Function at 0x6ad558
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x2f4], 9
jge 0x6ad57b
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0x2f4]
mov dword [ebp - 0x44], edx
jmp 0x6ad582
mov dword [ebp - 0x44], 9
mov eax, dword [ebp - 0x44]
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
jmp 0x6ad59a
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 4]
jge 0x6ad81c
mov dword [ebp - 0xc], 7
mov eax, dword [ebp - 8]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x40]
lea edx, [ecx + eax + 0xac]
mov eax, dword [ebp - 0xc]
mov ecx, dword [edx + eax*4]
push ecx
mov ecx, dword [ebp - 0x40]
call fcn.0070872e
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x1c]
call fcn.00433910
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0x20]
call fcn.0042f6e0
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.0070ce04
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00406840
test eax, eax
je 0x6ad7d9
mov dword [ebp - 0x28], 0
mov edx, dword [ebp - 0x40]
cmp dword [edx + 0x94], 2
jbe 0x6ad641
push 0x54f
mov ecx, dword [ebp - 0x40]
call fcn.0070872e
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
call fcn.0050cf30
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x2f4], 9
jle 0x6ad66f
push 0x4dc
mov ecx, dword [ebp - 0x40]
call fcn.0070872e
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
call fcn.0050cf30
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x40]
lea eax, [edx + ecx + 0xac]
mov ecx, dword [ebp - 0xc]
mov edx, dword [eax + ecx*4 + 4]
push edx
mov ecx, dword [ebp - 0x40]
call fcn.0070872e
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
call fcn.00708b09
mov ecx, dword [ebp - 0x40]
call fcn.006b0c88
push 0x12
call dword [sym.imp.USER32.DLL_GetKeyState]
movsx eax, ax
test eax, eax
jl 0x6ad730
cmp dword [ebp - 0xc], 0
jne 0x6ad6be
xor eax, eax
jmp 0x6ad81e
cmp dword [ebp - 0xc], 2
jne 0x6ad6e7
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 8]
shl ecx, 5
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x2f0]
mov ecx, dword [eax + ecx + 0x14]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + 0x14]
mov al, byte [eax]
mov byte [ecx + edx], al
jmp 0x6ad72b
cmp dword [ebp - 0xc], 4
jne 0x6ad711
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 8]
shl ecx, 5
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x2f0]
mov ecx, dword [eax + ecx + 0x14]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + 0x14]
mov al, byte [eax]
mov byte [ecx + edx + 1], al
jmp 0x6ad72b
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 8]
shl ecx, 5
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x2f0]
mov edx, dword [ebp + 0x14]
mov dl, byte [edx]
mov byte [eax + ecx], dl
jmp 0x6ad7d2
cmp dword [ebp - 0xc], 0
jne 0x6ad755
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 8]
shl eax, 5
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0x2f0]
xor ecx, ecx
mov cl, byte [edx + eax + 0x10]
mov edx, dword [ebp + 0x14]
mov dword [edx], ecx
jmp 0x6ad7c8
cmp dword [ebp - 0xc], 2
jne 0x6ad780
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 8]
shl eax, 5
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0x2f0]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov dl, byte [eax + ecx]
mov eax, dword [ebp + 0x14]
mov dword [eax], edx
jmp 0x6ad7c8
cmp dword [ebp - 0xc], 4
jne 0x6ad7ac
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 8]
shl ecx, 5
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x2f0]
mov ecx, dword [eax + ecx + 0x14]
mov edx, dword [ebp - 0x28]
xor eax, eax
mov al, byte [ecx + edx + 1]
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
jmp 0x6ad7c8
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 8]
shl edx, 5
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0x2f0]
xor eax, eax
mov al, byte [ecx + edx]
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov ecx, 0x7b0988
call fcn.005e15e3
mov eax, 1
jmp 0x6ad81e
cmp dword [ebp - 0xc], 0
jne 0x6ad7e1
jmp 0x6ad817
cmp dword [ebp - 0xc], 7
jne 0x6ad7fc
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x310]
neg eax
sbb eax, eax
and eax, 4
mov dword [ebp - 0xc], eax
jmp 0x6ad812
cmp dword [ebp - 0xc], 4
jne 0x6ad80b
mov dword [ebp - 0xc], 2
jmp 0x6ad812
mov dword [ebp - 0xc], 0
jmp 0x6ad5ad
jmp 0x6ad591
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10