Function at 0x471d7b
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbf4
push ebx
push esi
push edi
mov edi, 0x585ce2
xor eax, eax
mov dword [ebp - 0xc], eax
push 0
lea edx, [ebp - 0x40c]
push edx
push dword [ebp + 8]
call fcn.00521fcc
mov ebx, eax
test ebx, ebx
jne 0x471db4
push 0
call fcn.0042c6cc
jmp 0x472152
push dword [ebx + 0xb6c]
call fcn.0041261f
test eax, eax
jne 0x471dcf
push 0
call fcn.0042c6cc
jmp 0x472152
push 0x10
call sub.USER32.dll_GetKeyState
movsx eax, ax
and eax, 0x8000
cmp eax, 0x8000
jne 0x471dee
mov dword [ebp - 8], 1
jmp 0x471df3
xor edx, edx
mov dword [ebp - 8], edx
push 0x3e7
lea ecx, [ebp - 0x3fc]
push ecx
call fcn.0042e6b1
cmp dword [ebx + 0x6bc], 1
jne 0x471f42
lea eax, [ebp - 0x14]
push eax
call sub.USER32.dll_GetCursorPos
push dword [ebp - 0x10]
push dword [ebp - 0x14]
call sub.USER32.dll_WindowFromPoint
cmp eax, dword [ebx + 0x820]
jne 0x471edf
lea ecx, [ebp - 0x14]
push ecx
push dword [ebp + 0xc]
call sub.SHELL32.dll_DragQueryPoint
push 1
lea eax, [ebp - 0x14]
push eax
push dword [ebx + 0x820]
push dword [ebx]
call sub.USER32.dll_MapWindowPoints
cmp dword [ebp - 8], 0
je 0x471e5f
push 0
push 0x10
call fcn.00471ce8
push 0xffffffffffffffff
push 0
push 0x185
push dword [ebx + 0x820]
call sub.USER32.dll_SendMessageA
movzx edx, word [ebp - 0x14]
movzx ecx, word [ebp - 0x10]
shl ecx, 0x10
or edx, ecx
push edx
push 0
push 0x201
push dword [ebx + 0x820]
call sub.USER32.dll_SendMessageA
movzx eax, word [ebp - 0x14]
movzx edx, word [ebp - 0x10]
shl edx, 0x10
or eax, edx
push eax
push 0
push 0x202
push dword [ebx + 0x820]
call sub.USER32.dll_SendMessageA
cmp dword [ebp - 8], 0
je 0x471ec5
push 0x80
push 0x10
call fcn.00471ce8
push dword [ebx + 0xb6c]
lea ecx, [ebp - 0x3fc]
push ecx
push dword [ebp + 8]
call fcn.004e67fa
jmp 0x471fcc
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 0xc]
call sub.SHELL32.dll_DragQueryPoint
push 0xffffffffffffffff
push 0
push 0x201
push dword [ebx + 0x820]
call sub.USER32.dll_SendMessageA
push 0xffffffffffffffff
push 0
push 0x202
push dword [ebx + 0x820]
call sub.USER32.dll_SendMessageA
lea edx, [ebx + 8]
push edi
mov edi, edx
lea esi, [ebp - 0x3fc]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
jmp 0x471fcc
cmp dword [ebx + 0x6bc], 2
jne 0x471f62
push dword [ebx + 0xb6c]
lea eax, [ebp - 0x3fc]
push eax
push dword [ebp + 8]
call fcn.004e67fa
jmp 0x471fcc
cmp dword [ebx + 0x6bc], 7
jne 0x471fcc
lea edx, [ebp - 0x14]
push edx
push dword [ebp + 0xc]
call sub.SHELL32.dll_DragQueryPoint
movzx ecx, word [ebp - 0x14]
movzx eax, word [ebp - 0x10]
shl eax, 0x10
or ecx, eax
push ecx
push 0
push 0x201
push dword [ebx + 0x820]
call sub.USER32.dll_SendMessageA
movzx edx, word [ebp - 0x14]
movzx ecx, word [ebp - 0x10]
shl ecx, 0x10
or edx, ecx
push edx
push 0
push 0x202
push dword [ebx + 0x820]
call sub.USER32.dll_SendMessageA
push dword [ebx + 0xb6c]
lea eax, [ebp - 0x3fc]
push eax
push dword [ebp + 8]
call fcn.004e67fa
cmp byte [ebp - 0x3fc], 0
jne 0x471fe1
push 0
call fcn.0042c6cc
jmp 0x472152
lea edx, [ebp - 0x3fc]
push edx
call fcn.0054e28c
pop ecx
add eax, 0xa
push eax
call fcn.00559d70
pop ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x47200d
push 0
call fcn.0042c6cc
jmp 0x472152
mov ecx, dword [ebp - 0xc]
push edi
mov esi, ecx
lea edi, [ebp - 0x3fc]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
push 0
push 0
push 0xffffffffffffffff
push dword [ebp + 0xc]
call sub.SHELL32.dll_DragQueryFileA
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jg 0x47205a
push 0
call fcn.0042c6cc
jmp 0x472152
xor esi, esi
cmp esi, dword [ebp - 4]
jge 0x472152
push 0x3e7
push edi
push esi
push dword [ebp + 0xc]
call sub.SHELL32.dll_DragQueryFileA
test eax, eax
jbe 0x472148
push 0x588ce3
push 0x588be3
push 0x588ae3
push 0x588ae0
push edi
call fcn.0050e5fc
add esp, 0x14
push 0x588ce3
push 0x588be3
push 0x5646b7
push edi
call sub.USER32.dll_wsprintfA
add esp, 0x10
push dword [ebp - 8]
push 0x579f7a
push edi
call fcn.00471c23
test eax, eax
je 0x472148
push 0x588ce3
push 0x588be3
push 0x588ae3
push 0x588ae0
push 0x5646bd
push edi
call sub.USER32.dll_wsprintfA
add esp, 0x18
push 0x20
push edi
call fcn.0054e1ec
add esp, 8
test eax, eax
je 0x472110
push edi
push dword [ebp - 0xc]
push 0x5646c7
push 0x57a361
call sub.USER32.dll_wsprintfA
add esp, 0x10
jmp 0x472126
push edi
push dword [ebp - 0xc]
push 0x5646d0
push 0x57a361
call sub.USER32.dll_wsprintfA
add esp, 0x10
push dword [ebx + 0xb6c]
push 0
push 0
push 1
push 0x57a361
push 0x579f7a
push dword [ebp + 8]
call fcn.004b07e0
test eax, eax
je 0x472152
inc esi
cmp esi, dword [ebp - 4]
jl 0x472065
cmp dword [ebp - 0xc], 0
je 0x472161
push dword [ebp - 0xc]
call fcn.00559c5c
pop ecx
push dword [ebp + 0xc]
call sub.SHELL32.dll_DragFinish
push 1
push ebx
call fcn.0051fe59
push dword [ebp + 8]
call sub.USER32.dll_SetFocus
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8