Function at 0x426220
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4896e8
push eax
mov dword fs:[0], esp
push ebx
mov ebx, dword [esp + 0x14]
push ebp
push esi
push edi
lea eax, [ebx - 9]
mov esi, ecx
cmp eax, 0x25
ja case.0x42625a.14
mov edi, dword [esp + 0x2c]
or ebp, 0xffffffff
xor ecx, ecx
mov cl, byte [eax + 0x4264a8]
jmp dword [ecx*4 + 0x426490]
mov eax, dword [esi + 0x1b4]
test eax, eax
jne 0x4262b6
mov edx, dword [0x4acaa4]
mov dword [esp + 0x20], edx
lea eax, [esp + 0x20]
mov ecx, edi
push eax
mov dword [esp + 0x1c], 0
call fcn.00464468
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0044d6c5
add esp, 4
test eax, eax
jl 0x42641b
cmp eax, 0xff
jg 0x42641b
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], ebp
call fcn.0046741f
mov ebx, 0x2e
mov eax, 0x25
jmp 0x426252
mov ecx, edi
call fcn.00466ac7
cmp eax, 4
jae case.0x42625a.14
shl eax, 6
lea esi, [eax + esi + 0x3c]
mov ecx, esi
call fcn.00466c04
cmp ebx, 0x27
je case.0x42625a.14
mov edx, dword [esi + 0x1c]
mov edi, dword [sym.imp.USER32.DLL_SendMessageA]
push ebp
push 0
push 0xb1
push edx
call edi
mov eax, dword [esi + 0x1c]
push 0
push 0
push 0xb7
push eax
call edi
jmp case.0x42625a.14
mov ecx, edi
call fcn.00466ac7
cmp eax, 1
jbe case.0x42625a.14
shl eax, 6
lea ecx, [eax + esi - 0x44]
call fcn.00466c04
jmp case.0x42625a.14
push 0x10
call dword [sym.imp.USER32.DLL_GetKeyState]
test ax, ax
jge 0x426368
mov ecx, dword [esi + 0x1c]
push ecx
call dword [sym.imp.USER32.DLL_GetParent]
push eax
call fcn.00463a73
test esi, esi
jne 0x42635c
mov edx, dword [eax + 0x1c]
push 1
push esi
push edx
jmp 0x426386
mov esi, dword [esi + 0x1c]
mov edx, dword [eax + 0x1c]
push 1
push esi
push edx
jmp 0x426386
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.USER32.DLL_GetParent]
push eax
call fcn.00463a73
test esi, esi
je 0x42637f
mov esi, dword [esi + 0x1c]
mov ecx, dword [eax + 0x1c]
push 0
push esi
push ecx
call dword [sym.imp.USER32.DLL_GetNextDlgTabItem]
push eax
call fcn.00463a73
test eax, eax
je case.0x42625a.14
mov ecx, eax
call fcn.00466c04
jmp case.0x42625a.14
mov edx, dword [esi + 0x1c]
mov ebx, dword [sym.imp.USER32.DLL_GetParent]
push edx
call ebx
push eax
call fcn.00463a73
mov eax, dword [eax + 0x1c]
push 0
push 0
push 0x400
push eax
call dword [sym.imp.USER32.DLL_SendMessageA]
mov edi, eax
mov ecx, edi
shr ecx, 0x10
cmp cx, 0x534b
jne case.0x42625a.14
mov edx, dword [esi + 0x1c]
push edx
call ebx
push eax
call fcn.00463a73
and edi, 0xffff
mov ecx, eax
push edi
call fcn.00466906
mov ebp, eax
mov eax, dword [esi + 0x1c]
push eax
call ebx
push eax
call fcn.00463a73
mov ecx, dword [ebp + 0x1c]
mov edx, dword [eax + 0x1c]
push ecx
push edi
push 0x111
push edx
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp case.0x42625a.14
push eax
lea eax, [esp + 0x24]
push 0x4abda0
push eax
call fcn.00460d6b
mov ecx, dword [esp + 0x2c]
add esp, 0xc
push 0x30
push 0x4abd98
push ecx
mov ecx, esi
call fcn.004651de
mov ecx, edi
call fcn.00466c04
mov edx, dword [edi + 0x1c]
mov esi, dword [sym.imp.USER32.DLL_SendMessageA]
push ebp
push 0
push 0xb1
push edx
call esi
mov eax, dword [edi + 0x1c]
push 0
push 0
push 0xb7
push eax
call esi
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], ebp
call fcn.0046741f
mov ecx, dword [esp + 0x10]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xc
ret 0x10