Function at 0x473860
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55ac05
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x5dd024]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x473c70
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x78], eax
mov dword [ebp - 4], 1
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp + 8]
call fcn.00418e80
lea eax, [ebp - 0x40]
xorps xmm0, xmm0
push eax
push dword [ebp + 8]
movups xmmword [ebp - 0x40], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
movups xmm0, xmmword [ebp - 0x40]
mov esi, dword [sym.imp.USER32.dll_GetDC]
push dword [ebp + 8]
movups xmmword [ebp - 0x30], xmm0
call esi
push 0x5a
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ecx, 0xd
mov dword [ebp - 0x7c], ecx
cmp eax, 0x60
je 0x473922
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x5a3810]
divsd xmm0, qword [0x5a3828]
addsd xmm0, qword [0x5a37e0]
cvttsd2si ecx, xmm0
mov dword [ebp - 0x7c], ecx
cmp byte [ebp + 0xc], 0
je 0x473937
mov eax, 0xfffffffc
sub eax, ecx
add dword [ebp - 0x38], eax
sub dword [ebp - 0x28], ecx
jmp 0x473940
lea eax, [ecx + 4]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x473c31
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ValidateRect]
push dword [ebp + 8]
call esi
lea ecx, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.00418cf0
mov byte [ebp - 4], 2
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.USER32.dll_GetParent]
push esi
push dword [ebp - 0x70]
push 0x135
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [edi], 0
mov esi, dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x80], eax
je 0x4739a5
push dword [edi + 4]
push dword [ebp - 0x70]
call esi
lea eax, [ebp - 0x8c]
xorps xmm0, xmm0
push eax
push dword [ebp - 0x70]
movlpd qword [ebp - 0x8c], xmm0
call dword [sym.imp.GDI32.dll_GetBrushOrgEx]
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x7c]
push 0
push dword [ebp - 0x88]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SetBrushOrgEx]
push dword [ebp - 0x80]
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_FillRect]
push 0
push 0
push 0x31
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 8]
mov dword [ebp - 0x7c], 0
mov byte [ebp - 0x71], 0
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x473a31
push 0x11
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push dword [ebp - 0x70]
call esi
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x71], 1
movzx esi, byte [ebp + 0x10]
movups xmm0, xmmword [ebp - 0x40]
mov ecx, dword [ebp - 0x78]
shl esi, 0x11
add esi, 0x10
movups xmmword [ebp - 0x20], xmm0
cmp dword [ecx - 4], 1
mov dword [ebp - 0x80], esi
jle 0x473a5d
push dword [ecx - 0xc]
lea ecx, [ebp - 0x78]
call fcn.00408c70
mov ecx, dword [ebp - 0x78]
push 0
or esi, 0x400
lea eax, [ebp - 0x20]
push esi
push eax
push 0xffffffffffffffff
push ecx
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_DrawTextExW]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
sub eax, esi
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x34]
cdq
sub eax, edx
sar eax, 1
test eax, eax
jle 0x473a9a
mov ecx, eax
sub ecx, dword [ebp - 0x1c]
add esi, ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], esi
cmp byte [ebp + 0xc], 0
je 0x473abb
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
sub esi, edx
sub esi, dword [ebp - 0x40]
add esi, dword [ebp - 0x38]
mov eax, esi
sub eax, dword [ebp - 0x20]
add edx, eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x78]
cmp dword [eax - 4], 1
jle 0x473ad2
push dword [eax - 0xc]
lea ecx, [ebp - 0x78]
call fcn.00408c70
mov eax, dword [ebp - 0x78]
push 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x20]
push ecx
push 0xffffffffffffffff
push eax
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_DrawTextExW]
cmp byte [ebp - 0x71], 0
je 0x473af9
push dword [ebp - 0x7c]
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov cl, byte [edi + 8]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
test cl, cl
jne 0x473b18
push 9
call esi
mov ecx, 0x8000
test cx, ax
seta cl
mov byte [edi + 8], cl
mov al, byte [edi + 9]
test al, al
jne 0x473b63
push 0x26
call esi
mov ecx, 0x8000
test cx, ax
ja 0x473b5b
push 0x28
call esi
mov ecx, 0x8000
test cx, ax
ja 0x473b5b
push 0x25
call esi
mov ecx, 0x8000
test cx, ax
ja 0x473b5b
push 0x27
call esi
mov ecx, 0x8000
test cx, ax
ja 0x473b5b
xor al, al
jmp 0x473b5d
mov al, 1
mov cl, byte [edi + 8]
mov byte [edi + 9], al
test cl, cl
jne 0x473b6f
test al, al
je 0x473c25
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, dword [ebp + 8]
jne 0x473c25
movups xmm1, xmmword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
movaps xmm0, xmm1
psrldq xmm0, 0xc
movd edx, xmm0
movaps xmm0, xmm1
movups xmmword [ebp - 0x50], xmm1
mov esi, dword [ebp - 0x48]
psrldq xmm0, 4
movd eax, xmm0
mov dword [ebp - 0x14], edx
psrldq xmm1, 0xc
sub edx, eax
movd edi, xmm1
mov eax, ecx
sub eax, dword [ebp - 0x2c]
cmp edx, eax
cmovg edi, ecx
xor eax, eax
sub ecx, edi
mov dword [ebp - 0x7c], edi
mov edi, dword [ebp - 0x50]
test ecx, ecx
setg al
xor ecx, ecx
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x2c]
test eax, eax
mov eax, edi
setg cl
sub eax, dword [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x80], ecx
test eax, eax
mov eax, dword [ebp - 0x28]
setg dl
sub eax, esi
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
setg cl
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x4c], eax
sub edi, edx
mov eax, dword [ebp - 0x7c]
add esi, ecx
add eax, dword [ebp - 0x84]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x70]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x48], esi
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.00418c40
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x78]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x473c53
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005255bb
mov esp, ebp
pop ebp
ret 0xc
push 0x80004005
call fcn.00408fc0
int3