Function at 0x455c40
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov eax, dword [esi]
mov eax, dword [eax + 0xdc]
call eax
mov edi, dword [ebp + 8]
test al, al
jne 0x455c8a
mov eax, dword [edi]
cmp eax, 8
jle 0x455c8a
cmp eax, 0x13
jge 0x455c8a
mov ecx, dword [esi + 0xb0c]
push edi
test ecx, ecx
jne 0x455eeb
mov ecx, esi
call fcn.004554e0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [edi], 0x17
jne 0x455ccc
xor ebx, ebx
cmp dword [esi + 0x664], ebx
jle 0x455ccc
lea eax, [esi + 0x668]
mov dword [esp + 0x10], eax
push dword [edi + 0x10]
push dword [edi + 0xc]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x455d7a
mov eax, dword [esp + 0x10]
inc ebx
add eax, 0x10
mov dword [esp + 0x10], eax
cmp ebx, dword [esi + 0x664]
jl 0x455ca3
cmp dword [edi], 0xe
jne 0x455d1e
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0xcc]
call eax
test al, al
je 0x455d1e
xor ebx, ebx
cmp dword [esi + 0x664], ebx
jle 0x455d1e
lea eax, [esi + 0x668]
mov dword [esp + 0x10], eax
push dword [edi + 0x10]
push dword [edi + 0xc]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x455d97
mov eax, dword [esp + 0x10]
inc ebx
add eax, 0x10
mov dword [esp + 0x10], eax
cmp ebx, dword [esi + 0x664]
jl 0x455cf5
mov eax, dword [esi + 0x664]
test eax, eax
jle 0x455dd5
cmp dword [edi], 9
jne 0x455dd5
or ecx, 0xffffffff
xor ebx, ebx
mov dword [esp + 0x14], ecx
test eax, eax
jle 0x455dbc
lea eax, [esi + 0x668]
mov dword [esp + 0x10], eax
lea esp, [esp]
push dword [edi + 0x10]
push dword [edi + 0xc]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x455db6
mov eax, dword [esp + 0x10]
inc ebx
add eax, 0x10
mov dword [esp + 0x10], eax
cmp ebx, dword [esi + 0x664]
jl 0x455d50
or ecx, 0xffffffff
jmp 0x455dbc
push 0x7f89
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi + 0x164]
push 0
push 0
push ebx
push str.link
push esi
call fcn.00475960
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, ebx
mov dword [esp + 0x14], ebx
cmp dword [esi + 0xb08], ecx
je 0x455dd5
mov ecx, esi
call fcn.00454da0
mov eax, dword [esp + 0x14]
mov dword [esi + 0xb08], eax
cmp dword [esi + 0x664], 0
jle 0x455dfd
cmp dword [edi], 0xa
jne 0x455dfd
cmp dword [esi + 0xb08], 0xffffffff
je 0x455dfd
mov ecx, esi
call fcn.00454da0
mov dword [esi + 0xb08], 0xffffffff
mov eax, dword [edi]
cmp eax, 0xd
je 0x455e1a
cmp eax, 0xf
je 0x455e1a
push edi
mov ecx, esi
call fcn.004554e0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0xcc]
call eax
test al, al
je 0x455ee4
mov ecx, dword [esi + 0x164]
push 0
push 0
push 0
push str.itemclick
push esi
call fcn.00475960
mov ecx, dword [esi + 0xb0c]
test ecx, ecx
je 0x455edd
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
test al, al
jne 0x455eb5
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x455ea5
mov eax, dword [esi + 0x650]
lea ecx, [esi + 0x650]
mov eax, dword [eax + 0x10]
call eax
mov ecx, dword [esi + 0xb0c]
test al, al
mov eax, dword [ecx]
je 0x455e98
push dword [esi + 0x654]
call dword [eax + 0x34]
jmp 0x455edd
push 0
push dword [esi + 0x654]
call dword [eax + 0x28]
jmp 0x455edd
mov ecx, dword [esi + 0xb0c]
mov eax, dword [ecx]
call dword [eax + 0x40]
cmp eax, 1
jne 0x455eca
mov eax, dword [esi + 0x650]
lea ecx, [esi + 0x650]
mov eax, dword [eax + 0x10]
call eax
test al, al
jne 0x455edd
mov ecx, dword [esi + 0xb0c]
push 0
push dword [esi + 0x654]
mov eax, dword [ecx]
call dword [eax + 8]
mov ecx, esi
call fcn.00454da0
mov ecx, dword [esi + 0xb0c]
push edi
mov eax, dword [ecx]
call dword [eax + 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4