Function at 0x472fc0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x555e85
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x5d8024]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4733d0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x78], eax
mov dword [ebp - 4], 1
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp + 8]
call fcn.00418ca0
lea eax, [ebp - 0x40]
xorps xmm0, xmm0
push eax
push dword [ebp + 8]
movups xmmword [ebp - 0x40], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
movups xmm0, xmmword [ebp - 0x40]
mov esi, dword [sym.imp.USER32.dll_GetDC]
push dword [ebp + 8]
movups xmmword [ebp - 0x30], xmm0
call esi
push 0x5a
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ecx, 0xd
mov dword [ebp - 0x7c], ecx
cmp eax, 0x60
je 0x473082
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x59f478]
divsd xmm0, qword [0x59f490]
addsd xmm0, qword [0x59f448]
cvttsd2si ecx, xmm0
mov dword [ebp - 0x7c], ecx
cmp byte [ebp + 0xc], 0
je 0x473097
mov eax, 0xfffffffc
sub eax, ecx
add dword [ebp - 0x38], eax
sub dword [ebp - 0x28], ecx
jmp 0x4730a0
lea eax, [ecx + 4]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x473391
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ValidateRect]
push dword [ebp + 8]
call esi
lea ecx, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.00418b10
mov byte [ebp - 4], 2
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.USER32.dll_GetParent]
push esi
push dword [ebp - 0x70]
push 0x135
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [edi], 0
mov esi, dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x80], eax
je 0x473105
push dword [edi + 4]
push dword [ebp - 0x70]
call esi
lea eax, [ebp - 0x8c]
xorps xmm0, xmm0
push eax
push dword [ebp - 0x70]
movlpd qword [ebp - 0x8c], xmm0
call dword [sym.imp.GDI32.dll_GetBrushOrgEx]
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x7c]
push 0
push dword [ebp - 0x88]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SetBrushOrgEx]
push dword [ebp - 0x80]
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_FillRect]
push 0
push 0
push 0x31
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 8]
mov dword [ebp - 0x7c], 0
mov byte [ebp - 0x71], 0
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x473191
push 0x11
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push dword [ebp - 0x70]
call esi
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x71], 1
movzx esi, byte [ebp + 0x10]
movups xmm0, xmmword [ebp - 0x40]
mov ecx, dword [ebp - 0x78]
shl esi, 0x11
add esi, 0x10
movups xmmword [ebp - 0x20], xmm0
cmp dword [ecx - 4], 1
mov dword [ebp - 0x80], esi
jle 0x4731bd
push dword [ecx - 0xc]
lea ecx, [ebp - 0x78]
call fcn.00408c70
mov ecx, dword [ebp - 0x78]
push 0
or esi, 0x400
lea eax, [ebp - 0x20]
push esi
push eax
push 0xffffffffffffffff
push ecx
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_DrawTextExW]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
sub eax, esi
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x34]
cdq
sub eax, edx
sar eax, 1
test eax, eax
jle 0x4731fa
mov ecx, eax
sub ecx, dword [ebp - 0x1c]
add esi, ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], esi
cmp byte [ebp + 0xc], 0
je 0x47321b
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
sub esi, edx
sub esi, dword [ebp - 0x40]
add esi, dword [ebp - 0x38]
mov eax, esi
sub eax, dword [ebp - 0x20]
add edx, eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x78]
cmp dword [eax - 4], 1
jle 0x473232
push dword [eax - 0xc]
lea ecx, [ebp - 0x78]
call fcn.00408c70
mov eax, dword [ebp - 0x78]
push 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x20]
push ecx
push 0xffffffffffffffff
push eax
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_DrawTextExW]
cmp byte [ebp - 0x71], 0
je 0x473259
push dword [ebp - 0x7c]
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov cl, byte [edi + 8]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
test cl, cl
jne 0x473278
push 9
call esi
mov ecx, 0x8000
test cx, ax
seta cl
mov byte [edi + 8], cl
mov al, byte [edi + 9]
test al, al
jne 0x4732c3
push 0x26
call esi
mov ecx, 0x8000
test cx, ax
ja 0x4732bb
push 0x28
call esi
mov ecx, 0x8000
test cx, ax
ja 0x4732bb
push 0x25
call esi
mov ecx, 0x8000
test cx, ax
ja 0x4732bb
push 0x27
call esi
mov ecx, 0x8000
test cx, ax
ja 0x4732bb
xor al, al
jmp 0x4732bd
mov al, 1
mov cl, byte [edi + 8]
mov byte [edi + 9], al
test cl, cl
jne 0x4732cf
test al, al
je 0x473385
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, dword [ebp + 8]
jne 0x473385
movups xmm1, xmmword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
movaps xmm0, xmm1
psrldq xmm0, 0xc
movd edx, xmm0
movaps xmm0, xmm1
movups xmmword [ebp - 0x50], xmm1
mov esi, dword [ebp - 0x48]
psrldq xmm0, 4
movd eax, xmm0
mov dword [ebp - 0x14], edx
psrldq xmm1, 0xc
sub edx, eax
movd edi, xmm1
mov eax, ecx
sub eax, dword [ebp - 0x2c]
cmp edx, eax
cmovg edi, ecx
xor eax, eax
sub ecx, edi
mov dword [ebp - 0x7c], edi
mov edi, dword [ebp - 0x50]
test ecx, ecx
setg al
xor ecx, ecx
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x2c]
test eax, eax
mov eax, edi
setg cl
sub eax, dword [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x80], ecx
test eax, eax
mov eax, dword [ebp - 0x28]
setg dl
sub eax, esi
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
setg cl
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x4c], eax
sub edi, edx
mov eax, dword [ebp - 0x7c]
add esi, ecx
add eax, dword [ebp - 0x84]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x70]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x48], esi
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.00418a60
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x78]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4733b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00521dac
mov esp, ebp
pop ebp
ret 0xc
push 0x80004005
call fcn.00408fc0
int3