Function at 0x46e3f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x18
push ecx
push edi
lea edi, [esp + 8]
mov eax, 0xcccccccc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop edi
pop ecx
mov eax, dword [ebp + 0xc]
sub eax, 0x2b
je 0x46e627
sub eax, 0x23
je 0x46e5ee
sub eax, 0xc3
je 0x46e43d
sub eax, 3
je 0x46e56a
sub eax, 1
je 0x46e5ac
jmp 0x46e673
mov eax, dword [ebp + 0x14]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x46e50d
push 0x55d708
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x46e673
mov word [0x5661f4], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x46e48c
or word [0x5661f4], 0x1000
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x46e4a7
or word [0x5661f4], 0x200
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x46e4c2
or word [0x5661f4], 0x800
push 0x5b
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
jne 0x46e4e6
push 0x5c
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x46e4ef
or word [0x5661f4], 0x100
mov edx, dword [ebp + 0x10]
shr edx, 0x10
movzx edx, dx
push edx
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1b0]
jmp 0x46e673
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x19], 0
cmp dword [ebp - 0x18], 0
je 0x46e53d
mov edx, dword [ebp - 0x18]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1b8]
cmp al, 0
setne dl
mov byte [ebp - 0x19], dl
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movzx edx, dx
push edx
movzx eax, byte [ebp - 0x19]
push eax
call fcn.004732f0
pop ecx
pop ecx
cmp al, 0
je 0x46e565
mov eax, 1
lea esp, [ebp - 4]
pop esi
pop ebp
ret
jmp 0x46e673
mov eax, dword [ebp + 0x14]
mov dword [ebp - 8], eax
push 0x55d708
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x46e673
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movzx edx, dx
push edx
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1b8]
jmp 0x46e673
mov eax, dword [ebp + 0x14]
mov dword [ebp - 8], eax
push 0x55d708
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x46e673
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movzx edx, dx
push edx
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1bc]
jmp 0x46e673
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov dword [ebp - 8], ecx
push 0x55d708
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x46e673
push dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1b4]
jmp 0x46e673
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 8], ecx
push 0x55d708
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x46e673
push dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1c0]
mov eax, dword [ebp + 0x18]
mov dword [eax], 1
mov eax, 1
lea esp, [ebp - 4]
pop esi
pop ebp
ret
mov eax, 0
lea esp, [ebp - 4]
pop esi
pop ebp
ret