Function at 0x46b8a7
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [ebp + 0xc]
push ebx
xor ebx, ebx
push esi
cmp eax, 0xf
push edi
mov dword [ebp - 4], ebx
jne 0x46b91e
mov esi, dword [ebp + 8]
cmp dword [esi + 0x54], ebx
je 0x46b8ce
cmp dword [esi + 0x44], ebx
jne 0x46bc98
lea eax, [ebp - 0x44]
push eax
push dword [esi + 0x64]
call dword [sym.imp.USER32.dll_BeginPaint]
mov edi, eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.0046b840
cmp dword [ebp + 8], ebx
jle 0x46b904
cmp dword [ebp + 0x10], ebx
jle 0x46b904
push ebx
push dword [ebp + 0x10]
push dword [ebp + 8]
push edi
call dword [sym.imp.GDI32.dll_OffsetWindowOrgEx]
push edi
mov ecx, esi
call fcn.0046c292
lea eax, [ebp - 0x44]
push eax
push dword [esi + 0x64]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x46bbf4
mov esi, 0x100
cmp eax, esi
jne 0x46b96d
cmp dword [ebp + 0x10], 0x70
mov edi, dword [ebp + 8]
jne 0x46b952
mov ecx, edi
call fcn.0046c069
push ebx
push 0xe146
push 0x111
push dword [edi + 0x64]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp + 0x14]
mov ecx, edi
push dword [ebp + 0x10]
push esi
call fcn.0046b4ac
test eax, eax
je 0x46bc98
jmp 0x46bbf4
cmp eax, 0x113
jne 0x46bb6a
mov esi, dword [ebp + 8]
mov edi, dword [sym.imp.USER32.dll_KillTimer]
mov eax, 0x2be2
cmp dword [ebp + 0x10], eax
jne 0x46b9a2
push eax
push dword [esi + 0x64]
call edi
push 0x48be0c
push 0x49abd4
call fcn.0046e07e
pop ecx
pop ecx
mov eax, 0x2be3
cmp dword [ebp + 0x10], eax
jne 0x46b9b9
push eax
push dword [esi + 0x64]
call edi
mov ecx, esi
call fcn.0046c1fe
cmp dword [ebp + 0x10], 0x457
jne 0x46ba63
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x1b
mov dword [ebp + 0x10], ebx
mov dword [ebp + 8], ebx
call edi
mov ebx, 0x8000
test ebx, eax
je 0x46b9e6
mov dword [ebp + 0x10], 1
push 0x5b
call edi
push 1
test ebx, eax
pop edi
je 0x46b9f4
mov dword [ebp + 8], edi
cmp dword [0x4884d4], 0xffffffff
jne 0x46ba2c
xor eax, eax
cmp dword [ebp + 0x10], eax
je 0x46ba33
cmp dword [ebp + 8], eax
je 0x46ba2e
mov dword [0x4884d4], edi
cmp dword [esi + 0x9c], eax
mov ecx, esi
je 0x46ba20
call fcn.0046c069
jmp 0x46ba25
call fcn.0046c1fe
mov eax, edi
jmp 0x46bc9a
xor eax, eax
cmp dword [ebp + 0x10], eax
jne 0x46ba3a
or dword [0x4884d4], 0xffffffff
cmp dword [ebp + 8], eax
je 0x46bc98
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ebx, eax
je 0x46bc98
push 0xaffe
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x46bc98
mov ebx, 0x3e8
cmp dword [ebp + 0x10], ebx
jne 0x46bc98
push ebx
push dword [esi + 0x64]
call edi
xor edi, edi
mov ecx, esi
push edi
call fcn.0046c6c3
push edi
push 0xa
push ebx
push dword [esi + 0x64]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x484af0], edi
je 0x46baf4
cmp dword [esi + 0x50], edi
mov edi, dword [sym.imp.USER32.dll_SetWindowTextW]
jne 0x46baab
push str.Click_here_to
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0xc8
jne 0x46babe
push str.set_keyboard_focus
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x190
jne 0x46bad1
push str.to_resize_Magnifi
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x258
jne 0x46bae4
push str.over_the_Keyboard
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x320
jne 0x46bb55
push str._CTRLESC_To_Tray_n
jmp 0x46bb50
cmp dword [esi + 0x50], edi
mov edi, dword [sym.imp.USER32.dll_SetWindowTextW]
jne 0x46bb09
push str.Klicken_Sie_bitte_hier
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0xc8
jne 0x46bb1c
push str.um_den_Tastaturfocus
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x190
jne 0x46bb2f
push str.zu_erhalten
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x258
jne 0x46bb42
push str.um_die_Lupe_einzustellen
push dword [esi + 0x64]
call edi
cmp dword [esi + 0x50], 0x320
jne 0x46bb55
push str._UMSCHALTESC_To_Tray_n
push dword [esi + 0x64]
call edi
inc dword [esi + 0x50]
cmp dword [esi + 0x50], ebx
jle 0x46bbf4
and dword [esi + 0x50], 0
jmp 0x46bbf4
cmp eax, 0x200
jne 0x46bb7c
mov ecx, dword [ebp + 8]
push ebx
call fcn.0046c6c3
jmp 0x46bbf4
cmp eax, 0x201
je 0x46bc98
cmp eax, 0x204
je 0x46bc98
cmp eax, 0x8d2
je 0x46bc98
mov esi, dword [ebp + 8]
mov edi, dword [sym.imp.USER32.dll_RedrawWindow]
cmp eax, 0x20a
mov ebx, 0x105
jne 0x46bbc8
mov eax, dword [ebp + 0x10]
shr eax, 0x10
test ax, ax
jg 0x46bc68
jl 0x46bc2c
jmp 0x46bc98
cmp eax, 0x115
je 0x46bc1c
cmp eax, 0x114
je 0x46bc1c
cmp eax, 0x20
jne 0x46bbfc
cmp dword [0x49abb0], 0
je 0x46bc98
mov eax, dword [ebp + 8]
push dword [eax + 0x4c]
call dword [sym.imp.USER32.dll_SetCursor]
push 1
pop eax
jmp 0x46bc9a
cmp eax, 0xd34
jne 0x46bc98
push dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
call fcn.0046beee
mov ecx, dword [ebp + 8]
call fcn.0046c1fe
jmp 0x46bc98
movzx eax, word [ebp + 0x10]
test eax, eax
mov dword [ebp - 4], eax
je 0x46bc2c
cmp eax, 2
jne 0x46bc5c
fld dword [esi + 0x94]
fcomp dword [0x47bdec]
lea ecx, [esi + 0x94]
fnstsw ax
sahf
jbe 0x46bc5c
fld dword [ecx]
fsub dword [0x47bdec]
push ebx
push 0
push 0
push dword [esi + 0x64]
fstp dword [ecx]
call edi
call fcn.004311a6
cmp dword [ebp - 4], 1
je 0x46bc68
cmp dword [ebp - 4], 3
jne 0x46bc98
fld dword [esi + 0x94]
fcomp dword [0x47cd90]
lea ecx, [esi + 0x94]
fnstsw ax
sahf
jae 0x46bc98
fld dword [ecx]
fadd dword [0x47bdec]
push ebx
push 0
push 0
push dword [esi + 0x64]
fstp dword [ecx]
call edi
call fcn.004311a6
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x10