Function at 0x6a28e0
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x268]
test eax, eax
je 0x6a366a
mov eax, dword [esi + 0x60]
mov ecx, dword [eax + 0x50]
test ecx, ecx
jne 0x6a366a
mov eax, dword [0x9eba50]
push ebp
mov ecx, dword [eax + 0x28]
mov ebx, dword [eax + 0x24]
mov ebp, dword [eax + 0x20]
mov edi, dword [eax + 0x1c]
mov edx, ecx
mov dword [esp + 0x14], ecx
push edx
mov ecx, ebx
mov edx, ebp
push ecx
mov eax, edi
push edx
push eax
mov ecx, esi
call fcn.006c3130
test byte [esp + 0x20], 0x40
je 0x6a2943
mov ecx, dword [esp + 0x14]
push ecx
push ebx
push ebp
push edi
mov ecx, esi
call fcn.006c51f0
mov eax, dword [esp + 0x20]
test ah, 1
je 0x6a295b
mov edx, dword [esp + 0x14]
mov ecx, esi
push edx
push ebx
push ebp
push edi
call fcn.006c5910
mov eax, dword [esp + 0x20]
test ah, 8
je 0x6a297b
mov eax, dword [0x9eba64]
mov cl, byte [eax + 0xc8]
test cl, cl
jne 0x6a297b
mov ecx, dword [esi + 0x6c]
call fcn.0050e9a0
test byte [esp + 0x20], 1
je 0x6a2991
mov ecx, dword [esp + 0x14]
push ecx
push ebx
push ebp
push edi
mov ecx, esi
call fcn.006c35f0
mov eax, dword [esp + 0x20]
and eax, 4
mov dword [esp + 0x18], eax
je 0x6a29ad
mov edx, dword [esp + 0x14]
mov ecx, esi
push edx
push ebx
push ebp
push edi
call fcn.006c4680
test byte [esp + 0x20], 2
je 0x6a29eb
mov eax, dword [0x9ea1d4]
mov cl, byte [eax + 0xbb4]
test cl, cl
je 0x6a29cd
mov dword [eax + 0x350], 0
mov ecx, dword [0x9eba50]
mov al, byte [ecx + 0x7d]
test al, al
je 0x6a29e4
push 0xc8
call fcn.006a3680
mov byte [esi + 0x2ac], 0
mov eax, dword [esp + 0x20]
test ah, 2
je 0x6a2a03
mov eax, dword [esp + 0x14]
mov ecx, esi
push eax
push ebx
push ebp
push edi
call fcn.006c33d0
test byte [esp + 0x20], 0x10
je 0x6a2a14
mov dword [esi + 0x310], 0
test edi, edi
mov dword [esp + 0x20], 0
mov dword [esp + 0x10], 0
jne 0x6a2a32
mov dword [esp + 0x20], 0xc0000000
jmp 0x6a2a45
mov ecx, dword [0x8b1784]
dec ecx
cmp ecx, edi
jne 0x6a2a45
mov dword [esp + 0x20], 0x40000000
test ebp, ebp
jne 0x6a2a53
mov dword [esp + 0x10], 0xbf800000
jmp 0x6a2a66
mov edx, dword [0x8b1788]
dec edx
cmp edx, ebp
jne 0x6a2a66
mov dword [esp + 0x10], 0x3f800000
fld dword [esp + 0x20]
fcomp dword [0x7e5664]
mov ebx, 3
fnstsw ax
test ah, 0x40
jne 0x6a2aa6
mov ecx, dword [0x9eba5c]
cmp dword [ecx + 0x1c8], ebx
jne 0x6a2a96
mov eax, dword [esp + 0x20]
push eax
call fcn.00756e10
jmp 0x6a2aa6
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x9ea1d4]
call fcn.0047b1a0
fld dword [esp + 0x10]
fcomp dword [0x7e5664]
fnstsw ax
test ah, 0x40
jne 0x6a2acf
mov ecx, dword [0x9eba5c]
cmp dword [ecx + 0x1c8], ebx
je 0x6a2acf
mov edx, dword [esp + 0x10]
push edx
call fcn.00756cb0
mov edx, dword [0x9eba50]
xor edi, edi
cmp dword [edx + 0x274], edi
je 0x6a2ae3
xor eax, eax
jmp 0x6a2b47
cmp dword [edx + 0x278], edi
je 0x6a2af2
mov eax, 1
jmp 0x6a2b47
cmp dword [edx + 0x27c], edi
je 0x6a2b01
mov eax, 2
jmp 0x6a2b47
cmp dword [edx + 0x280], edi
je 0x6a2b0d
mov eax, ebx
jmp 0x6a2b47
cmp dword [edx + 0x284], edi
je 0x6a2b1c
mov eax, 4
jmp 0x6a2b47
cmp dword [edx + 0x288], edi
je 0x6a2b2b
mov eax, 5
jmp 0x6a2b47
cmp dword [edx + 0x28c], edi
je 0x6a2b3a
mov eax, 6
jmp 0x6a2b47
cmp dword [edx + 0x290], edi
je 0x6a2b9b
mov eax, 7
cmp dword [0x870c00], edi
jne 0x6a2b9b
mov ecx, dword [esi + 0x60]
cmp dword [ecx + 0x50], edi
jne 0x6a2b9b
mov cl, byte [edx + 0xa4]
test cl, cl
je 0x6a2b73
mov ecx, dword [esi + 0x1e0]
cmp ecx, edi
je 0x6a2b86
push eax
call fcn.00687ed0
jmp 0x6a2b80
mov ecx, dword [esi + 0x6c]
cmp ecx, edi
je 0x6a2b86
push eax
call fcn.0050d2e0
mov edx, dword [0x9eba50]
mov ecx, dword [esi + 0x148]
cmp ecx, edi
je 0x6a2b9b
call fcn.005b0510
mov edx, dword [0x9eba50]
mov eax, dword [edx + 0x378]
pop ebp
cmp eax, edi
je 0x6a2c00
mov edx, dword [0x9eba5c]
cmp dword [edx + 0x1c8], ebx
jne 0x6a2bed
mov eax, dword [0x9ea1d4]
mov cl, byte [eax + 0xbb4]
test cl, cl
je 0x6a2bed
mov byte [eax + 0xb64], 0
mov eax, dword [0x9ea1d4]
mov byte [eax + 0xbb4], 0
mov ecx, dword [0x9ea1d4]
mov al, byte [ecx + 0x49c]
test al, al
jne 0x6a2bed
mov ecx, esi
call fcn.006b7860
mov ecx, dword [0x9eba5c]
push 0xffffffffffffffff
call fcn.00756c60
mov edx, dword [0x9eba50]
mov ecx, dword [0x9eba5c]
cmp dword [ecx + 0x1c8], ebx
jne 0x6a2c46
cmp dword [0x870c00], edi
jne 0x6a2c46
mov al, byte [edx + 0x133]
test al, al
je 0x6a2c2a
mov dword [esp + 0x1c], 0x3f490fdb
jmp 0x6a2c3c
mov al, byte [edx + 0x13b]
test al, al
je 0x6a2c46
mov dword [esp + 0x1c], 0xbf490fdb
mov edx, dword [esp + 0x1c]
push edx
call fcn.00756cb0
call fcn.00766670
test al, al
jne 0x6a3526
cmp dword [0x870c00], edi
jne 0x6a3526
mov eax, dword [0x9eba50]
cmp dword [eax + 0x590], edi
je 0x6a2c76
mov ecx, dword [esi + 0x6c]
call fcn.0050d1d0
jmp 0x6a2c86
cmp dword [eax + 0x5b0], edi
je 0x6a2c86
mov ecx, dword [esi + 0x6c]
call fcn.0050d1f0
mov eax, dword [0x9eba50]
cmp dword [eax + 0x294], edi
je 0x6a2c9d
mov ecx, dword [esi + 0x44]
call fcn.0057b560
jmp 0x6a2cad
cmp dword [eax + 0x298], edi
je 0x6a2cad
mov ecx, dword [esi + 0x48]
call fcn.0055c530
mov ecx, dword [0x9ea1d4]
mov eax, dword [ecx + 0x4f8]
cmp eax, edi
je 0x6a2cc4
cmp eax, 0xfa
jne 0x6a2ce9
mov eax, dword [0x9eba50]
mov dl, byte [eax + 0x7c]
test dl, dl
je 0x6a2ce2
cmp dword [ecx + 0x868], 5
jge 0x6a2ce2
mov byte [ecx + 0xb9c], 1
jmp 0x6a2ce9
mov byte [ecx + 0xb9c], 0
mov eax, dword [0x9eba50]
cmp dword [eax + 0x2cc], edi
je 0x6a2d07
mov cl, byte [0x82c03c]
test cl, cl
sete cl
mov byte [0x82c03c], cl
cmp dword [eax + 0x2b8], edi
je 0x6a2d81
mov ecx, dword [0x9ea1d4]
mov eax, dword [ecx + 0x500]
cmp eax, 0x753a
je 0x6a2d81
cmp eax, 0x7558
je 0x6a2d81
cmp eax, 0x7562
je 0x6a2d81
cmp eax, 0x756c
je 0x6a2d81
cmp eax, 0x756d
je 0x6a2d81
call fcn.00475410
test al, al
jne 0x6a2d81
mov ecx, dword [0x9ea1d4]
push edi
call fcn.00471340
cmp eax, edi
je 0x6a2d67
mov ecx, dword [eax + 0x310]
cmp ecx, 4
je 0x6a2d81
cmp ecx, 5
je 0x6a2d81
mov edx, dword [0x9ea1d4]
push eax
mov ecx, esi
mov al, byte [edx + 0xb65]
test al, al
sete al
push eax
call fcn.006b7cc0
mov ecx, dword [0x9eba50]
cmp dword [ecx + 0x2bc], edi
je 0x6a2dc3
mov ecx, dword [0x9ea1d4]
mov eax, dword [ecx + 0x500]
cmp eax, 0x753a
je 0x6a2dc3
cmp eax, 0x7558
je 0x6a2dc3
cmp eax, 0x7562
je 0x6a2dc3
cmp eax, 0x756c
je 0x6a2dc3
cmp eax, 0x756d
je 0x6a2dc3
call fcn.0047a730
mov eax, dword [0x9ea1d4]
mov cl, byte [eax + 0xb84]
test cl, cl
jne 0x6a2e39
mov edx, dword [0x9eba50]
cmp dword [edx + 0x31c], edi
je 0x6a2e10
mov eax, dword [eax + 0x500]
cmp eax, 0x753a
je 0x6a2e10
cmp eax, 0x7558
je 0x6a2e10
cmp eax, 0x7562
je 0x6a2e10
cmp eax, 0x756c
je 0x6a2e10
cmp eax, 0x756d
je 0x6a2e10
mov ecx, esi
call fcn.006baba0
mov eax, dword [0x9eba50]
cmp dword [eax + 0x320], edi
je 0x6a2e24
mov ecx, esi
call fcn.006bacb0
mov ecx, dword [0x9eba50]
cmp dword [ecx + 0x32c], edi
je 0x6a2e39
mov ecx, esi
call fcn.006badb0
mov edx, dword [0x9eba5c]
mov al, byte [edx + 0x1cc]
test al, al
je 0x6a2fe4
mov eax, dword [0x9eba50]
mov cl, byte [eax + 0xb3]
test cl, cl
je 0x6a2e81
fld dword [esi + 0x3b0]
fcomp dword [0x7e5860]
fnstsw ax
test ah, 0x41
jne 0x6a2e81
fld dword [esi + 0x3b0]
fsub dword [0x7e5860]
fstp dword [esi + 0x3b0]
mov edx, dword [0x9eba50]
mov ecx, 0x3f800000
cmp dword [edx + 0x38c], edi
je 0x6a2e9a
mov dword [esi + 0x3b0], ecx
mov eax, dword [0x9eba50]
mov dl, byte [eax + 0xb5]
test dl, dl
je 0x6a2ebb
fld dword [esi + 0x3b0]
fadd dword [0x7e5860]
fstp dword [esi + 0x3b0]
mov edx, dword [0x9eba50]
mov al, byte [edx + 0xb7]
test al, al
je 0x6a2ef0
fld dword [esi + 0x3b4]
fcomp dword [0x7e6314]
fnstsw ax
test ah, 0x41
jne 0x6a2ef0
fld dword [esi + 0x3b4]
fsub dword [0x7e5864]
fstp dword [esi + 0x3b4]
mov eax, dword [0x9eba50]
cmp dword [eax + 0x39c], edi
je 0x6a2f03
mov dword [esi + 0x3b4], ecx
mov edx, dword [0x9eba50]
mov al, byte [edx + 0xb9]
test al, al
je 0x6a2f25
fld dword [esi + 0x3b4]
fadd dword [0x7e5864]
fstp dword [esi + 0x3b4]
mov eax, dword [0x9eba50]
mov dl, byte [eax + 0xbb]
test dl, dl
je 0x6a2f59
fld dword [esi + 0x3b8]
fcomp dword [0x7e5860]
fnstsw ax
test ah, 0x41
jne 0x6a2f59
fld dword [esi + 0x3b8]
fsub dword [0x7e5860]
fstp dword [esi + 0x3b8]
mov edx, dword [0x9eba50]
cmp dword [edx + 0x3ac], edi
je 0x6a2f6d
mov dword [esi + 0x3b8], ecx
mov eax, dword [0x9eba50]
mov cl, byte [eax + 0xbd]
test cl, cl
je 0x6a2f8e
fld dword [esi + 0x3b8]
fadd dword [0x7e5860]
fstp dword [esi + 0x3b8]
mov ecx, dword [0x9eba50]
mov al, byte [ecx + 0xbe]
test al, al
je 0x6a2fb9
fld dword [esi + 0x3b8]
fmul dword [0x7e6014]
push ecx
mov ecx, dword [0x9eba5c]
fstp dword [esp]
call fcn.00756eb0
mov edx, dword [0x9eba50]
mov al, byte [edx + 0xbf]
test al, al
je 0x6a2fe4
fld dword [esi + 0x3b8]
fmul dword [0x7e5860]
push ecx
mov ecx, dword [0x9eba5c]
fstp dword [esp]
call fcn.00756eb0
fld dword [esi + 0x3b4]
fmul dword [0x7e6564]
mov eax, dword [0x9eba50]
mov cl, byte [eax + 0x8a]
fmul dword [0x7e64c0]
test cl, cl
fstp dword [esp + 0x1c]
jne 0x6a3013
mov cl, byte [eax + 0x137]
test cl, cl
je 0x6a304a
mov ecx, dword [0x9ea1d4]
mov eax, dword [ecx + 0x310]
cmp eax, 4
je 0x6a3038
cmp eax, 5
je 0x6a3038
fld dword [esp + 0x1c]
push ecx
fchs
fstp dword [esp]
call fcn.0047b1a0
mov ecx, dword [esi + 0x5c]
mov al, byte [ecx + 0xa8]
test al, al
je 0x6a304a
call fcn.004ff080
mov eax, dword [0x9eba50]
mov cl, byte [eax + 0x8c]
test cl, cl
jne 0x6a3063
mov cl, byte [eax + 0x139]
test cl, cl
je 0x6a3095
mov ecx, dword [0x9ea1d4]
mov eax, dword [ecx + 0x310]
cmp eax, 4
je 0x6a3083
cmp eax, 5
je 0x6a3083
mov eax, dword [esp + 0x1c]
push eax
call fcn.0047b1a0
mov ecx, dword [esi + 0x5c]
mov al, byte [ecx + 0xa8]
test al, al
je 0x6a3095
call fcn.004ff080
mov eax, dword [0x9eba50]
cmp dword [eax + 0x2b0], edi
jne 0x6a30aa
cmp dword [eax + 0x58c], edi
je 0x6a30b6
mov ecx, dword [0x9ea1d4]
mov dword [ecx + 0x350], edi
mov edx, dword [0x9eba50]
cmp dword [edx + 0x2b4], edi
je 0x6a30d9
mov eax, dword [0x9ea1d4]
mov cl, byte [eax + 0x49c]
test cl, cl
jne 0x6a30d9
mov dword [eax + 0x350], edi
mov eax, dword [0x9eba50]
mov cl, byte [eax + 0x7d]
test cl, cl
jne 0x6a3200
mov cl, byte [eax + 0x134]
test cl, cl
jne 0x6a3200
mov cl, byte [eax + 0x8b]
test cl, cl
jne 0x6a3197
mov cl, byte [eax + 0x13c]
test cl, cl
jne 0x6a3197
cmp dword [eax + 0x2b4], edi
je 0x6a3264
mov ecx, dword [0x9ea1d4]
mov al, byte [ecx + 0x49c]
test al, al
jne 0x6a3264
cmp dword [esp + 0x14], edi
jne 0x6a3264
cmp dword [ecx + 0x500], 0x756d
je 0x6a3264
mov al, byte [ecx + 0xb74]
test al, al
jne 0x6a3264
mov eax, dword [ecx + 0x310]
cmp eax, 4
je 0x6a3264
cmp eax, 5
je 0x6a3264
cmp byte [ecx + 0xb66], 1
jne 0x6a3187
push 1
push edi
push edi
mov ecx, esi
call fcn.006ba9f0
mov ecx, dword [0x9ea1d4]
call fcn.0047a7b0
jmp 0x6a3264
cmp dword [esp + 0x14], edi
jne 0x6a3264
mov ecx, dword [eax + 0x2e8]
mov byte [esp + 0x1c], 0
cmp ecx, edi
jne 0x6a31b8
cmp dword [eax + 0x5ac], edi
je 0x6a31f7
mov eax, dword [0x9eba5c]
cmp dword [eax + 0x1c8], ebx
jne 0x6a31f2
mov eax, dword [0x9ea1d4]
mov cl, byte [eax + 0xbb4]
test cl, cl
jne 0x6a31d9
mov byte [esp + 0x1c], 1
push edi
push edi
mov ecx, esi
mov byte [eax + 0xbb4], 0
call fcn.006b7cc0
mov ecx, dword [esp + 0x1c]
push ecx
push 2
jmp 0x6a325d
mov byte [esp + 0x1c], 1
mov ecx, dword [esp + 0x1c]
push ecx
push 2
jmp 0x6a325d
cmp dword [esp + 0x14], edi
jne 0x6a3264
mov ecx, dword [eax + 0x2b0]
mov byte [esp + 0x1c], 0
cmp ecx, edi
jne 0x6a321d
cmp dword [eax + 0x58c], edi
je 0x6a3256
mov edx, dword [0x9eba5c]
cmp dword [edx + 0x1c8], ebx
jne 0x6a3251
mov eax, dword [0x9ea1d4]
mov cl, byte [eax + 0xbb4]
test cl, cl
jne 0x6a323f
mov byte [esp + 0x1c], 1
push edi
push edi
mov ecx, esi
mov byte [eax + 0xbb4], 0
call fcn.006b7cc0
jmp 0x6a3256
mov byte [esp + 0x1c], 1
mov eax, dword [esp + 0x1c]
push eax
push 1
mov ecx, esi
call fcn.006b78b0
mov eax, dword [0x9eba50]
cmp dword [eax + 0x6b0], edi
jne 0x6a3289
cmp dword [eax + 0x98c], edi
jne 0x6a3289
cmp dword [eax + 0x6e8], edi
jne 0x6a3289
cmp dword [eax + 0x9ac], edi
je 0x6a3299
cmp dword [esp + 0x14], edi
jne 0x6a3299
push 1
push edi
mov ecx, esi
call fcn.006b78b0
mov ecx, dword [0x9eba50]
cmp dword [ecx + 0x2c8], edi
je 0x6a32ae
mov ecx, esi
call fcn.006b8030
mov edx, dword [0x9eba50]
cmp dword [edx + 0x2c4], edi
je 0x6a32e4
mov ecx, dword [esi + 0x40]
mov al, byte [ecx + 0xa8]
test al, al
jne 0x6a32df
push ecx
mov ecx, dword [0x9eba64]
call fcn.00632d10
mov ecx, dword [esi + 0x40]
call fcn.005a8bd0
jmp 0x6a32e4
call fcn.005a8c30
mov eax, dword [0x9eba50]
cmp dword [eax + 0x300], edi
je 0x6a32f8
mov ecx, esi
call fcn.006b80f0
mov ecx, dword [0x9eba50]
mov eax, dword [ecx + 0x324]
cmp eax, edi
je 0x6a33a5
mov dl, byte [ecx + 0x96]
test dl, dl
je 0x6a3376
mov ecx, dword [esi + 0x234]
cmp ecx, edi
je 0x6a3329
call fcn.005bcdf0
test al, al
jne 0x6a33a5
mov ecx, dword [0x9eba64]
mov al, byte [ecx + 0xd8]
test al, al
jne 0x6a335c
push edi
call fcn.00632d10
mov ecx, dword [esi + 0x124]
cmp ecx, edi
je 0x6a334f
push edi
call fcn.00588d70
mov ecx, dword [0x9eba64]
call fcn.006330f0
jmp 0x6a33a5
mov ecx, dword [esi + 0x124]
cmp ecx, edi
je 0x6a336d
push 1
call fcn.00588d70
mov ecx, esi
call fcn.006ce020
jmp 0x6a33a5
cmp eax, edi
je 0x6a33a5
mov ecx, dword [0x9ea1d4]
mov eax, dword [ecx + 0x224]
cmp eax, 0xb
je 0x6a33a5
cmp eax, 0xd
je 0x6a33a5
mov al, byte [ecx + 0xb66]
push edi
test al, al
sete cl
push ecx
push edi
mov ecx, esi
call fcn.006ba9f0
mov edx, dword [0x9eba50]
cmp dword [edx + 0x37c], edi
je 0x6a33de
mov ecx, dword [esi + 0x184]
mov al, byte [ecx + 0xa8]
test al, al
je 0x6a33d7
mov eax, dword [ecx]
push edi
call dword [eax + 0x44]
mov ecx, dword [esi + 0x184]
mov dword [ecx + 0x35c], edi
jmp 0x6a33de
mov edx, dword [ecx]
push 1
call dword [edx + 0x44]
mov eax, dword [0x9eba50]
cmp dword [eax + 0x334], edi
je 0x6a3421
mov ecx, dword [esi + 0x234]
cmp ecx, edi
je 0x6a3402
call fcn.005bcdf0
test al, al
jne 0x6a3402
push 1
jmp 0x6a3416
mov ecx, dword [esi + 0x234]
cmp ecx, edi
je 0x6a3421
call fcn.005bcdf0
test al, al
je 0x6a3421
push edi
mov ecx, dword [esi + 0x234]
call fcn.005bcd20
mov ecx, dword [0x9eba50]
cmp dword [ecx + 0x330], edi
je 0x6a344b
mov ecx, dword [esi + 0x1c4]
mov al, byte [ecx + 0xa8]
test al, al
je 0x6a3446
call fcn.00620240
jmp 0x6a344b
call fcn.00620290
mov edx, dword [0x9eba50]
cmp dword [edx + 0x338], edi
je 0x6a346e
mov ecx, dword [esi + 0x1c4]
mov al, byte [ecx + 0xa8]
test al, al
je 0x6a346e
call fcn.006246d0
mov eax, dword [0x9eba50]
cmp dword [eax + 0x2f8], edi
je 0x6a34b5
mov ecx, dword [esi + 0x60]
cmp dword [ecx + 0x50], edi
jne 0x6a34b5
mov ecx, dword [esi + 0xd0]
cmp ecx, edi
je 0x6a34b5
mov al, byte [ecx + 0xa8]
test al, al
je 0x6a349e
call fcn.005878a0
jmp 0x6a34b5
push ecx
mov ecx, dword [0x9eba64]
call fcn.00632d10
mov ecx, dword [esi + 0xd0]
call fcn.00587870
mov edx, dword [0x9eba50]
cmp dword [edx + 0x304], edi
je 0x6a34fc
mov ecx, dword [esi + 0x40]
mov al, byte [ecx + 0xa8]
test al, al
je 0x6a34d5
call fcn.005a8c30
mov ecx, dword [esi + 0x178]
cmp ecx, edi
je 0x6a34fc
mov al, byte [ecx + 0xa8]
test al, al
jne 0x6a34f2
mov eax, dword [ecx]
push 1
call dword [eax + 0x44]
jmp 0x6a34fc
cmp al, 1
jne 0x6a34fc
mov edx, dword [ecx]
push edi
call dword [edx + 0x44]
mov eax, dword [0x9eba50]
cmp dword [eax + 0x2a8], edi
je 0x6a3526
mov ecx, dword [esi + 0x64]
cmp ecx, edi
je 0x6a3526
cmp dword [ecx + 0x314], 2
jl 0x6a3526
mov edx, dword [ecx + 0x318]
inc edx
push edx
call fcn.00549b30
mov eax, dword [0x9eba50]
cmp dword [eax + 0x270], edi
je 0x6a359d
mov ecx, dword [0x9eba88]
mov eax, dword [ecx + 0x1fc]
mov cl, byte [eax + 0x1a8]
test cl, cl
je 0x6a3575
mov byte [eax + 0x1a8], 0
mov edx, dword [0x9ea1d4]
mov eax, dword [edx + 0x4e4]
cmp eax, 2
mov eax, dword [0x9ebab8]
je 0x6a356b
mov eax, dword [0x9ebab4]
push edi
push eax
call fcn.007649c0
add esp, 8
mov eax, dword [0x9eba64]
cmp byte [eax + 0xd8], 1
jne 0x6a359d
mov ecx, dword [esi + 0x234]
cmp ecx, edi
je 0x6a359d
call fcn.005bcdf0
test al, al
jne 0x6a359d
mov ecx, esi
call fcn.006ce020
push 0x12
call dword [sym.imp.user32.dll_GetAsyncKeyState]
test ax, ax
jne 0x6a366a
mov ecx, dword [0x9eba50]
cmp dword [ecx + 0x358], edi
je 0x6a35c5
mov ecx, dword [esi + 0x6c]
push edi
call fcn.0050d210
mov edx, dword [0x9eba50]
cmp dword [edx + 0x35c], edi
je 0x6a35dd
mov ecx, dword [esi + 0x6c]
push 1
call fcn.0050d210
mov eax, dword [0x9eba50]
cmp dword [eax + 0x360], edi
je 0x6a35f4
mov ecx, dword [esi + 0x6c]
push 2
call fcn.0050d210
mov ecx, dword [0x9eba50]
cmp dword [ecx + 0x364], edi
je 0x6a360b
mov ecx, dword [esi + 0x6c]
push ebx
call fcn.0050d210
mov edx, dword [0x9eba50]
cmp dword [edx + 0x368], edi
je 0x6a3623
mov ecx, dword [esi + 0x6c]
push 4
call fcn.0050d210
mov eax, dword [0x9eba50]
cmp dword [eax + 0x36c], edi
je 0x6a363a
mov ecx, dword [esi + 0x6c]
push 5
call fcn.0050d210
mov ecx, dword [0x9eba50]
cmp dword [ecx + 0x370], edi
je 0x6a3652
mov ecx, dword [esi + 0x6c]
push 6
call fcn.0050d210
mov edx, dword [0x9eba50]
cmp dword [edx + 0x374], edi
je 0x6a366a
mov ecx, dword [esi + 0x6c]
push 7
call fcn.0050d210
pop edi
pop esi
pop ebx
add esp, 0xc
ret 4