Function at 0x100f0775
Capabilities:
Check for software breakpoints
Log keystrokes via polling

Disassembly:
mov eax, 0x1017733c
call fcn.10159f04
sub esp, 0x220
cmp dword [ebp + 0xc], 4
mov eax, dword [0x101b7f10]
push ebx
push esi
mov dword [ebp - 0x10], eax
push edi
jne 0x100f0bc6
mov esi, dword [ebp + 0x10]
push 0xfffffffffffffffe
pop edi
cmp esi, edi
je 0x100f0b1c
or ebx, 0xffffffff
cmp esi, ebx
jne 0x100f0842
mov eax, dword [0x10a0c488]
cmp byte [eax + 0x10], 1
mov ecx, dword [0x10a0c444]
je 0x100f0b22
add eax, 0x5d0
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.1008ffd0
mov eax, dword [ebp + 0xc]
cmp eax, 0xdb
mov ecx, dword [0x10a0c488]
jb 0x100f082a
cmp eax, 0xdc
jbe 0x100f0814
cmp eax, 0x13a
jbe 0x100f082a
cmp eax, 0x13c
jbe 0x100f080f
cmp eax, 0x13e
ja 0x100f082a
push 2
pop eax
jmp 0x100f082d
xor eax, eax
inc eax
jmp 0x100f082d
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x100f082d
xor edx, edx
cmp eax, 1
setne dl
add edx, 3
mov eax, edx
jmp 0x100f082d
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x214]
add edx, 0xfffffff6
push edx
push eax
call fcn.100edcf0
jmp 0x100f14d7
cmp dword [ebp + 8], 7
jne 0x100f08f9
cmp esi, 0xa
jl 0x100f14d7
cmp esi, 0x14
jg 0x100f14d7
mov ecx, dword [0x10a0c444]
push 0xe8
call fcn.100951e2
test al, al
jne 0x100f14d7
mov ecx, dword [0x10a0c444]
push 0xe9
call fcn.100951e2
test al, al
jne 0x100f14d7
mov ecx, dword [0x10a0c444]
push 0xe1
call fcn.100951e2
test al, al
jne 0x100f14d7
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x10a0c488]
test ax, ax
mov eax, dword [ecx + 0xc]
jge 0x100f08d9
test eax, eax
push esi
jne 0x100f08c4
push eax
jmp 0x100f08cb
cmp eax, 1
jne 0x100f08d5
push 3
call fcn.100ee01b
jmp 0x100f14d7
push 4
jmp 0x100f08cb
add esi, 0xfffffff6
test eax, eax
push esi
jne 0x100f08e4
push eax
jmp 0x100f08ef
cmp eax, 1
jne 0x100f08ed
push 3
jmp 0x100f08ef
push 4
call fcn.100f0686
jmp 0x100f14d7
cmp dword [ebp + 8], 1
jne 0x100f14d7
mov ecx, dword [0x10a0c444]
call fcn.100967b4
mov eax, dword [0x10a0c488]
mov ecx, dword [0x10a0c444]
add eax, 0x5d0
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.1008ffd0
mov eax, dword [ebp - 0x214]
cmp eax, 0xcc
je 0x100f0b63
cmp eax, 0xf2
je 0x100f0b63
cmp eax, 0xed
jne 0x100f0a51
push dword [ebp + 0xc]
mov ecx, dword [0x10a0c3a0]
call fcn.1008e5b4
mov ecx, dword [0x10a0066c]
mov edi, eax
push edi
call fcn.10017cc2
cmp eax, 0x28
jne 0x100f0a0a
lea ecx, [ebp - 0x210]
call fcn.10152120
and dword [ebp - 4], 0
sub esp, 0x100
mov ecx, esp
mov dword [ebp - 0x22c], esp
mov esi, 0x10180c16
push esi
call fcn.10152140
sub esp, 0x100
mov ecx, esp
mov dword [ebp - 0x228], esp
push esi
mov byte [ebp - 4], 1
call fcn.10152140
lea eax, [ebp - 0x210]
push eax
push 0x442
mov byte [ebp - 4], 0
call fcn.101344c5
add esp, 0x108
lea eax, [ebp - 0x210]
mov ecx, esp
mov dword [ebp - 0x228], esp
push eax
call fcn.10152140
mov ecx, dword [0x10a0c308]
push 0xa
call fcn.1013b341
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x210]
call fcn.10152110
jmp 0x100f14d7
mov ecx, dword [0x10a0c3a0]
push edi
call fcn.1008e59f
test eax, eax
jle 0x100f14d7
mov eax, dword [0x10a0c488]
mov eax, dword [eax + 0xc]
mov ecx, dword [0x10a0c3a0]
xor edi, edi
add esi, 0xfffffff6
cmp eax, edi
push esi
jne 0x100f0a39
push edi
jmp 0x100f0a40
cmp eax, 1
jne 0x100f0a4d
push 3
push dword [ebp + 0xc]
call fcn.1008e5b4
jmp 0x100f0bb0
push 4
jmp 0x100f0a40
cmp eax, 0xd4
jne 0x100f0a91
mov edx, dword [ebp + 0xc]
test edx, edx
jbe 0x100f14d7
cmp edx, 0x64
jae 0x100f14d7
mov ecx, dword [0x10a0c488]
mov eax, dword [ecx + 0xc]
add esi, 0xfffffff6
test eax, eax
push esi
jne 0x100f0a80
push eax
jmp 0x100f0a8b
cmp eax, 1
jne 0x100f0a89
push 3
jmp 0x100f0a8b
push 4
push edx
jmp 0x100f0bb7
cmp eax, 0x134
jne 0x100f0ae2
mov ecx, dword [0x10a0c468]
mov eax, dword [ebp + 0xc]
mov edi, dword [ecx + eax*4 + 0x464]
mov ecx, dword [0x10a0c370]
push edi
call fcn.100b831a
test edi, edi
je 0x100f14d7
mov ecx, dword [0x10a0c488]
mov eax, dword [ecx + 0xc]
add esi, 0xfffffff6
test eax, eax
push esi
jne 0x100f0ad0
push eax
jmp 0x100f0ad7
cmp eax, 1
jne 0x100f0ade
push 3
push edi
push ebx
jmp 0x100f0bb8
push 4
jmp 0x100f0ad7
cmp eax, 0xdc
je 0x100f0b10
cmp eax, 0x13b
je 0x100f0b10
cmp eax, 0x13d
je 0x100f0b10
cmp eax, 0xdb
je 0x100f0b10
cmp eax, 0x13c
je 0x100f0b10
cmp eax, 0x13e
jne 0x100f14d7
mov ecx, dword [0x10a0c488]
cmp byte [ecx + 0x10], 1
jne 0x100f0b2c
mov ecx, dword [0x10a0c444]
call fcn.100967b4
jmp 0x100f14d7
mov edx, dword [ecx + 0xc]
add esi, 0xfffffff6
test edx, edx
push esi
jne 0x100f0b42
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff6
push edx
push 0
jmp 0x100f0b58
cmp edx, 1
mov edx, dword [ebp + 0xc]
jne 0x100f0b52
add edx, 0xfffffff6
push edx
push 3
jmp 0x100f0b58
add edx, 0xfffffff6
push edx
push 4
push eax
call fcn.100eec44
jmp 0x100f14d7
push dword [ebp + 0xc]
mov ecx, dword [0x10a0c370]
call fcn.100b83c2
cmp dword [ebp + 0xc], 0x64
mov edi, eax
jb 0x100f14d7
cmp dword [ebp + 0xc], 0xc8
ja 0x100f14d7
mov eax, dword [0x10a0c488]
mov eax, dword [eax + 0xc]
mov ecx, dword [0x10a0c370]
add esi, 0xfffffff6
test eax, eax
push esi
jne 0x100f0ba3
push eax
jmp 0x100f0baa
cmp eax, 1
jne 0x100f0bc2
push 3
push edi
call fcn.100b8529
mov ecx, dword [0x10a0c488]
push eax
push edi
call fcn.100f01ee
jmp 0x100f14d7
push 4
jmp 0x100f0baa
xor edx, edx
cmp dword [ebp + 0xc], edx
jne 0x100f14d7
mov eax, dword [ebp + 0x10]
cmp eax, 1
je 0x100f1372
cmp eax, 5
je 0x100f1372
push 2
pop ecx
cmp eax, ecx
je 0x100f1232
cmp eax, 6
je 0x100f1232
cmp eax, 3
je 0x100f1008
cmp eax, 7
je 0x100f1008
cmp eax, 9
jne 0x100f0e4e
mov eax, dword [0x10a0c488]
cmp byte [eax + 0x10], 1
push 0xa
mov esi, 0x13b
mov edi, 0x13c
mov ebx, 0xdc
pop eax
jne 0x100f0d42
mov dword [ebp + 0xc], eax
mov dword [ebp - 0x214], eax
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
push 0xdb
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
push edi
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
push 0x13e
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
push ebx
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
push esi
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
push 0x13d
call fcn.100966c0
inc dword [ebp + 0xc]
dec dword [ebp - 0x214]
jne 0x100f0c3f
mov ecx, dword [0x10a0c444]
push 9
mov edi, 0xdb
push edi
call fcn.10096d85
mov ecx, dword [0x10a0c444]
push 0
push 0
mov esi, 0x5dc
push esi
push 0xea
push 0xe9
push 0x1b8
push 2
push 0xe8
push 9
push edi
call fcn.100a152b
mov ecx, dword [0x10a0c444]
push 9
push ebx
call fcn.10096d85
mov ecx, dword [0x10a0c444]
push 0
push 0
push esi
push 0xea
push 0xe9
push 2
push 0x1b9
push 0xe8
push 9
push ebx
call fcn.100a152b
mov eax, dword [0x10a0c488]
mov byte [eax + 0x10], 0
jmp 0x100f14d7
mov dword [ebp + 0xc], eax
mov dword [ebp - 0x214], eax
mov ecx, dword [0x10a0c444]
push 1
push dword [ebp + 0xc]
push 0xdb
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 1
push dword [ebp + 0xc]
push edi
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 1
push dword [ebp + 0xc]
push 0x13e
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 1
push dword [ebp + 0xc]
push ebx
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 1
push dword [ebp + 0xc]
push esi
call fcn.100966c0
mov ecx, dword [0x10a0c444]
push 1
push dword [ebp + 0xc]
push 0x13d
call fcn.100966c0
inc dword [ebp + 0xc]
dec dword [ebp - 0x214]
jne 0x100f0d4b
mov ecx, dword [0x10a0c444]
push 9
push 0xdb
call fcn.10096d85
mov ecx, dword [0x10a0c444]
push 0
push 0
mov esi, 0x5dc
push esi
push 0xe7
push 0xe6
push 0x1b8
push 2
mov edi, 0xe5
push edi
push 9
push 0xdb
call fcn.100a152b
mov ecx, dword [0x10a0c444]
push 9
push ebx
call fcn.10096d85
mov ecx, dword [0x10a0c444]
push 0
push 0
push esi
push 0xe7
push 0xe6
push 2
push 0x1b9
push edi
push 9
push ebx
call fcn.100a152b
mov eax, dword [0x10a0c488]
mov byte [eax + 0x10], 1
jmp 0x100f14d7
cmp eax, 0xa
jne 0x100f14d7
lea ecx, [ebp - 0x110]
call fcn.10152120
mov eax, dword [0x10a0c488]
inc dword [eax + 0xc]
mov eax, dword [0x10a0c488]
push 2
pop ecx
cmp dword [eax + 0xc], ecx
mov dword [ebp - 4], ecx
jle 0x100f0e83
and dword [eax + 0xc], 0
mov eax, dword [0x10a0c488]
mov eax, dword [eax + 0xc]
inc eax
push eax
lea eax, [ebp - 0x110]
push 0x1018bd90
push eax
call fcn.10151f80
mov ecx, dword [0x10a0c444]
add esp, 0xc
push 0xb
mov ebx, 0xdc
push ebx
call fcn.10096960
fld1
fstp dword [ebp - 0x224]
push 0x12
push 0x24
fld1
fstp dword [ebp - 0x220]
push 0x17
push 0x1ba
fld1
sub esp, 0x10
fstp dword [ebp - 0x21c]
mov edi, esp
fld1
lea esi, [ebp - 0x224]
sub esp, 0x10
fstp dword [ebp - 0x218]
lea ecx, [ebp - 0x110]
fld1
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
fstp dword [ebp - 0x224]
fld1
fstp dword [ebp - 0x220]
mov edi, esp
fld1
lea esi, [ebp - 0x224]
fstp dword [ebp - 0x21c]
push 0
fld1
fstp dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.10151f50
sub esp, 0x100
mov ecx, esp
mov dword [ebp - 0x228], esp
push eax
call fcn.10152140
mov ecx, dword [0x10a0c444]
push 0xb
push ebx
call fcn.1009f3ef
mov ecx, dword [0x10a0c444]
push 0xb
dec ebx
push ebx
call fcn.10096960
fld1
fstp dword [ebp - 0x224]
push 0x12
push 0x24
fld1
fstp dword [ebp - 0x220]
push 0x1cb
fld1
push 3
sub esp, 0x10
fstp dword [ebp - 0x21c]
lea esi, [ebp - 0x224]
fld1
mov edi, esp
fstp dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
fld1
movsd dword es:[edi], dword [esi]
fstp dword [ebp - 0x224]
fld1
fstp dword [ebp - 0x220]
sub esp, 0x10
fld1
mov edi, esp
fstp dword [ebp - 0x21c]
lea esi, [ebp - 0x224]
fld1
push 0
lea ecx, [ebp - 0x110]
fstp dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.10151f50
sub esp, 0x100
mov ecx, esp
mov dword [ebp - 0x228], esp
push eax
call fcn.10152140
mov ecx, dword [0x10a0c444]
push 0xb
push ebx
call fcn.1009f3ef
mov ecx, dword [0x10a0c488]
call fcn.100eefbc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
jmp 0x100f0a00
mov ecx, dword [0x10a0c444]
push 0xdb
call fcn.100951e2
test al, al
je 0x100f1111
mov eax, dword [0x10a0c488]
mov byte [eax], 0
mov ecx, dword [0x10a0c444]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x214]
push eax
mov edi, 0xdb
push edi
call fcn.100952a4
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
mov ebx, 0xdc
push dword [ebp - 0x214]
push ebx
call fcn.10095241
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x10a0c444]
push 0
add eax, 0x28
push eax
push dword [ebp - 0x214]
mov esi, 0x13b
push esi
call fcn.10095241
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x10a0c444]
push 0
add eax, 0x50
push eax
push dword [ebp - 0x214]
push 0x13d
call fcn.10095241
mov ecx, dword [0x10a0c444]
push edi
call fcn.1009c3ae
mov ecx, dword [0x10a0c444]
push ebx
call fcn.1009c38b
mov ecx, dword [0x10a0c444]
add edi, 0x61
push edi
call fcn.100951e2
test al, al
je 0x100f10e2
mov ecx, dword [0x10a0c444]
push edi
call fcn.1009c3ae
mov ecx, dword [0x10a0c444]
push esi
call fcn.1009c38b
mov ecx, dword [0x10a0c444]
mov esi, 0x13e
push esi
call fcn.100951e2
test al, al
je 0x100f1218
mov ecx, dword [0x10a0c444]
push esi
call fcn.1009c3ae
push 0x13d
jmp 0x100f120d
mov ecx, dword [0x10a0c444]
mov ebx, 0xdc
push ebx
call fcn.100951e2
test al, al
je 0x100f1218
mov eax, dword [0x10a0c488]
mov byte [eax], 1
mov ecx, dword [0x10a0c444]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x214]
push eax
push ebx
call fcn.100952a4
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
mov esi, 0xdb
push dword [ebp - 0x214]
push esi
call fcn.10095241
mov eax, dword [ebp - 0x214]
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
add eax, 0x28
push eax
mov edi, 0x13c
push edi
call fcn.10095241
mov eax, dword [ebp - 0x214]
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
add eax, 0x50
push eax
push 0x13e
call fcn.10095241
mov ecx, dword [0x10a0c444]
push ebx
call fcn.1009c3ae
mov ecx, dword [0x10a0c444]
push esi
call fcn.1009c38b
mov ecx, dword [0x10a0c444]
add esi, 0x60
push esi
call fcn.100951e2
test al, al
je 0x100f11e7
mov ecx, dword [0x10a0c444]
push esi
call fcn.1009c3ae
mov ecx, dword [0x10a0c444]
push edi
call fcn.1009c38b
mov ecx, dword [0x10a0c444]
mov esi, 0x13d
push esi
call fcn.100951e2
test al, al
je 0x100f1218
mov ecx, dword [0x10a0c444]
push esi
call fcn.1009c3ae
push 0x13e
mov ecx, dword [0x10a0c444]
call fcn.1009c38b
mov eax, dword [0x10a0c400]
movzx eax, byte [eax + 0x44]
mov ecx, dword [0x10a0c488]
push eax
call fcn.100ef7aa
jmp 0x100f14d7
mov eax, dword [0x10a0c488]
add eax, 8
inc dword [eax]
cmp dword [eax], 3
jl 0x100f1243
mov dword [eax], ecx
cmp dword [eax], edx
jg 0x100f1249
mov dword [eax], edx
mov eax, dword [eax]
sub eax, edx
je 0x100f147e
dec eax
je 0x100f130e
dec eax
jne 0x100f14d7
mov ecx, dword [0x10a0c444]
mov esi, 0xdb
push esi
call fcn.100951e2
test al, al
mov ecx, dword [0x10a0c444]
jne 0x100f1390
mov ebx, 0xdc
push ebx
call fcn.100951e2
test al, al
je 0x100f14d7
mov ecx, dword [0x10a0c444]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x214]
push eax
push ebx
call fcn.100952a4
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x10a0c444]
push 0
add eax, 0x50
push eax
push dword [ebp - 0x214]
add esi, 0x62
push esi
call fcn.10095241
mov ecx, dword [0x10a0c444]
push esi
call fcn.1009c38b
mov ecx, dword [0x10a0c444]
mov esi, 0x13b
push esi
call fcn.100951e2
test al, al
jne 0x100f14d7
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x10a0c444]
push 0
add eax, 0x28
push eax
push dword [ebp - 0x214]
push esi
call fcn.10095241
push esi
jmp 0x100f1402
mov ecx, dword [0x10a0c444]
mov esi, 0xdb
push esi
call fcn.100951e2
test al, al
mov ecx, dword [0x10a0c444]
je 0x100f1412
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x214]
push eax
push esi
call fcn.100952a4
mov eax, dword [ebp - 0x214]
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
add eax, 0x28
push eax
mov edi, 0x13c
push edi
call fcn.10095241
mov ecx, dword [0x10a0c444]
push edi
call fcn.1009c38b
add esi, 0x63
jmp 0x100f146b
mov eax, dword [0x10a0c488]
add eax, 8
dec dword [eax]
cmp dword [eax], 3
jl 0x100f1243
mov dword [eax], 2
jmp 0x100f1243
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x214]
push eax
push esi
call fcn.100952a4
mov eax, dword [ebp - 0x214]
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
add eax, 0x50
push eax
mov esi, 0x13e
push esi
call fcn.10095241
mov ecx, dword [0x10a0c444]
push esi
call fcn.1009c38b
mov ecx, dword [0x10a0c444]
mov edi, 0x13c
push edi
call fcn.100951e2
test al, al
jne 0x100f14d7
mov eax, dword [ebp - 0x214]
mov ecx, dword [0x10a0c444]
push 0
push dword [ebp + 0xc]
add eax, 0x28
push eax
push edi
call fcn.10095241
push edi
mov ecx, dword [0x10a0c444]
call fcn.1009c38b
jmp 0x100f14d7
mov ebx, 0xdc
push ebx
call fcn.100951e2
test al, al
je 0x100f14d7
mov ecx, dword [0x10a0c444]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x214]
push eax
push ebx
call fcn.100952a4
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x10a0c444]
push 0
add eax, 0x28
push eax
push dword [ebp - 0x214]
mov esi, 0x13b
push esi
call fcn.10095241
mov ecx, dword [0x10a0c444]
push esi
call fcn.1009c38b
add esi, 2
mov ecx, dword [0x10a0c444]
push esi
call fcn.100951e2
test al, al
je 0x100f14d7
push esi
jmp 0x100f14cc
mov ecx, dword [0x10a0c444]
push 0xdb
call fcn.100951e2
test al, al
mov ecx, dword [0x10a0c444]
je 0x100f14a9
push 0x13c
call fcn.1009c3ae
push 0x13e
jmp 0x100f14cc
push 0xdc
call fcn.100951e2
test al, al
je 0x100f14d7
mov ecx, dword [0x10a0c444]
push 0x13b
call fcn.1009c3ae
push 0x13d
mov ecx, dword [0x10a0c444]
call fcn.1009c3ae
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.1015901e
pop edi
pop esi
pop ebx
leave
ret