Function at 0x5bcccc
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov esi, edx
lea edi, [ebp - 0x24]
push ecx
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
pop ecx
mov esi, ecx
mov ebx, eax
xor eax, eax
push ebp
push 0x5bcf3a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x20]
cmp eax, 0x206
jne 0x5bcd18
mov byte [esi], 1
jmp 0x5bcf04
cmp eax, 0x204
jne 0x5bcd2e
mov eax, ebx
call fcn.005bcfb0
mov byte [esi], 1
jmp 0x5bcf04
cmp eax, 0x100
jne 0x5bcf04
cmp dword [ebp - 0x1c], 0xd
jne 0x5bce56
push 0x11
call sub.user32.dll_GetKeyState
test ax, ax
jge 0x5bce01
cmp dword [ebx + 0x27c], 0
jne 0x5bcd74
lea edx, [ebp - 0x28]
mov eax, ebx
call fcn.005bded8
mov edx, dword [ebp - 0x28]
lea eax, [ebx + 0x27c]
call fcn.00407510
cmp dword [ebx + 0x27c], 0
je 0x5bcf04
lea eax, [ebp - 0x2c]
call fcn.004074f8
push eax
mov eax, dword [ebx + 0x27c]
push eax
mov eax, dword [eax]
call dword [eax + 0x54]
call fcn.00407608
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 4]
mov ecx, 0x5bcf48
call fcn.0040753c
cmp dword [ebp - 4], 0
je 0x5bcf04
lea eax, [ebp - 0x30]
call fcn.004074f8
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.00407608
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 8]
mov ecx, 0x5bcf58
call fcn.0040753c
cmp dword [ebp - 8], 0
je 0x5bcf04
push 0x5bcf6c
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x54]
call fcn.00407608
mov byte [esi], 1
jmp 0x5bcf04
cmp word [ebx + 0x2a2], 0
je 0x5bce4e
mov eax, ebx
call fcn.005bd598
cmp eax, dword [ebx + 0x274]
jle 0x5bce35
push 0x30
push 0x5bcf88
push 0x5bcf90
mov eax, ebx
call fcn.0046bfcc
push eax
call sub.user32.dll_MessageBoxA
jmp 0x5bce4e
mov eax, ebx
call fcn.005bd598
test eax, eax
jle 0x5bce4e
mov edx, ebx
mov eax, dword [ebx + 0x2a4]
call dword [ebx + 0x2a0]
mov byte [esi], 1
jmp 0x5bcf04
cmp dword [ebp - 0x1c], 0x41
jne 0x5bce77
push 0x11
call sub.user32.dll_GetKeyState
test ax, ax
jge 0x5bce77
mov eax, ebx
call fcn.005bee60
mov byte [esi], 1
jmp 0x5bcf04
cmp dword [ebp - 0x1c], 0x43
jne 0x5bce95
push 0x11
call sub.user32.dll_GetKeyState
test ax, ax
jge 0x5bce95
mov eax, ebx
call fcn.005beed8
mov byte [esi], 1
jmp 0x5bcf04
cmp dword [ebp - 0x1c], 0x56
jne 0x5bceb3
push 0x11
call sub.user32.dll_GetKeyState
test ax, ax
jge 0x5bceb3
mov eax, ebx
call fcn.005befb4
mov byte [esi], 1
jmp 0x5bcf04
cmp dword [ebp - 0x1c], 0x58
jne 0x5bced1
push 0x11
call sub.user32.dll_GetKeyState
test ax, ax
jge 0x5bced1
mov eax, ebx
call fcn.005bef48
mov byte [esi], 1
jmp 0x5bcf04
cmp dword [ebp - 0x1c], 0x51
jne 0x5bceef
push 0x11
call sub.user32.dll_GetKeyState
test ax, ax
jge 0x5bceef
mov eax, ebx
call fcn.005bed64
mov byte [esi], 1
jmp 0x5bcf04
cmp dword [ebp - 0x1c], 0x46
jne 0x5bcf04
push 0x11
call sub.user32.dll_GetKeyState
test ax, ax
jge 0x5bcf04
mov byte [esi], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5bcf41
lea eax, [ebp - 0x30]
call fcn.004074f8
lea eax, [ebp - 0x2c]
call fcn.004074f8
lea eax, [ebp - 0x28]
call fcn.004074f8
lea eax, [ebp - 8]
call fcn.004074f8
lea eax, [ebp - 4]
call fcn.004074f8
ret