Function at 0x442020
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0xbc
push ebx
push ebp
mov ebp, dword [esp + 0xc8]
push esi
mov esi, ecx
push edi
lea eax, [ebp + 0x1c]
push 0
mov edx, eax
push 0
push 0x31
mov ecx, dword [edx]
mov dword [esp + 0x34], ecx
mov eax, dword [edx + 4]
mov dword [esp + 0x38], eax
mov eax, dword [edx + 8]
mov dword [esp + 0x3c], eax
sub eax, ecx
mov edx, dword [edx + 0xc]
sub eax, 2
mov dword [esp + 0x40], edx
mov edx, dword [ebp + 0x2c]
imul eax, edx
add eax, 0x270f
mov dword [esp + 0x44], edx
mov ecx, eax
mov eax, 0x68db8bad
imul ecx
mov ecx, dword [esi + 0x18]
sar edx, 0xc
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [esp + 0x50], edx
call dword [sym.imp.user32.dll_SendMessageA]
mov edx, dword [ebp + 0x18]
push eax
push edx
call dword [sym.imp.gdi32.dll_SelectObject]
mov ecx, dword [esi + 0x44]
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 0x60]
cmp eax, ecx
jge 0x4420b7
test eax, eax
jl 0x4420b7
mov ecx, dword [esi + 0x40]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x24], edx
jmp 0x4420bf
mov dword [esp + 0x24], 0
mov edi, dword [sym.imp.user32.dll_GetKeyState]
push 0x10
call edi
mov bx, ax
push 0x11
shr ebx, 0xf
and ebx, 1
call edi
mov al, byte [0x4fbe40]
mov ecx, 0x13
mov byte [esp + 0x7c], al
xor eax, eax
lea edi, [esp + 0x7d]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
test ebx, ebx
mov ebx, dword [sym.imp.user32.dll_wsprintfA]
stosb byte es:[edi], al
je 0x442245
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x442245
push 0xffffffffffffffff
call fcn.00454750
test eax, eax
je 0x442245
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x40]
test eax, eax
je 0x442156
lea edx, [esp + 0x10]
push 1
push edx
call fcn.0045ce40
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x10]
sub eax, edx
sub ecx, edi
push eax
push ecx
lea edx, [esp + 0x84]
push 0x4eff30
push edx
jmp 0x442240
add ecx, 0x6ec
push ecx
call dword [sym.imp.user32.dll_IsRectEmpty]
test eax, eax
jne 0x44219e
mov ecx, dword [esi + 8]
lea eax, [esp + 0x10]
push 1
push eax
call fcn.0045ccf0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
sub ecx, edx
mov edx, dword [esp + 0x18]
push ecx
sub edx, edi
lea eax, [esp + 0x80]
push edx
push 0x4eff30
push eax
jmp 0x442240
mov edx, dword [esi + 8]
lea ecx, [esp + 0x6c]
push ecx
mov eax, dword [edx + 0x50]
push eax
call dword [sym.imp.user32.dll_GetClientRect]
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.user32.dll_GetCursorPos]
mov eax, dword [esi + 8]
lea edx, [esp + 0x10]
push edx
mov ecx, dword [eax + 0x50]
push ecx
call dword [sym.imp.user32.dll_ScreenToClient]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x70]
push eax
push ecx
call dword [sym.imp.user32.dll_PtInRect]
test eax, eax
je 0x442245
mov esi, dword [esi + 8]
mov edi, dword [esp + 0x10]
mov edx, dword [esi + 0x10]
add edx, edi
mov dword [esp + 0x20], edx
fild dword [esp + 0x20]
fdiv qword [esi + 0x58]
fadd qword [0x4d8970]
call fcn.004c836c
mov edx, dword [esp + 0x14]
mov edi, eax
mov dword [esp + 0x10], edi
mov eax, dword [esi + 0x14]
add eax, edx
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fdiv qword [esi + 0x58]
fadd qword [0x4d8970]
call fcn.004c836c
push eax
push edi
lea ecx, [esp + 0x84]
push 0x4eff28
mov dword [esp + 0x20], eax
push ecx
call ebx
add esp, 0x10
mov al, byte [esp + 0x7c]
test al, al
je 0x44225e
push 0x100
lea edx, [esp + 0x80]
jmp 0x442338
mov dl, byte [0x4fbe40]
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x45]
mov byte [esp + 0x44], dl
mov esi, dword [esp + 0x24]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
test esi, esi
stosb byte es:[edi], al
je 0x4422f5
mov ecx, esi
call fcn.004549b0
test eax, eax
je 0x44229d
lea eax, [esp + 0x44]
push 0x4eff1c
push eax
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0x4422f5
push 0xffffffffffffffff
mov ecx, esi
call fcn.00454750
test eax, eax
je 0x4422f5
mov ecx, esi
call fcn.00454470
mov ecx, eax
xor edx, edx
add ecx, 0x32
mov esi, 0x3e8
mov eax, ecx
div esi
mov eax, 0x51eb851f
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x10624dd3
push edx
mul ecx
shr edx, 6
push edx
lea ecx, [esp + 0x4c]
push 0x4eff08
push ecx
call ebx
mov eax, dword [esp + 0x48]
add esp, 0x10
test eax, eax
je 0x442326
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x442326
push 0xffffffffffffffff
lea edx, [esp + 0x2c]
push 0xffffffffffffffff
push edx
call dword [sym.imp.user32.dll_InflateRect]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x40]
inc eax
push 0x200
add ecx, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], ecx
jmp 0x442334
mov ebx, dword [esp + 0x28]
push 0x100
inc ebx
mov dword [esp + 0x2c], ebx
lea edx, [esp + 0x48]
mov ecx, dword [ebp + 0x18]
lea eax, [esp + 0x2c]
push edx
push eax
push ecx
call dword [sym.imp.comctl32.dll_DrawStatusTextA]
mov edx, dword [esp + 0x3c]
mov eax, dword [ebp + 0x18]
push edx
push eax
call dword [sym.imp.gdi32.dll_SelectObject]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xbc
ret 4