Function at 0x4759c0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x18
push esi
mov esi, ecx
mov ecx, dword [esi + 0x248]
test ecx, ecx
push edi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 4]
je 0x475b4b
cmp eax, 0x100
jb 0x475a63
cmp eax, 0x108
ja 0x475a63
mov edi, dword [edi + 8]
cmp edi, 0xd
je 0x475a06
cmp edi, 0x1b
je 0x475a26
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov ecx, esi
call fcn.004770b0
test eax, eax
jne 0x475a26
push 0xffffffffffffffff
call dword [sym.imp.user32.dll_MessageBeep]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi + 0x248]
mov eax, dword [ecx]
mov edx, dword [eax + 0x60]
call edx
mov ecx, dword [esi + 0x248]
test ecx, ecx
je 0x475a46
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push 1
call edx
mov dword [esi + 0x248], 0
call dword [sym.imp.user32.dll_ReleaseCapture]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x200
jb 0x4759fc
cmp eax, 0x20a
ja 0x4759fc
mov ecx, dword [ecx + 0x20]
lea eax, [esp + 0x10]
push eax
push ecx
call dword [sym.imp.user32.dll_GetClientRect]
mov eax, dword [esi + 0x248]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + 0x20]
push 2
lea edx, [esp + 0x14]
push edx
push ecx
push eax
call dword [sym.imp.user32.dll_MapWindowPoints]
lea ecx, [esp + 8]
push ecx
call dword [sym.imp.user32.dll_GetCursorPos]
mov eax, dword [esi + 0x20]
lea edx, [esp + 8]
push edx
push eax
call dword [sym.imp.user32.dll_ScreenToClient]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
push ecx
push edx
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.user32.dll_PtInRect]
test eax, eax
je 0x475af2
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov eax, dword [edi + 4]
push ecx
mov ecx, dword [esi + 0x248]
push edx
push eax
call fcn.0041bda0
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
cmp dword [edi + 4], 0x200
je 0x475a19
mov ecx, esi
call fcn.004770b0
test eax, eax
je 0x475a11
mov ecx, dword [esi + 0x248]
mov edx, dword [ecx]
mov eax, dword [edx + 0x60]
call eax
mov ecx, dword [esi + 0x248]
test ecx, ecx
je 0x475b2e
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push 1
call eax
mov dword [esi + 0x248], 0
call dword [sym.imp.user32.dll_ReleaseCapture]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x104
ja 0x475c2a
je case.0x475c3b.512
sub eax, 0xa1
cmp eax, 0x5f
ja case.0x475c3b.515
movzx ecx, byte [eax + 0x475c7c]
jmp dword [ecx*4 + 0x475c70]
cmp dword [esi + 0x78], 0xffffffff
je case.0x475c3b.512
push 0x11
call dword [sym.imp.user32.dll_GetAsyncKeyState]
test ax, ax
jns case.0x475c3b.512
mov eax, dword [edi + 8]
sub eax, 0x21
je 0x475bf5
sub eax, 1
jne case.0x475c3b.512
mov edx, dword [esi + 0x74]
mov eax, dword [esi + 0x78]
sub edx, 1
cmp eax, edx
jne 0x475bb5
xor eax, eax
jmp 0x475bb8
add eax, 1
mov ecx, esi
call fcn.00474f00
mov ecx, esi
call fcn.00475d10
mov ecx, eax
call fcn.00565345
mov eax, dword [esi + 0x78]
mov ecx, dword [0x6b51b0]
push 0
push eax
push ecx
mov ecx, esi
call fcn.0042f6f0
mov ecx, eax
call fcn.0041bda0
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi + 0x78]
test eax, eax
jne 0x475c04
mov eax, dword [esi + 0x74]
sub eax, 1
jmp 0x475c07
add eax, 0xffffffff
mov ecx, esi
call fcn.00474f00
mov ecx, esi
call fcn.00475d10
mov ecx, eax
call fcn.00565345
mov edx, dword [esi + 0x78]
mov eax, dword [0x6b51b0]
push 0
push edx
push eax
jmp 0x475bda
sub eax, 0x200
cmp eax, 8
ja case.0x475c3b.515
movzx ecx, byte [eax + 0x475ce4]
jmp dword [ecx*4 + 0x475cdc]
cmp dword [esi + 0x54], 0
jne case.0x475c3b.515
mov edx, dword [esi + 0xd8]
push edi
push 0
push 0x407
push edx
call dword [sym.imp.user32.dll_SendMessageA]
push edi
mov ecx, esi
call fcn.0055e68d
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4