Function at 0x4027ef
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
xor edi, edi
xor esi, esi
cmp dword [0x438fe8], 3
mov word [ebp - 4], dx
jl 0x40295a
test byte [0x43b8ac], 3
je 0x40295a
movzx eax, dx
cmp eax, 4
jl 0x40295a
cmp eax, 5
jle 0x402879
cmp eax, 6
je 0x40284d
cmp eax, 7
jne 0x40295a
push 0x438ff8
call fcn.0041833f
mov eax, dword [0x436038]
mov dword [eax + 4], edi
jmp 0x40286a
mov eax, dword [0x438ffc]
or eax, dword [0x438ff8]
je case.default.0x402966
mov dword [0x438ffc], edi
mov dword [0x438ff8], edi
push 0x43b520
call fcn.00418e7e
jmp case.default.0x402966
mov ecx, dword [0x438ff4]
mov eax, dword [0x438ff0]
xor ebx, ebx
inc ebx
mov dword [ebp - 8], ecx
cmp ecx, edi
mov ecx, dword [0x436890]
jne 0x40289d
cmp eax, ecx
jae 0x40289d
mov dword [ebp - 0xc], edi
jmp 0x4028af
mov esi, ebx
sub esi, ecx
mov edx, eax
add eax, esi
mov dword [ebp - 0xc], eax
cmp eax, edx
jbe 0x4028af
dec dword [ebp - 8]
movzx eax, word [ebp + 8]
push 0x4000
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0040276f
mov esi, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
cmp esi, edi
jne 0x402904
mov ecx, dword [0x438ff8]
cmp eax, ecx
jb 0x402904
mov edx, dword [0x436890]
lea edi, [edx + ecx]
cmp eax, edi
jae 0x402904
push edx
sub eax, ecx
push eax
push dword [0x43cb34]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, eax
mov eax, dword [0x436038]
sub edx, dword [eax + 4]
push 0
jmp 0x402a7e
cmp word [ebp - 4], 5
jne 0x402933
push ebx
push 0x43b280
push dword [0x43b52c]
mov dword [0x439000], eax
mov dword [0x439004], esi
mov dword [0x438fec], ebx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp case.default.0x402966
cmp dword [0x43b8ac], 2
jne 0x402941
and eax, 0xffffff00
mov dword [0x438ff8], eax
mov eax, dword [0x436038]
mov dword [0x438ffc], esi
and dword [eax + 4], 0
jmp 0x40286a
movzx eax, dx
cmp eax, 8
ja case.default.0x402966
jmp dword [eax*4 + 0x402a9f]
mov esi, dword [0x43cb34]
jmp 0x402986
mov esi, dword [0x43cb34]
jmp 0x402a72
mov esi, dword [0x43cb2c]
neg esi
jmp 0x402a72
mov esi, dword [0x43cb2c]
jmp 0x402a72
xor esi, esi
inc esi
sub esi, dword [0x43b21c]
jmp 0x402a72
mov esi, dword [0x43b21c]
dec esi
jmp 0x402a72
lea eax, [ebp - 0x28]
push eax
xor ebx, ebx
inc ebx
push ebx
push ecx
mov dword [ebp - 0x28], 0x1c
mov dword [ebp - 0x24], 0x17
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov esi, dword [ebp - 0x10]
mov eax, dword [0x436038]
sub esi, dword [eax + 4]
cmp dword [ebp - 0x18], edi
je 0x402a72
mov ecx, dword [0x43600c]
cmp ecx, edi
je 0x402a72
mov eax, dword [ebp - 0x1c]
xor edx, edx
div dword [ebp - 0x18]
cmp eax, ecx
mov dword [ebp - 4], eax
jle 0x402a72
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
call edi
push 2
mov word [ebp + 0xa], ax
call edi
mov cx, word [ebp + 0xa]
or cx, ax
mov eax, 0x8000
test ax, cx
je 0x402a29
mov dword [0x4390a8], ebx
cmp dword [0x4390a8], 0
je 0x402a72
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [ebp - 4]
cdq
idiv dword [0x43600c]
sar ecx, 1
sub ecx, dword [ebp - 0x10]
mov esi, eax
mov eax, ecx
cdq
idiv esi
mov esi, dword [ebp - 0x14]
sub esi, eax
mov eax, dword [0x436038]
sub esi, dword [eax + 4]
jmp 0x402a72
cmp dword [0x4390a8], edi
je case.default.0x402966
mov dword [0x4390a8], edi
call fcn.0041864a
test esi, esi
je case.default.0x402966
push dword [0x4390a8]
mov edx, esi
xor ecx, ecx
call fcn.0041b4ab
cmp dword [0x436088], 0
je case.default.0x402966
push 0x4360a4
call fcn.00401847
pop edi
pop esi
pop ebx
leave
ret 4