Function at 0x4786d0
Capabilities:
Hide graphical window
Log keystrokes via polling

Disassembly:
sub esp, 0xf4
push ebx
mov ebx, dword [esp + 0x108]
push ebp
push esi
mov dword [ebx], 1
mov al, byte [0x55b090]
mov esi, ecx
push edi
test al, 1
mov dword [esp + 0x18], esi
jne 0x478718
mov dl, al
mov eax, dword [0x547570]
or dl, 1
push 0x478a70
mov byte [0x55b090], dl
mov dword [0x55b08c], eax
call fcn.00532e49
add esp, 4
mov edx, dword [esp + 0x10c]
mov ecx, 0x3a
xor eax, eax
lea edi, [esp + 0x1c]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x1c]
add esi, 0x6600
and edx, 0xffff
xor edi, edi
push ecx
push edx
mov ecx, esi
mov dword [esp + 0x24], 0x123fa
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], edi
call fcn.0050dfc0
test eax, eax
je 0x478a5d
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push ecx
mov ecx, esi
call fcn.0050e150
mov ecx, dword [0x55b08c]
mov ebp, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov esi, eax
mov eax, dword [esi]
cmp ecx, eax
je 0x4787c8
cmp dword [ecx - 0xc], edi
jge 0x47879a
mov edx, dword [0x547574]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x47879f
cmp dword [eax - 0xc], edi
jge 0x4787b0
mov edx, dword [eax - 8]
push eax
push edx
mov ecx, 0x55b08c
call fcn.00405870
jmp 0x4787c8
mov ecx, 0x55b08c
call fcn.004124c0
mov esi, dword [esi]
mov dword [0x55b08c], esi
add esi, 0xfffffff4
push esi
call ebp
mov eax, dword [esp + 0x10]
mov edx, dword [0x547574]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4787f7
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4787f7
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.00532222
add esp, 4
mov eax, dword [0x55b08c]
cmp dword [eax - 8], edi
je 0x478a5d
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
mov dword [ebx], 1
call esi
test ah, 0x80
je 0x4788a3
mov edi, dword [esp + 0x18]
mov ecx, dword [0x55b08c]
mov eax, dword [edi + 0x83c]
lea esi, [edi + 0x83c]
cmp eax, ecx
je 0x47887b
mov edx, dword [eax - 0xc]
test edx, edx
jge 0x47884c
mov edx, dword [0x547574]
add eax, 0xfffffff4
cmp eax, edx
jne 0x478853
mov eax, dword [ecx - 0xc]
test eax, eax
jge 0x478861
push ecx
mov ecx, dword [ecx - 8]
push ecx
mov ecx, esi
call fcn.00405870
jmp 0x47887b
mov ecx, esi
call fcn.004124c0
mov edx, dword [0x55b08c]
mov dword [esi], edx
mov eax, dword [0x55b08c]
add eax, 0xfffffff4
push eax
call ebp
mov ecx, dword [edi + 4]
push 0
push 0x12c
push 0x2711
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xf4
ret 0x10
push 0x10
call esi
test ah, 0x80
je 0x4789ed
mov eax, dword [0x55b08c]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ecx
mov ecx, dword [eax - 0xc]
mov esi, esp
cmp ecx, edi
jl 0x4788d5
mov dword [esi], eax
mov edx, dword [0x55b08c]
add edx, 0xfffffff4
push edx
call ebp
jmp 0x4788f3
mov eax, dword [0x547570]
mov dword [esi], eax
mov eax, dword [0x55b08c]
test eax, eax
mov edi, eax
je 0x4788ea
push eax
call ebx
push edi
push eax
mov ecx, esi
call fcn.00405870
lea ecx, [esp + 0x14]
push ecx
call fcn.004ba610
mov eax, dword [0x55b08c]
add esp, 4
mov esi, esp
mov ecx, dword [eax - 0xc]
test ecx, ecx
jl 0x47891e
mov dword [esi], eax
mov edx, dword [0x55b08c]
add edx, 0xfffffff4
push edx
call ebp
jmp 0x47893c
mov eax, dword [0x547570]
mov dword [esi], eax
mov eax, dword [0x55b08c]
test eax, eax
mov edi, eax
je 0x478933
push eax
call ebx
push edi
push eax
mov ecx, esi
call fcn.00405870
lea ecx, [esp + 0x18]
push ecx
call fcn.004ba830
mov eax, dword [esp + 0x1c]
add esp, 4
mov ecx, esp
mov edx, dword [eax - 0xc]
test edx, edx
jl 0x478964
mov dword [ecx], eax
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call ebp
jmp 0x478975
mov eax, dword [0x547570]
mov dword [ecx], eax
mov edx, dword [esp + 0x18]
push edx
call fcn.00405920
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
push eax
call fcn.00405440
mov edi, dword [esp + 0x20]
mov ecx, edi
call fcn.0046b4e0
mov eax, dword [esp + 0x14]
mov edx, dword [0x547574]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4789bc
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4789bc
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.00532222
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x547574]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4789f1
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4789f1
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.00532222
add esp, 4
jmp 0x4789f1
mov edi, dword [esp + 0x18]
push 0x2e
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je 0x478a29
push ecx
mov ecx, esp
push 0x55b08c
call fcn.00405440
mov eax, dword [edi + 4]
push eax
call fcn.00478ab0
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xf4
ret 0x10
mov ecx, dword [edi + 0x1f8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push ecx
call esi
push 1
push 1
push ecx
mov ecx, esp
push 0x55b08c
call fcn.00405440
mov ecx, edi
call fcn.0047ccb0
mov edx, dword [edi + 0x1f8]
push 5
push edx
call esi
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xf4
ret 0x10