Function at 0x477df0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x18
push esi
mov esi, ecx
mov ecx, dword [esi + 0x248]
test ecx, ecx
push edi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 4]
je 0x477f7b
cmp eax, 0x100
jb 0x477e93
cmp eax, 0x109
ja 0x477e93
mov edi, dword [edi + 8]
cmp edi, 0xd
je 0x477e36
cmp edi, 0x1b
je 0x477e56
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov ecx, esi
call fcn.004794e0
test eax, eax
jne 0x477e56
push 0xffffffffffffffff
call dword [sym.imp.user32.dll_MessageBeep]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi + 0x248]
mov eax, dword [ecx]
mov edx, dword [eax + 0x60]
call edx
mov ecx, dword [esi + 0x248]
test ecx, ecx
je 0x477e76
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push 1
call edx
mov dword [esi + 0x248], 0
call dword [sym.imp.user32.dll_ReleaseCapture]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x200
jb 0x477e2c
cmp eax, 0x20d
ja 0x477e2c
mov ecx, dword [ecx + 0x20]
lea eax, [esp + 0x10]
push eax
push ecx
call dword [sym.imp.user32.dll_GetClientRect]
mov eax, dword [esi + 0x248]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + 0x20]
push 2
lea edx, [esp + 0x14]
push edx
push ecx
push eax
call dword [sym.imp.user32.dll_MapWindowPoints]
lea ecx, [esp + 8]
push ecx
call dword [sym.imp.user32.dll_GetCursorPos]
mov eax, dword [esi + 0x20]
lea edx, [esp + 8]
push edx
push eax
call dword [sym.imp.user32.dll_ScreenToClient]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
push ecx
push edx
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.user32.dll_PtInRect]
test eax, eax
je 0x477f22
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov eax, dword [edi + 4]
push ecx
mov ecx, dword [esi + 0x248]
push edx
push eax
call fcn.0041cae0
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
cmp dword [edi + 4], 0x200
je 0x477e49
mov ecx, esi
call fcn.004794e0
test eax, eax
je 0x477e41
mov ecx, dword [esi + 0x248]
mov edx, dword [ecx]
mov eax, dword [edx + 0x60]
call eax
mov ecx, dword [esi + 0x248]
test ecx, ecx
je 0x477f5e
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push 1
call eax
mov dword [esi + 0x248], 0
call dword [sym.imp.user32.dll_ReleaseCapture]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x104
ja 0x47805a
je case.0x47806b.512
sub eax, 0xa1
cmp eax, 0x5f
ja case.0x47806b.515
movzx ecx, byte [eax + 0x4780ac]
jmp dword [ecx*4 + 0x4780a0]
cmp dword [esi + 0x78], 0xffffffff
je case.0x47806b.512
push 0x11
call dword [sym.imp.user32.dll_GetAsyncKeyState]
test ax, ax
jns case.0x47806b.512
mov eax, dword [edi + 8]
sub eax, 0x21
je 0x478025
sub eax, 1
jne case.0x47806b.512
mov edx, dword [esi + 0x74]
mov eax, dword [esi + 0x78]
sub edx, 1
cmp eax, edx
jne 0x477fe5
xor eax, eax
jmp 0x477fe8
add eax, 1
mov ecx, esi
call fcn.00477330
mov ecx, esi
call fcn.00478140
mov ecx, eax
call fcn.0056ccaa
mov eax, dword [esi + 0x78]
mov ecx, dword [0x6bdf8c]
push 0
push eax
push ecx
mov ecx, esi
call fcn.00430b30
mov ecx, eax
call fcn.0041cae0
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi + 0x78]
test eax, eax
jne 0x478034
mov eax, dword [esi + 0x74]
sub eax, 1
jmp 0x478037
add eax, 0xffffffff
mov ecx, esi
call fcn.00477330
mov ecx, esi
call fcn.00478140
mov ecx, eax
call fcn.0056ccaa
mov edx, dword [esi + 0x78]
mov eax, dword [0x6bdf8c]
push 0
push edx
push eax
jmp 0x47800a
sub eax, 0x200
cmp eax, 8
ja case.0x47806b.515
movzx ecx, byte [eax + 0x478114]
jmp dword [ecx*4 + 0x47810c]
cmp dword [esi + 0x54], 0
jne case.0x47806b.515
mov edx, dword [esi + 0xd8]
push edi
push 0
push 0x407
push edx
call dword [sym.imp.user32.dll_SendMessageA]
push edi
mov ecx, esi
call fcn.0056606d
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4