Function at 0x4702e4
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x478b78]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
and dword [ebp - 0x34], 0
or dword [ebp - 0x2c], 0xffffffff
and dword [ebp - 0x1c], 0
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
push dword [ebx + 0x100]
mov dword [ebp - 0x4c], eax
call esi
push dword [ebx + 0xfc]
mov dword [ebp - 0x20], eax
call esi
push dword [ebx + 0xf8]
mov dword [ebp - 0x38], eax
call esi
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
mov dword [ebp - 0x24], eax
call esi
shr eax, 8
movzx edi, al
push 0x11
mov dword [ebp - 0x30], edi
call esi
shr eax, 8
lea edx, [ebx + 0xb0]
movzx eax, al
lea esi, [ebx + 0xc4]
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [edx]
cmp eax, dword [esi]
setne cl
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp + 0x14]
test edi, edi
jne 0x470427
cmp dword [ebp - 0x48], 0
je 0x4703bd
push esi
push edx
push ebx
push dword [ebx + 0x1c8]
call fcn.0046fd6e
cmp dword [ebp + 0x10], 0
jg 0x470414
cmp dword [ebp + 0x14], 0
jg 0x470414
lea edx, [ebx + 0xb0]
push 5
pop ecx
mov esi, edx
lea edi, [ebx + 0xc4]
rep movsd dword es:[edi], dword [esi]
mov esi, edx
push 5
pop ecx
lea edi, [ebx + 0xd8]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0x34]
imul eax, edx, 0x14
mov dword [ebp - 0x44], eax
mov esi, dword [eax + ebx + 0xb0]
lea eax, [edx + 9]
imul eax, eax, 0x14
mov edi, dword [eax + ebx]
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x28], edi
test eax, eax
je 0x4706a5
test ecx, ecx
jne 0x470727
cmp dword [ebp - 0x48], ecx
je 0x4703fa
cmp dword [ebp - 0x30], ecx
je 0x47049d
add esi, eax
push esi
push ebx
mov dword [ebp - 0x40], esi
call fcn.00470f0d
test eax, eax
mov eax, dword [ebp + 0x10]
je 0x47043b
test eax, eax
jle 0x470437
inc esi
jmp 0x470438
push 5
pop ecx
lea edi, [ebx + 0xb0]
rep movsd dword es:[edi], dword [esi]
lea esi, [ebx + 0xc4]
jmp 0x4703af
xor edx, edx
cmp dword [ebx + 0xd8], eax
sete dl
mov dword [ebp - 0x34], edx
jmp 0x4703c0
dec esi
mov dword [ebp - 0x40], esi
cmp dword [ebp - 0x3c], 0
je 0x470534
mov esi, dword [ebp - 0x44]
lea edi, [ebp - 0x18]
add esi, 0xb0
push 5
add esi, ebx
test eax, eax
pop ecx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x40]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], esi
jns 0x4704f9
push 0
push eax
push ebx
call fcn.00473934
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
test ecx, ecx
js 0x47048c
mov edx, dword [ebp - 0x24]
push 1
cmp byte [ecx + edx], 0xd
pop edx
cmove eax, edx
mov dword [ebp - 0x1c], eax
cmp esi, ecx
jge 0x470494
test eax, eax
je 0x47049a
and dword [ebp - 0x3c], 0
mov esi, ecx
mov edi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
test esi, esi
js 0x470871
mov edx, dword [ebp - 0x20]
imul eax, edi, 0x30
mov edx, dword [eax + edx + 0x24]
cmp esi, edx
jge 0x47058d
test edi, edi
je 0x470871
mov edx, dword [ebp - 0x20]
dec edi
imul eax, edi, 0x30
mov esi, dword [eax + edx + 0x2c]
add esi, dword [eax + edx + 0x24]
je 0x470761
mov eax, dword [ebp - 0x24]
cmp byte [eax + esi - 1], 0x20
je 0x4704f3
cmp dword [ebp - 0x30], 0
je 0x470761
test ecx, ecx
jne 0x470761
dec esi
jmp 0x470761
push eax
push 0
push ebx
call fcn.00473934
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
test ecx, ecx
je 0x47051d
mov edx, dword [ebp - 0x24]
push 1
cmp byte [ecx + edx - 1], 0xd
pop edx
cmove eax, edx
mov dword [ebp - 0x1c], eax
cmp esi, ecx
jl 0x470494
cmp dword [ebp - 0x30], 0
je 0x470494
jmp 0x470490
test eax, eax
jle 0x470564
cmp esi, dword [ebx + 0xec]
jge 0x47049d
test esi, esi
je 0x47049d
mov edx, dword [ebp - 0x24]
cmp byte [edx + esi - 1], 0xd
jne 0x47049d
xor edx, edx
lea ecx, [edx + 1]
jmp 0x4704a0
test esi, esi
js 0x470871
cmp esi, dword [ebx + 0xec]
jge 0x47049d
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
push 1
cmp byte [edx + esi], 0xd
pop edx
cmove ecx, edx
jmp 0x4704a0
mov edi, dword [ebp - 0x20]
mov eax, dword [eax + edi + 0x2c]
add edx, eax
mov edi, dword [ebp - 0x28]
cmp esi, edx
jg 0x470652
jne 0x4705d0
cmp dword [ebp - 0x30], 0
je 0x4705b7
xor eax, eax
inc eax
cmp dword [ebp - 0x34], eax
jne 0x4705b7
cmp dword [ebp + 0x10], 0
jg 0x4705d7
cmp esi, dword [ebx + 0xec]
jge 0x470652
mov eax, dword [ebp - 0x24]
cmp byte [eax + esi], 0xd
jne 0x470652
mov eax, dword [ebp + 0x10]
test eax, eax
jle 0x470618
mov eax, dword [ebp - 0x44]
mov edi, dword [ebp - 0x38]
mov edx, dword [eax + ebx + 0xb8]
mov eax, dword [ebp - 0x38]
imul ecx, edx, 0x50
mov dword [ebp - 0x2c], edx
mov eax, dword [ecx + eax + 0x30]
add eax, dword [ecx + edi + 0x2c]
mov edi, dword [ebp - 0x28]
cmp esi, eax
jl 0x470761
mov eax, dword [ebx + 0xf0]
dec eax
cmp edx, eax
jge 0x470761
inc edx
mov dword [ebp - 0x2c], edx
jmp 0x470761
jns 0x470761
mov eax, dword [ebp - 0x44]
mov edi, dword [ebp - 0x38]
mov edx, dword [eax + ebx + 0xb8]
mov eax, dword [ebp - 0x38]
imul ecx, edx, 0x50
mov dword [ebp - 0x2c], edx
mov eax, dword [ecx + eax + 0x30]
add eax, dword [ecx + edi + 0x2c]
mov edi, dword [ebp - 0x28]
cmp esi, eax
jge 0x470761
test edx, edx
je 0x470761
dec edx
jmp 0x470610
mov eax, dword [ebx + 0xf4]
dec eax
cmp edi, eax
jge 0x470698
mov edx, dword [ebp - 0x20]
inc edi
imul eax, edi, 0x30
cmp dword [ebp - 0x30], 0
mov esi, dword [eax + edx + 0x24]
je 0x470761
cmp esi, dword [ebx + 0xec]
jge 0x470761
test ecx, ecx
jne 0x470761
xor eax, eax
inc eax
cmp dword [ebp - 0x34], eax
jne 0x470761
inc esi
jmp 0x470761
cmp esi, edx
jle 0x470761
jmp 0x470871
test ecx, ecx
je 0x470746
and dword [ebp - 0x3c], 0
test ecx, ecx
jle 0x4706c5
mov eax, dword [ebx + 0xf4]
dec eax
cmp edi, eax
jge 0x4706c3
inc edi
jmp 0x4706cc
test ecx, ecx
jns 0x4706cc
test edi, edi
je 0x4706cc
dec edi
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x40]
push ecx
mov eax, dword [eax + ebx + 0xbc]
push eax
push dword [ebx + 0xec]
mov dword [ebp - 0x40], eax
push dword [ebp - 0x24]
imul eax, edi, 0x30
push dword [ebx + 0xf0]
push dword [ebp - 0x38]
add eax, dword [ebp - 0x20]
push eax
push dword [ebx + 0x44]
push dword [ebx + 0x1e0]
push dword [ebx + 0x1cc]
push dword [ebx + 0x1c8]
call fcn.0046eb07
mov esi, eax
push esi
push ebx
call fcn.00470f0d
test eax, eax
je 0x470761
jmp 0x470692
jle 0x470746
mov ecx, dword [ebp - 0x20]
test eax, eax
jle 0x47073d
imul eax, edi, 0x30
mov esi, dword [eax + ecx + 0x2c]
add esi, dword [eax + ecx + 0x24]
jmp 0x47075d
imul eax, edi, 0x30
mov esi, dword [eax + ecx + 0x24]
jmp 0x47075d
test eax, eax
jle 0x470759
mov edi, dword [ebx + 0xf4]
mov esi, dword [ebx + 0xec]
dec edi
jmp 0x47075d
xor esi, esi
xor edi, edi
and dword [ebp - 0x3c], 0
mov ecx, dword [ebp - 0x20]
imul eax, edi, 0x30
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], edi
add ecx, eax
xor eax, eax
cmp esi, dword [ecx + 0x24]
sete al
mov dword [ebp - 8], eax
lea eax, [ebp - 0x2c]
push eax
push esi
push dword [ebp - 0x24]
push dword [ebp - 0x38]
push ecx
push ebx
call fcn.0046ef63
cmp dword [ebp - 0x3c], 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], eax
je 0x4707b2
cmp dword [ebp + 0x10], 0
lea eax, [ebp - 0x18]
jge 0x4707a9
push 0
push eax
jmp 0x4707ac
push eax
push 0
push ebx
call fcn.00473934
mov esi, dword [ebp - 0x4c]
push ebx
push esi
call fcn.0046d3be
mov ecx, dword [ebp - 0x30]
test ecx, ecx
jne 0x4707d7
push 5
lea edi, [ebx + 0xd8]
pop ecx
lea esi, [ebp - 0x18]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
lea edi, [ebx + 0xd8]
cmp eax, dword [edi]
jne 0x47083c
cmp dword [ebp - 0x48], 0
je 0x470808
test ecx, ecx
je 0x470808
lea eax, [ebx + 0xc4]
push eax
lea eax, [ebx + 0xb0]
push eax
push ebx
push dword [ebx + 0x1c8]
call fcn.0046fd6e
push 5
pop ecx
push 5
lea esi, [ebp - 0x18]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
pop ecx
push 5
lea esi, [ebp - 0x18]
inc eax
lea edi, [ebx + 0xb0]
rep movsd dword es:[edi], dword [esi]
pop ecx
push eax
lea esi, [ebp - 0x18]
lea edi, [ebx + 0xc4]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x4c]
push ebx
push esi
call fcn.00471ba4
jmp 0x47084a
xor eax, eax
inc eax
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
call fcn.00472a9d
xor edi, edi
push edi
push ebx
push esi
call fcn.00470e77
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x20]
push ebx
push esi
call fcn.0046c440
cmp dword [ebx + 0x1c0], edi
je 0x470871
push edi
push ebx
call fcn.00470fdf
push dword [ebx + 0x100]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalUnlock]
call esi
push dword [ebx + 0xfc]
call esi
push dword [ebx + 0xf8]
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00475d95
mov esp, ebp
pop ebp
ret 0x10