Function at 0x427400
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
push esi
mov esi, ecx
mov eax, dword [esi]
mov edx, dword [eax + 0xf0]
push edi
call edx
mov ebx, dword [ebp + 8]
test al, al
jne 0x427454
mov eax, dword [ebx]
cmp eax, 8
jle 0x427454
cmp eax, 0x13
jge 0x427454
mov ecx, dword [esi + 0xa98]
push ebx
test ecx, ecx
je 0x427444
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
call edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, esi
call fcn.00426d00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx], 0x17
jne 0x427499
xor edi, edi
cmp dword [esi + 0x5f0], edi
jle 0x427499
lea ebx, [esi + 0x5f4]
lea esp, [esp]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
push ecx
push edx
push ebx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x427534
inc edi
add ebx, 0x10
cmp edi, dword [esi + 0x5f0]
jl 0x427470
mov ebx, dword [ebp + 8]
cmp dword [ebx], 0xe
jne 0x4274e5
mov eax, dword [esi]
mov edx, dword [eax + 0xe0]
mov ecx, esi
call edx
test al, al
je 0x4274e5
xor edi, edi
cmp dword [esi + 0x5f0], edi
jle 0x4274e5
lea ebx, [esi + 0x5f4]
mov edi, edi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
push ecx
push edx
push ebx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x427551
inc edi
add ebx, 0x10
cmp edi, dword [esi + 0x5f0]
jl 0x4274c0
mov ebx, dword [ebp + 8]
mov eax, dword [esi + 0x5f0]
test eax, eax
jle 0x42758f
cmp dword [ebx], 9
jne 0x42758f
xor edi, edi
mov dword [esp + 0xc], 0xffffffff
test eax, eax
jle 0x427573
lea ebx, [esi + 0x5f4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
push ecx
push edx
push ebx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x42756c
inc edi
add ebx, 0x10
cmp edi, dword [esi + 0x5f0]
jl 0x427510
jmp 0x427570
push 0x7f89
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [esi + 0x68]
push 0
push edi
push str.link
mov ecx, esi
call fcn.0044c050
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [esp + 0xc], edi
mov ebx, dword [ebp + 8]
mov eax, dword [esp + 0xc]
cmp dword [esi + 0xa94], eax
je 0x42758f
push esi
call fcn.00428ac0
mov ecx, dword [esp + 0xc]
mov dword [esi + 0xa94], ecx
cmp dword [esi + 0x5f0], 0
jle 0x4275b6
cmp dword [ebx], 0xa
jne 0x4275b6
cmp dword [esi + 0xa94], 0xffffffff
je 0x4275b6
push esi
call fcn.00428ac0
mov dword [esi + 0xa94], 0xffffffff
mov eax, dword [ebx]
cmp eax, 0xd
je 0x427606
cmp eax, 0xf
je 0x427606
mov ecx, esi
cmp eax, 0xe
jne 0x4275f7
mov edx, dword [esi]
mov eax, dword [edx + 0xe0]
call eax
test al, al
je 0x4276d5
mov edx, dword [esi + 0x68]
push 0
push 0
push str.itemclick
mov ecx, esi
call fcn.0044c050
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push ebx
call fcn.00426d00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [esi]
mov eax, dword [edx + 0xe0]
mov ecx, esi
call eax
test al, al
je 0x4276c5
mov ecx, dword [esi + 0xa98]
test ecx, ecx
je 0x4276bf
mov edx, dword [ecx]
mov eax, dword [edx + 0x40]
call eax
test al, al
jne 0x427694
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x427682
mov edx, dword [esi + 0x5dc]
mov eax, dword [edx + 0x10]
lea ecx, [esi + 0x5dc]
call eax
mov ecx, dword [esi + 0xa98]
test al, al
je 0x427670
mov edx, dword [ecx]
mov eax, dword [esi + 0x5e0]
mov edx, dword [edx + 0x44]
push eax
call edx
jmp 0x4276bf
mov eax, dword [ecx]
mov edx, dword [esi + 0x5e0]
mov eax, dword [eax + 0x38]
push 0
push edx
call eax
jmp 0x4276bf
mov ecx, dword [esi + 0xa98]
mov edx, dword [ecx]
mov eax, dword [edx + 0x50]
call eax
cmp eax, 1
jne 0x4276a9
mov edx, dword [esi + 0x5dc]
mov eax, dword [edx + 0x10]
lea ecx, [esi + 0x5dc]
call eax
test al, al
jne 0x4276bf
mov ecx, dword [esi + 0xa98]
mov eax, dword [esi + 0x5e0]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
push 0
push eax
call edx
push esi
call fcn.00428ac0
mov esi, dword [esi + 0xa98]
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
push ebx
mov ecx, esi
call edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4