Function at 0x48e548
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
push ebx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x440], 0
jne 0x48e571
mov eax, dword [ebp - 4]
cmp byte [eax + 0x441], 0
je 0x48e625
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x25
jne 0x48e590
mov eax, dword [ebp - 4]
cmp dword [eax + 0x434], 0
jle 0x48e590
mov eax, dword [ebp - 4]
dec dword [eax + 0x434]
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x27
jne 0x48e5bf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21c]
call fcn.00545d8c
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x434]
inc edx
cmp eax, edx
jle 0x48e5bf
mov eax, dword [ebp - 4]
inc dword [eax + 0x434]
mov eax, dword [ebp - 8]
mov ax, word [eax + 4]
sub ax, 0x20
je 0x48e5de
sub ax, 5
je 0x48e5de
sub ax, 2
je 0x48e5de
sub ax, 0x4a
jne 0x48e625
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Advlistv_TAdvListView_FocusRepaint_qqrv
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x20
je 0x48e5fd
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x71
jne 0x48e625
mov eax, dword [ebp - 4]
cmp byte [eax + 0x440], 0
je 0x48e625
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x438], eax
mov eax, dword [ebp - 4]
call fcn.00521ee0
mov edx, dword [ebp - 0xc]
call fcn.00551e6c
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x20
jne 0x48e68e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x254], 0
je 0x48e68e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x440], 0
jne 0x48e68e
mov eax, dword [ebp - 4]
cmp word [eax + 0x3d2], 0
je 0x48e68e
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x438]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20c]
call fcn.005393a8
call fcn.00538d30
xor al, 1
push eax
mov ebx, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x438]
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x3d4]
call dword [ebx + 0x3d0]
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x58
jne 0x48e6c7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x444], 0
je 0x48e6c7
push 0x11
call sub.USER32.DLL_GetKeyState
movsx eax, ax
and eax, 0x8000
cmp eax, 0x8000
jne 0x48e6c7
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Advlistv_TAdvListView_CutToClipboard_qqrv
jmp 0x48e7e6
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x56
jne 0x48e700
mov eax, dword [ebp - 4]
cmp byte [eax + 0x444], 0
je 0x48e700
push 0x11
call sub.USER32.DLL_GetKeyState
movsx eax, ax
and eax, 0x8000
cmp eax, 0x8000
jne 0x48e700
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Advlistv_TAdvListView_PasteFromClipboard_qqrv
jmp 0x48e7e6
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x43
jne 0x48e739
mov eax, dword [ebp - 4]
cmp byte [eax + 0x444], 0
je 0x48e739
push 0x11
call sub.USER32.DLL_GetKeyState
movsx eax, ax
and eax, 0x8000
cmp eax, 0x8000
jne 0x48e739
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Advlistv_TAdvListView_CopySelectionToClipboard_qqrv
jmp 0x48e7e6
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x2d
jne 0x48e76f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x444], 0
je 0x48e76f
push 0x11
call sub.USER32.DLL_GetKeyState
movsx eax, ax
and eax, 0x8000
cmp eax, 0x8000
jne 0x48e76f
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Advlistv_TAdvListView_CopySelectionToClipboard_qqrv
jmp 0x48e7e6
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x2d
jne 0x48e7a5
mov eax, dword [ebp - 4]
cmp byte [eax + 0x444], 0
je 0x48e7a5
push 0x10
call sub.USER32.DLL_GetKeyState
movsx eax, ax
and eax, 0x8000
cmp eax, 0x8000
jne 0x48e7a5
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Advlistv_TAdvListView_PasteFromClipboard_qqrv
jmp 0x48e7e6
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x2e
jne 0x48e7db
mov eax, dword [ebp - 4]
cmp byte [eax + 0x444], 0
je 0x48e7db
push 0x10
call sub.USER32.DLL_GetKeyState
movsx eax, ax
and eax, 0x8000
cmp eax, 0x8000
jne 0x48e7db
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Advlistv_TAdvListView_CutToClipboard_qqrv
jmp 0x48e7e6
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00520bbc
pop ebx
mov esp, ebp
pop ebp
ret