Function at 0x7ac0a6f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov ecx, dword [eax + 0x524]
mov word [ebp - 0x2c], dx
test ecx, ecx
jne 0x7ac0a732
mov ebx, eax
mov eax, dword [eax + 0x10]
test al, 4
jne 0x7ac0a800
mov eax, edx
test byte [ebx + 4], 1
je 0x7ac0a726
cmp dx, 0xd
je 0x7ac0a7e8
cmp ax, 0x1f
ja 0x7ac0a740
cmp ax, 9
je 0x7ac0a740
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebx + 0xc]
mov ecx, dword [eax + 4]
mov edi, dword [eax]
mov eax, dword [eax + 8]
mov dword [esp], 0x11
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x34], eax
call dword [sym.imp.user32.dll_GetKeyState]
sub esp, 4
mov esi, eax
lea eax, [ebp - 0x1c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x20]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.7ac01ab0
cmp word [ebp - 0x2c], 9
je 0x7ac0a820
test byte [ebx + 4], 1
jne 0x7ac0a950
test byte [edi + 0xe8], 0x10
jne 0x7ac0a8f0
mov esi, dword [ebx + 0x4a8]
mov dword [esp], ebx
call fcn.7ac01b90
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
cmp esi, eax
jg 0x7ac0a880
mov eax, dword [ebx + 0x4c0]
test eax, eax
je 0x7ac0a7c8
mov eax, ebx
call fcn.7ac0a0d0
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.7ac13930
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebx
call fcn.7ac0a240
movzx eax, word [ebp - 0x2c]
jmp 0x7ac0a726
test ah, 8
je 0x7ac0a732
mov dword [esp], 0x10
call dword [sym.imp.user32.dll_MessageBeep]
sub esp, 4
jmp 0x7ac0a732
test si, si
jns 0x7ac0a82f
test byte [ebx + 4], 1
je 0x7ac0a78e
mov dword [esp], ebx
call fcn.7ac03180
mov esi, eax
test eax, eax
je 0x7ac0a84e
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x34]
add esi, dword [eax + 8]
je 0x7ac0a9a0
xor esi, esi
mov dword [esp], edi
call fcn.7ac146f0
test eax, eax
je 0x7ac0a79b
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.7ac2fb80
mov dword [esp], ebx
call fcn.7ac35b40
jmp 0x7ac0a732
mov eax, dword [ebx + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.7ac2eac0
mov dword [esp], ebx
mov esi, eax
call fcn.7ac35bd0
lea eax, [ebp - 0x2c]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 1
mov dword [esp + 4], 0
call fcn.7ac03540
mov dword [esp], esi
call fcn.7ac2e940
mov dword [esp], ebx
call fcn.7ac35c50
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [eax + 0x4c]
sub esp, 8
jmp 0x7ac0a7b7
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], eax
jne 0x7ac0a79b
mov dword [esp], edi
call fcn.7ac14540
test byte [eax + 0xe8], 8
jne 0x7ac0a9d8
mov edx, dword [ebx + 0xc]
mov dword [edx], eax
mov esi, dword [ebx + 0xc]
mov dword [esp], eax
call fcn.7ac14670
mov dword [esi + 4], eax
mov eax, dword [ebx + 0xc]
mov dword [eax + 8], 0
mov eax, dword [ebx + 0xc]
mov edx, dword [eax]
mov dword [eax + 0xc], edx
mov edx, dword [eax + 4]
mov dword [eax + 0x10], edx
mov edx, dword [eax + 8]
mov dword [eax + 0x14], edx
jmp 0x7ac0a79b
mov dword [esp], edi
call fcn.7ac146f0
test eax, eax
je 0x7ac0a79b
mov eax, dword [ebp - 0x30]
test byte [eax + 0x16], 0x10
je 0x7ac0a79b
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], eax
jne 0x7ac0a79b
test byte [ebx + 0x11], 8
je 0x7ac0a732
mov dword [esp], 0xffffffff
call dword [sym.imp.user32.dll_MessageBeep]
push edx
jmp 0x7ac0a732
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
call fcn.7ac03130
cmp eax, dword [ebp - 0x1c]
jne 0x7ac0a84e
mov dword [esp], edi
call fcn.7ac14560
test eax, eax
je 0x7ac0a84e
mov dword [esp], edi
mov esi, 1
call fcn.7ac14560
mov edi, eax
jmp 0x7ac0a84e
mov dword [esp], eax
call fcn.7ac14540
jmp 0x7ac0a911