Function at 0x4a5e36
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push ebx
push esi
push edi
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
push eax
call fcn.004a3186
add esp, 4
mov dword [ebp - 0x18], eax
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movzx eax, ax
xor ecx, ecx
mov cl, ah
mov dword [ebp - 0x2c], ecx
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movzx eax, ax
xor ecx, ecx
mov cl, ah
mov dword [ebp - 0x24], ecx
push 4
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x1c], eax
cmp dword [0x531b6c], 0
jne 0x4a5ecd
cmp dword [0x531af0], 0x18
je 0x4a5ecd
cmp dword [0x531af0], 0x17
jne 0x4a6288
mov eax, dword [0x531af0]
mov dword [ebp - 0x44], eax
jmp 0x4a622b
mov eax, dword [0x52d9f8]
cmp dword [0x52c400], eax
jne 0x4a5f03
mov eax, dword [0x52d9fc]
cmp dword [0x52c404], eax
jne 0x4a5f03
mov dword [ebp - 4], 1
push 0x5a0049
push 0x52cfd0
mov eax, dword [ebp + 0xc]
push eax
call fcn.004df750
add esp, 0xc
jmp case.0x4a623c.8
cmp dword [0x531b7c], 0
je case.0x4a623c.0
mov eax, dword [0x531b7c]
push eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.GDI32.dll_InvertRgn]
push 0x5a0049
push 0x52cfd0
mov eax, dword [ebp + 0xc]
push eax
call fcn.004df750
add esp, 0xc
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [0x531aec]
mov dword [ebp - 0x10], eax
mov dword [0x52d8c8], 0xffffffff
mov word [0x52d8e0], 0
push 1
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.004a3fde
add esp, 0x10
mov eax, dword [0x52d8c8]
shr eax, 0x10
and eax, 0xffff
movsx eax, ax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jge 0x4a5fde
mov dword [ebp - 4], 1
mov eax, dword [ebp + 8]
push eax
call fcn.004a5d67
add esp, 4
xor eax, eax
mov ax, word [0x52d8e0]
test eax, eax
jne 0x4a5fde
push 0x1e
call fcn.0049c6f9
add esp, 4
jmp case.0x4a623c.8
mov eax, dword [0x52d9f8]
cmp dword [0x52c400], eax
jne 0x4a600c
mov eax, dword [0x52d9fc]
cmp dword [0x52c404], eax
jne 0x4a600c
mov dword [ebp - 4], 1
mov eax, dword [0x531b88]
push eax
mov eax, dword [0x52c3ec]
push eax
mov eax, dword [0x52c3e8]
push eax
push 0x52cfd0
xor eax, eax
mov ax, word [0x52d8e0]
push eax
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [0x531b84]
push eax
push 0
mov eax, dword [ebp + 0xc]
push eax
call fcn.00456016
add esp, 0x24
jmp case.0x4a623c.8
mov eax, dword [0x52d9f8]
cmp dword [0x52c400], eax
jne 0x4a6070
mov eax, dword [0x52d9fc]
cmp dword [0x52c404], eax
je 0x4a60c4
call dword [sym.imp.USER32.dll_GetMessageTime]
mov ecx, dword [0x531b8c]
add ecx, 0x12c
cmp eax, ecx
jge case.0x4a623c.11
mov eax, dword [0x52c400]
sub eax, dword [0x52d9f8]
push eax
call fcn.00522431
add esp, 4
cmp eax, 4
jge case.0x4a623c.11
mov eax, dword [0x52c404]
sub eax, dword [0x52d9fc]
push eax
call fcn.00522431
add esp, 4
cmp eax, 4
jge case.0x4a623c.11
mov dword [ebp - 4], 1
cmp dword [0x531b88], 0
je 0x4a6100
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x12c], 0
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [0x531b88]
push eax
mov eax, dword [0x52c3ec]
push eax
mov eax, dword [0x52c3e8]
push eax
push 0x52cfd0
xor eax, eax
mov ax, word [0x52d8e0]
push eax
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [0x531b84]
push eax
push 0
mov eax, dword [ebp + 0xc]
push eax
call fcn.00456016
add esp, 0x24
jmp case.0x4a623c.8
mov eax, dword [0x531b88]
push eax
mov eax, dword [0x52c404]
push eax
mov eax, dword [0x52c400]
push eax
push 0x52cfd0
xor eax, eax
mov ax, word [0x52d8e0]
push eax
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [0x531b84]
push eax
push 1
mov eax, dword [ebp + 0xc]
push eax
call fcn.00456016
add esp, 0x24
jmp case.0x4a623c.8
cmp dword [0x531b6c], 0
je 0x4a61ac
push 0x5a0049
push 0x52cfd0
mov eax, dword [ebp + 0xc]
push eax
call fcn.004df750
add esp, 0xc
jmp 0x4a61b3
mov dword [ebp - 4], 1
jmp case.0x4a623c.8
cmp dword [0x531b6c], 0
je 0x4a61e0
push 0x5a0049
push 0x52cfd0
mov eax, dword [ebp + 0xc]
push eax
call fcn.004df750
add esp, 0xc
jmp 0x4a61e7
mov dword [ebp - 4], 1
cmp dword [0x531b70], 0
jne 0x4a61f9
jmp case.0x4a623c.8
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_SetRect]
push 0
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.004a3fde
add esp, 0x10
jmp case.0x4a623c.8
sub dword [ebp - 0x44], 9
cmp dword [ebp - 0x44], 0xf
ja case.0x4a623c.8
mov eax, dword [ebp - 0x44]
jmp dword [eax*4 + 0x4a6243]
jmp 0x4a628f
mov dword [ebp - 4], 1
mov dword [0x531b6c], 0
mov dword [0x531b70], 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp dword [0x531b7c], 0
je 0x4a62d8
mov eax, dword [0x531b7c]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [0x531b7c], 0
mov eax, dword [0x531af0]
mov dword [ebp - 0x48], eax
jmp 0x4a66e8
cmp dword [ebp - 4], 0
jne 0x4a635c
xor eax, eax
sub eax, dword [0x52c400]
neg eax
sub dword [0x52d9f8], eax
xor eax, eax
sub eax, dword [0x52c404]
neg eax
sub dword [0x52d9fc], eax
cmp dword [ebp - 8], 0
jne 0x4a6328
jmp 0x4a674a
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x20], eax
mov eax, dword [0x52d9f8]
mov ecx, dword [0x52d9fc]
push ecx
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0041ccd8
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp case.default.0x4a66f9
cmp dword [ebp - 4], 0
jne 0x4a638f
mov eax, dword [0x52d9fc]
sub eax, dword [0x52c404]
push eax
mov eax, dword [0x531af0]
push eax
mov eax, dword [0x52cfc4]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.00416518
add esp, 0x10
jmp case.default.0x4a66f9
cmp dword [ebp - 4], 0
jne 0x4a63c2
mov eax, dword [0x52d9f8]
sub eax, dword [0x52c400]
push eax
mov eax, dword [0x531af0]
push eax
mov eax, dword [0x52cfc4]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.00416518
add esp, 0x10
jmp case.default.0x4a66f9
cmp dword [ebp - 4], 0
jne 0x4a63ff
mov eax, dword [ebp + 8]
push eax
call fcn.004a5d67
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [0x531af0]
push eax
mov eax, dword [0x52d8c8]
push eax
mov eax, dword [0x52cfc4]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.00415177
add esp, 0x14
jmp case.default.0x4a66f9
cmp dword [0x531b88], 0
je 0x4a6486
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x138]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0xc]
cmp dword [eax + ecx + 0x48], 0
jge 0x4a6449
mov dword [ebp - 0x14], 1
jmp 0x4a6450
mov dword [ebp - 0x14], 0
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
cmp dword [ebp - 0x14], 0
je 0x4a6481
push 0x28
call fcn.0049c6f9
add esp, 4
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp case.default.0x4a66f9
jmp case.0x4a66f9.9
jmp case.default.0x4a66f9
mov eax, dword [0x531b98]
push eax
push 1
mov eax, dword [0x531b88]
push eax
mov eax, dword [0x52c400]
mov ecx, dword [0x52c404]
push ecx
push eax
push 0x52cfd0
call fcn.00456293
add esp, 0xc
push eax
push 0x52cfd0
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0044803b
add esp, 0x1c
jmp case.default.0x4a66f9
cmp dword [0x531b88], 0
je 0x4a6555
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x138]
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [ebp - 0xc]
cmp dword [eax + ecx + 0x48], 0
jge 0x4a6518
mov dword [ebp - 0x14], 1
jmp 0x4a651f
mov dword [ebp - 0x14], 0
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
cmp dword [ebp - 0x14], 0
je 0x4a6550
push 0x28
call fcn.0049c6f9
add esp, 4
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp case.default.0x4a66f9
jmp case.0x4a66f9.10
jmp case.default.0x4a66f9
mov eax, dword [0x531b88]
push eax
mov eax, dword [0x52c400]
mov ecx, dword [0x52c404]
push ecx
push eax
push 0x52cfd0
call fcn.00456293
add esp, 0xc
push eax
push 0x52cfd0
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.00448f0c
add esp, 0x14
jmp case.default.0x4a66f9
push 1
push 0
mov eax, dword [ebp - 0x2c]
push eax
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [0x531b84]
push eax
call fcn.00454c8a
add esp, 0x14
jmp case.default.0x4a66f9
push 1
cmp dword [ebp - 4], 1
sbb eax, eax
neg eax
push eax
mov eax, dword [ebp - 0x2c]
push eax
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [0x531b84]
push eax
call fcn.00454c8a
add esp, 0x14
mov eax, dword [0x52d9fc]
sub eax, dword [0x52c404]
push eax
mov eax, dword [0x52d9f8]
sub eax, dword [0x52c400]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.00449983
add esp, 0xc
jmp case.default.0x4a66f9
push 1
cmp dword [ebp - 4], 1
sbb eax, eax
neg eax
push eax
mov eax, dword [ebp - 0x2c]
push eax
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [0x531b84]
push eax
call fcn.00454c8a
add esp, 0x14
cmp dword [ebp - 4], 0
jne 0x4a665d
mov eax, dword [0x531b88]
push eax
xor eax, eax
mov ax, word [0x52cfe0]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.00449bf1
add esp, 0xc
jmp 0x4a6669
mov eax, dword [0x531b88]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp case.default.0x4a66f9
cmp dword [ebp - 4], 0
jne 0x4a6689
push 0x52cfd0
mov eax, dword [ebp + 8]
push eax
call fcn.004cf20c
add esp, 8
jmp case.default.0x4a66f9
cmp dword [ebp - 4], 0
jne 0x4a66de
cmp dword [ebp - 0x24], 0
je 0x4a66b8
push 0x52cfd0
mov eax, dword [ebp + 8]
push eax
call fcn.004cf20c
add esp, 8
jmp 0x4a66de
push 0x52cfd0
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0043d53d
add esp, 0xc
push 0x52cfd0
mov eax, dword [ebp + 8]
push eax
call fcn.00454fa6
add esp, 8
jmp case.default.0x4a66f9
sub dword [ebp - 0x48], 9
cmp dword [ebp - 0x48], 0xf
ja case.default.0x4a66f9
mov eax, dword [ebp - 0x48]
jmp dword [eax*4 + 0x4a6700]
mov dword [0x531b88], 0
pop edi
pop esi
pop ebx
leave
ret