Function at 0x47d070
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
xor eax, eax
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
mov eax, 2
mov ebx, ecx
mov word [ebp - 0x14], ax
cmp edi, 0x202
je 0x47d0d6
cmp edi, 0x201
je 0x47d0d2
cmp edi, 0x203
je 0x47d0d2
cmp byte [ebp + 0x14], 0
jne 0x47d0d6
push 1
call esi
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
jne 0x47d0d6
or dword [ebp - 0xc], 1
cmp edi, 0x205
je 0x47d10b
cmp edi, 0x204
je 0x47d107
cmp edi, 0x206
je 0x47d107
cmp byte [ebp + 0x14], 0
jne 0x47d10b
push 2
call esi
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
jne 0x47d10b
or dword [ebp - 0xc], 2
cmp edi, 0x208
je 0x47d140
cmp edi, 0x207
je 0x47d13c
cmp edi, 0x209
je 0x47d13c
cmp byte [ebp + 0x14], 0
jne 0x47d140
push 4
call esi
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
jne 0x47d140
or dword [ebp - 0xc], 4
mov eax, edi
mov edi, dword [ebp + 0xc]
cmp eax, 0x20c
je 0x47d171
cmp eax, 0x20b
je 0x47d15a
cmp eax, 0x20d
jne 0x47d171
mov eax, edi
shr eax, 0x10
test al, 1
je 0x47d169
or dword [ebp - 0xc], 8
jmp 0x47d171
test al, 2
je 0x47d171
or dword [ebp - 0xc], 0x10
test byte [ebp - 0xc], 7
mov eax, 0
setne al
push 0x14
mov dword [ebx + 0x66f8], eax
call esi
test al, 1
je 0x47d192
or dword [ebp - 8], 0x80
push 0x90
call esi
test al, 1
je 0x47d1a1
or dword [ebp - 8], 0x20
push 0x91
call esi
test al, 1
je 0x47d1b0
or dword [ebp - 8], 0x40
push 0xa4
call esi
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
jne 0x47d1ca
or dword [ebp - 8], 2
push 0xa5
call esi
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
jne 0x47d1e4
or dword [ebp - 8], 1
push 0xa2
call esi
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
jne 0x47d1fe
or dword [ebp - 8], 8
push 0xa3
call esi
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
jne 0x47d218
or dword [ebp - 8], 4
push 0x10
call esi
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
jne 0x47d22f
or dword [ebp - 8], 0x10
mov esi, dword [ebp + 8]
cmp esi, 0x203
je 0x47d443
cmp esi, 0x206
je 0x47d443
cmp esi, 0x209
je 0x47d443
cmp esi, 0x200
jne 0x47d26a
mov dword [ebp - 4], 1
jmp 0x47d475
cmp esi, 0x20a
jne 0x47d373
movsx eax, word [ebp + 0x12]
movsx ecx, word [ebp + 0x10]
push eax
push ecx
mov esi, edi
movzx edx, di
shr esi, 0x10
push edx
movsx eax, si
push eax
lea ecx, [ebp - 0x11c]
push str.WM_MOUSEWHEEL__i__Btns0x_04X__x_i__y_i__n
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
cmp byte [ebx + 0x44d2], 2
jb 0x47d2e9
movsx edx, word [ebp + 0x12]
movsx eax, word [ebp + 0x10]
push edx
push eax
push edi
lea ecx, [ebp - 0x9c]
push str.WM_MOUSEWHEEL_wParam0x_08X__x_i__y_i_
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebx + 0x44d4]
add esp, 0x14
test ecx, ecx
je 0x47d2e9
push 0
push 1
push 0
push 0
lea edx, [ebp - 0x9c]
push edx
call fcn.004ae810
movzx eax, si
mov dword [ebp - 4], 4
test ax, ax
jge 0x47d314
cmp ax, 0xff88
jle 0x47d334
mov esi, dword [ebp + 8]
mov eax, 0xffffff88
movzx edx, ax
shl edx, 0x10
or dword [ebp - 0xc], edx
jmp 0x47d475
cmp ax, 0x78
jge 0x47d330
mov esi, dword [ebp + 8]
mov eax, 0x78
movzx edx, ax
shl edx, 0x10
or dword [ebp - 0xc], edx
jmp 0x47d475
cmp ax, 0xff88
jl 0x47d33c
cmp ax, 0x78
jle 0x47d362
movsx ecx, ax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
shl ecx, 4
sub ecx, eax
add ecx, ecx
add ecx, ecx
add ecx, ecx
movzx eax, cx
mov esi, dword [ebp + 8]
movzx edx, ax
shl edx, 0x10
or dword [ebp - 0xc], edx
jmp 0x47d475
cmp esi, 0x20e
jne 0x47d44a
cmp byte [ebx + 0x44d2], 2
jb 0x47d3c6
movsx eax, word [ebp + 0x12]
movsx ecx, word [ebp + 0x10]
push eax
push ecx
push edi
lea edx, [ebp - 0x9c]
push str.WM_MOUSEHWHEEL_wParam0x_08X__x_i__y_i_
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebx + 0x44d4]
add esp, 0x14
test ecx, ecx
je 0x47d3c6
push 0
push 1
push 0
push 0
lea eax, [ebp - 0x9c]
push eax
call fcn.004ae810
shr edi, 0x10
mov eax, edi
mov dword [ebp - 4], 8
test ax, ax
jge 0x47d3f0
cmp ax, 0xff88
jle 0x47d40a
mov eax, 0xffffff88
movzx edx, ax
shl edx, 0x10
or dword [ebp - 0xc], edx
jmp 0x47d475
cmp ax, 0x78
jge 0x47d406
mov eax, 0x78
movzx edx, ax
shl edx, 0x10
or dword [ebp - 0xc], edx
jmp 0x47d475
cmp ax, 0xff88
jl 0x47d412
cmp ax, 0x78
jle 0x47d438
movsx ecx, ax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
shl ecx, 4
sub ecx, eax
add ecx, ecx
add ecx, ecx
add ecx, ecx
movzx eax, cx
movzx edx, ax
shl edx, 0x10
or dword [ebp - 0xc], edx
jmp 0x47d475
mov dword [ebp - 4], 2
cmp esi, 0x201
je 0x47d462
cmp esi, 0x204
je 0x47d462
cmp esi, 0x207
jne 0x47d475
mov eax, dword [ebp + 0x10]
mov dword [ebx + 0x6560], 1
mov dword [ebx + 0x6564], eax
mov ecx, dword [ebp - 0xc]
and cl, 2
cmp cl, 2
sete al
mov byte [ebp + 0xb], al
test al, al
je 0x47d537
mov ecx, dword [ebx + 0x40d0]
test ecx, ecx
je 0x47d4b2
mov eax, dword [ebx + 0x4494]
test al, 4
je 0x47d4b2
test al, 0x10
jne 0x47d4b2
mov eax, dword [ebx + 0x66e8]
test eax, eax
je 0x47d4b2
cmp eax, ecx
je 0x47d4b4
xor eax, eax
test eax, eax
setne al
test al, al
je 0x47d537
cmp dword [ebx + 0x5508], 0
je 0x47d537
mov ecx, dword [0x50b3a0]
cmp byte [ecx + 0x1127c], 0
je 0x47d537
movsx eax, word [ebx + 0x5512]
cmp eax, 3
jg 0x47d4ef
jne 0x47d537
cmp dword [ebx + 0x5514], 0x94d
jb 0x47d537
cmp byte [ecx + 0x11265], 0
jne 0x47d507
test dword [ebp - 8], 0xf
jne 0x47d537
mov byte [ebp + 0xb], 0
jmp 0x47d537
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebx + 0x3bf8]
push 1
push edx
lea eax, [ebp + 0xc]
push eax
call fcn.0046d820
mov ecx, dword [ebp + 0xc]
push 1
push ecx
mov ecx, ebx
call fcn.0047c080
test eax, eax
je 0x47d537
test byte [ebp - 8], 0x1f
jne 0x47d537
or dword [ebp - 8], 5
cmp esi, 0x200
jne 0x47d5e9
cmp dword [ebx + 0x6554], 1
mov ax, word [ebp + 0x12]
mov cx, word [ebp + 0x10]
jne 0x47d58f
mov edx, dword [ebp - 0xc]
cmp dword [ebx + 0x654c], edx
jne 0x47d58f
mov edx, dword [ebp - 8]
cmp dword [ebx + 0x6550], edx
jne 0x47d58f
movsx edx, word [ebx + 0x6548]
movsx esi, cx
sub edx, esi
jne 0x47d58f
movsx edx, word [ebx + 0x654a]
movsx esi, ax
sub edx, esi
jne 0x47d58f
cmp byte [ebp + 0x14], dl
je 0x47d6e2
cmp dword [ebx + 0x6560], 0
je 0x47d5db
cmp dword [ebx + 0x66f8], 0
je 0x47d5d1
cmp word [ebx + 0x6564], cx
jne 0x47d5b3
cmp word [ebx + 0x6566], ax
je 0x47d5d1
mov eax, dword [ebx + 0x6564]
push 0
lea ecx, [ebp - 0x14]
push ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
call fcn.0047cc40
mov ax, word [ebp + 0x12]
mov cx, word [ebp + 0x10]
mov dword [ebx + 0x6560], 0
mov word [ebx + 0x66fc], cx
mov word [ebx + 0x66fe], ax
mov edx, dword [0x50b3a0]
cmp byte [edx + 0x1127c], 0
je 0x47d6aa
mov ecx, dword [ebx + 0x3bec]
cmp dword [ebx + 0x3bf8], ecx
je 0x47d613
push 0
push 0
jmp 0x47d6a5
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], 0
call fcn.0046d910
test eax, eax
je 0x47d693
cmp byte [ebp + 0xb], 0
jne 0x47d633
push 0
push 0
jmp 0x47d69f
mov edx, dword [ebp + 0x12]
mov ecx, dword [ebp - 0x1a]
sub edx, ecx
movzx eax, dx
cmp ax, 0xffff
jl 0x47d64a
cmp ax, 1
jle 0x47d693
movzx edi, word [ebp + 0x12]
xor edx, edx
cmp ax, 0xffff
setge dl
lea edx, [edx + edx - 1]
movzx esi, dx
lea eax, [esi + ecx]
mov word [ebp + 0x12], ax
cmp ax, di
je 0x47d693
lea ebx, [ebx]
mov eax, dword [ebp + 0x10]
push 0
lea ecx, [ebp - 0x14]
push ecx
mov ecx, ebx
mov dword [ebp - 0x10], eax
call fcn.0047cc40
mov ax, word [ebp + 0x12]
add ax, si
mov word [ebp + 0x12], ax
cmp ax, di
jne 0x47d670
cmp byte [ebp + 0xb], 0
je 0x47d6aa
lea edx, [ebp + 0x10]
push edx
push 1
mov ecx, dword [ebx + 0x3bec]
call fcn.0046d930
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x40d0]
test eax, eax
je 0x47d6d5
cmp eax, dword [ebx + 0x40d8]
je 0x47d6d5
push eax
call dword [sym.imp.USER32.dll_AllowSetForegroundWindow]
mov ecx, dword [ebx + 0x40d0]
mov dword [ebx + 0x40d8], ecx
push 0
lea edx, [ebp - 0x14]
push edx
mov ecx, ebx
call fcn.0047cc40
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10