Function at 0x46f3e0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bd596
mov eax, dword fs:[0]
push eax
sub esp, 0x168
mov eax, dword [0x4f8008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov al, byte [ecx]
mov ebx, dword [ebp + 0xc]
test al, al
jne 0x46f429
cmp byte [ecx + 1], al
jne 0x46f429
cmp byte [ecx + 3], al
jne 0x46f429
mov byte [ebp - 0x13a], al
jmp 0x46f447
mov byte [ebp - 0x13a], 1
test al, al
je 0x46f447
cmp byte [ecx + 1], 0
jne 0x46f447
cmp byte [ecx + 3], 0
mov byte [ebp - 0x139], 1
je 0x46f44e
mov byte [ebp - 0x139], 0
mov edi, dword [ebp + 8]
push ebx
push edi
call dword [sym.imp.USER32.dll_VkKeyScanExW]
movzx eax, ax
mov dword [ebp - 0x144], eax
cmp ax, 0xffff
jne 0x46f4b1
cmp byte [ebp - 0x139], 0
je 0x46f69c
lea ecx, [edi - 0x41]
cmp cx, 0x19
ja 0x46f49f
mov ax, di
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049681b
mov esp, ebp
pop ebp
ret 8
lea eax, [edi - 0x61]
cmp ax, 0x19
ja 0x46f69c
lea eax, [edi - 0x20]
jmp 0x46f481
push pe_nt_image_headers32
lea eax, [ebp - 0x138]
push 0
push eax
call fcn.00498280
mov eax, dword [ebp - 0x144]
add esp, 0xc
mov ecx, eax
sar ecx, 8
and cl, 1
shl cl, 7
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 0x128], cl
mov ecx, eax
sar ecx, 9
and cl, 1
shl cl, 7
mov dword [ebp - 0x160], ecx
mov byte [ebp - 0x127], cl
mov ecx, eax
sar ecx, 0xa
push ebx
and cl, 1
movzx eax, al
shl cl, 7
push 0
push 0x14
mov dword [ebp - 0x164], ecx
mov byte [ebp - 0x126], cl
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x140], eax
push ecx
push 0
push eax
call dword [sym.imp.USER32.dll_ToUnicodeEx]
push ebx
push 0
push 0x14
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x138]
push eax
push 0
push dword [ebp - 0x140]
call dword [sym.imp.USER32.dll_ToUnicodeEx]
cmp esi, 0xffffffff
je 0x46f677
cmp eax, 0xffffffff
je 0x46f677
push pe_nt_image_headers32
lea eax, [ebp - 0x138]
push 0
push eax
call fcn.00498280
mov eax, dword [ebp - 0x15c]
add esp, 0xc
mov byte [ebp - 0x128], al
mov eax, dword [ebp - 0x160]
mov byte [ebp - 0x127], al
mov eax, dword [ebp - 0x164]
push ebx
push 0
push 0x14
mov byte [ebp - 0x126], al
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x138]
push eax
push 0
push dword [ebp - 0x140]
call dword [sym.imp.USER32.dll_ToUnicodeEx]
cmp eax, 1
jne 0x46f7ca
cmp word [ebp - 0x38], di
sete al
test al, al
je 0x46f7ca
cmp byte [ebp - 0x13a], 0
jne 0x46f66c
shr ebx, 0x10
mov eax, 0x415
cmp bx, ax
jne 0x46f5fc
cmp di, 0x60
je 0x46f6f2
jmp 0x46f66c
mov eax, 0xf001
cmp bx, ax
jne 0x46f612
cmp di, 0x36
je 0x46f717
jmp 0x46f66c
mov eax, 0x416
cmp bx, ax
jne 0x46f628
cmp di, 0x36
je 0x46f73c
jmp 0x46f66c
mov eax, 0x414
cmp bx, ax
jne 0x46f63e
cmp di, 0x5c
je 0x46f761
jmp 0x46f66c
mov eax, 0x41f
cmp bx, ax
jne 0x46f654
cmp di, 0x33
je 0x46f786
jmp 0x46f66c
mov eax, 0x408
cmp bx, ax
jne 0x46f66c
mov eax, 0x3c2
cmp di, ax
je 0x46f7ab
mov eax, dword [ebp - 0x144]
jmp 0x46f481
lea eax, [ebp - 0x158]
push str.Special_dead_symbol_must_be_inserted_only_as_unicode_character
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x158]
push 0x4f5f78
push eax
call fcn.00498498
lea ecx, [ebp - 0x174]
call fcn.00402f80
movzx eax, di
push eax
lea eax, [ebp - 0x174]
mov dword [ebp - 4], 0
push str.Cant_translate_the__d_character_to_the_scan_code
push eax
call fcn.004038a0
add esp, 0xc
lea ecx, [ebp - 0x174]
call fcn.00403130
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x158]
push 0x4f5f78
push eax
call fcn.00498498
lea eax, [ebp - 0x158]
push str.Special_case_for_the___character_on_the_POLISH_keyboard__it_will_be_inserted_as_an_unicode
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x158]
push 0x4f5f78
push eax
call fcn.00498498
lea eax, [ebp - 0x158]
push str.Special_case_for_the_6_character_on_the_USA_international_keyboard__it_will_be_inserted_as_an_unicode
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x158]
push 0x4f5f78
push eax
call fcn.00498498
lea eax, [ebp - 0x158]
push str.Special_case_for_the_6_character_on_the_brazilian_keyboard__it_will_be_inserted_as_an_unicode
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x158]
push 0x4f5f78
push eax
call fcn.00498498
lea eax, [ebp - 0x158]
push str.Special_case_for_the__character_on_the_norwegian_keyboard__it_will_be_inserted_as_an_unicode
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x158]
push 0x4f5f78
push eax
call fcn.00498498
lea eax, [ebp - 0x158]
push str.Special_case_for_the_3_character_on_the_turkish_Q_keyboard__it_will_be_inserted_as_an_unicode
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x158]
push 0x4f5f78
push eax
call fcn.00498498
lea eax, [ebp - 0x24]
push str.Special_case_for_the_w_character_on_the_greek_keyboard__it_will_be_inserted_as_an_unicode
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x24]
push 0x4f5f78
push eax
call fcn.00498498
lea ecx, [ebp - 0x174]
call fcn.00402f80
movzx eax, di
push eax
lea eax, [ebp - 0x174]
mov dword [ebp - 4], 1
push str.Cant_get_the__d_character_by_one_keyboard_event
push eax
call fcn.004038a0
add esp, 0xc
lea ecx, [ebp - 0x174]
call fcn.00403130
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00404c10
add esp, 8
lea eax, [ebp - 0x24]
push 0x4f5f78
push eax
call fcn.00498498
int3