Function at 0x5ae150
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov ecx, 0x79ce28
call fcn.00419820
mov ecx, 0x7d67b0
call fcn.00504600
mov edi, eax
mov ecx, 0x7d67b0
mov dword [ebp - 4], edi
call fcn.00504e00
mov ecx, esi
call fcn.005a84f0
mov ecx, esi
call fcn.00530300
mov ecx, esi
call fcn.005ad4c0
push edi
mov ecx, esi
call fcn.005ad090
mov ecx, esi
call fcn.00530340
mov ecx, esi
call fcn.005ae050
mov ebx, dword [sym.imp.WINMM.dll_timeGetTime]
call ebx
mov ecx, dword [esi + 0x21c]
add ecx, 0x3e8
cmp eax, ecx
jbe 0x5ae1d3
mov ecx, 0x7d67b0
call fcn.00510fc0
call ebx
mov dword [esi + 0x21c], eax
cmp edi, 2
jne 0x5ae1df
mov dword [ebp - 4], 0
mov eax, dword [esi + 0x3dc]
test eax, eax
je 0x5ae227
mov eax, dword [0x839c64]
test eax, eax
jne 0x5ae21d
mov eax, dword [0x79ce44]
test eax, eax
jle 0x5ae20c
mov edx, dword [esi]
push 0
push 0
push 1
push 0x5d
mov ecx, esi
call dword [edx + 0x18]
jmp 0x5ae21d
jge 0x5ae21d
mov eax, dword [esi]
push 0
push 0
push 1
push 0x5e
mov ecx, esi
call dword [eax + 0x18]
mov dword [0x839c64], 0
mov eax, dword [0x79ce64]
test eax, eax
mov eax, dword [0x79ce50]
je 0x5ae23a
mov eax, dword [0x79ce54]
cmp eax, 3
jne 0x5ae293
mov ecx, dword [esi + 0xb4]
mov ecx, dword [ecx + 0x3c]
test ecx, ecx
je 0x5ae25b
mov edx, dword [ecx]
push 0
push 0
push 0
push 0xf
push 0
call dword [edx + 8]
mov ecx, dword [0x79ce40]
mov edx, dword [0x79ce3c]
mov eax, dword [esi]
push 0
push ecx
push edx
push 0x11
mov ecx, esi
call dword [eax + 0x18]
mov eax, dword [0x7d69b8]
test eax, eax
je 0x5ae289
push 0x12
mov ecx, 0x7d67b0
call fcn.00507160
mov dword [esi + 0xe0], 1
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
fild dword [0x79ce3c]
xor ecx, ecx
mov cl, ah
fstp dword [ebp - 0xc]
fild dword [0x79ce40]
mov eax, dword [ebp - 0xc]
and ecx, 0xff
mov dword [0x8343b0], ecx
mov ecx, 0x80fed8
fstp dword [ebp - 8]
mov edx, dword [ebp - 8]
push edx
push eax
call fcn.00533950
mov ebx, dword [0x7d6a14]
mov edi, eax
test ebx, ebx
jne 0x5ae2e7
mov ecx, dword [ebp - 4]
push ecx
push edi
mov ecx, esi
call fcn.005ac060
mov edx, dword [ebp - 4]
mov ecx, esi
push edx
push edi
call fcn.005abf80
mov ecx, esi
call fcn.005abbc0
mov eax, dword [esi + 0x28c]
test eax, eax
jne 0x5ae355
mov eax, dword [esi + 0x290]
test eax, eax
jne 0x5ae355
test ebx, ebx
jne 0x5ae355
mov eax, dword [0x7d6a1c]
test eax, eax
jne 0x5ae355
mov eax, dword [0x7d6b3c]
test eax, eax
jne 0x5ae355
mov eax, dword [0x7d6b40]
test eax, eax
jne 0x5ae355
mov eax, dword [0x7d6b44]
test eax, eax
jne 0x5ae355
mov eax, dword [ebp - 4]
push edi
push eax
mov ecx, esi
call fcn.005a9f50
push eax
mov ecx, esi
call fcn.005ad9a0
mov ecx, esi
mov ebx, eax
call fcn.005abac0
jmp 0x5ae36e
test edi, edi
je 0x5ae36b
mov eax, dword [ebp - 4]
test eax, eax
jne 0x5ae36b
mov ecx, dword [edi + 0x18]
push ecx
mov ecx, esi
call fcn.005a7b50
mov ebx, dword [ebp - 4]
mov eax, dword [0x79ce64]
test eax, eax
mov eax, dword [0x79ce50]
je 0x5ae381
mov eax, dword [0x79ce54]
cmp eax, 1
jne 0x5ae3c6
push 0
mov byte [0x83a89a], 0
mov edx, dword [esi]
push 0
push 0
push 0x47
mov ecx, esi
call dword [edx + 0x18]
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
call edi
mov ecx, dword [esi + 0x288]
add ecx, 0x1388
cmp eax, ecx
jbe 0x5ae3be
mov dword [esi + 0x284], 0
call edi
mov dword [esi + 0xc0], eax
mov eax, dword [0x839f98]
test eax, eax
je 0x5ae3e3
mov edx, dword [0x79ce40]
mov eax, dword [0x79ce3c]
push edx
push eax
mov ecx, esi
call fcn.005c40b0
mov edx, dword [esi + 0x3dc]
test edx, edx
setne al
test al, al
je 0x5ae3fa
test ebx, ebx
jne 0x5ae41f
push 0xa
jmp 0x5ae418
test ebx, ebx
jne 0x5ae41f
mov eax, dword [0x79ce64]
test eax, eax
mov eax, dword [0x79ce54]
je 0x5ae411
mov eax, dword [0x79ce50]
cmp eax, 2
je 0x5ae41f
push 0
mov ecx, esi
call fcn.00530350
mov ecx, dword [0x79ce3c]
pop edi
mov dword [esi + 0xc4], ecx
mov edx, dword [0x79ce40]
mov dword [esi + 0xc8], edx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret