Function at 0x45b5f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x290
mov eax, dword [0x48948c]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x28c], ecx
xor eax, eax
mov word [ebp - 0x260], ax
push 0x256
push 0
lea ecx, [ebp - 0x25e]
push ecx
call fcn.00431a40
add esp, 0xc
mov byte [ebp - 0x261], 0
mov edx, dword [ebp + 8]
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x28c]
mov cl, byte [ebp + 0xc]
mov byte [eax], cl
mov edx, dword [ebp - 0x28c]
mov byte [edx + 1], 0
mov eax, dword [ebp - 0x28c]
mov byte [eax + 3], 0
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + 4], 0
mov edx, dword [ebp - 0x28c]
mov byte [edx + 2], 0
mov eax, dword [ebp - 0x28c]
mov byte [eax + 5], 0
mov ecx, dword [ebp - 0x270]
mov dx, word [ecx]
mov word [ebp - 0x274], dx
movzx eax, word [ebp - 0x274]
test eax, eax
je 0x45bb33
movzx ecx, word [ebp - 0x274]
mov dword [ebp - 0x290], ecx
mov edx, dword [ebp - 0x290]
sub edx, 0x25
mov dword [ebp - 0x290], edx
cmp dword [ebp - 0x290], 0x59
ja case.0x45b6ca.1
mov eax, dword [ebp - 0x290]
movzx ecx, byte [eax + 0x45bb80]
jmp dword [ecx*4 + 0x45bb5c]
mov edx, dword [ebp - 0x28c]
mov byte [edx + 1], 1
jmp 0x45bb1f
mov eax, dword [ebp - 0x28c]
mov byte [eax + 1], 0
mov ecx, dword [ebp - 0x28c]
call fcn.0045b420
jmp 0x45bb1f
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + 3], 1
push 0
push 0
push 1
push 0x12
mov ecx, dword [ebp - 0x28c]
call fcn.0045b1b0
jmp 0x45bb1f
mov edx, dword [ebp - 0x28c]
mov byte [edx + 2], 1
push 0
push 0
push 1
push 0x10
mov ecx, dword [ebp - 0x28c]
call fcn.0045b1b0
jmp 0x45bb1f
mov eax, dword [ebp - 0x28c]
mov byte [eax + 4], 1
push 0
push 0
push 1
push 0x11
mov ecx, dword [ebp - 0x28c]
call fcn.0045b1b0
jmp 0x45bb1f
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + 5], 1
push 0
push 0
push 1
push 0x5b
mov ecx, dword [ebp - 0x28c]
call fcn.0045b1b0
jmp 0x45bb1f
push 0
push 1
push 1
push 0xd
mov ecx, dword [ebp - 0x28c]
call fcn.0045b1b0
mov ecx, dword [ebp - 0x28c]
call fcn.0045b420
jmp 0x45bb1f
mov edx, dword [ebp - 0x270]
add edx, 2
mov dword [ebp - 0x278], edx
mov eax, dword [ebp - 0x278]
movzx ecx, word [eax]
test ecx, ecx
je 0x45b7e0
mov edx, dword [ebp - 0x278]
movzx eax, word [edx]
cmp eax, 0x7d
je 0x45b7e0
mov ecx, dword [ebp - 0x278]
add ecx, 2
mov dword [ebp - 0x278], ecx
jmp 0x45b7b4
mov edx, dword [ebp - 0x278]
sub edx, dword [ebp - 0x270]
sar edx, 1
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 0x258
jbe 0x45b807
xor al, al
jmp 0x45bb4a
mov eax, dword [ebp - 0x27c]
push eax
mov ecx, dword [ebp - 0x270]
add ecx, 2
push ecx
lea edx, [ebp - 0x260]
push edx
call fcn.00436c48
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 0x27c]
mov word [ebp + ecx*2 - 0x262], ax
mov dword [ebp - 0x26c], 0xffffffff
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x270]
lea ecx, [eax + edx*2]
mov dword [ebp - 0x270], ecx
mov edx, 0xffff
mov word [ebp - 4], dx
push 4
push str.VKEY
lea eax, [ebp - 0x260]
push eax
call fcn.00436ba2
add esp, 0xc
test eax, eax
jne 0x45b89d
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x278]
push edx
call fcn.00436ca8
add esp, 4
mov word [ebp - 4], ax
jmp 0x45babb
push 4
push str.BEEP
lea eax, [ebp - 0x260]
push eax
call fcn.00436ba2
add esp, 0xc
test eax, eax
jne 0x45b953
lea ecx, [ebp - 0x256]
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x284], edx
push 0x47c7cc
mov eax, dword [ebp - 0x278]
push eax
call fcn.00419030
add esp, 8
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
je 0x45b94e
xor ecx, ecx
mov edx, dword [ebp - 0x284]
mov word [edx], cx
mov eax, dword [ebp - 0x284]
add eax, 2
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x278]
push ecx
call fcn.00436ca8
add esp, 4
mov dword [ebp - 0x280], eax
mov edx, dword [ebp - 0x284]
push edx
call fcn.00436ca8
add esp, 4
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
push eax
mov ecx, dword [ebp - 0x280]
push ecx
call dword [sym.imp.KERNEL32.dll_Beep]
jmp 0x45babb
push 0xb
push 0x47c7d0
lea edx, [ebp - 0x260]
push edx
call fcn.00436ba2
add esp, 0xc
test eax, eax
jne 0x45b98f
lea eax, [ebp - 0x248]
mov dword [ebp - 0x278], eax
push 0
mov ecx, dword [ebp - 0x278]
push ecx
call fcn.0045b070
add esp, 8
jmp 0x45babb
push 5
push str.DELAY
lea edx, [ebp - 0x260]
push edx
call fcn.00436ba2
add esp, 0xc
test eax, eax
jne 0x45b9fd
lea eax, [ebp - 0x256]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x278]
movzx edx, word [ecx]
cmp edx, 0x3d
jne 0x45b9e0
mov eax, dword [ebp - 0x278]
add eax, 2
push eax
call fcn.00436ca8
add esp, 4
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 8], eax
jmp 0x45b9f8
mov edx, dword [ebp - 0x278]
push edx
call fcn.00436ca8
add esp, 4
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0xc], eax
jmp 0x45babb
lea edx, [ebp - 0x26c]
push edx
lea eax, [ebp - 0x260]
push eax
call fcn.0045ae90
add esp, 8
mov word [ebp - 4], ax
cmp dword [ebp - 0x26c], 0xffffffff
je 0x45babb
mov ecx, 1
mov word [ebp - 0x268], cx
mov edx, dword [ebp - 0x26c]
mov eax, dword [edx*8 + 0x48b8e0]
push eax
call fcn.00431a18
add esp, 4
mov dword [ebp - 0x27c], eax
lea ecx, [ebp - 0x260]
push ecx
call fcn.00431a18
add esp, 4
cmp eax, dword [ebp - 0x27c]
jbe 0x45ba8c
mov edx, dword [ebp - 0x27c]
lea eax, [ebp + edx*2 - 0x260]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x278]
push ecx
call fcn.00436ca8
add esp, 4
mov word [ebp - 0x268], ax
mov edx, dword [ebp - 0x26c]
movzx eax, byte [edx*8 + 0x48b8e5]
test eax, eax
je 0x45babb
mov ecx, dword [ebp - 0x26c]
movzx dx, byte [ecx*8 + 0x48b8e4]
movzx eax, dx
push eax
call dword [sym.imp.USER32.dll_VkKeyScanW]
mov word [ebp - 4], ax
movzx ecx, word [ebp - 4]
cmp ecx, 0xffff
je 0x45baec
push 1
movzx edx, word [ebp - 0x268]
push edx
movzx eax, word [ebp - 4]
push eax
mov ecx, dword [ebp - 0x28c]
call fcn.0045b4b0
mov ecx, dword [ebp - 0x28c]
call fcn.0045b420
jmp 0x45bb1f
movzx ecx, word [ebp - 0x274]
push ecx
call dword [sym.imp.USER32.dll_VkKeyScanW]
mov word [ebp - 4], ax
push 1
push 1
movzx edx, word [ebp - 4]
push edx
mov ecx, dword [ebp - 0x28c]
call fcn.0045b4b0
mov ecx, dword [ebp - 0x28c]
call fcn.0045b420
mov eax, dword [ebp - 0x270]
add eax, 2
mov dword [ebp - 0x270], eax
jmp 0x45b675
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + 1], 0
mov ecx, dword [ebp - 0x28c]
call fcn.0045b420
mov al, 1
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004314f7
mov esp, ebp
pop ebp
ret 8