Function at 0x572de0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x17c
mov eax, dword [0x623ec0]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, ecx
push edi
mov dword [esp + 0x2c], esi
cmp dword [esi + 0x1d4], 0
jne 0x57382b
test ebx, ebx
je 0x57382b
cmp dword [ebx + 0x20], 0x3e8
jb 0x572e33
mov ecx, ebx
call fcn.00573860
test eax, eax
jne 0x57382b
mov eax, dword [0x9c25b0]
mov edx, dword [eax + 0x4c]
mov al, byte [esi + 0x620]
and al, 0xf
cmp al, 0xf
jne 0x572e63
mov al, byte [esi + 0xa5a]
test al, al
jle 0x572e63
mov cl, byte [edx + 0xa5a]
test cl, cl
jle 0x572e63
cmp al, cl
je 0x57382b
cmp byte [esi + 0xa2d], 0
jne 0x57382b
cmp dword [ebx + 0x218], 0x42
jne 0x572e8f
cmp byte [ebx + 0xa25], 1
jne 0x572e8f
cmp byte [edx + 0xa36], 0
je 0x57382b
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x50]
cmp eax, 1
je 0x57382b
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x50]
cmp eax, 1
je 0x57382b
cvttss2si eax, dword [esi + 0x28]
sub eax, 0x93a
cmp eax, 8
ja 0x572ed5
cvttss2si eax, dword [esi + 0x2c]
cmp eax, 0xf57
jl 0x572ed5
cmp eax, 0xf5f
jle 0x57382b
mov edi, dword [0x9c25b0]
mov dword [esp + 0x10], edi
cmp dword [edi + 0x24], 0x7530
jne 0x57382b
cmp dword [edi + 0x27274], 0
jne 0x57382b
cmp dword [edi + 0x27270], 0
jne 0x57382b
cmp dword [edi + 0x27268], 0
jne 0x57382b
cmp dword [0xa6f4e8], 0
jne 0x57382b
mov cl, byte [ebx + 0xa5a]
test cl, cl
jle 0x572f54
mov al, byte [esi + 0xa5a]
test al, al
jle 0x572f54
cmp cl, al
jne 0x572f54
cmp dword [0x9c2598], 0
je 0x57382b
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x60]
test eax, eax
jne 0x57382b
cmp dword [0x9c2598], 0
jne 0x57304c
cmp byte [ebx + 0x215], 1
mov ecx, dword [0x9c25ac]
mov edx, dword [0x1ff59f0]
jne 0x572fcc
movzx eax, word [ebx + 0x878]
cmp word [ecx + 0x10fc], ax
jne 0x572fcc
test ax, ax
je 0x572fcc
test edx, edx
je 0x572fd0
cvttss2si eax, dword [esi + 0x28]
sar eax, 7
sub eax, 0x11
cmp eax, 2
ja 0x57382b
cvttss2si eax, dword [esi + 0x2c]
and eax, 0xffffff80
cmp eax, 0xe80
jle 0x57382b
mov al, byte [esi + 0xa5a]
test al, al
jle 0x572fcc
cmp byte [ebx + 0xa5a], al
je 0x57382b
test edx, edx
jne 0x573036
cvttss2si eax, dword [esi + 0x28]
sar eax, 7
sub eax, 0x11
cmp eax, 2
ja 0x572fef
cvttss2si eax, dword [esi + 0x2c]
and eax, 0xffffff80
cmp eax, 0xe80
jg 0x573036
movzx eax, word [ebx + 0x878]
test ax, ax
je 0x573008
cmp word [ecx + 0x10fc], ax
jne 0x57382b
cmp byte [edi + 0x26f44], 1
jne 0x57304c
movzx ecx, word [ecx + 0x10fc]
test cx, cx
je 0x57304c
cmp cx, ax
je 0x57304c
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x57304c
cmp eax, 0x3e8
jb 0x57382b
jmp 0x57304c
mov al, byte [esi + 0xa5a]
test al, al
jle 0x57304c
cmp byte [ebx + 0xa5a], al
je 0x57382b
mov ecx, dword [0x9c25b4]
mov eax, dword [ecx]
call dword [eax + 8]
mov ecx, dword [0x9c25ac]
mov edx, eax
mov dword [edi + 0x26f20], ebx
mov dword [esp + 0x28], edx
mov eax, dword [ecx + 0xbec]
mov ecx, dword [edi + 0x276b4]
and eax, 0x20000000
add ecx, 0x3e8
mov dword [esp + 0x24], eax
cmp edx, ecx
jbe 0x57382b
cvttss2si eax, dword [ebx + 0x2c]
cvttss2si ecx, dword [ebx + 0x28]
push eax
mov dword [esp + 0x24], eax
cvttss2si edi, dword [esi + 0x28]
mov dword [esp + 0x1c], ecx
push ecx
cvttss2si esi, dword [esi + 0x2c]
mov ecx, edi
mov edx, esi
call fcn.0049a800
mov ecx, dword [0x9c25ac]
mov dl, 0x1b
mov dword [esp + 0x24], eax
lea ecx, [ecx + 0x8d0]
call fcn.00498640
xor ecx, ecx
mov edx, esi
cmp dword [esp + 0x2c], ecx
setne cl
add esp, 4
add eax, ecx
mov ecx, dword [esp + 0x14]
add ecx, 0x118
mov dword [esp + 0x18], eax
lea eax, [esp + 0x24]
push ecx
push eax
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.00498290
add esp, 0x10
cmp dword [ebx + 0x218], 0x38
jne 0x57312c
cmp word [ebx + 0x172], 0
jne 0x57312c
cvttss2si ecx, dword [ebx + 0x2c]
mov eax, dword [esp + 0x1c]
xor esi, esi
add eax, 0xfffffff4
cmovns esi, eax
cvttss2si edi, dword [ebx + 0x28]
mov dword [esp + 0x20], ecx
jmp 0x57313c
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [0x9c25ac]
mov ecx, dword [0x1ff9b8c]
mov dword [esp + 0x18], eax
inc ecx
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
sub ecx, eax
cmp byte [ebx + 0xa25], 1
mov dword [esp + 0x1c], ecx
mov dword [0x1ff9b8c], ecx
jne 0x573190
cmp dword [ebx + 0x218], 0x42
jne 0x573190
mov eax, dword [0x9c25b0]
mov eax, dword [eax + 0x4c]
cmp byte [eax + 0xa36], 0
je 0x57382b
cmp esi, dword [esp + 0x14]
jg 0x5736f3
cvttss2si eax, dword [ebx + 0x28]
cmp edi, eax
jne 0x5736f3
cvttss2si eax, dword [ebx + 0x2c]
cmp dword [esp + 0x20], eax
jne 0x5736f3
push 0xa8
lea eax, [esp + 0x34]
push 0
push eax
call fcn.00468b40
mov edi, dword [esp + 0x38]
mov eax, 0x39d
mov word [esp + 0x40], ax
add esp, 0xc
movzx eax, word [edi + 0x20]
mov word [esp + 0x36], ax
mov word [esp + 0x56], ax
cvttss2si eax, dword [edi + 0x28]
mov word [esp + 0x52], ax
cvttss2si eax, dword [edi + 0x2c]
mov word [esp + 0x5c], ax
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x1a9c2c]
test ecx, ecx
je 0x573219
mov ax, word [eax + 0x1a9c30]
mov word [esp + 0x52], cx
mov word [esp + 0x5c], ax
mov esi, dword [esp + 0x18]
mov eax, 0xffffffff
mov word [esp + 0x58], ax
add esi, 0x98c
mov eax, dword [esp + 0x1c]
mov dl, 0x15
add al, 4
mov dword [esp + 0x64], 0xffffffff
mov ecx, esi
mov byte [esp + 0x61], 0
mov byte [esp + 0x5e], al
call fcn.0049aed0
cmp eax, 0x65
jne 0x573261
mov eax, 0x97
mov word [esp + 0x58], ax
jmp case.0x57331a.873
mov dl, 0x15
mov ecx, esi
call fcn.0049aed0
cmp eax, 0x66
jne 0x5732b1
mov eax, 0x98
mov edx, 0x367
mov word [esp + 0x58], ax
movsx eax, word [esi]
lea eax, [eax + eax*8]
shl eax, 4
movzx eax, word [eax + 0x817ff0]
mov ecx, eax
cmp ax, dx
je case.0x57331a.873
mov eax, 0x368
cmp cx, ax
jne case.0x57331a.873
mov byte [esp + 0x61], 1
jmp case.0x57331a.873
mov dl, 0x15
mov ecx, esi
call fcn.0049aed0
cmp eax, 0x67
jne 0x57337e
mov eax, 0x99
mov word [esp + 0x58], ax
movsx eax, word [esi]
lea eax, [eax + eax*8]
shl eax, 4
movsx eax, word [eax + 0x817ff0]
cmp eax, 0x2ff
jg 0x573303
je 0x5732f9
cmp eax, 0x25
jne case.0x57331a.873
mov byte [esp + 0x61], 9
jmp case.0x57331a.873
mov byte [esp + 0x61], 0xa
jmp case.0x57331a.873
cmp eax, 0x37c
jg 0x573346
je 0x57333f
sub eax, 0x369
cmp eax, 4
ja case.0x57331a.873
jmp dword [eax*4 + 0x573844]
mov byte [esp + 0x61], 2
jmp case.0x57331a.873
mov byte [esp + 0x61], 3
jmp case.0x57331a.873
mov byte [esp + 0x61], 4
jmp case.0x57331a.873
mov byte [esp + 0x61], 5
jmp case.0x57331a.873
cmp eax, 0x38d
jg 0x573370
je 0x573369
sub eax, 0x38b
je 0x573362
sub eax, 1
jne case.0x57331a.873
mov byte [esp + 0x61], 7
jmp case.0x57331a.873
mov byte [esp + 0x61], 6
jmp case.0x57331a.873
mov byte [esp + 0x61], 8
jmp case.0x57331a.873
cmp eax, 0xafe
jne case.0x57331a.873
mov byte [esp + 0x61], 0xb
jmp case.0x57331a.873
mov dl, 0x15
mov ecx, esi
call fcn.0049aed0
cmp eax, 0x68
jne case.0x57331a.873
mov word [esp + 0x58], ax
movsx eax, word [esi]
lea eax, [eax + eax*8]
shl eax, 4
movzx ecx, word [eax + 0x817ff0]
mov eax, 0x36e
cmp cx, ax
je case.0x57331a.873
movzx eax, byte [esp + 0x61]
mov edx, 0x36f
cmp cx, dx
mov ecx, 1
cmove eax, ecx
mov byte [esp + 0x61], al
mov ecx, dword [0x9c25ac]
movzx esi, word [ebx + 0x20]
mov word [esp + 0x6c], si
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 0x34]
call edx
mov dword [esp + 0x14], eax
test eax, eax
je 0x57382b
mov cx, word [0x8fc8b8]
lea eax, [esp + 0x60]
mov word [esp + 0x68], cx
mov ecx, dword [0x9c25ac]
push eax
mov dword [esp + 0x74], 0xfffffffe
lea ecx, [ecx + 0x8d0]
call fcn.00496c60
mov edx, dword [esp + 0x18]
add esp, 4
mov esi, 0xa8
cvttss2si eax, dword [edx + 0x28]
mov word [esp + 0x5a], ax
cvttss2si eax, dword [edx + 0x2c]
mov word [esp + 0x54], ax
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x8e4], 3
jne 0x57364c
mov ecx, dword [eax + 0xbec]
mov ebx, 0x39e
mov eax, ecx
and eax, 0x200000
je 0x57345b
mov word [esp + 0x34], bx
test eax, eax
mov ebx, 0xa8
mov esi, 0x50
cmove esi, ebx
mov ebx, dword [esp + 0x10]
test cl, 0x40
je 0x573650
mov eax, dword [ebx + 0x4c]
movss xmm1, dword [edx + 0x28]
movss xmm2, dword [edx + 0x2c]
movaps xmm0, xmm1
subss xmm0, dword [eax + 0x28]
cvttss2si ecx, xmm0
movaps xmm0, xmm2
subss xmm0, dword [eax + 0x2c]
cvttss2si eax, xmm0
test ecx, ecx
jle 0x5734aa
mov ecx, 1
or esi, 0xffffffff
jmp 0x5734b2
mov esi, 0xffffffff
cmovs ecx, esi
test eax, eax
jle 0x5734bd
mov eax, 1
jmp 0x5734c0
cmovs eax, esi
cvttss2si esi, xmm1
add esi, ecx
cvttss2si ecx, xmm2
mov dword [esp + 0x1c], esi
add ecx, eax
mov eax, dword [ebx + 0x34]
mov dword [esp + 0x10], ecx
mov esi, dword [eax + 0x10]
cmp dword [esi + 0xc], 0
je 0x573588
cmp esi, dword [ebx + 0x4c]
je 0x573579
cmp esi, edx
je 0x573579
cvttss2si eax, dword [esi + 0x28]
cmp eax, dword [esp + 0x1c]
jne 0x573579
cvttss2si eax, dword [esi + 0x2c]
cmp eax, ecx
jne 0x573579
mov eax, dword [esi + 0x20]
dec eax
cmp eax, 0x3e6
ja 0x573600
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x54]
test eax, eax
jne 0x57352c
cmp byte [esi + 0x214], 1
je 0x573571
cmp dword [0x9c2598], 0
jne 0x5735ec
mov eax, dword [0x9c25ac]
mov ecx, dword [0x1ff59f0]
mov ax, word [eax + 0x10fc]
cmp ax, word [esi + 0x878]
je 0x573558
test ecx, ecx
je 0x573571
mov eax, dword [ebx + 0x4c]
mov al, byte [eax + 0xa5a]
test al, al
jle 0x5735bd
cmp al, byte [esi + 0xa5a]
jne 0x5735bd
test ecx, ecx
jle 0x5735ec
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0xc]
mov esi, eax
cmp dword [eax + 0xc], 0
jne 0x5734e4
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x18]
test dword [ecx + 0xbec], 0x200000
jne 0x57363b
cmp eax, 0xfffffffe
je 0x57363b
mov eax, 0x39d
mov esi, 0x48
mov word [esp + 0x34], ax
jmp 0x573650
test ecx, ecx
jle 0x5735ec
cmp al, 3
jne 0x5735e1
mov eax, dword [esi + 0x20]
test eax, eax
je 0x5735d3
cmp eax, 0x3e8
jb 0x573571
mov al, byte [esi + 0xa5a]
test al, al
jle 0x5735e1
cmp al, 4
jne 0x573571
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x58]
test eax, eax
jne 0x573571
mov ax, word [esi + 0x20]
mov word [esp + 0x74], ax
mov eax, 0xfffffffe
mov dword [esp + 0x78], eax
jmp 0x57358c
cmp dword [0x9c2598], 0
jne 0x573612
cmp byte [esi + 0x215], 1
je 0x57361c
cmp word [esi + 0x878], 0
jne 0x5735ec
mov eax, dword [0x9c25ac]
movzx ecx, word [esi + 0x878]
cmp word [eax + 0x10fc], cx
je 0x5735ec
test cx, cx
je 0x5735ec
jmp 0x573575
mov eax, 0x39e
mov esi, 0x50
mov word [esp + 0x34], ax
jmp 0x573650
mov ebx, dword [esp + 0x10]
mov edx, esi
lea ecx, [esp + 0x30]
call fcn.0054f850
push 0xa8
lea eax, [esp + 0xdc]
push 0
push eax
call fcn.00468b40
add esp, 0xc
lea eax, [esp + 0x30]
push esi
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.004684b0
mov ax, word [edi + 0x20]
add esp, 0xc
cmp dword [esp + 0x24], 0
mov word [esp + 0xde], ax
mov byte [esp + 0x107], 1
je 0x5736b0
mov eax, 1
mov word [esp + 0xf8], ax
mov ax, word [esp + 0x68]
mov ecx, ebx
mov edx, dword [ebx]
mov word [esp + 0x110], ax
lea eax, [esp + 0xd8]
push eax
movzx eax, word [esp + 0x38]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x28]
mov dword [ebx + 0x276b4], eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.0046676f
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esp + 0x10]
cmp byte [eax + 0x26f44], 1
jne 0x57382b
mov edi, dword [esp + 0x2c]
mov eax, dword [edi + 0x9d8]
test eax, eax
je 0x57371b
cmp eax, 1
jne 0x57382b
cmp byte [edi + 0xa2c], 0
jne 0x57382b
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0xffffff00
test cx, ax
jg 0x57382b
cvttss2si eax, dword [ebx + 0x28]
xor ecx, ecx
mov dword [esp + 0x24], 0
cvttss2si esi, dword [edi + 0x28]
mov dword [esp + 0x28], eax
cvttss2si eax, dword [ebx + 0x2c]
mov ebx, dword [esp + 0x28]
cmp esi, ebx
setle cl
lea ecx, [ecx*2 - 1]
cvttss2si edi, dword [edi + 0x2c]
mov dword [esp + 0x28], ecx
xor ecx, ecx
push eax
push ebx
mov dword [esp + 0x20], eax
cmp edi, eax
mov edx, edi
setle cl
lea ecx, [ecx*2 - 1]
mov dword [esp + 0x24], ecx
mov ecx, esi
call fcn.0049a800
add esp, 8
cmp eax, dword [esp + 0x14]
jle 0x57380c
xor eax, eax
cmp eax, 0x1f4
jg 0x57382b
cmp esi, ebx
je 0x5737b3
add esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
cmp edi, ecx
je 0x5737bf
add edi, dword [esp + 0x1c]
mov eax, ebx
mov edx, esi
sub eax, esi
sub edx, ebx
cmp esi, ebx
cmovle edx, eax
mov eax, ecx
sub eax, edi
mov ecx, edi
sub ecx, dword [esp + 0x18]
cmp edi, dword [esp + 0x18]
cmovle ecx, eax
cmp edx, 7
jg 0x5737f3
cmp ecx, 7
jg 0x5737f3
lea eax, [edx + ecx*8]
mov ecx, dword [eax*4 + 0x5ec9c8]
jmp 0x5737fd
cmp edx, ecx
jg 0x5737fa
inc ecx
jmp 0x5737fd
lea ecx, [edx + 1]
mov eax, dword [esp + 0x24]
inc eax
mov dword [esp + 0x24], eax
cmp ecx, dword [esp + 0x14]
jg 0x5737a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
push 0
push 0
push edi
push esi
mov dword [eax + 0x27850], esi
mov dword [eax + 0x27854], edi
call fcn.00578820
mov ecx, dword [esp + 0x184]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0046676f
mov esp, ebp
pop ebp
ret 4