Function at 0x4c70d0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x552064]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x564358]
push ebx
push esi
push edi
cmp dword [eax + 8], 0
jle 0x4c7cc4
mov eax, dword [0x5646c8]
mov ecx, 0xc
test eax, eax
mov edi, 0xf0
cmovg ecx, eax
test byte [0x5646d5], 1
mov dword [ebp - 8], ecx
mov eax, 0x30
mov ecx, 0x564350
cmovne edi, eax
call fcn.004c5e70
movzx eax, byte [0x56460c]
xor ecx, ecx
cmp dword [0x5645f8], ecx
mov dword [ebp - 0x30], 0
cmove eax, ecx
mov dword [ebp - 0x38], eax
cmp byte [0x556b22], cl
je 0x4c716d
cmp byte [0x5646d0], cl
je 0x4c716d
push 0xa1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x4c716d
mov word [0x564407], 0x100
mov byte [ebp - 0x2e], 1
mov esi, dword [0x5643c5]
mov eax, dword [esi + 8]
cmp dword [eax + 8], 0
jle 0x4c718c
cmp dword [esi + 0x5c], 0
jne 0x4c718c
cmp dword [esi + 0x58], 8
jne 0x4c718c
mov bl, 1
jmp 0x4c718e
xor bl, bl
mov ecx, esi
call fcn.004c5e70
mov eax, dword [esi + 8]
cmp dword [eax + 8], 0
jle 0x4c71ae
cmp dword [esi + 0x5c], 0
jne 0x4c71ae
cmp dword [esi + 0x58], 8
jne 0x4c71ae
mov al, 1
jmp 0x4c71b0
xor al, al
cmp bl, al
je 0x4c71bd
push esi
call fcn.00467d50
add esp, 4
cmp dword [0x5643a8], 8
jl 0x4c7cc4
cmp dword [0x5643e5], 0
jle 0x4c71ea
dec dword [0x5643e5]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e66f2
mov esp, ebp
pop ebp
ret
cmp byte [0x564407], 0
je 0x4c7206
test dword [0x563c5c], edi
je 0x4c7cc4
mov byte [0x564407], 0
mov bl, byte [0x556b21]
test bl, bl
je 0x4c7220
test dword [0x563c58], 0x100
je 0x4c7220
mov al, 1
jmp 0x4c7222
xor al, al
mov ecx, dword [0x5645c4]
mov byte [ebp - 0x2d], al
mov eax, dword [ecx + 0x30]
test eax, eax
jne 0x4c7235
mov eax, dword [ecx + 8]
mov eax, dword [eax + 0xc]
xorps xmm0, xmm0
mov edx, dword [0x5643c9]
mov ecx, dword [0x5643cd]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x2c], 0xffffffff
movq qword [ebp - 0x28], xmm0
mov eax, dword [edx + 4]
cmp eax, ecx
jle 0x4c77a4
mov esi, dword [0x5643d1]
cmp eax, ecx
jbe 0x4c727a
mov eax, dword [edx + 8]
mov edi, dword [eax + ecx*4]
test edi, edi
je 0x4c727c
mov edx, dword [edi - 4]
jmp 0x4c727e
xor edi, edi
xor edx, edx
mov dword [ebp - 0x34], edx
test esi, esi
jne 0x4c729e
test bl, bl
je 0x4c7299
test dword [0x563c58], 0x100
je 0x4c7299
mov al, 1
jmp 0x4c729b
xor al, al
mov byte [ebp - 0x2d], al
cmp esi, edx
jge 0x4c7474
movzx eax, word [esi + edi]
mov word [ebp - 0x24], ax
mov ecx, eax
cmp al, 0x5c
jne case.0x4c72e0.0
shr ecx, 8
mov al, cl
cmp cl, 0x61
jl 0x4c72cd
cmp cl, 0x7a
jg 0x4c72cd
lea eax, [ecx - 0x20]
mov byte [ebp - 0x23], al
movsx eax, al
cmp eax, 0x7c
ja case.0x4c72e0.0
movzx eax, byte [eax + 0x4c7d08]
jmp dword [eax*4 + 0x4c7cd8]
add esi, 2
mov edx, 0x5643d1
mov ecx, edi
mov dword [0x5643d1], esi
call fcn.004c6900
mov esi, dword [0x5643d1]
mov edx, dword [ebp - 0x34]
test eax, eax
js 0x4c731e
mov ecx, 0x13
cmp eax, ecx
cmovle ecx, eax
mov dword [0x5643dd], ecx
jmp 0x4c746c
mov dword [0x5643dd], 0
jmp 0x4c746c
add esi, 2
mov edx, 0x5643d1
mov ecx, edi
mov dword [0x5643d1], esi
call fcn.004c6900
mov esi, dword [0x5643d1]
mov edx, dword [ebp - 0x34]
cmp eax, 1
jl 0x4c7365
mov ecx, 0x14
cmp eax, ecx
cmovle ecx, eax
mov dword [0x5643e1], ecx
jmp 0x4c746c
mov dword [0x5643e1], 1
jmp 0x4c746c
mov byte [ebp - 0x2d], 0
jmp 0x4c7446
mov byte [0x564407], 1
jmp 0x4c744f
cmp byte [0x5645b0], 0
jne 0x4c7446
mov ecx, dword [0x5643c5]
mov eax, dword [ecx + 8]
cmp dword [eax + 8], 0
jle 0x4c73af
cmp dword [ecx + 0x5c], 0
jle 0x4c7446
mov ecx, dword [0x5643c5]
cmp dword [ecx + 0x5c], 1
setne byte [ebp - 0x3c]
jne 0x4c73c8
push ecx
call fcn.004c57d0
add esp, 4
cmp dword [0x5643d9], 0
jne 0x4c73db
mov eax, dword [0x5530c4]
add eax, 0xffffffe0
jmp 0x4c73dd
xor eax, eax
push dword [ebp - 0x3c]
mov edx, dword [0x55312c]
mov esi, dword [0x5643c5]
mov ecx, esi
push 0x20
push 0x58
push eax
lea edx, [edx - 0x58]
call fcn.004c5460
push esi
call fcn.00467d50
mov esi, dword [0x5643d1]
add esp, 0x14
mov edx, dword [ebp - 0x34]
jmp 0x4c7446
cmp dword [ebp - 0x30], 0
jne 0x4c7446
mov dword [0x5643e5], 0xf
jmp 0x4c7446
mov byte [ebp - 0x2d], 1
jmp 0x4c7446
mov byte [0x564408], 1
jmp 0x4c7446
mov eax, dword [0x5643e5]
mov ecx, 0x3c
cmp dword [ebp - 0x30], 0
cmove eax, ecx
mov dword [0x5643e5], eax
cmp byte [0x564407], 0
je 0x4c7459
mov dword [0x5643b0], 0
add esi, 2
cmp dword [ebp - 0x30], 0
mov dword [0x5643d1], esi
je 0x4c76e2
cmp esi, edx
jl 0x4c72a6
xor eax, eax
mov word [ebp - 0x24], ax
lea eax, [ebp - 0x24]
push eax
call fcn.005055c2
add esp, 4
cmp eax, 2
sete bl
test edi, edi
je 0x4c74ba
mov eax, dword [0x5643d1]
inc eax
add eax, edi
push eax
call fcn.005055c2
add esp, 4
cmp eax, 2
sete al
jmp 0x4c74bc
inc esi
mov dword [0x5643d1], esi
cmp edx, esi
jle 0x4c7474
movzx eax, word [esi + edi]
jmp 0x4c7476
xor al, al
mov dl, byte [ebp - 0x24]
test bl, bl
jne 0x4c74e7
test al, al
jne 0x4c74e0
mov al, byte [ebp - 0x23]
cmp al, 0x5c
je 0x4c74d6
cmp al, 0x24
jne 0x4c74db
cmp dl, al
je 0x4c74ea
xor al, al
mov byte [ebp - 0x23], al
cmp dl, 0x24
je 0x4c74ea
xor al, al
mov byte [ebp - 0x23], al
jmp 0x4c74ea
mov al, byte [ebp - 0x23]
xor ecx, ecx
test al, al
setne cl
xor eax, eax
test dl, dl
setne al
add ecx, eax
lea eax, [ebp - 0x20]
push eax
push ecx
lea eax, [ebp - 0x24]
mov dword [ebp - 0x28], ecx
push eax
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ebx, dword [ebp - 8]
mov ecx, dword [0x5643cd]
lea edi, [ebx + 4]
imul edi, ecx
lea eax, [ebx + 8]
add eax, edi
cmp dword [0x564370], eax
jle 0x4c7662
cmp byte [ebp - 0x38], 0
mov eax, dword [0x56436c]
mov edx, dword [0x5643d5]
je 0x4c75cd
add eax, 0xffffffa3
cmp edx, eax
jge 0x4c7662
cmp dword [0x564600], 0
mov eax, 0x50
push dword [0x5643dd]
mov ecx, dword [0x5645c4]
mov esi, 8
cmove esi, eax
lea eax, [ebp - 0x24]
push eax
add esi, edx
add edi, 8
mov edx, dword [0x564360]
push edi
push esi
call fcn.0048c890
add esp, 0x10
cmp eax, 0xffffffff
je 0x4c7597
cmp eax, 1
jne 0x4c759e
mov dword [ebp - 0x20], ebx
jmp 0x4c759e
mov dword [ebp - 0x20], 0xffffffff
cmp dword [0x564398], 0
jne 0x4c765c
mov eax, dword [ebp - 0x20]
lea ecx, [edi + 2]
inc eax
mov dword [ebp - 0x4c], esi
add eax, esi
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x1c]
add eax, 3
add eax, edi
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x4c]
jmp 0x4c7644
add eax, 0xffffffeb
cmp edx, eax
jge 0x4c7662
push dword [0x5643dd]
mov ecx, dword [0x5645c4]
lea eax, [ebp - 0x24]
push eax
lea esi, [edx + 8]
add edi, 8
mov edx, dword [0x564360]
push edi
push esi
call fcn.0048c890
add esp, 0x10
cmp eax, 0xffffffff
je 0x4c760d
cmp eax, 1
jne 0x4c761b
mov dword [ebp - 0x20], ebx
jmp 0x4c761b
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [0x564398], 0
jne 0x4c765c
mov eax, dword [ebp - 0x20]
lea ecx, [edi + 2]
inc eax
mov dword [ebp - 0x5c], esi
add eax, esi
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x1c]
add eax, 3
add eax, edi
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push dword [0x564360]
mov edx, esi
push ecx
mov ecx, dword [0x564358]
call fcn.0041f610
add esp, 0xc
mov ecx, dword [0x5643cd]
mov esi, dword [0x5643d1]
mov eax, 0x2424
mov ebx, dword [ebp - 0x28]
add esi, ebx
mov di, word [ebp - 0x24]
mov dword [0x5643d1], esi
cmp di, ax
jne 0x4c768d
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
mov edx, eax
sar edx, 1
jmp 0x4c7690
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5643d5]
add eax, edx
mov dword [0x5643d5], eax
cmp di, 1
jne 0x4c76aa
add eax, 3
mov dword [0x5643d5], eax
cmp dword [ebp - 0x34], esi
jg 0x4c76c4
xor esi, esi
inc ecx
mov dword [0x5643d1], esi
mov dword [0x5643d5], esi
mov dword [0x5643cd], ecx
mov edx, dword [0x5643c9]
mov eax, dword [edx + 4]
cmp eax, ecx
jle 0x4c7722
cmp dword [ebp - 0x30], 0
je 0x4c770a
mov bl, byte [0x556b21]
jmp 0x4c7267
mov eax, dword [0x5643e1]
dec eax
cmp dword [0x5643e5], eax
jg 0x4c7cc4
mov dword [0x5643e5], eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e66f2
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5643e1]
cmp eax, 1
jle 0x4c7cc4
imul eax, ebx
cdq
sub eax, edx
sar eax, 1
jmp 0x4c76e8
cmp dword [0x564390], 0
mov dword [0x5643b0], 0
jle 0x4c7789
cmp byte [ebp - 0x38], 0
je 0x4c7761
mov eax, dword [0x56436c]
mov edx, 0x56
add eax, 0xffffff9c
cmp dword [0x564600], 0
mov dword [0x564388], eax
mov eax, 0xe
cmove eax, edx
mov dword [0x564380], eax
mov edx, dword [0x564394]
mov ecx, 0x564350
push 1
mov word [0x5643a0], 0x101
mov dword [0x5643a4], 0
call fcn.004c5a40
add esp, 4
mov dword [0x5643e5], 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e66f2
mov esp, ebp
pop ebp
ret
cmp byte [0x5643a1], 0
jne 0x4c7852
mov eax, dword [0x5643f9]
test eax, eax
jle 0x4c7ca4
cmp byte [ebp - 0x38], 0
mov dword [0x564354], eax
mov dword [0x564390], eax
je 0x4c77e1
cmp dword [0x564600], 0
mov dword [0x564380], 0x5c
je 0x4c77eb
mov dword [0x564380], 0x14
mov eax, dword [ebp - 8]
mov ecx, 0x564350
add eax, 4
imul eax, dword [edx + 4]
mov edx, dword [0x564394]
push 1
mov dword [0x564388], 6
mov dword [0x564374], 0xc
add eax, 8
mov word [0x5643a0], 0x101
mov dword [0x564384], eax
mov dword [0x5643a4], 0
call fcn.004c5a40
mov ecx, dword [0x5643cd]
add esp, 4
cmp byte [0x5643a1], 0
mov edx, dword [0x5643c9]
je 0x4c7ca4
mov ecx, dword [0x5643f9]
test ecx, ecx
jle 0x4c7a63
mov eax, dword [0x564358]
cmp dword [eax + 8], 0
jle 0x4c79fc
mov eax, dword [str._00d]
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
mov al, byte [0x544dd4]
mov byte [ebp - 0x14], al
movq qword [ebp - 0x10], xmm0
mov dword [ebp - 8], 0
cmp ecx, 1
jl 0x4c789f
mov ebx, 9
cmp ecx, ebx
cmovle ebx, ecx
jmp 0x4c78a4
mov ebx, 1
push dword [0x5643f5]
lea eax, [ebx + 0x30]
mov byte [ebp - 0x16], al
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00418ed0
mov eax, dword [0x564394]
add esp, 0xc
cmp eax, ebx
jge 0x4c79fc
movsx esi, byte [ebp + eax - 0x10]
mov eax, dword [0x563c60]
test al, 1
je 0x4c7921
mov ecx, dword [0x564640]
cmp dword [ecx + 4], 0
cmove ecx, dword [0x564084]
call fcn.00492480
lea eax, [esi - 0x27]
mov ecx, 0xa
cdq
idiv ecx
mov eax, dword [0x564394]
add dl, 0x30
push ecx
push 0
mov byte [ebp + eax - 0x10], dl
lea eax, [ebp - 0x10]
push eax
call fcn.00501c74
add esp, 0xc
mov dword [0x5643f5], eax
jmp 0x4c79fc
test al, 8
je 0x4c796b
mov ecx, dword [0x564640]
cmp dword [ecx + 4], 0
cmove ecx, dword [0x564084]
call fcn.00492480
lea eax, [esi - 0x2f]
mov ecx, 0xa
cdq
idiv ecx
mov eax, dword [0x564394]
add dl, 0x30
push ecx
push 0
mov byte [ebp + eax - 0x10], dl
lea eax, [ebp - 0x10]
push eax
call fcn.00501c74
add esp, 0xc
mov dword [0x5643f5], eax
jmp 0x4c79fc
test dword [0x563c5c], 0xffc00
je 0x4c79fc
mov ecx, dword [0x564640]
cmp dword [ecx + 4], 0
cmove ecx, dword [0x564084]
call fcn.00492480
mov edx, dword [0x563c5c]
mov eax, 0x400
xor ecx, ecx
nop
test edx, eax
jne 0x4c79ae
inc ecx
add eax, eax
cmp ecx, 0xa
jl 0x4c79a0
jmp 0x4c79ba
mov eax, dword [0x564394]
add cl, 0x30
mov byte [ebp + eax - 0x10], cl
push 0xa
lea eax, [ebp - 0x10]
push 0
push eax
call fcn.00501c74
mov edx, dword [0x564394]
add esp, 0xc
mov ecx, 0x564350
mov dword [0x5643f5], eax
push 0
call fcn.004c5a40
mov eax, dword [0x564394]
add esp, 4
mov ecx, dword [0x564390]
inc eax
dec ecx
cmp eax, ecx
cmovle ecx, eax
mov dword [0x564394], ecx
test byte [0x563c5c], 0x10
je 0x4c7cc4
mov ecx, dword [0x564644]
cmp dword [ecx + 4], 0
cmove ecx, dword [0x564088]
call fcn.00492480
mov esi, dword [0x5643fd]
mov edi, dword [0x5643f5]
test esi, esi
jle 0x4c7cba
mov eax, dword [0x5645d8]
mov ecx, dword [0x5645d4]
sub eax, ecx
sar eax, 2
cmp eax, esi
ja 0x4c7a5b
lea eax, [esi + 1]
mov ecx, 0x5645d4
push eax
call fcn.004519a0
mov ecx, dword [0x5645d4]
mov dword [ecx + esi*4], edi
jmp 0x4c7cba
mov eax, dword [0x563c5c]
test al, 0x10
jne 0x4c7be2
test byte [0x5646d5], 1
jne 0x4c7c5a
test al, 0x40
je 0x4c7c5a
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0xc]
push eax
push dword [0x563870]
call dword [sym.imp.USER32.dll_ScreenToClient]
movd xmm0, dword [ebp - 0xc]
sub esp, 8
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x5602b0]
movsd qword [esp], xmm0
call fcn.005049e6
movd xmm0, dword [ebp - 8]
cvtdq2pd xmm0, xmm0
fstp qword [ebp - 0x18]
cvttsd2si eax, qword [ebp - 0x18]
mulsd xmm0, qword [0x5602b8]
mov dword [ebp - 0xc], eax
movsd qword [esp], xmm0
call fcn.005049e6
mov ecx, dword [0x56437c]
add esp, 8
imul ecx, dword [0x564354]
mov ebx, dword [ebp - 0xc]
sub ebx, dword [0x564364]
mov esi, dword [0x564354]
fstp qword [ebp - 0x18]
cvttsd2si edi, qword [ebp - 0x18]
mov dword [ebp - 0xc], ebx
sub edi, dword [0x564368]
cmp dword [0x564390], ecx
mov dword [ebp - 0x14], edi
cmovl ecx, dword [0x564390]
imul esi, dword [0x564398]
mov dword [ebp - 8], edi
mov dword [ebp - 0x3c], ecx
cmp esi, ecx
jge 0x4c7c5a
nop dword [eax + eax]
mov eax, esi
mov ecx, dword [0x564374]
cdq
idiv dword [0x564354]
mov edi, dword [ebp - 0x14]
sub eax, dword [0x564398]
imul eax, dword [0x564378]
imul ecx, edx
mov edx, dword [0x564380]
add edx, 0xfffffffc
add eax, dword [0x564384]
add ecx, edx
mov edx, dword [0x564388]
add edx, 8
add edx, ecx
cmp ebx, ecx
jl 0x4c7b94
cmp ebx, edx
jg 0x4c7b94
cmp edi, eax
jl 0x4c7b94
add eax, dword [0x56438c]
cmp edi, eax
jle 0x4c7b9f
inc esi
cmp esi, dword [ebp - 0x3c]
jl 0x4c7b40
jmp 0x4c7c5a
mov eax, dword [0x564394]
cmp esi, eax
je 0x4c7be7
mov ecx, dword [0x564640]
cmp dword [ecx + 4], 0
cmove ecx, dword [0x564084]
call fcn.00492480
mov edx, dword [0x564394]
mov ecx, 0x564350
push 0
call fcn.004c5a40
mov dword [0x5643a4], 0
mov dword [0x564394], esi
jmp 0x4c7c57
mov eax, dword [0x564394]
cmp byte [0x564405], 0
je 0x4c7c28
test eax, eax
jne 0x4c7c28
mov eax, dword [0x560600]
cmp eax, dword [0x564401]
jge 0x4c7c28
mov ecx, dword [0x56464c]
cmp dword [ecx + 4], 0
cmove ecx, dword [0x564090]
call fcn.00492480
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e66f2
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x564644]
cmp dword [ecx + 4], 0
cmove ecx, dword [0x564088]
call fcn.00492480
mov eax, dword [0x564394]
cmp eax, 4
jl 0x4c7c49
inc eax
mov ecx, eax
call fcn.004c7030
push 0
call fcn.004c6820
add esp, 4
movzx eax, byte [0x5646d5]
shl eax, 7
not eax
and eax, 0x80
or al, 0x20
test byte [0x563c5c], al
je 0x4c7cc4
cmp dword [0x5643e9], 0
je 0x4c7cc4
mov ecx, dword [0x564648]
cmp dword [ecx + 4], 0
cmove ecx, dword [0x56408c]
call fcn.00492480
mov ecx, dword [0x5643e9]
lea ecx, [ecx - 1]
call fcn.004c7030
jmp 0x4c7cba
cmp dword [edx + 4], ecx
jg 0x4c7cc4
cmp byte [0x564408], 0
jne 0x4c7cba
test dword [0x563c5c], edi
je 0x4c7cc4
push 0
call fcn.004c6820
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e66f2
mov esp, ebp
pop ebp
ret