Function at 0x300af770
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
push esi
push edi
xor edi, edi
cmp dword [0x301e4790], edi
jne 0x300af7ea
call dword [sym.imp.USER32.dll_GetCapture]
test eax, eax
mov esi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, fcn.3001a2e7
je 0x300af7c5
cmp byte [0x301e4d0d], 0
mov eax, ebx
jne 0x300af7a5
mov eax, esi
push edi
push edi
push edi
push edi
lea ecx, [ebp - 0x1c]
push ecx
call eax
test eax, eax
je 0x300af7c5
cmp dword [ebp - 0x14], 0x200
jb 0x300af7c5
cmp dword [ebp - 0x14], 0x20d
jbe 0x300af7e3
cmp byte [0x301e4d0d], 0
je 0x300af7d0
mov esi, ebx
push 1
push edi
push edi
push edi
lea eax, [ebp - 0x1c]
push eax
call esi
test eax, eax
jne 0x300afb3e
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
mov eax, dword [0x301e46ec]
cmp eax, edi
je 0x300af7f8
cmp eax, 1
je 0x300af7e3
test byte [0x301e46f4], 1
je 0x300af806
xor eax, eax
inc eax
jmp 0x300af7e5
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 3
call esi
mov bx, ax
push 0x1b
and ebx, 1
call esi
mov di, ax
push 9
and edi, 1
call esi
test al, 1
je 0x300af82f
or byte [0x301e46f5], 4
test ebx, ebx
jne 0x300afae5
test edi, edi
mov ebx, dword [sym.imp.USER32.dll_PeekMessageW]
jne 0x300afa07
mov edi, 0x112
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300af85a
mov eax, ebx
push 0
push 0x108
mov esi, 0x100
push esi
push 0
lea ecx, [ebp - 0x1c]
push ecx
call eax
test eax, eax
je 0x300af991
mov eax, dword [ebp - 0x18]
and al, 0xfb
sub eax, esi
je 0x300af921
dec eax
jne 0x300af991
cmp dword [ebp - 0x14], 0x1b
jne 0x300af8fb
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x300af8fb
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300af8ae
mov eax, ebx
xor esi, esi
push esi
push edi
push edi
push esi
lea ecx, [ebp - 0x1c]
push ecx
call eax
test eax, eax
je 0x300af8fb
cmp dword [ebp - 0x14], 0xf130
jne 0x300af8fb
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300af8d7
mov eax, ebx
push 1
push edi
push edi
push esi
lea ecx, [ebp - 0x1c]
push ecx
call eax
cmp byte [0x301e4d0d], 0
mov eax, 0x3001a093
jne 0x300af8f5
mov eax, dword [sym.imp.USER32.dll_DispatchMessageW]
lea ecx, [ebp - 0x1c]
push ecx
call eax
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300af90b
mov eax, ebx
push 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push ecx
call eax
jmp 0x300af84a
mov eax, dword [ebp - 0x14]
cmp eax, 9
je 0x300af980
cmp eax, 0xf
jbe 0x300af991
cmp eax, 0x11
jbe 0x300af8fb
cmp eax, 0x12
jne 0x300af991
test byte [0x301e46f5], 4
je 0x300af991
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300af951
mov eax, ebx
push 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push ecx
call eax
cmp byte [0x301e4d0d], 0
mov eax, 0x3001a093
jne 0x300af975
mov eax, dword [sym.imp.USER32.dll_DispatchMessageW]
lea ecx, [ebp - 0x1c]
push ecx
call eax
jmp 0x300af84a
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jl 0x300afafc
call dword [sym.imp.USER32.dll_GetCapture]
test eax, eax
jne 0x300af7e3
mov edi, 0x200
mov esi, fcn.3001a2e7
cmp byte [0x301e4d0d], 0
mov eax, esi
jne 0x300af9b6
mov eax, ebx
push 0
push 0x20d
push edi
push 0
lea ecx, [ebp - 0x1c]
push ecx
call eax
test eax, eax
je 0x300af7e3
mov eax, dword [ebp - 0x18]
sub eax, edi
je 0x300af9e7
dec eax
dec eax
je 0x300af9e7
sub eax, 3
je 0x300af9e7
sub eax, 3
jne 0x300af7e3
cmp byte [0x301e4d0d], 0
mov eax, esi
jne 0x300af9f4
mov eax, ebx
push 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push ecx
call eax
jmp 0x300af9a9
cmp dword [0x301e46ec], 0
jne 0x300af991
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
mov edi, 0x112
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300afa2b
mov eax, ebx
push 0
push 0x108
push 0x100
push 0
lea ecx, [ebp - 0x1c]
push ecx
call eax
test eax, eax
je 0x300af991
mov eax, dword [ebp - 0x18]
and al, 0xfb
cmp eax, 0x101
jne 0x300afabb
cmp dword [ebp - 0x14], 0x1b
jne 0x300afabb
push 0x11
call esi
test ax, ax
jge 0x300afabb
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300afa72
mov eax, ebx
xor ebx, ebx
push ebx
push edi
push edi
push ebx
lea ecx, [ebp - 0x38]
push ecx
call eax
test eax, eax
je 0x300afa8f
cmp dword [ebp - 0x30], 0xf130
je 0x300afb5c
mov ebx, dword [sym.imp.USER32.dll_PeekMessageW]
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300afaa5
mov eax, ebx
push 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push ecx
call eax
jmp 0x300afa1b
mov eax, dword [ebp - 0x18]
and al, 0xfb
cmp eax, 0x100
jne 0x300afa95
cmp dword [ebp - 0x14], 9
je 0x300afaf3
cmp dword [ebp - 0x14], 0x1b
jne 0x300afa95
push 0x11
call esi
test ax, ax
jl 0x300afafc
push 0x12
call esi
test ax, ax
jl 0x300afafc
xor eax, eax
inc eax
or dword [0x301e46f4], eax
jmp 0x300af7e5
push 0x12
call esi
test ax, ax
jge 0x300afa95
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300afb0c
mov eax, ebx
push 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push ecx
call eax
test eax, eax
je 0x300af7e3
mov eax, dword [ebp - 0x18]
and al, 0xfb
cmp eax, 0x100
jne 0x300afb3e
cmp dword [ebp - 0x14], 9
jne 0x300afb3e
and byte [0x301e46f5], 0xfb
cmp byte [0x301e4d0d], 0
mov eax, 0x3001a093
jne 0x300afb51
mov eax, dword [sym.imp.USER32.dll_DispatchMessageW]
lea ecx, [ebp - 0x1c]
push ecx
call eax
jmp 0x300af7e3
cmp byte [0x301e4d0d], 0
mov eax, fcn.3001a2e7
jne 0x300afb6f
mov eax, dword [sym.imp.USER32.dll_PeekMessageW]
push 1
push edi
push edi
push ebx
lea ecx, [ebp - 0x38]
push ecx
call eax
cmp byte [0x301e4d0d], 0
mov eax, 0x3001a093
jne 0x300afb8d
mov eax, dword [sym.imp.USER32.dll_DispatchMessageW]
lea ecx, [ebp - 0x38]
jmp 0x300afb54