Function at 0x465810
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ad216
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
mov eax, dword [0x5bd344]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [eax + 0x108]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.0048f4c0
push eax
lea ecx, [ebp - 0x98]
call fcn.00462a00
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 2
call fcn.00537eb5
mov eax, dword [ebp - 0x98]
mov edx, 0x41df08
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x4658b6
test si, si
je 0x4658b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4658b6
add ecx, 4
add edx, 4
test si, si
jne 0x465890
xor ecx, ecx
jmp 0x4658bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x465ad0
mov edx, 0x41df14
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x4658f6
test si, si
je 0x4658f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4658f6
add ecx, 4
add edx, 4
test si, si
jne 0x4658d0
xor ecx, ecx
jmp 0x4658fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x465ad0
mov edx, 0x41df5c
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x465936
test si, si
je 0x465932
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x465936
add ecx, 4
add edx, 4
test si, si
jne 0x465910
xor ecx, ecx
jmp 0x46593b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x46596d
mov ecx, edi
call fcn.00465b20
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [0x5e9fbc]
mov edx, 0x5e9fc0
shr eax, 8
movzx eax, al
push eax
call fcn.0046fdc0
add esp, 4
jmp 0x465ad9
mov edx, 0x41df74
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x46599a
test si, si
je 0x465996
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x46599a
add ecx, 4
add edx, 4
test si, si
jne 0x465974
xor ecx, ecx
jmp 0x46599f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4659d1
mov ecx, edi
call fcn.00465b20
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [0x5e9fbc]
mov edx, 0x5e9fc0
shr eax, 8
movzx eax, al
push eax
call fcn.0046ffb0
add esp, 4
jmp 0x465ad9
mov edx, 0x41e374
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4659fe
test si, si
je 0x4659fa
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4659fe
add ecx, 4
add edx, 4
test si, si
jne 0x4659d8
xor ecx, ecx
jmp 0x465a03
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x465a23
mov ecx, edi
call fcn.00465b20
mov ecx, dword [0x5e9fbc]
mov edx, 0x5e9fc0
call fcn.004701e0
jmp 0x465ad9
mov edx, 0x41e38c
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x465a56
test si, si
je 0x465a52
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x465a56
add ecx, 4
add edx, 4
test si, si
jne 0x465a30
xor ecx, ecx
jmp 0x465a5b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x465a7c
mov ecx, edi
call fcn.00465b20
push ecx
mov ecx, dword [0x5e9fbc]
mov edx, 0x5e9fc0
call fcn.00470b00
add esp, 4
jmp 0x465ad9
mov edx, 0x41e3ac
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x465aa9
test si, si
je 0x465aa5
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x465aa9
add ecx, 4
add edx, 4
test si, si
jne 0x465a83
xor ecx, ecx
jmp 0x465aae
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x465adf
mov ecx, edi
call fcn.00465b20
mov ecx, dword [0x5e9fbc]
mov edx, 0x5e9fc0
push 1
call fcn.00470f50
add esp, 4
jmp 0x465ad9
push dword [edi + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0x98]
lea edx, [eax - 0x10]
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x465afe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0057e93d
mov esp, ebp
pop ebp
ret 4