Function at 0x61c270
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x28
push esi
mov esi, ecx
mov al, byte [esi + 0x66]
test al, al
jne 0x61c286
xor al, al
pop esi
add esp, 0x28
ret 0x10
mov al, byte [esi + 0x25]
test al, al
push ebx
push ebp
push edi
mov edi, dword [esp + 0x40]
mov byte [esp + 0x13], 0
je 0x61c37f
cmp edi, 0x200
jne 0x61c37f
call fcn.0062c610
cmp dword [eax + 0x30], esi
jne 0x61c37f
mov ecx, dword [esi + 0x1d8]
mov eax, dword [esi + 0x1d4]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], eax
mov eax, dword [esi + 0x1e8]
push ecx
mov ecx, esi
mov byte [esi + 0x25], 0
mov dword [esp + 0x34], 0x3ecccccd
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], 4
call fcn.00614060
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov ecx, dword [esi + 0x1d4]
mov dword [esp + 0x20], eax
mov eax, 6
sub eax, edx
cmp ecx, eax
jne 0x61c31d
neg edi
mov dword [esp + 0x24], edi
jmp 0x61c36f
mov eax, dword [0x77ff08]
mov eax, dword [eax + 0x14]
mov ebx, eax
sub ebx, edi
sub ebx, 6
cmp ecx, ebx
jne 0x61c338
sub eax, edx
mov dword [esp + 0x24], eax
jmp 0x61c36f
mov edx, dword [esp + 0x20]
mov eax, dword [esi + 0x1d8]
mov ecx, 6
sub ecx, edx
cmp eax, ecx
jne 0x61c355
neg ebp
mov dword [esp + 0x28], ebp
jmp 0x61c36f
mov ecx, dword [0x77ff08]
mov ecx, dword [ecx + 0x18]
mov edi, ecx
sub edi, ebp
sub edi, 6
cmp eax, edi
jne 0x61c36f
sub ecx, edx
mov dword [esp + 0x28], ecx
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00615ab0
mov edi, dword [esp + 0x40]
mov al, byte [esi + 0x90]
test al, al
je 0x61c532
cmp edi, 0x202
jne 0x61c3a8
mov byte [esi + 0x90], 0
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
cmp edi, 0x200
jne 0x61c526
mov eax, dword [esp + 0x48]
mov edi, dword [esi + 0x1d4]
mov ebx, dword [esi + 0x1d8]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
mov eax, dword [0x783490]
add eax, ecx
mov ecx, dword [0x783494]
add ecx, edx
cmp edi, eax
mov dword [esp + 0x40], ebx
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1d8], ecx
jne 0x61c3f8
cmp ebx, ecx
je 0x61c526
mov al, byte [esi + 0x300]
test al, al
mov dword [esi + 0x5c], 0xffffffff
mov byte [esi + 0x25], 0
jns 0x61c4f6
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00614060
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
mov eax, dword [esi + 0x1d4]
cmp eax, edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], edx
je 0x61c48e
add eax, ebx
push eax
call fcn.0065ec7a
add esp, 4
cmp eax, 0x14
jge 0x61c454
neg ebx
mov dword [esi + 0x1d4], ebx
jmp 0x61c486
mov eax, dword [esi + 0x1d4]
mov ecx, dword [0x77ff08]
mov ebx, dword [ecx + 0x14]
add eax, ebp
sub eax, ebx
push eax
call fcn.0065ec7a
add esp, 4
cmp eax, 0x14
jge 0x61c48e
mov edx, dword [0x77ff08]
mov eax, dword [edx + 0x14]
sub eax, ebp
mov dword [esi + 0x1d4], eax
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0x5c], eax
mov eax, dword [esi + 0x1d8]
cmp eax, dword [esp + 0x40]
je 0x61c4f6
mov edi, dword [esp + 0x18]
add eax, edi
push eax
call fcn.0065ec7a
add esp, 4
cmp eax, 0x14
jge 0x61c4b8
neg edi
mov dword [esi + 0x1d8], edi
jmp 0x61c4ee
mov eax, dword [esi + 0x1d8]
mov ecx, dword [0x77ff08]
mov edi, dword [esp + 0x20]
mov ebp, dword [ecx + 0x18]
add eax, edi
sub eax, ebp
push eax
call fcn.0065ec7a
add esp, 4
cmp eax, 0x14
jge 0x61c4f6
mov edx, dword [0x77ff08]
mov eax, dword [edx + 0x18]
sub eax, edi
mov dword [esi + 0x1d8], eax
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0x5c], eax
mov ecx, dword [esi + 0x14]
test ecx, ecx
je 0x61c516
push 0
push 0xffffffffffffffff
push 0x3ec
push 0
push str.OnGuiEvent
call fcn.0061bdd0
test al, al
jne 0x61c526
mov edx, dword [esi]
push 0
push 0xffffffffffffffff
push 0x3ec
mov ecx, esi
call dword [edx + 0x2c]
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
mov al, byte [esi + 0x91]
test al, al
je 0x61c6c1
cmp edi, 0x202
jne 0x61c55b
pop edi
pop ebp
pop ebx
mov byte [esi + 0x91], 0
mov al, 1
pop esi
add esp, 0x28
ret 0x10
cmp edi, 0x200
jne 0x61c6b5
mov eax, dword [esp + 0x48]
mov bl, byte [0x78348c]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
mov eax, dword [0x783484]
lea edi, [ecx + eax]
mov ecx, dword [0x783488]
add edx, ecx
test bl, 1
je 0x61c5db
mov ecx, dword [esi + 0x1d8]
mov eax, dword [esi + 0x1e0]
add eax, ecx
mov ecx, eax
sub ecx, edx
mov dword [esi + 0x1d8], edx
mov edx, dword [esi + 0x6c]
cmp ecx, edx
mov dword [esi + 0x1e0], ecx
jge 0x61c5c4
sub eax, edx
mov dword [esi + 0x1d8], eax
mov dword [esi + 0x1e0], edx
jmp 0x61c604
mov edx, dword [esi + 0x74]
cmp ecx, edx
jle 0x61c604
sub eax, edx
mov dword [esi + 0x1d8], eax
mov dword [esi + 0x1e0], edx
jmp 0x61c604
test bl, 2
je 0x61c604
mov ebp, dword [esi + 0x1d8]
mov ecx, dword [esi + 0x6c]
mov eax, edx
sub eax, ebp
cmp eax, ecx
mov dword [esi + 0x1e0], eax
jl 0x61c5fe
mov ecx, dword [esi + 0x74]
cmp eax, ecx
jle 0x61c604
mov dword [esi + 0x1e0], ecx
test bl, 4
je 0x61c655
mov eax, dword [esi + 0x1dc]
mov ebp, dword [esi + 0x1d4]
mov edx, dword [esi + 0x68]
add eax, ebp
mov ecx, eax
sub ecx, edi
cmp ecx, edx
mov dword [esi + 0x1d4], edi
mov dword [esi + 0x1dc], ecx
jge 0x61c63e
sub eax, edx
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1dc], edx
jmp 0x61c67c
mov edx, dword [esi + 0x70]
cmp ecx, edx
jle 0x61c67c
sub eax, edx
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1dc], edx
jmp 0x61c67c
test bl, 8
je 0x61c67c
mov ecx, dword [esi + 0x68]
mov eax, edi
sub eax, dword [esi + 0x1d4]
cmp eax, ecx
mov dword [esi + 0x1dc], eax
jl 0x61c676
mov ecx, dword [esi + 0x70]
cmp eax, ecx
jle 0x61c67c
mov dword [esi + 0x1dc], ecx
mov ecx, dword [esi + 0x14]
test ecx, ecx
je 0x61c69c
push 0
push 0xffffffffffffffff
push 0x3e8
push 0
push str.OnGuiEvent
call fcn.0061bdd0
test al, al
jne 0x61c6ac
mov edx, dword [esi]
push 0
push 0xffffffffffffffff
push 0x3e8
mov ecx, esi
call dword [edx + 0x2c]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x4c]
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
mov edi, dword [esp + 0x40]
cmp edi, 0x201
mov ebx, dword [esp + 0x48]
jne 0x61c70d
mov edx, dword [esi]
mov ecx, ebx
shr ecx, 0x10
movsx ecx, cx
movsx eax, bx
push ecx
push eax
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, 0xfffffffe
je 0x61c70d
cmp eax, 0xffffffff
je 0x61c70d
push esi
call fcn.0062c610
mov ecx, eax
call fcn.0046efc0
test al, al
je 0x61c70d
push esi
call fcn.0062c610
mov ecx, eax
call fcn.0062b030
mov al, byte [esi + 0x93]
test al, al
jne 0x61cbbc
mov ecx, dword [0x783440]
test ecx, ecx
mov ebp, dword [esp + 0x44]
je 0x61c753
cmp dword [ecx + 0x6c], esi
jne 0x61c753
mov eax, dword [ecx]
call dword [eax + 0x50]
test al, al
je 0x61c74d
mov ecx, dword [0x783440]
mov edx, dword [ecx]
push ebx
push ebp
push edi
call dword [edx + 0x18]
test al, al
jne 0x61c39c
mov ecx, dword [0x783440]
cmp edi, 0x102
ja 0x61c85d
je 0x61c848
cmp edi, 0x1c
je 0x61c806
cmp edi, 0xff
jbe 0x61c786
mov edi, dword [esp + 0x40]
cmp edi, 0x101
jbe 0x61c896
cmp dword [esp + 0x40], 0x201
jne case.0x61c954.10
mov edx, dword [esi]
movsx ebp, bx
shr ebx, 0x10
movsx ebx, bx
push ebx
push ebp
mov ecx, esi
mov dword [esp + 0x20], ebx
call dword [edx + 0x1c]
mov edi, eax
cmp edi, 2
jne 0x61cbc8
push esi
call fcn.0062c610
mov ecx, eax
call fcn.0046efc0
test al, al
je 0x61cbc8
mov eax, dword [esi + 0x300]
test al, 4
jne 0x61cbbc
mov eax, dword [esi + 0x1d4]
mov ecx, dword [esi + 0x1d8]
sub eax, ebp
pop edi
pop ebp
sub ecx, ebx
pop ebx
mov byte [esi + 0x90], 1
mov dword [0x783490], eax
mov dword [0x783494], ecx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
test ecx, ecx
je case.0x61c954.10
cmp dword [ecx + 0x6c], esi
jne case.0x61c954.10
mov eax, dword [ecx]
call dword [eax + 0x50]
test al, al
je case.0x61c954.10
test ebp, ebp
mov ecx, dword [0x783440]
je 0x61c835
mov edx, dword [ecx]
call dword [edx + 0x2c]
mov al, byte [esp + 0x13]
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x28
ret 0x10
mov eax, dword [ecx]
call dword [eax + 0x30]
mov al, byte [esp + 0x13]
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x28
ret 0x10
mov al, byte [0x783482]
test al, al
je case.0x61c954.10
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
cmp edi, 0x20d
ja 0x61c786
mov eax, dword [esp + 0x40]
cmp eax, 0x200
jae 0x61ca03
cmp eax, 0x104
jb 0x61c786
cmp eax, 0x105
ja 0x61c786
mov edi, eax
cmp edi, 0x101
jne 0x61c8ab
pop edi
pop ebp
pop ebx
mov byte [0x783482], 0
mov al, 1
pop esi
add esp, 0x28
ret 0x10
mov ecx, dword [0x783440]
test ecx, ecx
je 0x61c8dd
cmp dword [ecx + 0x6c], esi
jne 0x61c8dd
mov edx, dword [ecx]
call dword [edx + 0x50]
test al, al
je 0x61c8dd
mov edx, dword [esp + 0x44]
mov ecx, dword [0x783440]
mov eax, dword [ecx]
push ebx
push edx
push edi
call dword [eax + 0x1c]
test al, al
jne 0x61c39c
lea ecx, [esi + 0x204]
xor ebp, ebp
call fcn.004d5b30
test eax, eax
jbe 0x61c926
mov edi, edi
mov eax, dword [esi + 0x208]
mov edi, dword [eax + ebp*4]
lea eax, [eax + ebp*4]
mov al, byte [edi + 4]
test al, al
jne 0x61c912
lea ecx, [edi + 0x84]
call fcn.00636490
test al, al
jne 0x61c95b
lea ecx, [esi + 0x204]
inc ebp
call fcn.004d5b30
cmp ebp, eax
jb 0x61c8f0
mov edi, dword [esp + 0x40]
cmp edi, 0x100
jne 0x61c786
mov al, byte [esi + 0x61]
test al, al
je 0x61cbbc
mov eax, dword [esp + 0x44]
add eax, 0xfffffff7
cmp eax, 0x1f
ja case.0x61c954.10
movzx eax, byte [eax + 0x61cc6c]
jmp dword [eax*4 + 0x61cc5c]
cmp dword [esp + 0x40], 0x100
jne 0x61c973
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x3c]
mov byte [0x783482], 1
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
mov eax, dword [0x783440]
test eax, eax
je case.0x61c954.10
push 1
mov ecx, esi
call fcn.0061a560
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
mov eax, dword [0x783440]
test eax, eax
je case.0x61c954.10
push 0
mov ecx, esi
call fcn.0061a560
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
mov eax, dword [0x783440]
test eax, eax
jne 0x61c9dd
mov ecx, esi
call fcn.006199e0
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x28
ret 0x10
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
sete cl
mov byte [esp + 0x40], al
push ecx
mov ecx, esi
call fcn.0061a560
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x28
ret 0x10
mov al, byte [esi + 0x62]
test al, al
je 0x61cbbc
call fcn.00636960
mov ecx, dword [eax + 0x14c]
test ecx, ecx
je 0x61ca2f
call fcn.00636960
cmp dword [eax + 0x14c], 3
jne 0x61c786
mov eax, dword [esi + 0x25c]
mov ecx, dword [esi + 0x260]
mov edx, ebx
shr edx, 0x10
movsx edi, dx
add eax, dword [esi + 0x1d4]
movsx ebp, bx
sub ebp, eax
add ecx, dword [esi + 0x1d8]
mov al, byte [esi + 0x92]
sub edi, ecx
test al, al
je 0x61ca66
sub edi, dword [esi + 0x1e4]
mov eax, dword [esp + 0x40]
cmp eax, 0x201
je 0x61ca78
cmp eax, 0x203
jne 0x61cace
mov ecx, dword [0x783440]
test ecx, ecx
je 0x61ca90
cmp dword [ecx + 0x6c], esi
jne 0x61ca90
cmp dword [ecx + 0x9c], 4
je 0x61cad4
mov edx, dword [esi]
push edi
push ebp
mov ecx, esi
call dword [edx + 0x30]
mov ebx, eax
test ebx, ebx
je 0x61caca
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x50]
test al, al
je 0x61caca
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [ebx]
push eax
mov eax, dword [esp + 0x44]
push ecx
push edi
push ebp
push eax
mov ecx, ebx
call dword [edx + 0x20]
test al, al
jne 0x61c39c
mov ebx, dword [esp + 0x48]
mov ecx, dword [0x783440]
test ecx, ecx
je 0x61cb06
cmp dword [ecx + 0x6c], esi
jne 0x61cb06
mov edx, dword [ecx]
call dword [edx + 0x50]
test al, al
je 0x61cb06
mov edx, dword [esp + 0x44]
mov ecx, dword [0x783440]
mov eax, dword [ecx]
push ebx
push edx
mov edx, dword [esp + 0x48]
push edi
push ebp
push edx
call dword [eax + 0x20]
test al, al
jne 0x61c39c
mov eax, dword [esi]
push edi
push ebp
mov ecx, esi
call dword [eax + 0x30]
test eax, eax
je 0x61cb37
mov ecx, dword [esp + 0x44]
mov edx, dword [eax]
push ebx
push ecx
mov ecx, dword [esp + 0x48]
push edi
push ebp
push ecx
mov ecx, eax
call dword [edx + 0x20]
test al, al
je 0x61cb6f
pop edi
pop ebp
pop ebx
mov al, 1
pop esi
add esp, 0x28
ret 0x10
cmp dword [esp + 0x40], 0x201
jne 0x61cb6f
mov ecx, dword [0x783440]
test ecx, ecx
je 0x61cb6f
mov eax, dword [ecx + 0x9c]
cmp eax, 6
je 0x61cb6f
cmp eax, 7
je 0x61cb6f
cmp dword [ecx + 0x6c], esi
jne 0x61cb6f
mov edx, dword [ecx]
call dword [edx + 0x30]
mov dword [0x783440], 0
mov eax, dword [esp + 0x40]
sub eax, 0x200
je 0x61cbb3
sub eax, 5
jne 0x61c786
call fcn.0062c610
cmp dword [eax + 0x30], esi
jne case.0x61c954.10
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x70]
test al, al
je case.0x61c954.10
pop edi
pop ebp
mov byte [esp + 0xb], 1
mov al, byte [esp + 0xb]
pop ebx
pop esi
add esp, 0x28
ret 0x10
push edi
push ebp
mov ecx, esi
call fcn.00614110
pop edi
pop ebp
pop ebx
xor al, al
pop esi
add esp, 0x28
ret 0x10
push edi
mov ecx, esi
call fcn.00613ed0
mov ebx, eax
test ebx, ebx
je case.0x61c954.10
push esi
mov dword [0x78348c], ebx
call fcn.0062c610
mov ecx, eax
call fcn.0046efc0
test al, al
je case.0x61c954.10
xor ecx, ecx
xor eax, eax
test bl, 4
mov byte [esi + 0x91], 1
je 0x61cc0d
mov ecx, dword [esi + 0x1d4]
jmp 0x61cc1e
test bl, 8
je 0x61cc1e
mov ecx, dword [esi + 0x1dc]
add ecx, dword [esi + 0x1d4]
test bl, 1
je 0x61cc2b
mov eax, dword [esi + 0x1d8]
jmp 0x61cc3c
test bl, 2
je 0x61cc3c
mov eax, dword [esi + 0x1e0]
add eax, dword [esi + 0x1d8]
sub ecx, ebp
pop edi
mov dword [0x783484], ecx
mov ecx, dword [esp + 0x14]
pop ebp
sub eax, ecx
pop ebx
mov dword [0x783488], eax
mov al, 1
pop esi
add esp, 0x28
ret 0x10