Function at 0x476be0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 4]
push eax
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], 0
call fcn.004014d0
add esp, 0x14
test al, al
jne 0x477150
mov eax, dword [ebp + 0x14]
lea edx, [ebp - 4]
push edx
push eax
push ebx
push esi
push edi
call fcn.004a1db0
add esp, 0x14
test al, al
jne 0x477150
mov ecx, dword [ebp + 0x14]
push ecx
push ebx
push esi
push edi
call fcn.00426230
add esp, 0x10
cmp esi, 0x53
ja 0x476e07
je 0x476da9
lea eax, [esi - 2]
cmp eax, 0x4c
ja case.0x476c5e.3
movzx edx, byte [eax + 0x477184]
jmp dword [edx*4 + 0x47716c]
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xfffffdee
jne 0x476c89
mov ecx, dword [0x52fe34]
push eax
push ebx
push esi
push edi
call fcn.0045b120
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
cmp dword [eax + 4], 0x801
jne case.0x476c5e.12
mov ecx, dword [0x52fe34]
push eax
call fcn.0045ac10
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x52fe34]
call fcn.0045b090
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x52fe34]
call fcn.0045c710
mov eax, dword [0x52fe34]
mov edi, dword [sym.imp.USER32.dll_DestroyWindow]
xor esi, esi
cmp dword [eax + 0xf3684], esi
je 0x476d04
mov eax, dword [eax + 0xf3684]
push eax
call edi
mov ecx, dword [0x52fe34]
mov dword [ecx + 0xf3684], esi
mov eax, dword [0x52fe34]
cmp dword [eax + 0xf3688], esi
je 0x476d25
mov edx, dword [eax + 0xf3688]
push edx
call edi
mov eax, dword [0x52fe34]
mov dword [eax + 0xf3688], esi
mov eax, dword [0x52fe34]
cmp dword [eax + 0xf347c], esi
je 0x476d4b
mov ecx, dword [eax + 0xf347c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [0x52fe34]
mov dword [edx + 0xf347c], esi
mov eax, dword [0x52fe34]
push 0x70
add eax, 0xf2b74
push esi
push eax
mov dword [0x5306c8], esi
call fcn.004c9b50
mov eax, dword [0x52fe34]
add esp, 0xc
mov dword [eax + 0xf36fc], esi
pop edi
mov dword [0x5306cc], esi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x52fe34]
test bx, bx
je 0x476d99
call fcn.0045c6c0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
call fcn.0045c710
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
test ebx, ebx
jne 0x47715d
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x47715d
cmp dword [eax], 0x1c
jb 0x47715d
cmp dword [eax + 8], 0x846
je 0x476dec
mov ecx, dword [0x52fe34]
mov ecx, dword [ecx + 0xf3700]
push eax
call fcn.00479430
pop edi
pop esi
lea eax, [ebx + 1]
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x4e1f18
call fcn.00402410
add esp, 4
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x10
cmp esi, 0x112
ja 0x4770e8
je 0x47707d
sub esi, 0x110
je 0x47701f
sub esi, 1
jne case.0x476c5e.3
mov eax, ebx
shr eax, 0x10
cmp eax, 5
jg 0x476ff8
je 0x476e4b
sub eax, esi
je 0x476e67
sub eax, 1
jne case.0x476c5e.12
mov edx, dword [ebp + 0x14]
mov ecx, dword [0x52fe34]
push edx
push ebx
push edi
call fcn.00465720
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
movzx eax, bx
cmp eax, 0x64a
jg 0x476fa4
je 0x476edb
cmp eax, 8
jg 0x476ea6
je 0x476e88
dec eax
cmp eax, 1
ja 0x476fb0
mov edx, dword [0x5306c8]
push 0
push 0
push 0x10
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
add eax, 0xfffff9c5
cmp eax, 1
ja 0x476fb0
mov eax, 0x63b
cmp bx, ax
sete cl
movzx edx, cl
mov ecx, dword [0x52fe34]
push 0
push edx
call fcn.004714d0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [0x52fe34]
cmp byte [eax + 0x11c7c], 0
je 0x476f09
push 0
push 0
push 0
push 0xffffffffffffffff
push str.Not_allowed_in__Basic_mode
call fcn.004263e0
add esp, 0x14
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
mov eax, dword [0x52fe34]
sete bl
cmp dword [eax + 0xf2b78], 0
je 0x476f65
mov eax, dword [eax + 0xf2b78]
push 0x5f0
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x476f65
mov ecx, dword [0x52fe34]
mov edx, dword [ecx + 0xf2b78]
push 0
push 0x5f0
push edx
call fcn.004721b0
mov ecx, dword [0x52fe30]
push 0
push 0
call fcn.00456500
test eax, eax
je case.0x476c5e.12
test bl, bl
jne case.0x476c5e.12
mov eax, dword [0x5306c8]
push 0
push 1
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
sub eax, 0xa0c
je 0x476fe2
sub eax, 0x5c
je 0x476fcc
mov ecx, dword [ebp + 0x14]
push ecx
mov ecx, dword [0x52fe34]
push ebx
push edi
call fcn.004721b0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x52fe34]
call fcn.004716f0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x52fe34]
call fcn.00466d70
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
cmp eax, 0x300
jne case.0x476c5e.12
mov eax, dword [ebp + 0x14]
mov ecx, dword [0x52fe34]
push eax
push ebx
push edi
call fcn.0046cf70
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x52fe2c]
call fcn.0040ae10
mov ecx, dword [0x52fe38]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ecx
push 1
push 0x80
push edi
mov dword [0x5306c8], edi
call esi
mov edx, dword [0x52fe3c]
push edx
push 0
push 0x80
push edi
call esi
mov eax, dword [0x52fe38]
push eax
push 0xfffffffffffffff2
push edi
call dword [sym.imp.USER32.dll_SetClassLongW]
mov ecx, dword [0x52fe34]
call fcn.004619c0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, 0xabc5
cmp bx, cx
jne case.0x476c5e.12
mov edx, dword [0x5306c8]
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [0x5306c8]
mov esi, eax
push 3
push 0
and esi, 8
push 0
mov eax, esi
neg eax
push 0
sbb eax, eax
push 0
dec eax
push eax
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [0x5306c8]
neg esi
sbb esi, esi
and esi, 0xfffffff8
add esi, 8
push esi
push 0xabc5
push 0
push edx
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
push 0
jmp 0x477154
cmp esi, 0x312
je 0x477112
cmp esi, 0x8023
jne case.0x476c5e.3
mov ecx, dword [0x52fe34]
call fcn.004610a0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
cmp ebx, 0x101
jne 0x477131
mov ecx, dword [0x52fe34]
push ebx
call fcn.0045ac10
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
cmp ebx, 0x102
jne case.0x476c5e.12
mov ecx, dword [0x52fe34]
push ebx
call fcn.0045ac10
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 4]
push eax
push 0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x10