Function at 0x401265
Capabilities:
Log keystrokes via polling

Disassembly:
push 0xc0
mov eax, 0x4c7e37
call fcn.004a9047
cmp byte [0x4fdde4], 1
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
jne 0x40128f
mov byte [0x4fdde4], 0
jmp 0x4014e0
xor ebx, ebx
cmp dword [eax + 4], ebx
je 0x4014e0
mov esi, dword [eax + 8]
cmp esi, ebx
je 0x4014e0
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x4014e0
lea eax, [ebp - 0x4c]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x4c]
push 1
cdq
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x40]
sar edi, 1
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov byte [ebp - 0x4d], bl
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x401315
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0x4c]
jl 0x401315
cmp ecx, dword [ebp - 0x44]
jg 0x401315
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x48]
jl 0x401315
cmp eax, dword [ebp - 0x40]
jg 0x401315
mov edi, ecx
mov esi, eax
mov byte [ebp - 0x4d], 1
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 4], ebx
call fcn.0040100e
lea ebx, [ebp - 0x6c]
mov ecx, eax
call fcn.004011d4
mov edx, dword [ebp - 0x6c]
mov eax, edx
cmp edx, dword [ebp - 0x68]
je 0x401369
push 0x14
pop ecx
mov ebx, dword [eax + 8]
add ebx, ecx
cmp ebx, edi
jg 0x401361
mov ebx, dword [eax + 0x10]
sub ebx, ecx
cmp edi, ebx
jg 0x401361
mov ebx, dword [eax + 0xc]
add ebx, ecx
cmp ebx, esi
jg 0x401361
mov ebx, dword [eax + 0x14]
sub ebx, ecx
cmp esi, ebx
jle 0x401377
add eax, 0x58
cmp eax, dword [ebp - 0x68]
jne 0x40133d
test edx, edx
je 0x4014e0
push edx
jmp 0x4014da
mov esi, eax
push 0x16
pop ecx
lea edi, [ebp - 0xcc]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc8]
lea eax, [ecx - 0x60]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x3c], eax
lea eax, [ecx - 0x78]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x38], eax
lea eax, [ecx - 0x90]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x34], eax
lea eax, [ecx - 0xa8]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x30], eax
lea eax, [ecx - 0xc0]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x2c], eax
xor edi, edi
or ecx, 0xffffffff
mov dword [ebp - 0x28], 0x60
mov dword [ebp - 0x24], 0x78
mov dword [ebp - 0x20], 0x90
mov dword [ebp - 0x1c], 0xa8
mov dword [ebp - 0x18], 0xc0
xor eax, eax
test ecx, ecx
jns 0x4013fe
mov ecx, dword [ebp + eax*4 - 0x3c]
jmp 0x40140a
mov edx, dword [ebp + eax*4 - 0x3c]
cmp ecx, edx
jle 0x40140a
mov ecx, edx
mov edi, eax
inc eax
cmp eax, 5
jl 0x4013f4
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x54]
mov ebx, dword [ebp + edi*4 - 0x28]
mov ecx, dword [esi + 4]
push eax
mov dword [ebp - 0x58], ebx
call fcn.0042150b
mov ecx, eax
call fcn.004209eb
mov ecx, dword [esi + 4]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x48]
push eax
call fcn.0042150b
mov ecx, eax
call fcn.004209eb
mov dword [ebp - 0x74], eax
test edi, edi
jle 0x40149d
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xc4]
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp + edi*4 - 0x28]
mov eax, ecx
imul eax, dword [ebp - 0x54]
push 0x60
cdq
pop ebx
idiv ebx
cmp eax, dword [ebp - 0x70]
jge 0x40148f
mov eax, ecx
imul eax, dword [ebp - 0x74]
push ebx
cdq
pop ecx
idiv ecx
mov ecx, dword [ebp - 0xb8]
sub ecx, dword [ebp - 0xc0]
cmp eax, ecx
jl 0x401499
dec edi
test edi, edi
jg 0x40145f
mov ebx, dword [ebp - 0x58]
jmp 0x40149d
mov ebx, dword [ebp + edi*4 - 0x28]
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x4014d1
call fcn.0042150b
mov ecx, eax
call fcn.00420965
cmp eax, ebx
je 0x4014d1
cmp byte [ebp - 0x4d], 0
mov eax, dword [esi + 0xc]
mov byte [0x4fdde4], 1
je 0x4014c7
xor eax, eax
inc eax
mov ecx, dword [esi + 4]
push eax
push ebx
call fcn.00425aa6
cmp dword [ebp - 0x6c], 0
je 0x4014e0
push dword [ebp - 0x6c]
call fcn.004a79c0
pop ecx
call fcn.004a9091
ret 4