Function at 0x5392ba
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x594000
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x1b8]
mov ecx, dword [eax + 0xec4]
test ecx, ecx
jne 0x5398ca
mov ecx, dword [0x64b2e0]
mov dword [ecx + 0xa38], 0
mov ecx, esi
mov dword [esi + 0x22c], 1
call fcn.00454a00
mov edx, dword [esi + 0x1b8]
mov ebp, dword [esp + 0x40]
mov ebx, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
mov dword [edx + 0xf0c], ebp
call ebx
movsx edi, ax
mov ecx, esi
mov dword [esp + 0x18], edi
call sub.MFC42.DLL_CWnd::GetStyle
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetStyle
and eax, 4
mov dword [esp + 0x40], eax
je 0x53938e
cmp ebp, 0xd
jne 0x53934e
test edi, edi
jge 0x539358
mov ecx, esi
call sub.MFC42.DLL_CWnd::Default
mov eax, dword [esi + 0x20]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x5398ca
cmp ebp, 0x2e
je 0x539374
cmp ebp, 8
je 0x539374
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetStyle
and eax, 0x1000
mov dword [esp + 0x40], eax
je 0x53938e
cmp ebp, 0xd
jne 0x53938e
jmp 0x5398ec
mov ecx, esi
call sub.MFC42.DLL_CWnd::Default
mov edx, dword [esi + 0x20]
push 1
push 0
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x5398ca
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetDlgCtrlID
add eax, 0xfffff830
cmp ebp, 0x2e
mov dword [esp + 0x10], eax
jne 0x5393c3
mov edx, dword [esi]
push eax
mov eax, dword [esi + 0x1b8]
mov ecx, dword [eax + 0x444]
push ecx
mov ecx, esi
call dword [edx + 0xfc]
test eax, eax
jne 0x5398ca
push 0x10
call ebx
mov ecx, esi
movsx ebx, ax
call sub.MFC42.DLL_CWnd::SetFocus
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.USER32.dll_ShowCaret]
mov eax, dword [esi + 0x1b8]
lea edi, [esi + 0x1f0]
mov dword [edi], 0xffffffff
mov ecx, dword [eax + 0xec0]
test ecx, ecx
mov ecx, dword [esp + 0x10]
je 0x539404
cmp ecx, 1
jg 0x5398c3
cmp ebp, 0x71
mov dword [eax + 0x8e4], ecx
jae 0x539414
cmp ebp, 0x77
jb 0x539423
mov ecx, dword [esi + 0x1b8]
push ebp
mov eax, dword [ecx]
call dword [eax + 0x1f0]
cmp ebp, 0x26
je 0x539437
cmp ebp, 0x28
je 0x539437
cmp ebp, 9
je 0x539437
cmp ebp, 0xd
jne 0x539476
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [ecx + 0x444]
mov edx, dword [ecx]
call dword [edx + 0x29c]
cmp al, 0x44
jne 0x539476
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov eax, dword [ecx + 0x444]
mov edx, dword [ecx]
push eax
call dword [edx + 0x298]
test eax, eax
je 0x5398ca
cmp ebp, 0x26
je 0x53968e
cmp ebp, 9
jne 0x53949f
test ebx, ebx
jl 0x53968e
mov eax, dword [esp + 0x10]
cmp eax, 1
jne 0x5394f7
mov ebp, 0xd
jmp 0x539842
cmp ebp, 0x28
je 0x53948c
cmp ebp, 0x1b
jne 0x539835
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [ecx + 0x444]
mov edx, dword [ecx]
call dword [edx + 0x29c]
cmp al, 0x44
jne 0x5394e4
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov eax, dword [ecx + 0x444]
mov edx, dword [ecx]
push eax
call dword [edx + 0x298]
mov ecx, dword [esi + 0x1b8]
mov edx, dword [ecx]
call dword [edx + 0x288]
jmp 0x5398ca
mov ecx, dword [esi + 0x1b8]
push eax
mov edx, dword [ecx]
call dword [edx + 0x224]
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
mov ebx, eax
mov edx, dword [ecx + 0x444]
shl ebx, 5
mov edx, dword [edx + 0x28]
mov dl, byte [edx + ebx + 0x18]
and edx, 0xf0
mov dword [esp + 0x40], edx
je 0x539598
mov edx, dword [ecx]
push eax
call dword [edx + 0x234]
mov eax, dword [esi + 0x1b8]
mov ecx, dword [eax + 0x444]
mov eax, dword [esp + 0x10]
mov edx, dword [ecx + 0x128]
mov ecx, dword [edx + eax*4]
push ecx
call fcn.0044e460
add esp, 4
test eax, eax
jne 0x539594
mov ecx, dword [esi + 0x1b8]
lea eax, [esp + 0x10]
push eax
push edi
mov edx, dword [ecx]
push ebp
call dword [edx + 0x200]
cmp eax, 0x1b
jne 0x53958c
mov ecx, dword [esi + 0x1b8]
push 2
mov edx, dword [ecx]
call dword [edx + 0x1d0]
jmp 0x5398ca
test eax, eax
je 0x5398ca
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x1b8]
push eax
mov eax, dword [ecx + 0x444]
mov edx, dword [ecx]
push eax
call dword [edx + 0x1b4]
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
mov dword [edi], 0xffffffff
push eax
mov edx, dword [ecx]
call dword [edx + 0x230]
mov ecx, dword [esi + 0x1b8]
mov dword [esp + 0x10], eax
push eax
mov ecx, dword [ecx + 0x444]
mov edx, dword [ecx]
call dword [edx + 0x2a8]
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
push edx
mov eax, dword [ecx]
call dword [eax + 0x21c]
mov eax, dword [esi + 0x1b8]
mov ecx, dword [eax + 0x444]
mov edx, dword [ecx + 0x64]
mov ecx, dword [esp + 0x10]
test byte [edx + ecx*4], 4
je 0x539612
mov dword [edi], 0
mov eax, dword [eax + 0x444]
push 0
push eax
mov edx, dword [eax + 0x1c]
lea eax, [esp + 0x18]
push eax
push edi
push ebp
call dword [edx + 0x90]
mov ebx, eax
add esp, 0x14
cmp ebx, 0x1b
je 0x539b16
cmp ebx, 2
jne 0x53964c
mov ecx, dword [esi + 0x1b8]
mov edx, dword [ecx]
call dword [edx + 0x23c]
cmp dword [edi], 0xffffffff
je 0x539676
test ebx, ebx
jne 0x539668
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
push edx
mov eax, dword [ecx]
call dword [eax + 0x220]
cmp dword [edi], 0
jne 0x539835
jmp 0x5395ae
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x220]
jmp 0x5398ca
mov eax, dword [esp + 0x10]
cmp eax, 1
jne 0x5396a1
mov ebp, 0xd
jmp 0x539842
mov ecx, dword [esi + 0x1b8]
push eax
mov edx, dword [ecx]
call dword [edx + 0x224]
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
mov ebx, eax
mov edx, dword [ecx + 0x444]
shl ebx, 5
mov edx, dword [edx + 0x28]
mov dl, byte [edx + ebx + 0x18]
and edx, 0xf0
mov dword [esp + 0x40], edx
je 0x539731
mov edx, dword [ecx]
push eax
call dword [edx + 0x234]
mov eax, dword [esi + 0x1b8]
mov ecx, dword [eax + 0x444]
mov eax, dword [esp + 0x10]
mov edx, dword [ecx + 0x128]
mov ecx, dword [edx + eax*4]
push ecx
call fcn.0044e460
add esp, 4
test eax, eax
jne 0x53972d
mov ecx, dword [esi + 0x1b8]
lea eax, [esp + 0x10]
push eax
push edi
mov edx, dword [ecx]
push ebp
call dword [edx + 0x200]
cmp eax, 0x1b
je 0x539577
test eax, eax
je 0x5398ca
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x1b8]
push eax
mov edx, dword [ecx]
call dword [edx + 0x234]
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
push edx
mov edx, dword [ecx + 0x444]
mov eax, dword [ecx]
push edx
call dword [eax + 0x1b4]
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x1b8]
mov dword [edi], 0xffffffff
push eax
mov ebx, eax
mov edx, dword [ecx]
call dword [edx + 0x22c]
mov ecx, dword [esi + 0x1b8]
mov dword [esp + 0x10], eax
push eax
mov ecx, dword [ecx + 0x444]
mov edx, dword [ecx]
call dword [edx + 0x2a8]
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
push edx
mov eax, dword [ecx]
call dword [eax + 0x21c]
mov eax, dword [esi + 0x1b8]
mov ecx, dword [eax + 0x444]
mov edx, dword [ecx + 0x64]
mov ecx, dword [esp + 0x10]
test byte [edx + ecx*4], 4
je 0x5397c0
mov dword [edi], 0
mov eax, dword [eax + 0x444]
push 0
push eax
mov edx, dword [eax + 0x1c]
lea eax, [esp + 0x18]
push eax
push edi
push ebp
call dword [edx + 0x90]
add esp, 0x14
cmp eax, 0x1b
je 0x539577
cmp dword [edi], 0xffffffff
je 0x539813
test eax, eax
jne 0x539801
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x220]
mov eax, dword [esp + 0x10]
cmp ebx, eax
je 0x539839
cmp dword [edi], 0
jne 0x539839
jmp 0x53975e
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
push edx
mov eax, dword [ecx]
call dword [eax + 0x220]
mov dword [esi + 0x1f0], 0
jmp 0x5398ca
mov eax, dword [esp + 0x10]
cmp eax, 1
jne 0x5399c6
mov ecx, dword [esi + 0x1b8]
mov eax, dword [ecx + 0x8a8]
test eax, eax
jne 0x5399af
cmp ebp, 0x4e
je 0x539994
cmp ebp, 0x6e
je 0x539994
cmp ebp, 0x21
jne 0x53987f
mov eax, dword [ecx + 0x20]
push 0
push 0xa5b6
push 0x111
push eax
jmp 0x5398bd
cmp ebp, 0x22
je 0x539979
cmp ebp, 9
je 0x539979
cmp ebp, 0x24
jne 0x5398a8
mov ecx, dword [ecx + 0x20]
push 0
push 0xa5be
push 0x111
push ecx
jmp 0x5398bd
cmp ebp, 0x23
jne 0x5398df
push 0
push 0xa5bd
mov edx, dword [ecx + 0x20]
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, esi
call sub.MFC42.DLL_CWnd::Default
mov ecx, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x2c
ret 0xc
cmp ebp, 0x2d
jne 0x539903
mov eax, dword [ecx]
call dword [eax + 0x218]
mov ecx, esi
call sub.MFC42.DLL_CWnd::Default
mov ecx, dword [esi + 0x20]
push 1
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x5398ca
cmp ebp, 0x2a
jne 0x539911
push 0
push 0xa5a3
jmp 0x5398b4
cmp ebp, 0xd
jne 0x53996b
mov ecx, esi
call sub.MFC42.DLL_CWnd::Default
mov eax, dword [esi + 0x20]
push 0
push 0
push 0xb8
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jne 0x53994a
mov ecx, dword [esi + 0x1b8]
push 1
mov ecx, dword [ecx + 0x444]
mov edx, dword [ecx]
call dword [edx + 0x2ac]
mov eax, dword [esi + 0x1b8]
push 0
push 0x40a
push 0x111
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x5398ca
mov edx, dword [ecx]
push ebp
call dword [edx + 0x214]
jmp 0x539ac1
mov eax, dword [ecx + 0x20]
push 0
push 0xa5a7
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x539ac1
mov ecx, dword [ecx + 0x20]
push 0
push 0x400
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x539ac1
cmp ebp, 0x21
je 0x539aca
cmp ebp, 0x22
jne 0x539ac1
jmp 0x539aca
cmp ebp, 0x21
je 0x5399d4
cmp ebp, 0x22
jne 0x539ac1
mov edx, dword [esi + 0x1b8]
push eax
mov ecx, dword [edx + 0x444]
mov edx, dword [ecx]
call dword [edx + 0x29c]
cmp al, 0x44
jne 0x539aae
lea ecx, [esp + 0x40]
call sub.MFC42.DLL_CString::CString_3
lea eax, [esp + 0x40]
mov ecx, esi
push eax
mov dword [esp + 0x3c], 0
call sub.MFC42.DLL_CWnd::GetWindowTextA
mov ecx, dword [esp + 0x40]
lea ebx, [esi + 0x178]
push ecx
push 0x14
push ebx
call fcn.004455f0
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0xa
jne 0x539a9b
sub ebp, 0x21
lea edx, [esp + 0x1c]
neg ebp
sbb ebp, ebp
push ebx
and ebp, 2
push edx
dec ebp
call fcn.0044ce20
lea eax, [esp + 0x24]
push ebp
push eax
call fcn.00490ef0
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x24]
push ecx
push edx
call fcn.0044caf0
add esp, 0x18
mov eax, dword [eax]
mov ecx, esi
push eax
mov byte [esp + 0x3c], 1
call sub.MFC42.DLL_CWnd::SetWindowTextA
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x40]
mov dword [esp + 0x38], 0xffffffff
call sub.MFC42.DLL_CString::CString
jmp 0x5398ca
lea ecx, [esp + 0x40]
mov dword [esp + 0x38], 0xffffffff
call sub.MFC42.DLL_CString::CString
jmp 0x539ac1
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
push edx
mov eax, dword [ecx]
call dword [eax + 0x208]
cmp ebp, 0xd
jne 0x5398c3
mov eax, dword [esp + 0x18]
test eax, eax
jl 0x5398c3
mov ecx, esi
call sub.MFC42.DLL_CWnd::GetStyle
test ah, 8
jne 0x539b33
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
push edx
mov eax, dword [ecx]
call dword [eax + 0x224]
mov ecx, dword [esi + 0x1b8]
lea edx, [esp + 0x10]
push edx
lea edx, [esi + 0x1f0]
mov eax, dword [ecx]
push edx
push 0xd
call dword [eax + 0x200]
cmp eax, 0x1b
jne 0x539b2b
mov ecx, dword [esi + 0x1b8]
push 2
mov eax, dword [ecx]
call dword [eax + 0x1d0]
jmp 0x5398ca
test eax, eax
je 0x5398ca
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x20c]
mov ecx, dword [esi + 0x1b8]
cmp eax, 1
jne 0x539b5e
mov edx, dword [ecx]
call dword [edx + 0x210]
jmp 0x5398ca
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
push edx
mov edx, dword [ecx + 0x444]
push edx
call dword [eax + 0x1b4]
lea edi, [esi + 0x1f0]
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
push edx
mov eax, dword [ecx]
call dword [eax + 0x230]
mov dword [esp + 0x10], eax
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esp + 0x10]
mov dword [edi], 0xffffffff
push edx
mov eax, dword [ecx]
call dword [eax + 0x234]
mov eax, dword [esi + 0x1b8]
mov ecx, dword [eax + 0x444]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x2a8]
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x21c]
mov eax, dword [esi + 0x1b8]
mov ecx, dword [eax + 0x444]
mov edx, dword [ecx + 0x64]
mov ecx, dword [esp + 0x10]
test byte [edx + ecx*4], 4
je 0x539bf3
mov dword [edi], 0
mov eax, dword [eax + 0x444]
push 0
push eax
mov edx, dword [eax + 0x1c]
lea eax, [esp + 0x18]
push eax
push edi
push 0xd
call dword [edx + 0x90]
add esp, 0x14
test eax, eax
jg 0x539c35
cmp dword [edi], 0
jne 0x539b8f
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x220]
jmp 0x539b8f
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x220]
cmp dword [edi], 0xffffffff
je 0x5398ca
mov ecx, dword [esi + 0x1b8]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x20c]
cmp eax, 1
je 0x539c82
mov eax, dword [esi + 0x1f0]
lea edi, [esi + 0x1f0]
test eax, eax
jne 0x5398ca
jmp 0x539b78
mov ecx, dword [esi + 0x1b8]
mov edx, dword [ecx]
call dword [edx + 0x210]
jmp 0x5398ca