Function at 0x43fa00
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
mov ebx, ecx
push esi
xor esi, esi
push edi
cmp dword [ebx + 0x18f0], 1
mov dword [esp + 0xc], esi
jle 0x43fb18
call fcn.00461c00
mov ecx, eax
call fcn.00460720
test eax, eax
je 0x43fa4e
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x43fa4e
call fcn.00461c00
mov ecx, eax
call fcn.0045f030
neg eax
sbb eax, eax
add eax, 1
jne 0x43fa60
cmp dword [ebx + 0x150c], 1
jne 0x43fa60
push 1
mov ecx, ebx
call fcn.004474f0
lea eax, [esp + 0xc]
mov ecx, ebx
push eax
push dword [ebx + 0x18f4]
push dword [ebx + 0x18f0]
call fcn.00445010
mov esi, eax
test esi, esi
jne 0x43fae5
cmp dword [ebx + 0x2304], 3
jge 0x43fb25
cmp dword [ebx + 0x1cac], eax
je 0x43fa9c
cmp dword [ebx + 0x1c88], 1
jl 0x43fae5
cmp dword [ebx + 0x2330], 0
jne 0x43fae5
mov ecx, ebx
mov dword [ebx + 0x2300], 0
call fcn.00434d90
test eax, eax
je 0x43fad5
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test al, 1
je 0x43fad5
mov dword [ebx + 0x1c88], 0
jmp 0x43fae5
mov eax, dword [ebx]
mov ecx, ebx
push 0
push 0
push 0x10
call dword [eax + 0x140]
mov eax, dword [ebx + 0x1c88]
cmp eax, 3
je 0x43fcd3
cmp eax, 4
je 0x43fb0e
mov eax, dword [ebx]
mov ecx, ebx
push 1
call dword [eax + 0x120]
mov esi, dword [esp + 0xc]
jmp 0x43fc22
test esi, esi
jne 0x43fbd5
jmp 0x43fb25
cmp dword [ebx + 0x2304], 3
jl 0x43fc06
cmp dword [ebx + 0x18f0], 1
jg 0x43fbd5
cmp byte [0x4f4000], 0
jne 0x43fb4e
mov ecx, 0x1e
mov esi, str.__Using_Library:_r_n___xxHash:_Copyright__C__2012_2023_Yann_Collet_r_n___OpenSSL:_Copyright__C__1998_2023_The_OpenSSL_Project
mov edi, 0x4f4000
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp byte [0x4f3f70], 0
jne 0x43fb96
push 0x43
push str.___Copyright__C__2022_2024_H.Shirouzu_and_FastCopy_Lab__LLC._tVersion.cpp_ver5.7.12
call fcn.004892a0
push 9
push str.___Copyright__C__2022_2024_H.Shirouzu_and_FastCopy_Lab__LLC._tVersion.cpp_ver5.7.12
mov esi, eax
call fcn.004892a0
add esp, 0x10
test esi, esi
je 0x43fb96
test eax, eax
je 0x43fb96
cmp esi, eax
jae 0x43fb96
push esi
sub eax, esi
push eax
push str._.s
push 0x4f3f70
call fcn.0040e1a0
add esp, 0x10
mov esi, dword [0x4e0944]
or edx, 0xffffffff
push str.Usage:_fcp.exe_r_n______cmd_diff__noexist_only__update__force_copy__exist_diff__exist_update__sync__sync_update__move__move_noexist__delete__verify__verify_read__verify_check___r_n_r_n______include_..._____exclude_...___r_n______from_date_..._____to_date_...___r_n______min_size_..._____max_size_...___r_n_r_n______srcfilepathlist_file____srcfile_wunicode_pathlist_file__r_n______speed_fullautoslow9_1suspend_____auto_slow____low_io__r_n_r_n______auto_close____force_close____open_window__r_n______error_stop____no_exec____force_start_N___r_n______balloon_truefalse___r_n______no_ui____no_confirm_del____no_confirm_stop__r_n______inifname__r_n_r_n______acl____stream____reparse____verify__r_n______linkdest____recreate__r_n______wipe_del____skip_empty_dir__r_n_r_n______dlsvt_noneautoalways___r_n______verifyinfo__r_n______time_allowN_ms___r_n______disk_mode_diffsameauto___r_n______bufsizeN_MB_____estimate__r_n______log____filelog____logfilefname____utf8__r_n______jobjobname____postprocpostproc_name__r_n_r_n____from_file_or_dir____todest_dir_
mov ecx, 0x4f4000
call fcn.004636a0
push eax
or edx, 0xffffffff
mov ecx, 0x4f3f70
call fcn.004636a0
push eax
push 0x4c1430
push 0x4cbb94
push esi
push str._s_ver_s_s_n___s_n_s_n___n___s_n_n
call fcn.0045f430
add esp, 0x1c
call fcn.0045f640
test al, al
jne 0x43fbfb
push str._n_Hit_Anykey..._n
push 2
call fcn.00491d22
add esp, 4
push eax
call fcn.0043ee10
add esp, 8
call fcn.00491da6
push 0
push 0
push 0x10
jmp 0x43fcc9
mov eax, dword [ebx]
push 0xa
call dword [eax + 0xc]
mov eax, dword [ebx]
mov ecx, ebx
push 0
call dword [eax + pe_nt_image_headers32]
push 0
mov ecx, ebx
call fcn.004474f0
cmp dword [ebx + 0x1cb0], 0
je 0x43fcb2
mov eax, dword [ebx + 0x1c8c]
test al, 8
jne 0x43fc55
push 0
push dword [0x4e0940]
or eax, 8
mov ecx, ebx
push 0
push 0
mov dword [ebx + 0x1c8c], eax
call fcn.0043b4b0
call fcn.00460f30
test byte [ebx + 0x1c8c], 8
mov edi, eax
je 0x43fc7b
push 0
push 0
push 0
push 2
mov ecx, ebx
call fcn.0043b4b0
and dword [ebx + 0x1c8c], 0xfffffff7
mov dword [ebx + 0x1cb0], 0
cmp edi, 1
jne 0x43fcb2
cmp dword [ebx + 0x2304], 0
jne 0x43fcb2
cmp dword [ebx + 0x1a30], 0
jne 0x43fcb2
mov eax, dword [ebx]
mov ecx, ebx
push 0
push 0x261
push 0x807e
call dword [eax + 0x140]
test esi, esi
jne 0x43fcd3
cmp dword [ebx + 0x16a8], esi
je 0x43fcd3
push esi
push 0x7538
push 0x111
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x140]
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 4