Function at 0x489e10
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
push esi
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x120]
call eax
movzx ecx, al
test ecx, ecx
jne 0x489e84
mov edx, dword [ebp + 8]
cmp dword [edx], 8
jle 0x489e84
mov eax, dword [ebp + 8]
cmp dword [eax], 0x16
jge 0x489e84
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x48], 0
je 0x489e73
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x48]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x48]
mov eax, dword [edx]
mov ecx, dword [eax + 0x150]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x2c]
call dword [ebp - 0x30]
jmp 0x489e7f
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
call sym.360pic.exe_public_virtual:_void___thiscall_DuiLib::CVerticalLayoutUI::DoEvent_struct_DuiLib::tagTEventUI__
jmp 0x48a412
mov ecx, dword [ebp + 8]
cmp dword [ecx], 0x18
jne 0x489e9b
mov edx, dword [ebp - 4]
mov byte [edx + 0x19d], 1
jmp 0x48a412
mov eax, dword [ebp + 8]
cmp dword [eax], 0x17
jne 0x489eb2
mov ecx, dword [ebp - 4]
mov byte [ecx + 0x19d], 0
jmp 0x48a412
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
je 0x489ecf
cmp dword [ebp - 0x10], 0x15
je 0x48a1e5
jmp 0x48a406
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xd
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x34
ja case.0x489ef6.1
mov ecx, dword [ebp - 0xc]
movzx edx, byte [ecx + 0x48a440]
jmp dword [edx*4 + 0x48a41c]
mov ecx, dword [ebp - 4]
add ecx, 0x6f8
call sym.360pic.exe_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::operator_struct_HWND____void_const
test eax, eax
jle 0x489f8d
mov ecx, dword [ebp - 4]
call sym.360pic.exe_protected:_int___thiscall_DuiLib::CListUI::GetMinSelItemIndex_void_
sub eax, 1
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x6e8]
mov eax, dword [edx + 0x40]
call eax
cmp dword [ebp - 0x14], 0
jle 0x489f66
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x38], ecx
push 1
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x34]
call dword [ebp - 0x38]
mov byte [ebp - 5], al
jmp 0x489f8d
mov eax, dword [ebp - 4]
add eax, 0x6e8
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x6e8]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x40], eax
push 1
push 0
mov ecx, dword [ebp - 0x3c]
call dword [ebp - 0x40]
mov byte [ebp - 5], al
jmp 0x48a412
mov ecx, dword [ebp - 4]
add ecx, 0x6f8
call sym.360pic.exe_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::operator_struct_HWND____void_const
test eax, eax
jle 0x48a06e
mov ecx, dword [ebp - 4]
call sym.360pic.exe_protected:_int___thiscall_DuiLib::CListUI::GetMaxSelItemIndex_void_
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov edx, dword [eax + 0x40]
call edx
mov esi, dword [ebp - 0x18]
add esi, 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x710]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x710]
add eax, 0x558
mov edx, dword [ecx + 0x558]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
cmp esi, eax
jle 0x48a044
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 4]
add ecx, 0x558
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x558]
mov edx, dword [eax + 0xc]
call edx
sub eax, 1
mov dword [ebp - 0x44], eax
push 1
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x48]
call dword [ebp - 0x4c]
mov byte [ebp - 6], al
jmp 0x48a06e
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x54], ecx
push 1
mov edx, dword [ebp - 0x18]
push edx
mov ecx, dword [ebp - 0x50]
call dword [ebp - 0x54]
mov byte [ebp - 6], al
jmp 0x48a412
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x1dc]
call eax
jmp 0x48a412
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x1e0]
call eax
jmp 0x48a412
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [eax + 0x1bc]
mov dword [ebp - 0x58], ecx
push 0
push 0
mov ecx, dword [ebp - 4]
call dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
push 1
mov edx, dword [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x60]
call dword [ebp - 0x64]
jmp 0x48a412
mov eax, dword [ebp - 4]
add eax, 0x6e8
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x6e8]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1bc]
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 4]
add ecx, 0x558
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x558]
mov edx, dword [eax + 0xc]
call edx
sub eax, 1
mov dword [ebp - 0x68], eax
push 1
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 4]
call dword [ebp - 0x6c]
mov dword [ebp - 0x70], eax
push 1
mov ecx, dword [ebp - 0x70]
push ecx
mov ecx, dword [ebp - 0x74]
call dword [ebp - 0x78]
jmp 0x48a412
mov edx, dword [ebp - 4]
cmp dword [edx + 0x6f0], 0xffffffff
je 0x48a18e
mov eax, dword [ebp - 4]
add eax, 0x558
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x558]
mov eax, dword [edx]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x6f0]
push edx
mov ecx, dword [ebp - 0x7c]
call dword [ebp - 0x80]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x18]
call eax
jmp 0x48a412
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov edx, dword [eax + 0x38]
call edx
movzx eax, al
test eax, eax
je 0x48a1db
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
je 0x48a1db
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov edx, dword [eax + 0x3c]
call edx
jmp 0x48a412
jmp 0x48a406
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x6ed]
test ecx, ecx
je 0x48a315
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov edx, dword [eax + 0x38]
call edx
movzx eax, al
test eax, eax
jne 0x48a315
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
and edx, 0xffff
movzx eax, dx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x48a23c
cmp dword [ebp - 0x20], 1
je 0x48a2a6
jmp 0x48a310
mov ecx, dword [ebp - 4]
add ecx, 0x6e8
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6e8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x90], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [eax + 0x1bc]
mov dword [ebp - 0x84], ecx
push 0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x6f0]
sub eax, 1
push eax
mov ecx, dword [ebp - 4]
call dword [ebp - 0x84]
mov dword [ebp - 0x88], eax
push 1
mov ecx, dword [ebp - 0x88]
push ecx
mov ecx, dword [ebp - 0x8c]
call dword [ebp - 0x90]
jmp 0x48a412
mov edx, dword [ebp - 4]
add edx, 0x6e8
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x6e8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1bc]
mov dword [ebp - 0x94], edx
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x6f0]
add ecx, 1
push ecx
mov ecx, dword [ebp - 4]
call dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
push 1
mov edx, dword [ebp - 0x98]
push edx
mov ecx, dword [ebp - 0x9c]
call dword [ebp - 0xa0]
jmp 0x48a412
jmp 0x48a406
mov eax, dword [ebp - 4]
cmp dword [eax + 0x710], 0
je 0x48a406
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x710]
mov eax, dword [ebp - 4]
mov edx, dword [edx]
mov ecx, dword [eax + 0x710]
mov eax, dword [edx + 0x208]
call eax
test eax, eax
je 0x48a406
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x710]
mov eax, dword [ebp - 4]
mov edx, dword [edx]
mov ecx, dword [eax + 0x710]
mov eax, dword [edx + 0x208]
call eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x24]
mov eax, dword [edx + 0x10c]
call eax
movzx ecx, al
test ecx, ecx
je 0x48a406
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x710]
mov ecx, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x710]
mov eax, dword [edx + 0x208]
call eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x118]
call eax
movzx ecx, al
test ecx, ecx
je 0x48a406
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x710]
call sym.360pic.exe_public:_bool___thiscall_DuiLib::CContainerUI::IsVScrollDelay_void_const
movzx eax, al
test eax, eax
je 0x48a406
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x710]
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x710]
mov edx, dword [ecx]
mov eax, dword [edx + 0x150]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xa4]
call dword [ebp - 0xa8]
jmp 0x48a412
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 4]
call sym.360pic.exe_public_virtual:_void___thiscall_DuiLib::CVerticalLayoutUI::DoEvent_struct_DuiLib::tagTEventUI__
pop esi
mov esp, ebp
pop ebp
ret 4