Function at 0x467e00
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x4ef18e], 0
jne 0x467e26
movss xmm0, dword [0x48c764]
jmp 0x46807a
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0x10]
push 0
push 4
push eax
mov eax, dword [0x4ef188]
add eax, 0x59f19c
mov dword [ebp - 0x10], 0
push eax
push dword [0x4ef278]
call esi
push 0
push 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
mov eax, dword [ebp - 0x10]
add eax, 0x108
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 0x14], 6
je 0x467e82
movss xmm0, dword [0x48c764]
jmp 0x468079
push edi
push 0
push 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
mov eax, dword [0x4ef354]
add eax, dword [0x4ef17c]
push eax
push dword [0x4ef278]
call esi
mov edi, dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push 0
push 4
push eax
lea eax, [edi + 0x25f]
mov dword [ebp - 0x10], 0
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 0x10], 0
jne 0x468070
push 0
push 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
lea eax, [edi + 0x100]
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 8], 0
jle 0x468070
push 0
push 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
mov eax, dword [0x4ef354]
add eax, dword [0x4ef17c]
push eax
push dword [0x4ef278]
call esi
push 0
push 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
mov eax, dword [ebp - 8]
add eax, 0x25c
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 0x14], 9
je 0x468070
cmp byte [0x4ef18f], 0
je 0x467f7c
mov ecx, dword [str.K_r_r_r_r_r_r_r]
call fcn.004523e0
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x468070
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x4ef184]
jne 0x468070
lea eax, [ebp - 0x20]
push eax
call fcn.00453410
movss xmm0, dword [0x493b04]
add esp, 4
ucomiss xmm0, dword [0x48c764]
movss xmm1, dword [eax + 4]
movss dword [ebp - 0x10], xmm1
lahf
test ah, 0x44
jp 0x467faf
movss dword [0x493b04], xmm1
push 0
push 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
mov eax, dword [0x4ef354]
add eax, dword [0x4ef17c]
push eax
push dword [0x4ef278]
call esi
push 0
push 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
mov eax, dword [0x4ef354]
add eax, dword [0x4ef17c]
push eax
push dword [0x4ef278]
call esi
push 0
push 1
lea eax, [ebp - 9]
mov byte [ebp - 9], 0
push eax
mov eax, dword [ebp - 8]
add eax, 0x104
push eax
push dword [0x4ef278]
call esi
test byte [ebp - 9], 1
movss xmm0, dword [ebp - 0x10]
jne 0x468078
movss xmm1, dword [0x493b04]
comiss xmm1, xmm0
jbe 0x468057
push 0
lea eax, [ebp - 8]
push 4
push eax
mov eax, dword [0x4ef17c]
add eax, 0x3233090
push eax
push dword [0x4ef278]
mov dword [ebp - 8], 6
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm0, dword [ebp - 0x10]
jmp 0x468078
comiss xmm0, xmm1
jbe 0x468078
push 0
lea eax, [ebp - 8]
push 4
push eax
mov eax, dword [0x4ef17c]
add eax, 0x3233084
jmp 0x46803c
movss xmm0, dword [0x48c764]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
movss dword [0x493b04], xmm0
call fcn.0047dd95
mov esp, ebp
pop ebp
ret