Function at 0x2046f0a0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x2048111f
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x204a31e0]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
push esi
push edi
mov eax, dword [0x204a31e0]
xor eax, esp
push eax
lea eax, [esp + 0x1c8]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov ebx, ecx
mov ecx, dword [ebx + 0x160]
mov eax, dword [ebx + 0xc0]
push ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
je 0x2046f13e
mov edx, dword [ebx + 0x160]
push esi
push 0
push 0x407
push edx
call edi
cmp dword [ebx + 0x80], 0xffffffff
jne 0x2046f13e
cmp dword [ebx + 0x84], 0xffffffff
jne 0x2046f13e
mov eax, dword [ebx + 0x1d0]
push esi
push 0
push 0x407
push eax
call edi
cmp dword [esi + 4], 0x100
push esi
jne 0x2046f18d
mov ecx, dword [ebx + 0x90]
mov edx, dword [ebx + 0x20]
push ecx
push edx
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
je 0x2046f167
mov eax, 1
jmp 0x2046faf5
cmp dword [esi + 8], 9
jne 0x2046f180
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test al, al
jns 0x2046f180
xor eax, eax
jmp 0x2046faf5
push esi
mov ecx, ebx
call sub.MFC80U.DLL_Ordinal_5199
jmp 0x2046faf5
mov ecx, ebx
call sub.MFC80U.DLL_Ordinal_5199
cmp dword [esp + 0x1c], 0
mov dword [esp + 0x2c], eax
je 0x2046faf1
mov eax, dword [esi + 4]
cmp eax, 0x200
je 0x2046f1b8
cmp eax, 0x20a
jne 0x2046faf1
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0x5c]
mov dword [esp + 0x24], eax
mov eax, dword [ebx + 0x2e8]
push edx
push eax
mov dword [esp + 0x30], ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x5c]
push ecx
mov ecx, ebx
call sub.MFC80U.DLL_Ordinal_5609
mov eax, dword [ebx + 0x20]
lea edx, [esp + 0x24]
push edx
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x5c]
mov edx, dword [ebx + 0x2e8]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x48], ecx
lea ecx, [esp + 0x44]
push ecx
push 0
push 0x1039
push edx
mov dword [esp + 0x34], eax
mov dword [esp + 0x54], eax
call edi
mov eax, dword [esp + 0x50]
test eax, eax
jl 0x2046fabc
mov ecx, dword [esp + 0x54]
test ecx, ecx
jl 0x2046fabc
cmp dword [ebx + 0x80], eax
jne 0x2046f254
cmp ecx, dword [ebx + 0x84]
je 0x2046fae2
mov dword [ebx + 0x84], ecx
lea ecx, [esp + 0x14]
mov dword [ebx + 0x80], eax
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
mov dword [esp + 0x1d0], 0
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
mov byte [esp + 0x1d0], 1
mov eax, dword [esp + 0x50]
push eax
lea ecx, [ebx + 0x2c8]
call sub.MFC80U.DLL_Ordinal_2860
test eax, eax
jl 0x2046fa93
mov ecx, dword [esp + 0x1c]
cmp eax, dword [ecx + 0x10]
jg 0x2046fa93
add ecx, 4
call fcn.20419300
mov edi, eax
mov eax, dword [esp + 0x54]
test eax, eax
mov dword [esp + 0x1c], edi
jne 0x2046f2dd
mov edi, dword [edi + 0xec]
test edi, edi
je 0x2046fa80
push edi
mov esi, ebx
call fcn.20470170
jmp 0x2046fa93
cmp eax, 1
jne 0x2046f3a7
mov eax, dword [edi + 0x10]
sub eax, 1
je 0x2046f358
sub eax, 1
je 0x2046f32a
sub eax, 1
jne 0x2046f396
mov edi, dword [edi + 0x14]
test edi, edi
je 0x2046f323
cmp edi, 0x40
je 0x2046f31c
cmp edi, 0x50
lea ecx, [esp + 0x14]
je 0x2046f318
push 0x144
jmp 0x2046f390
push 0x71
jmp 0x2046f390
push 0x140
jmp 0x2046f38c
push 0x141
jmp 0x2046f38c
mov edi, dword [edi + 0x14]
test edi, edi
je 0x2046f351
cmp edi, 0x40
je 0x2046f34a
cmp edi, 0x50
lea ecx, [esp + 0x14]
je 0x2046f346
push 0x143
jmp 0x2046f390
push 0x70
jmp 0x2046f390
push 0x13f
jmp 0x2046f38c
push 0x13c
jmp 0x2046f38c
mov edi, dword [edi + 0x14]
cmp edi, 0x50
ja case.0x2046f367.1
movzx ecx, byte [edi + 0x2046fb30]
jmp dword [ecx*4 + 0x2046fb1c]
push 0x13e
jmp 0x2046f38c
push 0x125
jmp 0x2046f38c
push 0x13d
jmp 0x2046f38c
push 0x6f
jmp 0x2046f38c
push 0x142
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_4026]
mov edx, dword [esp + 0x14]
push edx
mov esi, ebx
call fcn.20470170
jmp 0x2046fa93
cmp eax, 4
jne 0x2046f4c2
mov eax, dword [edi + 0x8c]
mov ecx, dword [edi + 0xa0]
add ecx, eax
cmp ecx, 1
jle 0x2046fa80
push 0x20485878
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_776]
mov eax, dword [edi + 0x8c]
xor esi, esi
test eax, eax
mov bl, 1
jle 0x2046f435
mov eax, esi
mov ecx, edi
call fcn.20417df0
movzx eax, ax
push eax
lea ecx, [esp + 0x1c]
push 0xfa
push ecx
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0xc
test bl, bl
je 0x2046f40c
xor bl, bl
jmp 0x2046f41b
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
add esi, 1
cmp esi, dword [edi + 0x8c]
jl 0x2046f3e4
xor esi, esi
cmp dword [edi + 0xa0], esi
jle 0x2046f4af
nop
mov ecx, esi
lea eax, [esp + 0x6e]
mov edx, edi
call fcn.20417e10
mov dword [esp + 0x1c], eax
mov ecx, esi
lea eax, [esp + 0x32]
mov edx, edi
call fcn.20417e10
movzx eax, word [eax + 2]
mov ecx, dword [esp + 0x1c]
movzx edx, word [ecx]
push eax
push edx
lea eax, [esp + 0x20]
push 0xfb
push eax
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0x10
test bl, bl
je 0x2046f486
xor bl, bl
jmp 0x2046f495
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
add esi, 1
cmp esi, dword [edi + 0xa0]
jl 0x2046f440
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
push edx
call fcn.20470170
jmp 0x2046fa93
cmp eax, 5
jne 0x2046f5f6
mov eax, dword [edi + 0x64]
mov ecx, dword [edi + 0x78]
add ecx, eax
cmp ecx, 1
jle 0x2046fa80
push 0x20485878
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_776]
mov eax, dword [edi + 0x64]
xor esi, esi
test eax, eax
mov byte [esp + 0x13], 1
jle 0x2046f554
lea esp, [esp]
mov eax, esi
mov ecx, edi
call fcn.20417dd0
movzx eax, ax
push eax
lea ecx, [esp + 0x1c]
push 0xfa
push ecx
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0xc
cmp byte [esp + 0x13], 0
je 0x2046f52e
mov byte [esp + 0x13], 0
jmp 0x2046f53d
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
add esi, 1
cmp esi, dword [edi + 0x64]
jl 0x2046f500
xor esi, esi
cmp dword [edi + 0x78], esi
jle 0x2046f396
nop
test esi, esi
jl 0x2046f5f1
cmp esi, dword [edi + 0x78]
jge 0x2046f5f1
mov eax, dword [edi + 0x74]
lea ecx, [esi*4]
add eax, ecx
cmp esi, dword [edi + 0x78]
mov eax, dword [eax]
mov dword [esp + 0x20], eax
jge 0x2046f5f1
mov eax, dword [edi + 0x74]
add eax, ecx
mov eax, dword [eax]
movzx ecx, word [esp + 0x22]
movzx edx, ax
push ecx
push edx
lea eax, [esp + 0x20]
push 0xfb
push eax
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0x10
cmp byte [esp + 0x13], 0
je 0x2046f5ba
mov byte [esp + 0x13], 0
jmp 0x2046f5c9
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
add esi, 1
cmp esi, dword [edi + 0x78]
jl 0x2046f560
mov edx, dword [esp + 0x14]
push edx
mov esi, ebx
call fcn.20470170
jmp 0x2046fa93
call fcn.20477d24
cmp eax, 3
jne 0x2046fa27
mov edx, dword [edi + 0x50]
mov esi, dword [edi + 0xb4]
mov ecx, dword [edi + 0x3c]
mov eax, dword [edi + 0x28]
add esi, edx
add esi, ecx
add esi, eax
test esi, esi
jle 0x2046fa80
push 0x20485878
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_776]
mov eax, dword [edi + 0x28]
xor esi, esi
test eax, eax
mov byte [esp + 0x13], 1
jle 0x2046f6a5
lea esp, [esp]
lea ecx, [esp + 0x12c]
lea ebx, [esp + 0x32]
call fcn.20417e30
lea eax, [esp + 0x12c]
push eax
lea ecx, [esp + 0x1c]
push 0xf7
push ecx
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0xc
cmp byte [esp + 0x13], 0
je 0x2046f679
mov byte [esp + 0x13], 0
jmp 0x2046f688
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
mov eax, dword [esp + 0x1c]
add esi, 1
cmp esi, dword [eax + 0x28]
mov edi, eax
jl 0x2046f640
mov eax, dword [edi + 0xc8]
xor esi, esi
test eax, eax
jle 0x2046f723
mov ecx, esi
lea eax, [esp + 0x32]
mov edx, edi
call fcn.20417e90
lea ecx, [esp + 0x16c]
push ecx
push eax
mov eax, 0x28
call fcn.20406540
lea edx, [esp + 0x16c]
push edx
lea eax, [esp + 0x1c]
push 0x1ab
push eax
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0xc
cmp byte [esp + 0x13], 0
je 0x2046f6fa
mov byte [esp + 0x13], 0
jmp 0x2046f709
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
add esi, 1
cmp esi, dword [edi + 0xc8]
jl 0x2046f6b1
xor esi, esi
cmp dword [edi + 0x3c], esi
jle 0x2046f7ac
mov edi, edi
mov ebx, dword [esp + 0x1c]
lea edx, [esp + 0x14c]
push edx
lea eax, [esp + 0x36]
push eax
lea ecx, [esp + 0x134]
mov edi, esi
mov eax, ebx
call fcn.20417ed0
lea ecx, [esp + 0x14c]
push ecx
lea edx, [esp + 0x130]
push edx
lea eax, [esp + 0x20]
push 0xf8
push eax
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0x10
cmp byte [esp + 0x13], 0
je 0x2046f782
mov byte [esp + 0x13], 0
jmp 0x2046f791
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
add esi, 1
cmp esi, dword [ebx + 0x3c]
jl 0x2046f730
mov edi, dword [esp + 0x1c]
xor esi, esi
cmp dword [edi + 0x50], esi
jle 0x2046f83c
jmp 0x2046f7c0
mov ebx, dword [esp + 0x1c]
lea edx, [esp + 0x14c]
push edx
lea eax, [esp + 0x36]
push eax
lea ecx, [esp + 0x134]
mov edi, esi
mov eax, ebx
call fcn.20417f90
lea ecx, [esp + 0x14c]
push ecx
lea edx, [esp + 0x130]
push edx
lea eax, [esp + 0x20]
push 0xf9
push eax
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0x10
cmp byte [esp + 0x13], 0
je 0x2046f812
mov byte [esp + 0x13], 0
jmp 0x2046f821
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
add esi, 1
cmp esi, dword [ebx + 0x50]
jl 0x2046f7c0
mov edi, dword [esp + 0x1c]
xor ebx, ebx
cmp dword [edi + 0xdc], ebx
jle 0x2046f935
xor esi, esi
test esi, esi
jl 0x2046f5f1
cmp ebx, dword [edi + 0xdc]
jge 0x2046f5f1
mov eax, dword [edi + 0xd8]
mov edx, dword [eax + esi]
mov ecx, dword [eax + esi + 4]
add eax, esi
mov dword [esp + 0x32], edx
mov edx, dword [eax + 8]
mov dword [esp + 0x36], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x3a], edx
mov dl, byte [eax + 0x10]
lea eax, [esp + 0x16c]
mov dword [esp + 0x3e], ecx
push eax
lea ecx, [esp + 0x36]
push ecx
mov eax, 0x28
mov byte [esp + 0x4a], dl
call fcn.20406540
cmp ebx, dword [edi + 0xdc]
jge 0x2046f5f1
mov eax, dword [edi + 0xd8]
mov edx, dword [eax + esi]
mov ecx, dword [eax + esi + 4]
add eax, esi
mov dword [esp + 0x73], edx
mov edx, dword [eax + 8]
mov dword [esp + 0x7b], edx
movzx edx, byte [eax + 0x10]
mov dword [esp + 0x77], ecx
mov ecx, dword [eax + 0xc]
push edx
lea eax, [esp + 0x170]
push eax
mov dword [esp + 0x87], ecx
lea ecx, [esp + 0x20]
push 0x1b5
push ecx
call dword [sym.imp.MFC80U.DLL_Ordinal_2310]
add esp, 0x10
cmp byte [esp + 0x13], 0
je 0x2046f905
mov byte [esp + 0x13], 0
jmp 0x2046f914
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
add ebx, 1
add esi, 0x11
cmp ebx, dword [edi + 0xdc]
jl 0x2046f84c
xor esi, esi
cmp dword [edi + 0xb4], esi
jle 0x2046fa02
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xc0]
test ecx, ecx
je 0x2046f9f3
test esi, esi
jl 0x2046f5f1
cmp esi, dword [edi + 0xb4]
jge 0x2046f5f1
mov edx, dword [edi + 0xb0]
lea eax, [edx + esi*4]
mov eax, dword [eax]
lea edx, [esp + 0x84]
push edx
lea edx, [ecx + 0x1c]
mov ebx, eax
call fcn.2041ecd0
mov byte [esp + 0x1d0], 2
cmp dword [esp + 0x88], 0
je 0x2046f9df
mov eax, dword [esp + 0xf4]
push eax
lea ecx, [esp + 0x1c]
push 0x2048a5c0
push ecx
call dword [sym.imp.MFC80U.DLL_Ordinal_2311]
add esp, 0xc
cmp byte [esp + 0x13], 0
je 0x2046f9c1
mov byte [esp + 0x13], 0
jmp 0x2046f9d0
push 0x2048eb04
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_899]
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_896]
mov byte [esp + 0x1d0], 1
lea ecx, [esp + 0x84]
call fcn.2041c400
add esi, 1
cmp esi, dword [edi + 0xb4]
jl 0x2046f943
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x14]
push 0
push 0x41f
mov ecx, esi
call sub.MFC80U.DLL_Ordinal_2651
push eax
push edi
lea ecx, [esi + 0x1b0]
call sub.MFC80U.DLL_Ordinal_6251
jmp 0x2046fa93
cmp eax, 6
jne 0x2046fa80
cmp dword [edi + 0xe8], 0
je 0x2046fa80
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
mov byte [esp + 0x1d0], 3
mov edi, dword [edi + 0xe8]
push edi
lea ecx, [esp + 0x24]
call fcn.20464370
add esp, 4
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_2461]
push eax
mov esi, ebx
call fcn.20470170
mov byte [esp + 0x1d0], 1
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
jmp 0x2046fa93
push 0x20485878
mov esi, ebx
call fcn.20470170
push 0
call sub.MFC80U.DLL_Ordinal_1368
mov byte [esp + 0x1d0], 0
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
mov dword [esp + 0x1d0], 0xffffffff
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
jmp 0x2046faf1
push 0
push 0x41f
mov ecx, ebx
call sub.MFC80U.DLL_Ordinal_2651
push eax
push 0x20485878
lea ecx, [ebx + 0x1b0]
call sub.MFC80U.DLL_Ordinal_6251
push 0
call sub.MFC80U.DLL_Ordinal_1368
or eax, 0xffffffff
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x80], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x1c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call fcn.20478952
mov esp, ebp
pop ebp
ret 4