Function at 0x477e00
Capabilities:
Hide graphical window
Log keystrokes via polling

Disassembly:
sub esp, 0xf4
push ebx
mov ebx, dword [esp + 0x108]
push ebp
push esi
mov dword [ebx], 1
mov al, byte [0x559ff0]
mov esi, ecx
push edi
test al, 1
mov dword [esp + 0x18], esi
jne 0x477e48
mov dl, al
mov eax, dword [0x546560]
or dl, 1
push 0x4781a0
mov byte [0x559ff0], dl
mov dword [0x559fec], eax
call fcn.00532359
add esp, 4
mov edx, dword [esp + 0x10c]
mov ecx, 0x3a
xor eax, eax
lea edi, [esp + 0x1c]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x1c]
add esi, 0x6600
and edx, 0xffff
xor edi, edi
push ecx
push edx
mov ecx, esi
mov dword [esp + 0x24], 0x123fa
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], edi
call fcn.0050d6c0
test eax, eax
je 0x47818d
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push ecx
mov ecx, esi
call fcn.0050d850
mov ecx, dword [0x559fec]
mov ebp, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov esi, eax
mov eax, dword [esi]
cmp ecx, eax
je 0x477ef8
cmp dword [ecx - 0xc], edi
jge 0x477eca
mov edx, dword [0x546564]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x477ecf
cmp dword [eax - 0xc], edi
jge 0x477ee0
mov edx, dword [eax - 8]
push eax
push edx
mov ecx, 0x559fec
call fcn.00405870
jmp 0x477ef8
mov ecx, 0x559fec
call fcn.00412670
mov esi, dword [esi]
mov dword [0x559fec], esi
add esi, 0xfffffff4
push esi
call ebp
mov eax, dword [esp + 0x10]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x477f27
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x477f27
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [0x559fec]
cmp dword [eax - 8], edi
je 0x47818d
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
mov dword [ebx], 1
call esi
test ah, 0x80
je 0x477fd3
mov edi, dword [esp + 0x18]
mov ecx, dword [0x559fec]
mov eax, dword [edi + 0x83c]
lea esi, [edi + 0x83c]
cmp eax, ecx
je 0x477fab
mov edx, dword [eax - 0xc]
test edx, edx
jge 0x477f7c
mov edx, dword [0x546564]
add eax, 0xfffffff4
cmp eax, edx
jne 0x477f83
mov eax, dword [ecx - 0xc]
test eax, eax
jge 0x477f91
push ecx
mov ecx, dword [ecx - 8]
push ecx
mov ecx, esi
call fcn.00405870
jmp 0x477fab
mov ecx, esi
call fcn.00412670
mov edx, dword [0x559fec]
mov dword [esi], edx
mov eax, dword [0x559fec]
add eax, 0xfffffff4
push eax
call ebp
mov ecx, dword [edi + 4]
push 0
push 0x12c
push 0x2711
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xf4
ret 0x10
push 0x10
call esi
test ah, 0x80
je 0x47811d
mov eax, dword [0x559fec]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ecx
mov ecx, dword [eax - 0xc]
mov esi, esp
cmp ecx, edi
jl 0x478005
mov dword [esi], eax
mov edx, dword [0x559fec]
add edx, 0xfffffff4
push edx
call ebp
jmp 0x478023
mov eax, dword [0x546560]
mov dword [esi], eax
mov eax, dword [0x559fec]
test eax, eax
mov edi, eax
je 0x47801a
push eax
call ebx
push edi
push eax
mov ecx, esi
call fcn.00405870
lea ecx, [esp + 0x14]
push ecx
call fcn.004b9550
mov eax, dword [0x559fec]
add esp, 4
mov esi, esp
mov ecx, dword [eax - 0xc]
test ecx, ecx
jl 0x47804e
mov dword [esi], eax
mov edx, dword [0x559fec]
add edx, 0xfffffff4
push edx
call ebp
jmp 0x47806c
mov eax, dword [0x546560]
mov dword [esi], eax
mov eax, dword [0x559fec]
test eax, eax
mov edi, eax
je 0x478063
push eax
call ebx
push edi
push eax
mov ecx, esi
call fcn.00405870
lea ecx, [esp + 0x18]
push ecx
call fcn.004b9770
mov eax, dword [esp + 0x1c]
add esp, 4
mov ecx, esp
mov edx, dword [eax - 0xc]
test edx, edx
jl 0x478094
mov dword [ecx], eax
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call ebp
jmp 0x4780a5
mov eax, dword [0x546560]
mov dword [ecx], eax
mov edx, dword [esp + 0x18]
push edx
call fcn.00405920
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
push eax
call fcn.00405440
mov edi, dword [esp + 0x20]
mov ecx, edi
call fcn.0046ac10
mov eax, dword [esp + 0x14]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4780ec
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4780ec
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x478121
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x478121
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
jmp 0x478121
mov edi, dword [esp + 0x18]
push 0x2e
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je 0x478159
push ecx
mov ecx, esp
push 0x559fec
call fcn.00405440
mov eax, dword [edi + 4]
push eax
call fcn.004781e0
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xf4
ret 0x10
mov ecx, dword [edi + 0x1f8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push ecx
call esi
push 1
push 1
push ecx
mov ecx, esp
push 0x559fec
call fcn.00405440
mov ecx, edi
call fcn.0047c3e0
mov edx, dword [edi + 0x1f8]
push 5
push edx
call esi
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xf4
ret 0x10