Function at 0x61bbd4
Capabilities:
Hide graphical window
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x61be78
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp dl, byte [eax + 0x2c]
je 0x61be62
mov ecx, dword [ebp - 4]
mov eax, edx
mov byte [ecx + 0x2c], al
test al, al
je 0x61bd24
call sub.user32.dll_GetFocus
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x3c], ebx
push ebx
call sub.user32.dll_IsWindowVisible
test eax, eax
jne 0x61bc3e
mov eax, dword [ebp - 4]
call fcn.0061acf4
mov eax, dword [eax + 0xe0]
call fcn.0056ef90
mov edx, dword [ebp - 4]
mov dword [edx + 0x3c], eax
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov edx, dword [eax]
call dword [edx + 0xec]
push eax
push 0x30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 4]
cmp byte [eax + 0x17], 0
jne 0x61bc70
mov dl, 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0061b858
push 0x40
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
sub ecx, edx
push ecx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
sub ecx, eax
push ecx
push edx
push eax
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
push eax
call sub.user32.dll_SetWindowPos
mov eax, dword [ebp - 4]
mov edx, dword [0x5efe24]
call fcn.00503d64
test al, al
je 0x61bcc8
mov eax, dword [ebp - 4]
call fcn.0061ad4c
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x30]
mov edx, dword [ebp - 4]
call dword [eax + 0x264]
mov eax, dword [ebp - 4]
mov byte [eax + 0x2d], 1
xor eax, eax
push ebp
push 0x61bd0c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x18]
mov edx, dword [eax + 0x94]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x61bd13
mov eax, dword [ebp - 4]
mov byte [eax + 0x2d], 0
ret
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
test eax, eax
je 0x61bd36
push 0
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp - 4]
call fcn.0061acf4
cmp byte [eax + 0x140], 0
jne 0x61be0e
call fcn.005e34c4
test eax, eax
je 0x61bd6f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
call fcn.005654e0
call fcn.005802a0
mov ebx, eax
call fcn.005e34c4
cmp ebx, eax
je 0x61bd73
xor ebx, ebx
jmp 0x61bd75
mov bl, 1
test bl, bl
je 0x61bd80
mov al, 1
call fcn.0061bad0
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x3c]
test esi, esi
jbe 0x61bda2
push esi
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x61bda2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
push eax
call sub.user32.dll_SetFocus
jmp 0x61bdfb
mov eax, dword [ebp - 4]
call fcn.0061acf4
mov eax, dword [eax + 0xe0]
call fcn.0056ef90
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x61bdda
mov eax, dword [ebp - 4]
call fcn.0061acf4
mov eax, dword [eax + 0xe0]
call fcn.0056ef90
push eax
call sub.user32.dll_SetFocus
jmp 0x61bdfb
push 2
mov eax, dword [ebp - 4]
call fcn.0061acf4
mov eax, dword [eax + 0xe0]
call fcn.0056ef90
push eax
call sub.user32.dll_GetWindow
push eax
call sub.user32.dll_SetFocus
test bl, bl
je 0x61be06
xor eax, eax
call fcn.0061bad0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3c], edx
mov eax, dword [ebp - 4]
call fcn.0061acf4
cmp byte [eax + 0x33], 0
je 0x61be62
push 0x1b
call sub.user32.dll_GetAsyncKeyState
test ax, ax
jge 0x61be40
push 0x11
call sub.user32.dll_GetAsyncKeyState
test ax, ax
jl 0x61be40
push 0x12
call sub.user32.dll_GetAsyncKeyState
test ax, ax
jge 0x61be62
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0xc4]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x61be7f
lea eax, [ebp - 0x18]
call fcn.00504b1c
ret