
mov ecx, esi
add eax, 0xb8
push eax
call fcn.004b1ab1
mov ecx, dword [esi + 0x80]
mov ecx, dword [ecx + 0xb4]
call fcn.004b17a7
mov ecx, dword [esi + 0x80]
mov edx, eax
mov eax, dword [ecx + 0xb4]
test eax, eax
je 0x532fc8
mov edi, dword [eax + 0x20]
movzx eax, word [ecx + 0x20]
push edi
push eax
push 0x111
push dword [edx + 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x532ec4
mov eax, dword [ebx + 8]
sub eax, 9
je 0x5330ff
sub eax, 0x12
je 0x5330cb
sub eax, 0xb
je 0x533005
dec eax
sub eax, 1
jne 0x533140
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x533140
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x533140
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0xb4]
test eax, eax
je 0x533140
push edi
push edi
push 0x157
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x532ec4
mov eax, dword [esi + 0x80]
push edi
push 1
push 0x14f
mov eax, dword [eax + 0xb4]
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0xb4]
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.004b154c
test eax, eax
je 0x532ec4
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0xb4]
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.004b154c
mov ecx, dword [esi + 0x80]
push 1
add ecx, 0x90
push ecx
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x532ec4
mov eax, dword [esi + 0x80]
mov eax, dword [eax + 0xb4]
test eax, eax
je 0x5330eb
push edi
push edi
push 0x14f
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, esi
call fcn.004b199e
test eax, eax
je 0x533140
mov ecx, esi
call fcn.004b199e
jmp 0x533134
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.004b154c
test eax, eax
je 0x533140
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.004b154c
push edi
push dword [esi + 0x20]
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push eax
call fcn.004b154c
mov ecx, eax
call fcn.004b6e65
jmp 0x532ec4
push ebx
mov ecx, esi
call fcn.004b383d
pop edi
pop esi
pop ebx
pop ebp
ret 4