Function at 0x5e7690
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff0c
push ebx
mov byte [ebp - 9], cl
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov byte [ebp - 0xa], 0
cmp byte [ebp - 9], 0
je 0x5e76b3
mov byte [ebp - 0x11], 1
jmp 0x5e76cc
push 0x11
call sub.user32.dll_GetAsyncKeyState
movsx eax, ax
test eax, 0x80000000
setne byte [ebp - 0x10]
mov al, byte [ebp - 0x10]
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0xd], al
cmp byte [ebp + 8], 0
je 0x5e76de
mov byte [ebp - 0x13], 1
jmp 0x5e76f7
push 0x12
call sub.user32.dll_GetAsyncKeyState
movsx eax, ax
test eax, 0x80000000
setne byte [ebp - 0x12]
mov al, byte [ebp - 0x12]
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x13]
mov byte [ebp - 0xf], al
cmp byte [ebp + 8], 0
je 0x5e7709
mov byte [ebp - 0x15], 1
jmp 0x5e7722
push 0x10
call sub.user32.dll_GetAsyncKeyState
movsx eax, ax
test eax, 0x80000000
setne byte [ebp - 0x14]
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x15], al
mov al, byte [ebp - 0x15]
mov byte [ebp - 0xe], al
mov eax, dword [ebp - 4]
mov eax, dword [eax]
and eax, 0xff
mov word [ebp - 0x18], ax
mov eax, dword [ebp - 4]
mov eax, dword [eax]
cmp al, 0x11
setne al
and al, byte [ebp - 0xd]
je 0x5e774b
or word [ebp - 0x18], 0x100
mov eax, dword [ebp - 4]
mov eax, dword [eax]
cmp al, 0x12
setne al
and al, byte [ebp - 0xf]
je 0x5e7760
or word [ebp - 0x18], 0x200
mov eax, dword [ebp - 4]
mov eax, dword [eax]
cmp al, 0x10
setne al
and al, byte [ebp - 0xe]
je 0x5e7775
or word [ebp - 0x18], 0x400
mov ax, word [ebp - 0x18]
mov word [ebp - 0xc], ax
mov eax, dword [0x5fae64]
cmp byte [eax], 0
jne 0x5e778d
mov byte [ebp - 0x45], 1
jmp 0x5e77c2
mov ax, word [ebp - 0xc]
mov word [ebp - 0x1c], ax
mov eax, dword [0x5fa7e4]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
call fcn.00440fd8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
setge al
xor al, 1
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x5e7805
or word [ebp - 0xc], 0x800
mov ax, word [ebp - 0xc]
mov word [ebp - 0x4c], ax
mov eax, dword [0x5fa7e4]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x74], eax
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x74]
call fcn.00440fd8
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x5e7805
mov eax, dword [0x5fae64]
mov byte [eax], 1
mov ax, word [ebp - 0xc]
mov word [ebp - 0x94], ax
mov eax, dword [0x5fa7e4]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0xbc], eax
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 0xbc]
call fcn.00440fd8
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x5e78b6
mov eax, dword [0x5fae64]
cmp byte [eax], 0
je 0x5e78b6
mov byte [ebp - 0xa], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax], edx
cmp dword [ebp - 8], 0xffffffff
jae 0x5e786f
mov eax, dword [ebp - 8]
mov dword [0x5fa6e4], eax
mov eax, dword [0x5faf98]
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x18]
push eax
mov cx, 0x32
mov dl, 1
mov eax, dword [0x5db3d4]
call fcn.005dc294
mov dx, word [ebp - 0xc]
call fcn.005e84e8
mov edx, dword [0x5faf98]
mov edx, dword [edx]
mov edx, dword [edx + 0x24]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov cl, 1
mov ebx, dword [eax]
call dword [ebx + 4]
call fcn.00407f3c
mov al, byte [ebp - 0xa]
pop ebx
mov esp, ebp
pop ebp
ret 8