Function at 0x100272be
Capabilities:
Hide graphical window
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 4], esp
call dword [sym.imp.USER32.dll_GetForegroundWindow]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100272e6
push 6
call fcn.1007bad9
add esp, 4
mov dword [ebp - 0xc], eax
mov eax, dword [0x100d5b90]
cmp dword [ebp - 0xc], eax
jne 0x1002761d
mov dword [ebp - 4], esp
push 0x23
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1002731b
push 6
call fcn.1007bad9
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1002733c
cmp dword [0x100d5c78], 0
jne 0x1002733c
mov eax, 1
jmp 0x1002733e
xor eax, eax
test eax, eax
je 0x10027431
mov ebx, dword [0x100d5b98]
call fcn.100011c7
mov eax, 4
cmp eax, ecx
jl 0x10027367
push 1
call fcn.1007bad9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x100]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x100273e2
mov ebx, dword [0x100d5b98]
call fcn.100011c7
mov eax, 4
cmp eax, ecx
jl 0x100273b9
push 1
call fcn.1007bad9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 1
push 1
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x100]
call fcn.10014ff1
jmp 0x10027427
mov ebx, dword [0x100d5b98]
call fcn.100011c7
mov eax, 4
cmp eax, ecx
jl 0x10027403
push 1
call fcn.1007bad9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 1
push 0
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x100]
call fcn.10014ff1
mov dword [0x100d5c78], 1
mov dword [ebp - 4], esp
push 0x23
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10027455
push 6
call fcn.1007bad9
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x10027476
cmp dword [0x100d5c78], 1
jne 0x10027476
mov eax, 1
jmp 0x10027478
xor eax, eax
test eax, eax
je 0x1002748a
mov dword [0x100d5c78], 0
mov dword [ebp - 4], esp
push 0x2e
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100274ae
push 6
call fcn.1007bad9
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x100274cf
cmp dword [0x100d5c7c], 0
jne 0x100274cf
mov eax, 1
jmp 0x100274d1
xor eax, eax
test eax, eax
je 0x100275c4
mov ebx, dword [0x100d5b98]
call fcn.100011c7
mov eax, 0
cmp eax, ecx
jl 0x100274fa
push 1
call fcn.1007bad9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x100]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x10027575
mov ebx, dword [0x100d5b98]
call fcn.100011c7
mov eax, 0
cmp eax, ecx
jl 0x1002754c
push 1
call fcn.1007bad9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 1
push 1
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x100]
call fcn.10013f65
jmp 0x100275ba
mov ebx, dword [0x100d5b98]
call fcn.100011c7
mov eax, 0
cmp eax, ecx
jl 0x10027596
push 1
call fcn.1007bad9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 1
push 0
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x100]
call fcn.10013f65
mov dword [0x100d5c7c], 1
mov dword [ebp - 4], esp
push 0x2e
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100275e8
push 6
call fcn.1007bad9
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x10027609
cmp dword [0x100d5c7c], 1
jne 0x10027609
mov eax, 1
jmp 0x1002760b
xor eax, eax
test eax, eax
je 0x1002761d
mov dword [0x100d5c7c], 0
mov dword [ebp - 4], esp
push 0x24
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10027641
push 6
call fcn.1007bad9
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1002766f
cmp dword [0x100d5c80], 0
jne 0x1002766f
cmp dword [0x100d5c84], 0
jne 0x1002766f
mov eax, 1
jmp 0x10027671
xor eax, eax
test eax, eax
je 0x10027736
mov dword [ebp - 4], esp
push dword [0x100d5bac]
call dword [sym.imp.USER32.dll_IsWindowVisible]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1002769e
push 6
call fcn.1007bad9
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jne 0x100276bf
cmp dword [0x100d5c84], 0
jne 0x100276bf
mov eax, 1
jmp 0x100276c1
xor eax, eax
test eax, eax
je 0x10027702
mov dword [0x100d5c84], 1
mov dword [ebp - 4], esp
push 0
push dword [0x100d5bac]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100276fd
push 6
call fcn.1007bad9
add esp, 4
jmp 0x1002772c
mov dword [0x100d5c84], 1
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 7
push 0x100d5bb0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x54]
mov dword [0x100d5c80], 1
mov dword [ebp - 4], esp
push 0x24
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1002775a
push 6
call fcn.1007bad9
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x1002777b
cmp dword [0x100d5c80], 1
jne 0x1002777b
mov eax, 1
jmp 0x1002777d
xor eax, eax
test eax, eax
je 0x10027799
mov dword [0x100d5c80], 0
mov dword [0x100d5c84], 0
mov esp, ebp
pop ebp
ret