Function at 0x100063f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x1005e334]
push ebx
mov dword [esp + 0x14], eax
mov eax, dword [0x1005e5c0]
push esi
push edi
test eax, eax
jne 0x10006418
mov dword [0x1005e3c4], eax
jmp 0x10006499
cmp eax, 1
jne 0x10006429
mov dword [0x1005e3c4], 0x14
jmp 0x10006499
cmp eax, 2
jne 0x10006435
mov dword [0x1005e3c4], eax
jmp 0x10006499
cmp eax, 3
jne 0x10006446
mov dword [0x1005e3c4], 1
jmp 0x10006499
cmp eax, 4
jne 0x10006457
mov dword [0x1005e3c4], 0x11
jmp 0x10006499
cmp eax, 5
jne 0x10006468
mov dword [0x1005e3c4], 0x12
jmp 0x10006499
cmp eax, 6
jne 0x10006479
mov dword [0x1005e3c4], 0x20
jmp 0x10006499
cmp eax, 7
jne 0x1000648a
mov dword [0x1005e3c4], 0x58
jmp 0x10006499
cmp eax, 8
jne 0x10006499
mov dword [0x1005e3c4], 0x43
mov eax, dword [0x1005e364]
test eax, eax
je 0x10006808
mov ecx, dword [0x1005e5c4]
sub ecx, 0
je 0x100064c3
dec ecx
je 0x100064bc
dec ecx
jne 0x100064ca
lea esi, [ecx + 5]
jmp 0x100064ce
mov esi, 6
jmp 0x100064ce
mov esi, 7
jmp 0x100064ce
mov esi, dword [esp + 0x20]
dec eax
je 0x100064dc
dec eax
jne 0x100064e9
push esi
call fcn.100058d0
jmp 0x100064e2
push esi
call fcn.10005ad0
mov dword [esp + 0x14], eax
add esp, 4
mov edi, dword [esp + 0x10]
cmp edi, 0xffffffff
je 0x10006808
mov ecx, dword [0x1005da70]
mov edx, dword [ecx]
mov eax, dword [0x1005e314]
mov ecx, dword [edx + eax]
push ecx
mov ecx, esi
lea edx, [esp + 0x30]
call fcn.10004880
add esp, 4
push edi
mov ecx, esi
lea edx, [esp + 0x30]
call fcn.10004880
add esp, 4
test al, al
je 0x10006808
mov edx, dword [0x1005e29c]
mov ecx, dword [edx]
mov edx, dword [esp + 0x2c]
sub esp, 0xc
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x40]
push ecx
lea esi, [esp + 0x3c]
mov dword [eax + 8], edx
call fcn.10004980
test al, al
je 0x10006808
fld dword [esp + 0x2c]
call fcn.1003a9f0
fild dword [0x1005e568]
mov edi, eax
mov eax, dword [0x1005e568]
mov dword [esp + 0x18], edi
test eax, eax
jns 0x10006583
fadd dword [0x1004ce80]
fld qword [0x1004ce78]
fmul st(1), st(0)
fild dword [0x10059f18]
fmul st(1)
fild dword [esp + 0x18]
fsub st(3)
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fdiv st(1)
fstp dword [esp + 0x18]
fld dword [esp + 0x30]
call fcn.1003a9f0
fild dword [0x1005e56c]
mov ecx, dword [0x1005e56c]
mov ebx, eax
mov dword [esp + 0x14], ebx
test ecx, ecx
jns 0x100065cc
fadd dword [0x1004ce80]
fmulp st(2)
fild dword [esp + 0x14]
fsub st(2)
fstp dword [esp + 0x14]
fdivr dword [esp + 0x14]
fstp dword [esp + 0x14]
fld dword [esp + 0x18]
fld st(0)
call fcn.1003a9f0
cmp eax, 0xffffff07
jle 0x10006802
fld dword [esp + 0x14]
fld st(0)
call fcn.1003a9f0
cmp eax, 0xffffff42
jle 0x1000680f
fxch st(3)
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x10006804
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x10006808
mov edx, dword [esp + 0x10]
push edx
call fcn.10004a90
add esp, 4
test eax, eax
jle 0x10006808
cmp dword [0x1005e5c0], 0
mov esi, dword [sym.imp.USER32.dll_mouse_event]
je 0x100066d1
mov eax, dword [0x1005e3c4]
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
je 0x100066c8
fld dword [esp + 0x14]
push 0
fnstcw word [esp + 0x14]
push 0
movzx eax, word [esp + 0x18]
or eax, 0xc00
mov dword [esp + 0x28], eax
fldcw word [esp + 0x28]
fistp qword [esp + 0x28]
mov edx, dword [esp + 0x28]
push edx
fldcw word [esp + 0x1c]
fld dword [esp + 0x24]
fnstcw word [esp + 0x1c]
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x2c], eax
fldcw word [esp + 0x2c]
fistp qword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
push eax
push 1
fldcw word [esp + 0x24]
call esi
cmp dword [0x1005e5c0], 0
jne 0x10006727
fld dword [esp + 0x14]
push 0
fnstcw word [esp + 0x14]
push 0
movzx eax, word [esp + 0x18]
or eax, 0xc00
mov dword [esp + 0x28], eax
fldcw word [esp + 0x28]
fistp qword [esp + 0x28]
mov ecx, dword [esp + 0x28]
push ecx
fldcw word [esp + 0x1c]
fld dword [esp + 0x24]
fnstcw word [esp + 0x1c]
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x2c], eax
fldcw word [esp + 0x2c]
fistp qword [esp + 0x2c]
mov edx, dword [esp + 0x2c]
push edx
push 1
fldcw word [esp + 0x24]
call esi
cmp dword [0x1005e5c8], 0
je 0x10006808
fld dword [esp + 0x2c]
push 0xff00ff00
fsub qword [0x1004cf30]
push 2
call fcn.1003a9f0
mov ecx, dword [esp + 0x24]
push eax
mov esi, 7
mov edx, ebx
call fcn.10004d70
fld dword [esp + 0x38]
fadd qword [0x1004cef0]
add esp, 0xc
push 0xff00ff00
push 2
call fcn.1003a9f0
mov ecx, dword [esp + 0x24]
push eax
mov edx, ebx
call fcn.10004d70
fld dword [esp + 0x3c]
fsub qword [0x1004cf30]
add esp, 0xc
push 0xff00ff00
push esi
call fcn.1003a9f0
mov ebx, dword [esp + 0x24]
push edi
mov ecx, ebx
mov esi, 2
mov edx, eax
call fcn.10004d70
fld dword [esp + 0x3c]
fadd qword [0x1004cef0]
add esp, 0xc
push 0xff00ff00
push 7
call fcn.1003a9f0
push edi
mov ecx, ebx
mov edx, eax
call fcn.10004d70
fld dword [esp + 0x3c]
fadd qword [0x1004ced0]
add esp, 0xc
push str.Target
push 0xfff50000
call fcn.1003a9f0
mov esi, dword [0x1005e5ac]
push eax
mov ecx, edi
call fcn.100050d0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
fstp st(1)
fstp st(0)
fstp st(0)
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
fstp st(2)
pop edi
fstp st(0)
pop esi
fstp st(1)
pop ebx
fstp st(0)
mov esp, ebp
pop ebp
ret