Function at 0x10004ab0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x1005b260]
push ebx
mov dword [esp + 0x14], eax
mov eax, dword [0x1005b3ec]
push esi
push edi
test eax, eax
jne 0x10004ad8
mov dword [0x1005b360], eax
jmp 0x10004b59
cmp eax, 1
jne 0x10004ae9
mov dword [0x1005b360], 0x14
jmp 0x10004b59
cmp eax, 2
jne 0x10004af5
mov dword [0x1005b360], eax
jmp 0x10004b59
cmp eax, 3
jne 0x10004b06
mov dword [0x1005b360], 1
jmp 0x10004b59
cmp eax, 4
jne 0x10004b17
mov dword [0x1005b360], 0x11
jmp 0x10004b59
cmp eax, 5
jne 0x10004b28
mov dword [0x1005b360], 0x12
jmp 0x10004b59
cmp eax, 6
jne 0x10004b39
mov dword [0x1005b360], 0x20
jmp 0x10004b59
cmp eax, 7
jne 0x10004b4a
mov dword [0x1005b360], 0x58
jmp 0x10004b59
cmp eax, 8
jne 0x10004b59
mov dword [0x1005b360], 0x43
mov eax, dword [0x1005b290]
test eax, eax
je 0x10004ec8
mov ecx, dword [0x1005b3f0]
sub ecx, 0
je 0x10004b83
dec ecx
je 0x10004b7c
dec ecx
jne 0x10004b8a
lea esi, [ecx + 5]
jmp 0x10004b8e
mov esi, 6
jmp 0x10004b8e
mov esi, 7
jmp 0x10004b8e
mov esi, dword [esp + 0x20]
dec eax
je 0x10004b9c
dec eax
jne 0x10004ba9
push esi
call fcn.10003f20
jmp 0x10004ba2
push esi
call fcn.10004150
mov dword [esp + 0x14], eax
add esp, 4
mov edi, dword [esp + 0x10]
cmp edi, 0xffffffff
je 0x10004ec8
mov ecx, dword [0x1005a9ac]
mov edx, dword [ecx]
mov eax, dword [0x1005b244]
mov ecx, dword [edx + eax]
push ecx
mov ecx, esi
lea edx, [esp + 0x30]
call fcn.10002ed0
add esp, 4
push edi
mov ecx, esi
lea edx, [esp + 0x30]
call fcn.10002ed0
add esp, 4
test al, al
je 0x10004ec8
mov edx, dword [0x1005b1d8]
mov ecx, dword [edx]
mov edx, dword [esp + 0x2c]
sub esp, 0xc
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x40]
push ecx
lea esi, [esp + 0x3c]
mov dword [eax + 8], edx
call fcn.10002fe0
test al, al
je 0x10004ec8
fld dword [esp + 0x2c]
call fcn.100392f0
fild dword [0x1005b394]
mov edi, eax
mov eax, dword [0x1005b394]
mov dword [esp + 0x18], edi
test eax, eax
jns 0x10004c43
fadd dword [0x1004ac1c]
fld qword [0x1004ac10]
fmul st(1), st(0)
fild dword [0x10056e9c]
fmul st(1)
fild dword [esp + 0x18]
fsub st(3)
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fdiv st(1)
fstp dword [esp + 0x18]
fld dword [esp + 0x30]
call fcn.100392f0
fild dword [0x1005b398]
mov ecx, dword [0x1005b398]
mov ebx, eax
mov dword [esp + 0x14], ebx
test ecx, ecx
jns 0x10004c8c
fadd dword [0x1004ac1c]
fmulp st(2)
fild dword [esp + 0x14]
fsub st(2)
fstp dword [esp + 0x14]
fdivr dword [esp + 0x14]
fstp dword [esp + 0x14]
fld dword [esp + 0x18]
fld st(0)
call fcn.100392f0
cmp eax, 0xffffff07
jle 0x10004ec2
fld dword [esp + 0x14]
fld st(0)
call fcn.100392f0
cmp eax, 0xffffff42
jle 0x10004ecf
fxch st(3)
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x10004ec4
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x10004ec8
mov edx, dword [esp + 0x10]
push edx
call fcn.10003100
add esp, 4
test al, al
je 0x10004ec8
cmp dword [0x1005b3ec], 0
mov esi, dword [sym.imp.USER32.dll_mouse_event]
je 0x10004d91
mov eax, dword [0x1005b360]
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
je 0x10004d88
fld dword [esp + 0x14]
push 0
fnstcw word [esp + 0x14]
push 0
movzx eax, word [esp + 0x18]
or eax, 0xc00
mov dword [esp + 0x28], eax
fldcw word [esp + 0x28]
fistp qword [esp + 0x28]
mov edx, dword [esp + 0x28]
push edx
fldcw word [esp + 0x1c]
fld dword [esp + 0x24]
fnstcw word [esp + 0x1c]
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x2c], eax
fldcw word [esp + 0x2c]
fistp qword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
push eax
push 1
fldcw word [esp + 0x24]
call esi
cmp dword [0x1005b3ec], 0
jne 0x10004de7
fld dword [esp + 0x14]
push 0
fnstcw word [esp + 0x14]
push 0
movzx eax, word [esp + 0x18]
or eax, 0xc00
mov dword [esp + 0x28], eax
fldcw word [esp + 0x28]
fistp qword [esp + 0x28]
mov ecx, dword [esp + 0x28]
push ecx
fldcw word [esp + 0x1c]
fld dword [esp + 0x24]
fnstcw word [esp + 0x1c]
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x2c], eax
fldcw word [esp + 0x2c]
fistp qword [esp + 0x2c]
mov edx, dword [esp + 0x2c]
push edx
push 1
fldcw word [esp + 0x24]
call esi
cmp dword [0x1005b3f4], 0
je 0x10004ec8
fld dword [esp + 0x2c]
push 0xff00ff00
fsub qword [0x1004acc8]
push 2
call fcn.100392f0
mov ecx, dword [esp + 0x24]
push eax
mov esi, 7
mov edx, ebx
call fcn.10003370
fld dword [esp + 0x38]
fadd qword [0x1004ac88]
add esp, 0xc
push 0xff00ff00
push 2
call fcn.100392f0
mov ecx, dword [esp + 0x24]
push eax
mov edx, ebx
call fcn.10003370
fld dword [esp + 0x3c]
fsub qword [0x1004acc8]
add esp, 0xc
push 0xff00ff00
push esi
call fcn.100392f0
mov ebx, dword [esp + 0x24]
push edi
mov ecx, ebx
mov esi, 2
mov edx, eax
call fcn.10003370
fld dword [esp + 0x3c]
fadd qword [0x1004ac88]
add esp, 0xc
push 0xff00ff00
push 7
call fcn.100392f0
push edi
mov ecx, ebx
mov edx, eax
call fcn.10003370
fld dword [esp + 0x3c]
fadd qword [0x1004ac68]
add esp, 0xc
push str.Target
push 0xfff50000
call fcn.100392f0
mov esi, dword [0x1005b3d8]
push eax
mov ecx, edi
call fcn.100036d0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
fstp st(1)
fstp st(0)
fstp st(0)
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
fstp st(2)
pop edi
fstp st(0)
pop esi
fstp st(1)
pop ebx
fstp st(0)
mov esp, ebp
pop ebp
ret