Function at 0x100053e1
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push ebx
mov dword [ebp - 8], 0x2e20
cmp dword [ebp - 8], 0x2e9c
push esi
push edi
mov dword [ebp - 0x20], ecx
jle 0x1000544e
xor esi, esi
xor edi, edi
xor ebx, ebx
mov eax, edi
lea ecx, [ebp - 0x38]
cdq
idiv ebx
lea eax, [esi + edx]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10005420
mov eax, dword [eax]
push eax
call fcn.10047d34
pop ecx
push 0
push 1
lea ecx, [ebp - 0x38]
call fcn.10002050
inc ebx
cmp ebx, 0x9f7
jl 0x10005403
inc edi
cmp edi, 0x1f35
jl 0x10005401
inc esi
cmp esi, 0x5b9f
jl 0x100053ff
cmp dword [ebp - 8], 0x2dfc
jge 0x10005462
push str.vpkjvtdl_hzw_garengzz_pcxjr
call fcn.10047d34
pop ecx
mov dword [ebp - 0x18], 0x1a2e
cmp dword [ebp - 0x18], 0x1d6d
jle 0x10005508
push 0
push 0
push 0x1300
push 0xcd6
call dword [sym.imp.USER32.dll_PostMessageA]
xor esi, esi
mov dword [ebp - 0xc], esi
xor edi, edi
mov dword [ebp - 8], edi
xor ebx, ebx
and dword [ebp - 0x14], 0
lea ecx, [ebx + edi]
mov edi, esi
mov esi, dword [ebp - 0x14]
sar edi, cl
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x50]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100054bf
mov eax, dword [eax]
push eax
call fcn.10047d34
pop ecx
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.10002050
inc esi
cmp esi, 0x417
jl 0x100054a4
mov esi, dword [ebp - 0xc]
inc ebx
mov edi, dword [ebp - 8]
cmp ebx, 0x28f5
jl 0x10005496
inc edi
mov dword [ebp - 8], edi
cmp edi, 0x7c2c
jl 0x10005494
inc esi
mov dword [ebp - 0xc], esi
cmp esi, 0xb54
jl 0x1000548f
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
cmp byte [ebp + 8], 0
je 0x1000553b
mov eax, dword [ebp + 0x18]
mov edx, dword [ebp + 0x34]
mov ecx, dword [ebp + 0x28]
push dword [eax]
mov eax, dword [ebp + 0x14]
mov edx, dword [edx]
mov ecx, dword [ecx]
push dword [eax]
mov eax, dword [ebp + 0x10]
movzx eax, byte [eax]
push eax
mov eax, dword [ebp + 0x1c]
push dword [eax]
call fcn.100046b7
add esp, 0x10
jmp 0x1000564b
mov dword [ebp - 0x14], 0x2d32
cmp dword [ebp - 0x14], 0x2e4c
jle 0x100055d6
push 0x129f
call dword [sym.imp.USER32.dll_GetKeyState]
xor esi, esi
mov dword [ebp - 0x10], esi
xor edi, edi
mov dword [ebp - 8], edi
xor ebx, ebx
mov eax, edi
xor eax, esi
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x1c], eax
mov esi, eax
mov edi, ebx
mov ebx, 0x5dee
mov eax, edi
lea ecx, [ebp - 0x68]
or eax, esi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10005592
mov eax, dword [eax]
push eax
call fcn.10047d34
pop ecx
push 0
push 1
lea ecx, [ebp - 0x68]
call fcn.10002050
dec edi
dec ebx
jne 0x10005579
mov ebx, dword [ebp - 0xc]
inc ebx
mov dword [ebp - 0xc], ebx
cmp ebx, 0x2e74
jl 0x10005572
mov edi, dword [ebp - 8]
mov esi, dword [ebp - 0x10]
inc edi
mov dword [ebp - 8], edi
cmp edi, 0x5fe9
jl 0x10005564
inc esi
mov dword [ebp - 0x10], esi
cmp esi, 0x4140
jl 0x1000555f
cmp dword [ebp - 0x14], 0x2b05
jge 0x100055ea
push str.qtopnvu_lvylqir_cayx_aivjm_vjnp_bkwofbdo
call fcn.10047d34
pop ecx
mov esi, dword [ebp + 0x24]
xor edx, edx
mov edi, dword [ebp + 0x3c]
mov eax, dword [esi]
mov eax, dword [ebp + 0x38]
mov ecx, dword [edi]
mov eax, dword [eax]
cmp dword [eax], 0x1993
mov eax, dword [ebp + 0xc]
setl dl
imul ecx, edx
mov edx, dword [ebp + 0x30]
mov dword [eax], ecx
cmp dword [eax], 0x9c089ced
mov eax, dword [edx]
sbb ecx, ecx
neg ecx
imul eax, ecx
mov ecx, dword [ebp + 0x2c]
test eax, eax
jne 0x10005627
mov eax, dword [ecx]
cmp dword [edx], 0
je 0x1000562e
mov eax, dword [esi]
mov eax, dword [edi]
xor edx, edx
cmp eax, 1
mov eax, dword [ecx]
setle dl
add eax, 0xfff7
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x20]
setg cl
mov dword [eax], ecx
cmp dword [ebp - 0x18], 0x18a1
jge 0x1000565f
push str.czzonl_fnf_nqkfcqacp
call fcn.10047d34
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret