Function at 0x5e2253
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x18
push esi
mov esi, ecx
mov ecx, dword [0x6633d4]
push edi
mov eax, dword [ecx + 0x1dc]
cmp eax, 4
je 0x5e2281
cmp eax, 6
je 0x5e2281
cmp eax, 7
je 0x5e2281
cmp eax, 5
je 0x5e2281
pop edi
xor eax, eax
pop esi
add esp, 0x18
ret 0x10
mov al, byte [esi + 0x16c]
mov edi, dword [ecx + 0x1e0]
test al, al
je 0x5e22a8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x104]
pop edi
mov eax, 1
pop esi
add esp, 0x18
ret 0x10
mov ecx, esi
call fcn.004a2060
cmp edi, 0x14
jne 0x5e2300
mov ecx, dword [esi + 0x10c]
push 1
lea eax, [esp + 0x10]
mov edx, dword [ecx + 0x1a4]
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ecx
push edx
push 2
push 0x29
mov ecx, esi
call fcn.005e30f0
cmp al, 0x34
jne 0x5e24de
mov ecx, dword [esp + 0x18]
push 0xffffffffffffffff
mov eax, dword [ecx]
call dword [eax + 0x80]
pop edi
mov eax, 1
pop esi
add esp, 0x18
ret 0x10
mov ecx, dword [0x6633d4]
push 0
call fcn.0041f6c0
test eax, eax
je 0x5e231b
pop edi
xor eax, eax
pop esi
add esp, 0x18
ret 0x10
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
xor edx, edx
test ax, ax
mov al, byte [esi + 0xf0]
setl dl
cmp al, 1
je 0x5e2343
cmp al, 2
je 0x5e2343
pop edi
xor eax, eax
pop esi
add esp, 0x18
ret 0x10
mov ecx, dword [0x6633d4]
mov eax, dword [ecx + 0x28]
cmp word [eax + 0x8e0], 2
mov eax, dword [ecx + 0x1dc]
jne 0x5e2498
cmp eax, 5
je 0x5e24de
cmp eax, 7
je 0x5e24de
mov eax, dword [ecx + 0x1e0]
test eax, eax
jne 0x5e245f
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x5e23ae
mov ecx, dword [esp + 0x28]
mov eax, dword [esi]
push edx
mov edx, dword [esp + 0x28]
push 0xffffffffffffffff
push 1
push ecx
push edx
mov ecx, esi
call dword [eax + 0x120]
pop edi
mov eax, 1
pop esi
add esp, 0x18
ret 0x10
mov ecx, dword [esi + 0x10c]
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ecx]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [esp + 0x44]
push 0xffffffffffffffff
push edx
lea edx, [esp + 0x24]
push edx
call dword [eax + 0xa8]
test al, al
je 0x5e24de
mov eax, dword [0x6532b8]
test eax, eax
je 0x5e24de
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push 1
lea eax, [esp + 0x10]
push 0
push eax
push ecx
push edx
push 0
push 0x28
mov ecx, esi
call fcn.005e30f0
cmp al, 0x33
jne 0x5e24de
lea eax, [esp + 0xc]
mov ecx, esi
push eax
call fcn.005e3d60
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x10c]
push 0x3f800000
push eax
mov eax, dword [esp + 0x14]
mov edx, dword [ecx]
push eax
call dword [edx + 0xdc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
push 0
push 0
push 0
push ecx
push edx
push 0xb92
mov ecx, esi
call fcn.005e3e30
pop edi
mov eax, 1
pop esi
add esp, 0x18
ret 0x10
cmp eax, 0x15
jne 0x5e2482
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, esi
call fcn.005d53f0
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x20]
mov ecx, dword [0x6633d4]
mov edx, dword [ecx]
push 0
push 0
call dword [edx + 0x10]
pop edi
mov eax, 1
pop esi
add esp, 0x18
ret 0x10
cmp eax, 7
je 0x5e24de
mov ecx, esi
call fcn.005e3f20
mov ecx, dword [0x6633d4]
mov eax, dword [ecx + 0x1e0]
test eax, eax
je 0x5e24ca
mov eax, dword [ecx]
push 0
push 0
call dword [eax + 0x10]
pop edi
mov eax, 1
pop esi
add esp, 0x18
ret 0x10
mov ecx, dword [esi + 0x10c]
call fcn.004adc20
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx + 0x20]
pop edi
mov eax, 1
pop esi
add esp, 0x18
ret 0x10