Function at 0x468e05
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [ebp + 0xc]
push ebx
xor ebx, ebx
push esi
cmp eax, 0xf
push edi
mov dword [ebp - 4], ebx
jne 0x468e7c
mov esi, dword [ebp + 8]
cmp dword [esi + 0x54], ebx
je 0x468e2c
cmp dword [esi + 0x44], ebx
jne 0x4691f6
lea eax, [ebp - 0x44]
push eax
push dword [esi + 0x64]
call dword [sym.imp.USER32.dll_BeginPaint]
mov edi, eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.00468d9e
cmp dword [ebp + 8], ebx
jle 0x468e62
cmp dword [ebp + 0x10], ebx
jle 0x468e62
push ebx
push dword [ebp + 0x10]
push dword [ebp + 8]
push edi
call dword [sym.imp.GDI32.dll_OffsetWindowOrgEx]
push edi
mov ecx, esi
call fcn.004697f0
lea eax, [ebp - 0x44]
push eax
push dword [esi + 0x64]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x469152
mov esi, 0x100
cmp eax, esi
jne 0x468ecb
cmp dword [ebp + 0x10], 0x70
mov edi, dword [ebp + 8]
jne 0x468eb0
mov ecx, edi
call fcn.004695c7
push ebx
push 0xe146
push 0x111
push dword [edi + 0x64]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp + 0x14]
mov ecx, edi
push dword [ebp + 0x10]
push esi
call fcn.00468a0a
test eax, eax
je 0x4691f6
jmp 0x469152
cmp eax, 0x113
jne 0x4690c8
mov esi, dword [ebp + 8]
mov edi, dword [sym.imp.USER32.dll_KillTimer]
mov eax, 0x2be2
cmp dword [ebp + 0x10], eax
jne 0x468f00
push eax
push dword [esi + 0x64]
call edi
push 0x488b6c
push 0x497874
call fcn.0046b7be
pop ecx
pop ecx
mov eax, 0x2be3
cmp dword [ebp + 0x10], eax
jne 0x468f17
push eax
push dword [esi + 0x64]
call edi
mov ecx, esi
call fcn.0046975c
cmp dword [ebp + 0x10], 0x457
jne 0x468fc1
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x1b
mov dword [ebp + 0x10], ebx
mov dword [ebp + 8], ebx
call edi
mov ebx, 0x8000
test ebx, eax
je 0x468f44
mov dword [ebp + 0x10], 1
push 0x5b
call edi
push 1
test ebx, eax
pop edi
je 0x468f52
mov dword [ebp + 8], edi
cmp dword [0x48524c], 0xffffffff
jne 0x468f8a
xor eax, eax
cmp dword [ebp + 0x10], eax
je 0x468f91
cmp dword [ebp + 8], eax
je 0x468f8c
mov dword [0x48524c], edi
cmp dword [esi + 0x9c], eax
mov ecx, esi
je 0x468f7e
call fcn.004695c7
jmp 0x468f83
call fcn.0046975c
mov eax, edi
jmp 0x4691f8
xor eax, eax
cmp dword [ebp + 0x10], eax
jne 0x468f98
or dword [0x48524c], 0xffffffff
cmp dword [ebp + 8], eax
je 0x4691f6
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ebx, eax
je 0x4691f6
push 0xaffe
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x4691f6
mov ebx, 0x3e8
cmp dword [ebp + 0x10], ebx
jne 0x4691f6
push ebx
push dword [esi + 0x64]
call edi
xor edi, edi
mov ecx, esi
push edi
call fcn.00469c21
push edi
push 0xa
push ebx
push dword [esi + 0x64]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x4819a8], edi
je 0x469052
cmp dword [esi + 0x50], edi
mov edi, dword [sym.imp.USER32.dll_SetWindowTextW]
jne 0x469009
push str.Click_here_to
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0xc8
jne 0x46901c
push str.set_keyboard_focus
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x190
jne 0x46902f
push str.to_resize_Magnifi
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x258
jne 0x469042
push str.over_the_Keyboard
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x320
jne 0x4690b3
push str._CTRLESC_To_Tray_n
jmp 0x4690ae
cmp dword [esi + 0x50], edi
mov edi, dword [sym.imp.USER32.dll_SetWindowTextW]
jne 0x469067
push str.Klicken_Sie_bitte_hier
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0xc8
jne 0x46907a
push str.um_den_Tastaturfocus
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x190
jne 0x46908d
push str.zu_erhalten
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x258
jne 0x4690a0
push str.um_die_Lupe_einzustellen
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x320
jne 0x4690b3
push str._UMSCHALTESC_To_Tray_n
push dword [esi + 0x64]
call edi
inc dword [esi + 0x50]
cmp dword [esi + 0x50], ebx
jle 0x469152
and dword [esi + 0x50], 0
jmp 0x469152
cmp eax, 0x200
jne 0x4690da
mov ecx, dword [ebp + 8]
push ebx
call fcn.00469c21
jmp 0x469152
cmp eax, 0x201
je 0x4691f6
cmp eax, 0x204
je 0x4691f6
cmp eax, 0x8d2
je 0x4691f6
mov esi, dword [ebp + 8]
mov edi, dword [sym.imp.USER32.dll_RedrawWindow]
cmp eax, 0x20a
mov ebx, 0x105
jne 0x469126
mov eax, dword [ebp + 0x10]
shr eax, 0x10
test ax, ax
jg 0x4691c6
jl 0x46918a
jmp 0x4691f6
cmp eax, 0x115
je 0x46917a
cmp eax, 0x114
je 0x46917a
cmp eax, 0x20
jne 0x46915a
cmp dword [0x497850], 0
je 0x4691f6
mov eax, dword [ebp + 8]
push dword [eax + 0x4c]
call dword [sym.imp.USER32.dll_SetCursor]
push 1
pop eax
jmp 0x4691f8
cmp eax, 0xd34
jne 0x4691f6
push dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
call fcn.0046944c
mov ecx, dword [ebp + 8]
call fcn.0046975c
jmp 0x4691f6
movzx eax, word [ebp + 0x10]
test eax, eax
mov dword [ebp - 4], eax
je 0x46918a
cmp eax, 2
jne 0x4691ba
fld dword [esi + 0x94]
fcomp dword [0x478d84]
lea ecx, [esi + 0x94]
fnstsw ax
sahf
jbe 0x4691ba
fld dword [ecx]
fsub dword [0x478d84]
push ebx
push 0
push 0
push dword [esi + 0x64]
fstp dword [ecx]
call edi
call fcn.0042efcc
cmp dword [ebp - 4], 1
je 0x4691c6
cmp dword [ebp - 4], 3
jne 0x4691f6
fld dword [esi + 0x94]
fcomp dword [0x479ce4]
lea ecx, [esi + 0x94]
fnstsw ax
sahf
jae 0x4691f6
fld dword [ecx]
fadd dword [0x478d84]
push ebx
push 0
push 0
push dword [esi + 0x64]
fstp dword [ecx]
call edi
call fcn.0042efcc
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x10