Function at 0x459cb0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d5885
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x655140]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov edi, dword [ebp + 8]
lea eax, [esi + 0x1e0]
mov dword [ebp - 0x14], eax
cmp dword [eax], edi
jne 0x459cf6
cmp byte [ebp + 0xc], 0
je 0x459fb2
xor al, al
mov byte [ebp + 0xf], al
cmp byte [esi + 0x220], al
je 0x459d19
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0xff00
test cx, ax
setne al
mov byte [ebp + 0xf], al
mov ecx, dword [esi + 0x1e0]
test ecx, ecx
je 0x459d30
test al, al
jne 0x459d30
push 0
push 0
call fcn.0045c190
cmp byte [esi + 0x220], 0
je 0x459e07
test edi, edi
je 0x459e07
add esi, 0x1e4
cmp byte [ebp + 0xf], 0
je 0x459e6a
mov eax, dword [esi]
xor dh, dh
xor dl, dl
mov byte [ebp + 0xf], dh
cmp eax, dword [esi + 4]
je 0x459d8e
mov ecx, dword [eax]
cmp ecx, edi
jne 0x459d6f
mov dh, 1
test dl, dl
jne 0x459d8b
mov edi, dword [ebp - 0x10]
cmp ecx, dword [edi + 0x1e0]
mov edi, dword [ebp + 8]
jne 0x459d83
mov dl, 1
test dh, dh
jne 0x459d8b
add eax, 4
cmp eax, dword [esi + 4]
jne 0x459d63
mov byte [ebp + 0xf], dh
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
test ecx, ecx
je 0x459dbc
test dl, dl
jne 0x459dbc
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0x459db1
mov dword [eax], ecx
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
add dword [esi + 4], 4
jmp 0x459dbc
push dword [ebp - 0x14]
mov ecx, esi
push eax
call fcn.0045f280
cmp byte [ebp + 0xf], 0
jne 0x459e04
mov eax, dword [edi]
push edi
mov dword [ebp + 8], edi
call dword [eax + 4]
mov dword [ebp - 4], 0
mov ecx, dword [esi + 4]
cmp ecx, dword [esi + 8]
je 0x459de4
xor eax, eax
mov dword [ecx], edi
add dword [esi + 4], 4
jmp 0x459df3
lea eax, [ebp + 8]
push eax
push ecx
mov ecx, esi
call fcn.0045f100
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x459e04
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
cmp dword [ecx], edi
je 0x459e29
test edi, edi
je 0x459e1b
mov eax, dword [edi]
push edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov dword [ecx], edi
test eax, eax
je 0x459e29
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test edi, edi
je 0x459fa1
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x90]
call eax
xor ecx, ecx
mov dword [ebp + 0xc], ecx
test eax, eax
je 0x459f6d
mov ecx, dword [eax]
lea edx, [ebp + 0xc]
push edx
push 0x6395f0
push eax
call dword [ecx]
test eax, eax
jns 0x459f6a
xor ecx, ecx
mov dword [ebp + 0xc], ecx
jmp 0x459f6d
mov eax, dword [esi + 4]
mov esi, dword [esi]
mov dword [ebp + 0xc], eax
sub eax, esi
sar eax, 2
mov dword [ebp + 8], esi
test eax, eax
je 0x459e04
mov edx, dword [ebp + 0xc]
cmp esi, edx
je 0x459f23
nop dword [eax]
mov esi, dword [esi]
cmp esi, edi
je 0x459f12
mov ecx, dword [esi + 0x25c]
test ecx, ecx
je 0x459eb5
cmp byte [ecx + 0x220], 0
je 0x459eb5
mov dword [esi + 0x258], 0
jmp 0x459edb
mov eax, dword [esi + 0x258]
test eax, eax
je 0x459f12
mov dword [esi + 0x258], 0
cmp eax, 3
jne 0x459edb
test ecx, ecx
je 0x459edb
push 0
push 0
call fcn.00459cb0
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0xd0]
call eax
test eax, eax
je 0x459f0f
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x98]
call eax
test eax, eax
je 0x459f0f
mov ecx, dword [esi + 0x44]
sub esp, 0x10
movups xmm0, xmmword [esi + 0x58]
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x30]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
add esi, 4
mov dword [ebp + 8], esi
cmp esi, edx
jne 0x459e90
mov eax, dword [ebp - 0x10]
mov esi, dword [eax + 0x1e4]
mov eax, dword [eax + 0x1e8]
mov dword [ebp + 0xc], eax
cmp esi, eax
je 0x459e04
nop dword [eax]
mov ecx, dword [esi]
test ecx, ecx
je 0x459f4f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp + 0xc]
add esi, 4
cmp esi, eax
jne 0x459f40
mov esi, dword [ebp - 0x10]
mov eax, dword [esi + 0x1e4]
mov dword [esi + 0x1e8], eax
jmp 0x459e07
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 4], 1
test ecx, ecx
je 0x459f82
mov eax, dword [ecx]
push 1
call dword [eax + 0x158]
push 0
push 3
mov ecx, edi
call fcn.0045c190
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x459fa1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x14]
mov eax, dword [esi]
push dword [ecx]
mov ecx, esi
push 0x44f
call dword [eax + 0x28]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8