Function at 0x677020
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [ebp + 8]
cmp dword [eax + 0x18], 0
jne 0x67704e
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x20], 0
je 0x677044
push 2
call fcn.00677e70
add esp, 4
jmp 0x67704e
push 5
call fcn.00677e70
add esp, 4
mov edx, dword [0x280a580]
add edx, 1
mov dword [0x280a580], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
add ecx, 1
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], ecx
movzx eax, byte [0xe5da9b]
test eax, eax
je 0x67714d
mov ecx, 1
imul edx, ecx, 0x2a
movzx eax, byte [edx + 0xe5daa0]
test eax, eax
jne 0x6770b3
mov ecx, 1
imul edx, ecx, 0x36
movzx eax, byte [edx + 0xe5daa0]
test eax, eax
jne 0x6770b3
movzx ecx, byte [0xe5da9b]
mov dl, byte [ecx + 0x76a668]
mov byte [ebp - 2], dl
jmp 0x6770c3
movzx eax, byte [0xe5da9b]
mov cl, byte [eax + 0x76a6e8]
mov byte [ebp - 2], cl
mov dl, byte [ebp - 2]
mov byte [ebp - 1], dl
movsx eax, byte [ebp - 1]
cmp eax, 8
jne 0x6770d6
mov byte [ebp - 1], 0x7f
movsx ecx, byte [ebp - 1]
test ecx, ecx
jne case.0x677104.1
movzx edx, byte [0xe5da9b]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 1
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xd2
ja case.0x677104.1
mov ecx, dword [ebp - 0xc]
movzx edx, byte [ecx + 0x677734]
jmp dword [edx*4 + 0x677704]
mov byte [ebp - 1], 0xb
jmp case.0x677104.1
mov byte [ebp - 1], 9
jmp case.0x677104.1
mov byte [ebp - 1], 8
jmp case.0x677104.1
mov byte [ebp - 1], 0xa
jmp case.0x677104.1
mov byte [ebp - 1], 0x1b
jmp case.0x677104.1
mov byte [ebp - 1], 0xd
jmp case.0x677104.1
mov byte [ebp - 1], 1
jmp case.0x677104.1
mov byte [ebp - 1], 2
jmp case.0x677104.1
mov byte [ebp - 1], 3
jmp case.0x677104.1
mov byte [ebp - 1], 4
jmp case.0x677104.1
mov byte [ebp - 1], 5
jmp 0x677151
mov byte [ebp - 1], 0
mov eax, dword [0x280a590]
mov dword [0x280a594], eax
push 2
call fcn.005de520
add esp, 4
mov dword [0x280a590], eax
cmp dword [0x280a590], 0
je 0x677218
mov ecx, dword [0x280a590]
cmp ecx, dword [0x280a594]
je 0x677218
cmp dword [0x280a598], 1
jge 0x677218
mov edx, dword [0x280a590]
and edx, 0x3c0
je 0x6771b7
mov byte [ebp - 1], 0xd
mov eax, 1
imul ecx, eax, 0x1c
mov byte [ecx + 0xe5daa0], 1
mov edx, dword [0x280a590]
and edx, 1
je 0x6771d8
mov byte [ebp - 1], 0xb
mov eax, 1
imul ecx, eax, 0xc8
mov byte [ecx + 0xe5daa0], 1
mov edx, dword [0x280a590]
and edx, 2
je 0x6771f9
mov byte [ebp - 1], 0xa
mov eax, 1
imul ecx, eax, 0xd0
mov byte [ecx + 0xe5daa0], 1
mov edx, dword [0x280a590]
and edx, 0x10
je 0x67720e
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], 0xffffffbb
mov dword [0x280a598], 0xa
mov ecx, dword [0x280a598]
sub ecx, 1
mov dword [0x280a598], ecx
movsx edx, byte [ebp - 1]
test edx, edx
je 0x67756f
mov eax, dword [ebp + 8]
cmp dword [eax + 0x24], 0
je 0x677271
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x24]
mov eax, dword [edx + 0x34]
cmp dword [eax + 0x10], 0
je 0x677271
movzx ecx, byte [ebp - 1]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x24]
mov eax, dword [edx + 0x34]
mov ecx, dword [eax + 0x10]
call ecx
add esp, 8
test eax, eax
je 0x677271
jmp 0x67756a
mov dword [0x280a584], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
mov dword [ebp - 0x34], eax
mov ecx, 0xc8
shl ecx, 0
movzx edx, byte [ecx + 0xe5daa0]
test edx, edx
je 0x6772b9
mov eax, 0xc8
shl eax, 0
mov byte [eax + 0xe5daa0], 0
mov dword [0x280a584], 1
mov dword [ebp - 0x14], 1
jmp 0x6772c0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0
je 0x6772e0
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.00676e10
add esp, 0xc
push 1
call fcn.00677e70
add esp, 4
mov edx, 0xd0
shl edx, 0
movzx eax, byte [edx + 0xe5daa0]
test eax, eax
je 0x677315
mov ecx, 0xd0
shl ecx, 0
mov byte [ecx + 0xe5daa0], 0
mov dword [0x280a584], 1
mov dword [ebp - 0x18], 1
jmp 0x67731c
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x18], 0
je 0x67733c
push 1
push 0
mov edx, dword [ebp + 8]
push edx
call fcn.00676e10
add esp, 0xc
push 1
call fcn.00677e70
add esp, 4
mov eax, 0xc7
shl eax, 0
movzx ecx, byte [eax + 0xe5daa0]
test ecx, ecx
je 0x677371
mov edx, 0xc7
shl edx, 0
mov byte [edx + 0xe5daa0], 0
mov dword [0x280a584], 1
mov dword [ebp - 0x1c], 1
jmp 0x677378
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 0
je 0x67739d
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x20]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00676e10
add esp, 0xc
push 1
call fcn.00677e70
add esp, 4
mov eax, 0xcf
shl eax, 0
movzx ecx, byte [eax + 0xe5daa0]
test ecx, ecx
je 0x6773d2
mov edx, 0xcf
shl edx, 0
mov byte [edx + 0xe5daa0], 0
mov dword [0x280a584], 1
mov dword [ebp - 0x20], 1
jmp 0x6773d9
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 0
je 0x6773fe
push 0xffffffffffffffff
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x20]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00676e10
add esp, 0xc
push 1
call fcn.00677e70
add esp, 4
mov eax, 0x1c
shl eax, 0
movzx ecx, byte [eax + 0xe5daa0]
test ecx, ecx
je 0x677433
mov edx, 0x1c
shl edx, 0
mov byte [edx + 0xe5daa0], 0
mov dword [0x280a584], 1
mov dword [ebp - 0x24], 1
jmp 0x67743a
mov dword [ebp - 0x24], 0
cmp dword [ebp - 0x24], 0
je 0x677470
mov eax, dword [ebp + 8]
cmp dword [eax + 0x24], 0
je 0x677470
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x24]
mov eax, dword [edx + 0x34]
cmp dword [eax + 0xc], 0
je 0x677470
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x24]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x24]
mov edx, dword [ecx + 0x34]
mov eax, dword [edx + 0xc]
call eax
add esp, 4
mov ecx, 0xf
shl ecx, 0
movzx edx, byte [ecx + 0xe5daa0]
test edx, edx
je 0x6774a5
mov eax, 0xf
shl eax, 0
mov byte [eax + 0xe5daa0], 0
mov dword [0x280a584], 1
mov dword [ebp - 0x28], 1
jmp 0x6774ac
mov dword [ebp - 0x28], 0
cmp dword [ebp - 0x28], 0
je 0x67751c
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x24], 0
je 0x67751c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
mov ecx, dword [eax + 0x34]
cmp dword [ecx + 0x10], 0
je 0x6774e4
push 0x1b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x24]
mov eax, dword [edx + 0x34]
mov ecx, dword [eax + 0x10]
call ecx
add esp, 8
movzx edx, byte [0xe5da9a]
test edx, edx
je 0x6774f8
mov dword [ebp - 0x2c], 0xffffffff
jmp 0x6774ff
mov dword [ebp - 0x2c], 1
movzx eax, byte [ebp - 0x2c]
push eax
push 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.00676e10
add esp, 0xc
push 1
call fcn.00677e70
add esp, 4
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x34]
cmp eax, dword [edx + 0x24]
je 0x67753a
push 2
push 0
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x28]
call eax
add esp, 0xc
movzx ecx, byte [0xe5da9b]
test ecx, ecx
je 0x67756a
mov edx, dword [ebp + 8]
cmp dword [edx + 0x28], 0
je 0x67756a
cmp dword [0x280a584], 0
jne 0x67756a
push 1
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x28]
call edx
add esp, 0xc
jmp 0x6776f0
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [0xe5d460]
and ecx, 1
jne 0x677594
lea edx, [ebp - 0x3c]
push edx
mov eax, dword [0xe5d454]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [0x280a588]
jne 0x6775ae
mov edx, dword [ebp - 0x38]
cmp edx, dword [0x280a58c]
je 0x677648
mov eax, dword [ebp - 0x3c]
mov dword [0x280a588], eax
mov ecx, dword [ebp - 0x38]
mov dword [0x280a58c], ecx
mov edx, dword [0x280a588]
mov dword [ebp - 0x44], edx
mov eax, dword [0x280a58c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00676fc0
add esp, 0xc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x677648
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [eax + 0x24]
je 0x677648
mov edx, dword [ebp + 8]
cmp dword [edx + 0x24], 0
je 0x677636
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x24]
mov edx, dword [ecx + 0x34]
cmp dword [edx + 0x10], 0
je 0x677636
push 0x1b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x24]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
mov ecx, dword [eax + 0x34]
mov edx, dword [ecx + 0x10]
call edx
add esp, 8
push 0
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00676e10
add esp, 0xc
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movsx edx, ax
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
and eax, 0x8000
je 0x6776f0
mov ecx, dword [ebp - 0x30]
and ecx, 1
je 0x6776f0
mov edx, dword [0x280a588]
mov dword [ebp - 0x54], edx
mov eax, dword [0x280a58c]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00676fc0
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x6776ca
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x34]
cmp dword [ecx + 0xc], 0
je 0x6776ca
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x34]
mov edx, dword [ecx + 0xc]
call edx
add esp, 4
jmp 0x6776f0
cmp dword [ebp - 8], 0
je 0x6776f0
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x34]
cmp dword [ecx + 0x10], 0
je 0x6776f0
push 0xd
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x34]
mov edx, dword [ecx + 0x10]
call edx
add esp, 8
mov byte [0xe5da9b], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x14]
mov esp, ebp
pop ebp
ret