Function at 0x46a0a0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
mov eax, dword [0xaba010]
xor eax, esp
mov dword [esp + 0xb0], eax
mov eax, dword [ebp + 0x14]
push ebx
push esi
mov dword [esp + 0x10], eax
mov esi, ecx
and dword [eax], 0
mov eax, dword [ebp + 0x10]
movsx ecx, ax
push edi
shr eax, 0x10
lea edi, [esp + 0x24]
movsx edx, ax
lea ebx, [esi + 4]
xor eax, eax
mov dword [esp + 0x10], ecx
stosd dword es:[edi], eax
mov dword [esp + 0x18], edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x20]
push eax
push 0
push 0x1111
push dword [ebx]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edi, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], edi
test edi, edi
je 0x46a117
test al, 0x20
je 0x46a18e
test byte [esi + 0x24], 1
jne 0x46a18e
push dword [esp + 0x18]
push dword [esp + 0x14]
push dword [ebx]
call dword [sym.imp.USER32.dll_DragDetect]
test eax, eax
je 0x46a18a
xor edi, edi
cmp dword [esi + 0x48], edi
jle 0x46a14a
push 1
push 0
push edi
mov ecx, esi
call fcn.0046aa99
inc edi
cmp edi, dword [esi + 0x48]
jl 0x46a138
push dword [ebx]
call dword [sym.imp.USER32.dll_UpdateWindow]
push dword [ebx]
call dword [sym.imp.USER32.dll_SetCapture]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
push ecx
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x34], ecx
mov ecx, esi
push eax
mov dword [esi + 0x38], eax
mov dword [esi + 0x30], eax
call fcn.0046a879
mov eax, dword [esp + 0x14]
mov byte [esi + 0x2c], 1
mov dword [eax], 1
jmp 0x46a35f
mov eax, dword [esp + 0x28]
test edi, edi
je 0x46a35f
test al, 0x10
jne 0x46a35f
test al, 0x20
je 0x46a1c4
xor edi, edi
cmp dword [esi + 0x48], edi
jle 0x46a35f
push 1
push 0
push edi
mov ecx, esi
call fcn.0046aa99
inc edi
cmp edi, dword [esi + 0x48]
jl 0x46a1ad
jmp 0x46a35f
lea eax, [esp + 0x1c]
lea ecx, [esi + 0x40]
push eax
call fcn.004063d7
mov edi, eax
mov dword [esp + 0x14], edi
test edi, edi
js 0x46a35f
push edi
call fcn.00469fac
cmp byte [eax + 4], 0
je 0x46a271
push 0xfffffffffffffff0
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindowLongA]
test al, 0x10
jne 0x46a271
push dword [esp + 0x18]
push dword [esp + 0x14]
push dword [ebx]
call dword [sym.imp.USER32.dll_DragDetect]
test eax, eax
je 0x46a271
push 0x64
lea eax, [esp + 0x38]
push 0
push eax
call fcn.004f1a90
mov eax, dword [ebx]
add esp, 0xc
mov dword [esp + 0x38], 0xfffffe69
mov dword [esp + 0x30], eax
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov edi, dword [esp + 0x1c]
mov ecx, ebx
push edi
mov dword [esp + 0x38], eax
mov dword [esp + 0x70], edi
call fcn.0046acc9
push dword [ebx]
mov dword [esp + 0x90], eax
call dword [sym.imp.USER32.dll_GetParent]
lea ecx, [esp + 0x30]
push ecx
push dword [esp + 0x38]
push 0x4e
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x46a35f
push edi
lea ecx, [esi + 0x40]
call fcn.00469fac
push pe_nt_image_headers32
mov dword [esp + 0x14], eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x46a311
xor eax, eax
lea edi, [esp + 0x9c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [esp + 0xac]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x9c]
push eax
push 1
push 0x1104
push dword [ebx]
call dword [sym.imp.USER32.dll_SendMessageA]
mov edi, dword [esp + 0x1c]
lea eax, [esp + 0xac]
push eax
push 1
push 0x1104
push dword [ebx]
mov dword [esp + 0xbc], edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esp + 0xa0]
mov ecx, esi
push 1
cmp eax, dword [esp + 0xb4]
jle 0x46a306
push dword [esi + 0x28]
push edi
jmp 0x46a30a
push edi
push dword [esi + 0x28]
call fcn.0046aa37
jmp 0x46a35f
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x46a332
mov eax, dword [esp + 0x10]
push 1
cmp byte [eax + 4], 0
sete al
movzx eax, al
push eax
push edi
jmp 0x46a358
mov ebx, dword [esp + 0x14]
xor edi, edi
cmp dword [esi + 0x48], edi
jle 0x46a353
cmp edi, ebx
je 0x46a34d
push 1
push 0
push edi
mov ecx, esi
call fcn.0046aa99
inc edi
cmp edi, dword [esi + 0x48]
jl 0x46a33d
push 1
push 1
push ebx
mov ecx, esi
call fcn.0046aa99
mov ecx, dword [esp + 0xbc]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004efcea
mov esp, ebp
pop ebp
ret 0x10