Function at 0x4783f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x18
push ecx
push edi
lea edi, [esp + 8]
mov eax, 0xcccccccc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop edi
pop ecx
mov eax, dword [ebp + 0xc]
sub eax, 0x2b
je 0x47862a
sub eax, 0x23
je 0x4785f1
sub eax, 0xc3
je 0x47843d
sub eax, 3
je 0x47856d
sub eax, 1
je 0x4785af
jmp 0x478676
mov eax, dword [ebp + 0x14]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x47850d
push 0x5c13fa
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x478676
mov word [0x5dda98], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x47848c
or word [0x5dda98], 0x1000
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x4784a7
or word [0x5dda98], 0x200
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x4784c2
or word [0x5dda98], 0x800
push 0x5b
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
jne 0x4784e6
push 0x5c
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x4784ef
or word [0x5dda98], 0x100
mov edx, dword [ebp + 0x10]
shr edx, 0x10
movzx edx, dx
push edx
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1d8]
jmp 0x478676
push 0
push dword [ebp + 8]
call fcn.0056d610
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x19], 0
cmp dword [ebp - 0x18], 0
je 0x47853d
mov edx, dword [ebp - 0x18]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1e4]
cmp al, 0
setne dl
mov byte [ebp - 0x19], dl
push 1
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movzx edx, dx
push edx
movzx eax, byte [ebp - 0x19]
push eax
call fcn.0047df80
add esp, 0xc
cmp al, 0
je 0x478568
mov eax, 1
lea esp, [ebp - 4]
pop esi
pop ebp
ret
jmp 0x478676
mov eax, dword [ebp + 0x14]
mov dword [ebp - 8], eax
push 0x5c13fa
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x478676
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movzx edx, dx
push edx
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1e0]
jmp 0x478676
mov eax, dword [ebp + 0x14]
mov dword [ebp - 8], eax
push 0x5c13fa
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x478676
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movzx edx, dx
push edx
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1e4]
jmp 0x478676
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov dword [ebp - 8], ecx
push 0x5c13fa
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x478676
push dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1dc]
jmp 0x478676
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 8], ecx
push 0x5c13fa
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x478676
push dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1e8]
mov eax, dword [ebp + 0x18]
mov dword [eax], 1
mov eax, 1
lea esp, [ebp - 4]
pop esi
pop ebp
ret
mov eax, 0
lea esp, [ebp - 4]
pop esi
pop ebp
ret