Function at 0x460010
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
mov ebx, ecx
push esi
push edi
mov eax, dword [ebx]
call dword [eax + 0x184]
mov edx, dword [ebp + 8]
test al, al
jne 0x460051
mov eax, dword [edx]
sub eax, 9
cmp eax, 0xc
ja 0x460051
mov ecx, dword [ebx + 0xa0]
push edx
test ecx, ecx
je 0x4601fd
mov eax, dword [ecx]
call dword [eax + 0x1c4]
jmp 0x460310
cmp dword [edx], 0x18
jne 0x460062
mov byte [ebx + 0x1fe], 1
jmp 0x460310
cmp dword [edx], 0x17
jne 0x460073
mov byte [ebx + 0x1fe], 0
jmp 0x460310
cmp dword [edx], 3
je 0x460120
cmp dword [edx], 0x15
jne 0x4601fc
movzx eax, word [edx + 0x18]
sub eax, 0
je 0x4600df
sub eax, 1
jne 0x4601fc
cmp byte [ebx + 0x835], al
je 0x4600d0
lea edi, [ebx + 0x830]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x38]
test al, al
jne 0x4600d0
mov eax, dword [edi]
push 1
mov esi, dword [eax + 0xc]
mov eax, dword [ebx]
mov edx, dword [eax + 0x250]
mov eax, dword [ebx + 0x838]
inc eax
push eax
mov ecx, ebx
call edx
jmp 0x4601dc
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x26c]
jmp 0x460310
cmp byte [ebx + 0x835], 0
je 0x460111
lea edi, [ebx + 0x830]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x38]
test al, al
jne 0x460111
mov eax, dword [edi]
push 0
mov esi, dword [eax + 0xc]
mov eax, dword [ebx]
mov edx, dword [eax + 0x250]
mov eax, dword [ebx + 0x838]
dec eax
jmp 0x4600c6
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x268]
jmp 0x460310
movzx eax, word [edx + 0x14]
cmp eax, 0x24
ja 0x4601e8
je 0x4601c3
sub eax, 0xd
je 0x46019d
sub eax, 0x14
je 0x46018e
sub eax, 1
je 0x46017f
sub eax, 1
jne 0x4601fc
mov eax, dword [ebx + 0x830]
mov ecx, ebx
mov edi, dword [eax + 0xc]
mov eax, dword [ecx]
add ecx, 0x6b8
mov esi, dword [eax + 0x250]
mov eax, dword [ecx]
call dword [eax + 0xc]
dec eax
mov ecx, ebx
push 1
push eax
call esi
push 1
push eax
lea ecx, [ebx + 0x830]
jmp 0x4602c1
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x274]
jmp 0x460310
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x270]
jmp 0x460310
mov edx, dword [ebx + 0x838]
cmp edx, 0xffffffff
je 0x460310
lea ecx, [ebx + 0x6b8]
mov eax, dword [ecx]
push edx
call dword [eax]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x3c]
jmp 0x460310
lea edi, [ebx + 0x830]
mov ecx, ebx
mov eax, dword [edi]
push 0
push 0
mov esi, dword [eax + 0xc]
mov eax, dword [ebx]
call dword [eax + 0x250]
push 1
push eax
mov ecx, edi
call esi
jmp 0x460310
sub eax, 0x26
je 0x4602c5
dec eax
sub eax, 1
je 0x460245
sub eax, 0x19
je 0x460209
push edx
mov ecx, ebx
call fcn.004536b4
jmp 0x460310
mov eax, dword [ebx + 0x830]
lea ecx, [ebx + 0x830]
call dword [eax + 0x38]
test al, al
je 0x460310
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x460310
mov eax, dword [ebx + 0x830]
lea ecx, [ebx + 0x830]
call dword [eax + 0x3c]
jmp 0x460310
lea ecx, [ebx + 0x840]
test ecx, ecx
je 0x460310
cmp dword [ecx + 4], 0
jle 0x460310
mov eax, dword [ecx]
xor edi, edi
mov esi, dword [eax]
cmp edi, dword [ecx + 4]
jge 0x460276
push edi
call fcn.00427076
cmp esi, eax
cmovl esi, eax
inc edi
jmp 0x460263
lea eax, [esi + 1]
lea esi, [ebx + 0x830]
mov dword [esp + 0xc], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x40]
mov ecx, dword [ebx + 0x864]
add ecx, 0x6b8
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [esi]
mov edx, dword [esp + 0xc]
mov edi, dword [ecx + 0xc]
lea ecx, [edx + 1]
cmp ecx, eax
jle 0x4602bc
lea ecx, [ebx + 0x6b8]
mov eax, dword [ecx]
call dword [eax + 0xc]
dec eax
push 1
push eax
jmp 0x4602bf
push 1
push edx
mov ecx, esi
call edi
jmp 0x460310
lea ecx, [ebx + 0x840]
test ecx, ecx
je 0x460310
cmp dword [ecx + 4], 0
jle 0x460310
mov eax, dword [ecx]
xor edi, edi
mov esi, dword [eax]
cmp edi, dword [ecx + 4]
jge 0x4602ee
push edi
call fcn.00427076
cmp esi, eax
cmovg esi, eax
inc edi
jmp 0x4602db
add ebx, 0x830
dec esi
mov ecx, ebx
mov eax, dword [ebx]
call dword [eax + 0x40]
mov eax, dword [ebx]
mov ecx, ebx
push 1
mov eax, dword [eax + 0xc]
test esi, esi
jle 0x46030c
push esi
jmp 0x46030e
push 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4