Function at 0x4785c0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x67bbb0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [0x682310]
lea eax, [ebp - 0x30]
push esi
push edi
push eax
push dword [0x6825bc]
xorps xmm0, xmm0
movups xmmword [ebp - 0x30], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
movd xmm1, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
cmp byte [0x67bc5a], 0
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebx + 0x10], xmm1
movss dword [ebx + 0x14], xmm0
je 0x478622
call fcn.00478560
lea eax, [ebp - 0x10]
xorps xmm0, xmm0
push eax
movlpd qword [ebp - 0x10], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [ebp - 0x10]
mov ecx, edi
sub ecx, dword [0x6825c0]
mov esi, dword [ebp - 0xc]
mov edx, esi
sbb edx, dword [0x6825c4]
call fcn.005f00c0
mov edx, dword [0x6825cc]
mov ecx, dword [0x6825c8]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x1c], xmm0
call fcn.005f00c0
movss xmm1, dword [ebp - 0x1c]
cvtsd2ss xmm0, xmm0
push 0x11
divss xmm1, xmm0
movss dword [ebx + 0x18], xmm1
mov dword [0x6825c4], esi
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
mov dword [0x6825c0], edi
call esi
shr eax, 0xf
and al, 1
push 0x10
mov byte [ebx + 0x100], al
call esi
shr eax, 0xf
and al, 1
push 0x12
mov byte [ebx + 0x101], al
call esi
mov esi, dword [0x682310]
shr eax, 0xf
and al, 1
mov byte [ebx + 0x103], 0
mov byte [ebx + 0x102], al
cmp byte [esi + 0x35b], 0
je 0x47870d
test dword [esi + 8], 0x400
cvttss2si eax, dword [esi + 0xe4]
cvttss2si ecx, dword [esi + 0xe8]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
jne 0x478705
lea eax, [ebp - 0x18]
push eax
push dword [0x6825bc]
call dword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
lea eax, [ebp - 0x20]
mov dword [esi + 0xe4], 0xff7fffff
push eax
mov dword [esi + 0xe8], 0xff7fffff
mov dword [esi + 0xfc], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x4787e4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
test edi, edi
je 0x4787bb
push dword [0x6825bc]
push edi
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
mov eax, dword [0x6825bc]
cmovne edi, eax
test dword [esi + 8], 0x400
je 0x478780
mov ecx, edi
call fcn.0045d020
test eax, eax
je 0x4787bb
movd xmm0, dword [ebp - 0x20]
movd xmm1, dword [ebp - 0x1c]
jmp 0x4787a5
cmp edi, eax
jne 0x4787bb
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push edi
call dword [sym.imp.USER32.dll_ScreenToClient]
movd xmm0, dword [ebp - 0x18]
movd xmm1, dword [ebp - 0x14]
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
movss dword [esi + 0xe8], xmm1
movss dword [esi + 0xe4], xmm0
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_WindowFromPoint]
test eax, eax
je 0x4787e4
mov ecx, eax
call fcn.0045d020
test eax, eax
je 0x4787e4
test byte [eax + 4], 0x80
jne 0x4787e4
mov eax, dword [eax]
mov dword [esi + 0xfc], eax
cmp byte [ebx + 0xb7], 0
je 0x4787f2
or eax, 0xffffffff
jmp 0x4787fd
mov eax, dword [0x682310]
mov eax, dword [eax + 0x1f58]
cmp dword [0x67be10], eax
je 0x47880f
mov dword [0x67be10], eax
call fcn.00478010
call fcn.00478140
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005eee94
mov esp, ebp
pop ebp
ret