Function at 0x418900
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword [0xa7ecc0]
sub esp, 0x11c
cmp eax, 7
push ebx
push esi
push edi
je 0x418d1d
cmp eax, 0x11
jne 0x418d4b
xor edi, edi
cmp dword [0xa7ed30], edi
jl 0x418d1d
mov eax, dword [0xa7ed34]
cmp eax, 0xffffffff
jne 0x41897a
mov ecx, 0x9d8088
mov dword [0x9d81d0], 1
mov dword [0xa7ecc0], edi
call fcn.004443d0
mov eax, dword [0xa7ed30]
mov esi, dword [ebp + 8]
push eax
call fcn.00415fa0
mov ecx, dword [0xa7f2e8]
call fcn.00454960
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, edi
jl 0x418d1d
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test al, al
jns 0x418d1d
cmp dword [0x6fbf34], edi
mov dword [esp + 0x24], edi
jle 0x418d18
mov eax, 0x70e1fc
mov dword [esp + 0x18], eax
jmp 0x4189b2
xor edi, edi
mov ebx, 1
cmp dword [eax - 0x10], ebx
jne 0x418cf6
movsx edx, byte [eax]
xor ecx, ecx
cmp edx, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x30], edx
jle 0x418b81
mov esi, dword [eax - 0xc]
mov edx, dword [eax - 8]
mov dword [esp + 0x20], edi
mov edi, edx
sub edi, esi
mov dword [esp + 0x34], edi
movsx edi, byte [eax]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], esi
mov dword [esp + 0x28], edx
mov ebx, esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x10], edi
jmp 0x418a06
mov edx, dword [esp + 0x28]
test edx, edx
mov edi, dword [ebx]
mov dword [esp + ecx*4 + 0x74], edi
je 0x418a36
add eax, 0xfffffff0
mov eax, dword [eax + 0xc]
test eax, eax
je 0x418a36
mov edx, dword [esp + 0x34]
mov edx, dword [ebx + edx]
mov dword [esp + ecx*4 + 0xb0], edx
mov edx, dword [esp + 0x20]
mov eax, dword [edx + eax]
mov dword [esp + ecx*4 + 0xec], eax
add ecx, 1
cmp edi, dword [0xa7ed30]
mov dword [esp + 0x14], ecx
jne 0x418a5d
mov eax, dword [esp + 0x1c]
cdq
idiv dword [esp + 0x30]
add edx, edx
add edx, edx
mov ecx, dword [edx + esi]
cmp ecx, dword [0xa7ed34]
je 0x418a85
cmp edi, dword [0xa7ed34]
jne 0x418b5a
mov eax, dword [esp + 0x1c]
cdq
idiv dword [esp + 0x30]
add edx, edx
add edx, edx
mov ecx, dword [edx + esi]
cmp ecx, dword [0xa7ed30]
jne 0x418b5a
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
add dword [esp + 0x14], 1
cmp dword [esp + 0x28], 0
mov dword [esp + 0x4c], eax
mov eax, dword [0xa7eccc]
mov dword [esp + esi*4 + 0x74], eax
je 0x418b56
mov eax, dword [esp + 0x18]
mov esi, dword [eax - 4]
add eax, 0xfffffff0
test esi, esi
je 0x418b56
mov eax, dword [0xa7eccc]
lea eax, [eax + eax*8]
mov ebx, dword [eax*8 + 0x744318]
lea eax, [eax*8 + 0x744318]
mov dword [esp + 0x68], ebx
mov ebx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x70], eax
lea eax, [edi + edi*8]
mov edi, dword [eax*8 + 0x744318]
lea eax, [eax*8 + 0x744318]
mov dword [esp + 0x5c], edi
mov edi, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x64], eax
lea eax, [ecx + ecx*8]
mov ecx, dword [eax*8 + 0x744318]
lea eax, [eax*8 + 0x744318]
mov dword [esp + 0x50], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x6c], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x58], eax
mov eax, dword [ebx + ecx]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x44], eax
mov eax, dword [ecx + esi]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], eax
mov eax, dword [edx + ecx]
mov ecx, dword [esi + edx]
mov dword [esp + 0x60], edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov esi, dword [esp + 0x38]
add dword [esp + 0x20], 4
mov ecx, dword [esp + 0x14]
mov eax, 1
add dword [esp + 0x1c], eax
add ebx, 4
sub dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x2c], ebx
jne 0x418a02
movsx edx, byte [eax]
cmp ecx, edx
lea esi, [eax - 0x10]
jle 0x418cf6
cmp ecx, 0xf
jg 0x418cf6
push esi
call fcn.004303a0
movsx ecx, byte [esi + 0x10]
mov eax, dword [0x72cbc4]
sub eax, ecx
add esp, 4
mov dword [0x72cbc4], eax
cmp dword [esi + 8], 0
je 0x418bcb
cmp dword [esi + 0xc], 0
je 0x418bcb
movsx edx, byte [esi + 0x10]
neg edx
lea eax, [eax + edx*2]
mov dword [0x72cbc4], eax
mov ebx, dword [esp + 0x14]
lea eax, [eax*4 + 0x72cbc8]
mov dword [esi + 4], eax
add dword [0x72cbc4], ebx
cmp dword [esi + 8], 0
je 0x418c92
cmp dword [esi + 0xc], 0
je 0x418c92
mov ecx, dword [0x72cbc4]
lea edx, [ecx*4 + 0x72cbc8]
mov dword [esi + 8], edx
mov eax, dword [0x72cbc4]
add eax, ebx
mov dword [0x72cbc4], eax
lea eax, [eax*4 + 0x72cbc8]
mov dword [esi + 0xc], eax
add dword [0x72cbc4], ebx
test dword [esi + 0x1c], 0xff00
jne 0x418c92
lea eax, [esp + 0x50]
lea ecx, [esp + 0x68]
call fcn.00451dd0
fstp dword [esp + 0x10]
lea eax, [esp + 0x50]
lea ecx, [esp + 0x5c]
call fcn.00451dd0
fdivr dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
sub ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fmul st(1)
fiadd dword [esp + 0x3c]
call fcn.004debe0
mov edx, dword [esp + 0x48]
sub edx, dword [esp + 0x40]
mov edi, eax
mov dword [esp + 0x10], edx
fimul dword [esp + 0x10]
fiadd dword [esp + 0x40]
call fcn.004debe0
mov ecx, dword [esp + 0x4c]
mov dword [esp + ecx*4 + 0xb0], edi
mov dword [esp + ecx*4 + 0xec], eax
xor eax, eax
test ebx, ebx
jle 0x418cd5
jmp 0x418ca0
mov ecx, dword [esi + 4]
mov edx, dword [esp + eax*4 + 0x74]
mov dword [ecx + eax*4], edx
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x418cce
cmp dword [esi + 0xc], 0
je 0x418cce
mov edx, dword [esp + eax*4 + 0xb0]
mov dword [ecx + eax*4], edx
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + eax*4 + 0xec]
mov dword [ecx + eax*4], edx
add eax, 1
cmp eax, ebx
jl 0x418ca0
mov eax, dword [esp + 0x24]
mov byte [esi + 0x10], bl
mov ebx, dword [0x9d81a8]
push eax
call fcn.0042bca0
mov ecx, dword [0x9d81a8]
push ecx
mov esi, eax
call fcn.00409ab0
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
add ecx, 1
add eax, 0x34
cmp ecx, dword [0x6fbf34]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x18], eax
jl 0x4189b0
call fcn.00430a20
push 0x9d813c
mov ecx, 0xf030
mov dword [0xa7ecc0], 0
mov dword [0x9d81d4], 1
call fcn.00453400
mov ecx, dword [0xa7f2e8]
call fcn.00454960
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4