Function at 0x47df50
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x4c77c1
call fcn.0049911c
sub esp, 0x18
mov eax, 0x202
push ebx
push esi
push edi
mov edi, ecx
cmp dword [ebp + 0xc], eax
ja 0x47e4db
je 0x47e478
mov eax, dword [ebp + 0xc]
sub eax, 0x14
je 0x47e2b6
sub eax, 0xfd
je 0x47e141
sub eax, 0xef
je 0x47e09d
sub eax, 1
je 0x47e02a
cmp dword [ebp + 0xc], 0x111
ja 0x47e4fd
mov ebx, dword [ebp + 0x10]
movzx ecx, bx
cmp dword [ebp + 0xc], 0x111
movzx eax, cx
mov dword [ebp - 0x10], eax
je case.default.0x47e160
cmp dword [ebp + 0xc], 0x20
ja 0x47e2db
je 0x47e26b
mov eax, dword [ebp + 0xc]
sub eax, 3
je 0x47e5de
dec eax
sub eax, 1
je 0x47e3bf
sub eax, 0xa
je 0x47e22f
sub eax, 9
jne 0x47e6b2
lea esi, [edi + 0x84]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp ebx, 1
jne 0x47e01e
cmp dword [edi + 0x68], 0
jne 0x47e01e
mov ecx, edi
call fcn.0047dc48
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x47e6b2
mov eax, dword [ebp + 0x14]
movsx esi, ax
shr eax, 0x10
cmp byte [edi + 8], 0
movsx edx, ax
mov dword [ebp - 0x18], edx
je 0x47e077
cmp dword [0x4f7ccc], 0
je 0x47e077
mov ecx, dword [0x530680]
mov ebx, dword [ebp + 0x10]
cmp byte [ecx + 0x4b2], 0
je 0x47e6b5
mov eax, dword [ecx]
push ebx
push edx
push esi
call dword [eax]
test al, al
je 0x47e6b5
call fcn.0047c825
jmp 0x47e6b5
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x18]
push dword [edi + 0x10]
mov dword [edi + 0xb4], esi
mov dword [edi + 0xb8], eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x47e6b2
mov eax, dword [ebp + 0x14]
movsx esi, ax
shr eax, 0x10
cmp byte [edi + 8], 0
movsx edx, ax
mov dword [ebp - 0x18], edx
je 0x47e0de
cmp dword [0x4f7ccc], 0
je 0x47e0de
mov ecx, dword [0x530680]
mov ebx, dword [ebp + 0x10]
cmp byte [ecx + 0x4b2], 0
je 0x47e6b5
mov eax, dword [ecx]
push ebx
push edx
push esi
call dword [eax + 4]
jmp 0x47e6b5
call dword [sym.imp.USER32.dll_GetCapture]
cmp eax, dword [edi + 0x10]
jne 0x47e6b2
cmp byte [0x4f7c56], 0
je 0x47e6b2
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
push eax
push dword [0x531f7c]
mov dword [ebp - 0x14], esi
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [edi + 0xb4]
sub dword [ebp - 0x14], eax
mov eax, dword [edi + 0xb8]
sub dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
push eax
push 1
push 0x500
push dword [0x531f7c]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x47e6b2
mov ebx, dword [ebp + 0x10]
movzx eax, bx
mov esi, eax
mov dword [ebp - 0x10], eax
lea edx, [eax - 0x9d8d]
cmp edx, 0x6a
ja case.default.0x47e160
movzx eax, byte [edx + 0x47e6f8]
mov ecx, esi
jmp dword [eax*4 + 0x47e6e8]
push 1
mov dword [0x533710], 0x18
call fcn.0048de8f
pop ecx
mov eax, esi
mov dword [ebp - 0x10], eax
lea esi, [edi + 0x84]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x10]
movzx edx, ax
mov eax, edx
sub eax, 0x9d89
je 0x47e46e
sub eax, 1
je 0x47e435
sub eax, 1
je 0x47e435
sub eax, 1
je 0x47e435
sub eax, 0x85
je 0x47e411
mov eax, dword [ebp + 0x14]
push eax
push ebx
push 0x111
push dword [0x531f70]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x47e01e
call fcn.0047d1e8
mov ecx, eax
mov eax, esi
mov dword [ebp - 0x10], eax
test ecx, ecx
je case.default.0x47e160
mov ecx, dword [ecx + 0x80]
add eax, 0xffff6228
push eax
mov edx, dword [ecx]
call dword [edx + 0x18]
jmp 0x47e179
call fcn.0047d1e8
mov ecx, eax
mov eax, esi
mov dword [ebp - 0x10], eax
test ecx, ecx
je case.default.0x47e160
mov ecx, dword [ecx + 0x80]
add eax, 0xffff6218
push eax
mov edx, dword [ecx]
call dword [edx + 0x1c]
jmp 0x47e179
lea esi, [edi + 0x84]
push esi
mov dword [ebp + 0x10], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [edi + 0x5c]
mov dword [ebp - 4], 3
test ecx, ecx
je 0x47e25f
push dword [ebp + 8]
call fcn.004805c1
test eax, eax
je 0x47e25f
push esi
jmp 0x47e611
push dword [edi + 0x4c]
mov ecx, edi
call fcn.0047dd6b
jmp 0x47e259
lea esi, [edi + 0x84]
push esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp byte [edi + 8], 0
mov dword [ebp - 4], 4
je 0x47e2be
mov ecx, dword [0x530680]
call fcn.0047d6cb
test al, al
je 0x47e2a6
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
jmp 0x47e2a8
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_SetCursor]
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
inc eax
jmp 0x47e6d7
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
or dword [ebp - 4], 0xffffffff
jmp 0x47e01e
mov eax, dword [ebp + 0xc]
sub eax, 0x46
je 0x47e5de
sub eax, 1
je 0x47e3bf
sub eax, 0xb9
jne 0x47e6b2
lea esi, [edi + 0x84]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp ebx, 0x1b
jne 0x47e320
cmp byte [edi + 8], 0
je 0x47e326
call fcn.0047c825
xor edi, edi
inc edi
jmp 0x47e5d0
cmp byte [edi + 8], 0
jne 0x47e35d
cmp ebx, 0x33
je 0x47e353
mov eax, 0xc0
cmp bx, ax
je 0x47e353
cmp ebx, 0x31
jne 0x47e344
xor edi, edi
push edi
push 0x9d8a
jmp 0x47e3ac
cmp ebx, 0x32
jne 0x47e35d
xor edi, edi
push edi
push 0x9d8b
jmp 0x47e3ac
xor edi, edi
push edi
push 0x9d8c
jmp 0x47e3ac
cmp ebx, 0x20
jne 0x47e377
xor edi, edi
push edi
push 0x9c6e
push 0x111
push dword [0x531f70]
jmp 0x47e3b4
cmp ebx, 0x46
jne 0x47e01e
mov ebx, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x10
call ebx
bt ax, 0xf
jae 0x47e01e
push 0x11
call ebx
bt ax, 0xf
jb 0x47e01e
xor edi, edi
push edi
push 0x9e11
push 0x111
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x47e5d0
lea esi, [edi + 0x84]
push esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [edi + 0x5c]
mov dword [ebp - 4], 1
test ecx, ecx
je 0x47e2d2
call fcn.0047ffde
cmp byte [edi + 8], 0
je 0x47e2d2
mov ecx, dword [0x530680]
cmp byte [ecx + 0x4b1], 0
je 0x47e2d2
push edi
push dword [ebp + 8]
call fcn.00435b47
jmp 0x47e2d2
xor ebx, ebx
cmp dword [0x50510c], ebx
sete bl
and dword [0x50510c], 0
push ebx
call fcn.0047c7ab
pop ecx
mov dword [0x50510c], ebx
jmp 0x47e01e
cmp dword [edi + 0x5c], 0
je 0x47e448
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x24]
movsd xmm0, qword [edi + 0x18]
jmp 0x47e458
movsd xmm0, qword [0x4cbff8]
mov eax, 0x140
lea ecx, [eax - 0x50]
push edx
push ecx
push ecx
movsd qword [esp], xmm0
push ecx
push eax
mov ecx, edi
call fcn.0047de98
jmp 0x47e01e
call fcn.0047c767
jmp 0x47e01e
mov eax, dword [ebp + 0x14]
movsx esi, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x18], eax
call dword [sym.imp.USER32.dll_GetCapture]
cmp eax, dword [edi + 0x10]
jne 0x47e496
call dword [sym.imp.USER32.dll_ReleaseCapture]
cmp byte [edi + 8], 0
mov ebx, dword [ebp + 0x10]
je 0x47e4ca
cmp dword [0x4f7ccc], 0
je 0x47e4ca
mov ecx, dword [0x530680]
cmp byte [ecx + 0x4b2], 0
je 0x47e4ca
mov eax, dword [ecx]
push ebx
push dword [ebp - 0x18]
push esi
call dword [eax + 8]
test al, al
je 0x47e4ca
call fcn.0047c825
push dword [0x531f7c]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x47e6b5
mov eax, dword [ebp + 0xc]
sub eax, 0x205
je 0x47e689
sub eax, 0x1fc
je 0x47e683
sub eax, 1
je 0x47e673
mov eax, dword [ebp + 0xc]
sub eax, 0x112
je 0x47e627
sub eax, 1
je 0x47e5de
sub eax, 4
je 0x47e5a9
sub eax, 0xec
je 0x47e592
sub eax, 0x13
je 0x47e5de
sub eax, 0x102
je 0x47e570
sub eax, 0x970
jne 0x47e6b2
lea esi, [edi + 0x84]
push esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
and dword [ebp - 4], 0
mov ecx, dword [edi + 0x5c]
test ecx, ecx
je 0x47e2d2
call fcn.0048021e
mov ecx, dword [edi + 0x5c]
call fcn.004064b5
jmp 0x47e2d2
lea eax, [ebp - 0x24]
push eax
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_GetClientRect]
mov ebx, dword [ebp + 0x10]
lea ecx, [edi + 4]
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
push ebx
call dword [eax + 4]
jmp 0x47e617
lea esi, [edi + 0x84]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call fcn.0047c825
jmp 0x47e01e
lea esi, [edi + 0x84]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push dword [ebp + 0x14]
mov ebx, dword [ebp + 0x10]
push ebx
push 0x117
push dword [0x531f70]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, edi
jmp 0x47e6d7
lea esi, [edi + 0x84]
push esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [edi + 0x5c]
mov dword [ebp - 4], 2
test ecx, ecx
je 0x47e607
cmp byte [edi + 0x65], 0
jne 0x47e607
call fcn.004064b5
cmp dword [ebp + 0xc], 0x113
push esi
jne 0x47e61e
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
jmp 0x47e6d7
or dword [ebp - 4], 0xffffffff
jmp 0x47e01f
lea esi, [edi + 0x84]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebx, dword [ebp + 0x10]
mov eax, ebx
and eax, 0xfff0
cmp eax, 0xf140
je 0x47e64c
cmp eax, 0xf170
jne 0x47e66a
cmp dword [0x4f7cc4], 0
je 0x47e66a
call fcn.0047d225
test eax, eax
je 0x47e66a
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
or eax, 0xffffffff
jmp 0x47e6d7
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x47e6b5
mov ecx, dword [ebp + 0x14]
test ecx, ecx
mov ebx, dword [ebp + 0x10]
setne al
mov byte [edi + 0x65], al
jmp 0x47e6b8
mov byte [edi + 0x64], 1
jmp 0x47e6b2
cmp byte [edi + 8], 0
jne 0x47e6b2
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp + 8]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push 2
call fcn.0047d979
push eax
call fcn.00479ad7
add esp, 0x14
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov eax, dword [edi + 0x54]
push ecx
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
test eax, eax
je 0x47e6d1
push dword [edi + 0x58]
call eax
add esp, 0x14
jmp 0x47e6d7
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x10