Function at 0x5b1870
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov ecx, 0x7a1228
call fcn.00419810
mov ecx, 0x7dabc0
call fcn.00506f90
mov edi, eax
mov ecx, 0x7dabc0
mov dword [ebp - 4], edi
call fcn.005077a0
mov ecx, esi
call fcn.005abc10
mov ecx, esi
call fcn.00532d00
mov ecx, esi
call fcn.005b0be0
push edi
mov ecx, esi
call fcn.005b07b0
mov ecx, esi
call fcn.00532d40
mov ecx, esi
call fcn.005b1770
mov ebx, dword [sym.imp.WINMM.dll_timeGetTime]
call ebx
mov ecx, dword [esi + 0x21c]
add ecx, 0x3e8
cmp eax, ecx
jbe 0x5b18f3
mov ecx, 0x7dabc0
call fcn.005139c0
call ebx
mov dword [esi + 0x21c], eax
cmp edi, 2
jne 0x5b18ff
mov dword [ebp - 4], 0
mov eax, dword [esi + 0x3dc]
test eax, eax
je 0x5b1947
mov eax, dword [0x83e074]
test eax, eax
jne 0x5b193d
mov eax, dword [0x7a1244]
test eax, eax
jle 0x5b192c
mov edx, dword [esi]
push 0
push 0
push 1
push 0x5d
mov ecx, esi
call dword [edx + 0x18]
jmp 0x5b193d
jge 0x5b193d
mov eax, dword [esi]
push 0
push 0
push 1
push 0x5e
mov ecx, esi
call dword [eax + 0x18]
mov dword [0x83e074], 0
mov eax, dword [0x7a1264]
test eax, eax
mov eax, dword [0x7a1250]
je 0x5b195a
mov eax, dword [0x7a1254]
cmp eax, 3
jne 0x5b19b3
mov ecx, dword [esi + 0xb4]
mov ecx, dword [ecx + 0x3c]
test ecx, ecx
je 0x5b197b
mov edx, dword [ecx]
push 0
push 0
push 0
push 0xf
push 0
call dword [edx + 8]
mov ecx, dword [0x7a1240]
mov edx, dword [0x7a123c]
mov eax, dword [esi]
push 0
push ecx
push edx
push 0x11
mov ecx, esi
call dword [eax + 0x18]
mov eax, dword [0x7dadcc]
test eax, eax
je 0x5b19a9
push 0x12
mov ecx, 0x7dabc0
call fcn.00509b10
mov dword [esi + 0xe0], 1
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
fild dword [0x7a123c]
xor ecx, ecx
mov cl, ah
fstp dword [ebp - 0xc]
fild dword [0x7a1240]
mov eax, dword [ebp - 0xc]
and ecx, 0xff
mov dword [0x8387c0], ecx
mov ecx, 0x8142e8
fstp dword [ebp - 8]
mov edx, dword [ebp - 8]
push edx
push eax
call fcn.00536350
mov ebx, dword [0x7dae28]
mov edi, eax
test ebx, ebx
jne 0x5b1a07
mov ecx, dword [ebp - 4]
push ecx
push edi
mov ecx, esi
call fcn.005af780
mov edx, dword [ebp - 4]
mov ecx, esi
push edx
push edi
call fcn.005af6a0
mov ecx, esi
call fcn.005af2e0
mov eax, dword [esi + 0x28c]
test eax, eax
jne 0x5b1a75
mov eax, dword [esi + 0x290]
test eax, eax
jne 0x5b1a75
test ebx, ebx
jne 0x5b1a75
mov eax, dword [0x7dae30]
test eax, eax
jne 0x5b1a75
mov eax, dword [0x7daf50]
test eax, eax
jne 0x5b1a75
mov eax, dword [0x7daf54]
test eax, eax
jne 0x5b1a75
mov eax, dword [0x7daf58]
test eax, eax
jne 0x5b1a75
mov eax, dword [ebp - 4]
push edi
push eax
mov ecx, esi
call fcn.005ad670
push eax
mov ecx, esi
call fcn.005b10c0
mov ecx, esi
mov ebx, eax
call fcn.005af1e0
jmp 0x5b1a8e
test edi, edi
je 0x5b1a8b
mov eax, dword [ebp - 4]
test eax, eax
jne 0x5b1a8b
mov ecx, dword [edi + 0x18]
push ecx
mov ecx, esi
call fcn.005ab270
mov ebx, dword [ebp - 4]
mov eax, dword [0x7a1264]
test eax, eax
mov eax, dword [0x7a1250]
je 0x5b1aa1
mov eax, dword [0x7a1254]
cmp eax, 1
jne 0x5b1ae6
push 0
mov byte [0x83ecb2], 0
mov edx, dword [esi]
push 0
push 0
push 0x47
mov ecx, esi
call dword [edx + 0x18]
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
call edi
mov ecx, dword [esi + 0x288]
add ecx, 0x1388
cmp eax, ecx
jbe 0x5b1ade
mov dword [esi + 0x284], 0
call edi
mov dword [esi + 0xc0], eax
mov eax, dword [0x83e3a8]
test eax, eax
je 0x5b1b03
mov edx, dword [0x7a1240]
mov eax, dword [0x7a123c]
push edx
push eax
mov ecx, esi
call fcn.005c77f0
mov edx, dword [esi + 0x3dc]
test edx, edx
setne al
test al, al
je 0x5b1b1a
test ebx, ebx
jne 0x5b1b3f
push 0xa
jmp 0x5b1b38
test ebx, ebx
jne 0x5b1b3f
mov eax, dword [0x7a1264]
test eax, eax
mov eax, dword [0x7a1254]
je 0x5b1b31
mov eax, dword [0x7a1250]
cmp eax, 2
je 0x5b1b3f
push 0
mov ecx, esi
call fcn.00532d50
mov ecx, dword [0x7a123c]
pop edi
mov dword [esi + 0xc4], ecx
mov edx, dword [0x7a1240]
mov dword [esi + 0xc8], edx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret