Function at 0x10002770
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push esi
push edi
push 1
mov esi, ecx
call ebx
and eax, 1
push 2
mov dword [ebp - 0x4c], eax
call ebx
and eax, 1
push 0x25
mov dword [ebp - 0x48], eax
call ebx
and eax, 1
push 0x27
mov dword [ebp - 0x50], eax
call ebx
and eax, 1
push 0x26
mov dword [ebp - 0x54], eax
call ebx
and eax, 1
push 0x28
mov dword [ebp - 0x58], eax
call ebx
and eax, 1
lea ecx, [esi + 0x1d18]
cmp byte [esi + 0x1d3d], 0
lea edi, [esi + 0x1d00]
mov dword [ebp - 0x5c], eax
lea ebx, [esi + 0x1d04]
lea eax, [esi + 0x1d1c]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x30], eax
lea edx, [esi + 0x1d24]
lea eax, [esi + 0x1d20]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x34], eax
lea ecx, [esi + 0x1d2c]
lea eax, [esi + 0x1d38]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], ecx
jne 0x1000285f
mov dword [edi], 0x19
mov dword [ebx], 0x19
mov dword [esi + 0x1d18], 0x1c2
mov dword [esi + 0x1d1c], 0x1e
mov dword [esi + 0x1d20], 0xfa
mov dword [ecx], 0x10
mov dword [esi + 0x1d30], 0x10
mov dword [edx], 0x10
mov dword [eax], 0
mov word [esi + 0x1d3c], 0x101
jmp 0x10002889
mov dword [ebp - 0x1c], eax
lea eax, [esi + 0x1d1c]
mov dword [ebp - 0xc], ecx
lea ecx, [esi + 0x1d18]
mov dword [ebp - 0x30], eax
lea eax, [esi + 0x1d20]
mov dword [ebp - 8], ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x34], eax
push 0x76
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x100028a5
cmp byte [esi + 0x1d3c], 0
sete al
mov byte [esi + 0x1d3c], al
cmp byte [esi + 0x1d3c], 0
je 0x1000324f
lea eax, [esi + 0x1d10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esi + 0x1d10]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0xc]
push dword [ebp + 8]
mov ebx, dword [ebx]
mov edi, dword [edi]
add ebx, 8
mov eax, dword [ecx]
add eax, 0xa
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
push 0xff707271
push 1
mov eax, dword [eax]
add eax, 5
push eax
mov dword [ebp - 0x28], eax
lea eax, [ebx - 1]
push eax
push edi
call fcn.10002590
push dword [ebp + 8]
lea eax, [edi - 1]
push 0xff707271
push dword [ebp - 0x20]
push 1
push ebx
push eax
call fcn.10002590
push dword [ebp + 8]
mov eax, dword [ebp - 0x28]
push 0xff707271
push dword [ebp - 0x20]
add eax, edi
push 1
push ebx
push eax
call fcn.10002590
push dword [ebp + 8]
mov eax, dword [ebp - 0x20]
push 0xff707271
push 1
push dword [ebp - 0x28]
add eax, ebx
push eax
push edi
call fcn.10002590
push dword [ebp + 8]
mov eax, dword [ebp - 0xc]
mov edi, dword [ebp - 4]
mov ebx, dword [ebp - 0x14]
push 0xff185097
mov eax, dword [eax]
add eax, 0xa
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax]
add eax, 5
push eax
mov eax, dword [edi]
add eax, 8
push eax
push dword [ebx]
call fcn.10002590
mov ecx, dword [ebp - 0x10]
imul eax, dword [ecx], 0x32
add eax, 3
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax]
add eax, 5
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov eax, ecx
push dword [ebp + 8]
mov edi, dword [edi]
mov ebx, dword [ebx]
add edi, 0xa
cdq
sub eax, edx
sar eax, 1
add eax, ecx
push 0xff707271
add edi, eax
push 1
push dword [ebp - 0x20]
lea eax, [edi - 1]
push eax
push ebx
call fcn.10002590
push dword [ebp + 8]
lea eax, [ebx - 1]
push 0xff707271
push dword [ebp - 0x18]
push 1
push edi
push eax
call fcn.10002590
push dword [ebp + 8]
mov eax, dword [ebp - 0x20]
push 0xff707271
push dword [ebp - 0x18]
add eax, ebx
push 1
push edi
push eax
call fcn.10002590
push dword [ebp + 8]
mov eax, dword [ebp - 0x18]
push 0xff707271
push 1
push dword [ebp - 0x20]
add eax, edi
push eax
push ebx
call fcn.10002590
mov eax, dword [ebp - 0x10]
push dword [ebp + 8]
mov edi, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x14]
imul eax, dword [eax], 0x32
push 0xb4000000
mov ecx, dword [edi]
add eax, 2
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax]
add eax, 5
push eax
mov eax, ecx
add ecx, 0xa
cdq
sub eax, edx
mov edx, dword [ebp - 4]
sar eax, 1
add eax, dword [edx]
add eax, ecx
push eax
push dword [ebx]
call fcn.10002590
push dword [ebp + 8]
mov eax, dword [ebp - 8]
push 0xff185097
push 0x17
mov eax, dword [eax]
add eax, 5
push eax
mov eax, dword [ebp - 0x10]
imul ecx, dword [eax], 0x32
mov eax, dword [edi]
cdq
sub eax, edx
sar eax, 1
add ecx, dword [edi]
add eax, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx]
add ecx, 0xd
add eax, ecx
push eax
push dword [ebx]
call fcn.10002590
mov ecx, dword [ebp - 8]
push dword [ebp + 8]
mov ebx, dword [ebx]
push 0xff707271
mov eax, dword [ecx]
add eax, 5
mov dword [ebp - 0x20], eax
mov eax, edi
push 1
push dword [ebp - 0x20]
mov edi, dword [eax]
mov eax, dword [ebp - 0x10]
imul ecx, dword [eax], 0x32
mov eax, edi
cdq
add edi, 0xd
sub eax, edx
sar eax, 1
add ecx, eax
mov eax, dword [ebp - 4]
add ecx, dword [eax]
add edi, ecx
lea eax, [edi - 1]
push eax
push ebx
call fcn.10002590
push dword [ebp + 8]
lea eax, [ebx - 1]
push 0xff707271
push 0x17
push 1
push edi
push eax
call fcn.10002590
push dword [ebp + 8]
mov eax, dword [ebp - 0x20]
push 0xff707271
push 0x17
push 1
push edi
add eax, ebx
push eax
call fcn.10002590
push dword [ebp + 8]
lea eax, [edi + 0x17]
push 0xff707271
push 1
push dword [ebp - 0x20]
push eax
push ebx
call fcn.10002590
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 0x14]
push 0x10021b74
push 0xff80ff00
mov eax, dword [eax]
mov ecx, dword [ebx]
add eax, 0xe
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax]
lea eax, [eax + ecx*2]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x37
push eax
push esi
call fcn.100026c0
mov eax, dword [ebp - 0xc]
add esp, 0x14
mov edi, dword [eax]
push str.______MemoryCheat.com___
push 0xff80ff00
mov ecx, dword [ebp - 0x10]
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov edx, dword [ecx]
shl edx, 4
sub edx, dword [ecx]
mov ecx, dword [ebp - 4]
lea eax, [eax + edx*4]
add eax, 0x11
add eax, dword [ecx]
mov ecx, dword [ebx]
add eax, edi
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax]
lea eax, [eax + ecx*2]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x64
push eax
push esi
call fcn.100026c0
add esp, 0x14
mov dword [esi + 0x1d34], 0
mov ecx, esi
push 0x10021bac
push 0x10026838
push 0x10021bb8
call fcn.10002470
push 0x10021bac
push 0x1002670c
push 0x10021bb8
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100266d8
push 0x10021bc4
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100266dc
push 0x10021bd8
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100266e0
push 0x10021bf0
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100266e4
push 0x10021c08
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100266e8
push 0x10021c1c
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100285f0
push str.ESP_Item
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10028618
push str.ESPZombie
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100266ec
push 0x10021c48
mov ecx, esi
call fcn.10002470
push 0x10021c5c
push 0x100266f0
push 0x10021c70
mov ecx, esi
call fcn.10002470
push 0x10021c88
push 0x100266f4
push 0x10021c9c
mov ecx, esi
call fcn.10002470
push 0x10021cb8
push 0x100266f8
push 0x10021cc0
mov ecx, esi
call fcn.10002470
push 0x10021cdc
push 0x100266fc
push 0x10021ce8
mov ecx, esi
call fcn.10002470
push str.clodopen
push 0x100285fc
push str.NOAimbotTy_Noaimbotclan
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026820
push 0x10021d2c
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100285e4
push 0x10021d38
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026814
push 0x10021d4c
mov ecx, esi
call fcn.10002470
push 0x10021d5c
push 0x10026884
push 0x10021d68
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x1002683c
push 0x10021d74
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100285d8
push 0x10021d80
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026830
push 0x10021d8c
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026868
push 0x10021da8
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x1002688c
push 0x10021db4
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x1002682c
push 0x10021dc0
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026824
push 0x10021dcc
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026874
push 0x10021dd8
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100285f8
push 0x10021de8
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x1002687c
push 0x10021dfc
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026840
push 0x10021e08
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026680
push 0x10021e1c
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100285dc
push 0x10021e30
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026674
push 0x10021e3c
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10028614
push 0x10021e4c
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026828
push 0x10021e64
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x1002681c
push 0x10021e78
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026894
push 0x10021e88
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x100285e0
push 0x10021e98
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10028604
push 0x10021ea8
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10026818
push 0x10021ebc
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x1002861c
push 0x10021ecc
mov ecx, esi
call fcn.10002470
push 0x10021bac
push 0x10028600
push 0x10021ee0
mov ecx, esi
call fcn.10002470
mov ecx, dword [esi + 0x1d34]
xor ebx, ebx
test ecx, ecx
jle 0x1000311b
lea ecx, [esi + 0x64]
mov edx, 0xffea0000
mov dword [ebp - 0x20], ecx
nop
mov eax, dword [ecx + 0xc]
cmp dword [eax], 0
mov eax, 0xff00ff00
cmovg edx, eax
cmp dword [ecx], 2
mov dword [ebp - 0x28], edx
mov eax, 0xffffffff
mov edx, 0xffea0000
cmovne edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], edx
cmp dword [eax], ebx
jne 0x10002fb5
mov eax, dword [ebp - 0x10]
push dword [ebp + 8]
push 0xff4f5254
mov edi, dword [eax]
mov eax, dword [ebp - 0xc]
push edi
imul edi, ebx
mov ecx, dword [eax]
mov eax, dword [ebp - 8]
add edi, ecx
mov eax, dword [eax]
add eax, 3
push eax
mov eax, ecx
mov ecx, dword [ebp - 4]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ecx]
add eax, edi
mov edi, dword [ebp - 0x14]
add ecx, 0xb
add eax, ecx
push eax
mov eax, dword [edi]
inc eax
push eax
call fcn.10002590
mov dword [ebp - 0x24], 0xffde6a34
jmp 0x10002fb8
mov edi, dword [ebp - 0x14]
mov edi, dword [edi]
mov ecx, dword [esi + 0x1d10]
mov dword [ebp - 0x18], edi
cmp ecx, edi
jle 0x10003069
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], edi
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
add eax, edi
cmp ecx, eax
jge 0x10003069
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], edi
mov ecx, dword [eax]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], ecx
imul ecx, ebx
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
cdq
sub eax, edx
mov edx, eax
mov eax, dword [ebp - 4]
sar edx, 1
add ecx, edx
mov eax, dword [eax]
add ecx, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x2c]
add eax, ecx
mov dword [ebp - 0x44], eax
cmp dword [esi + 0x1d14], eax
jle 0x10003069
mov ecx, dword [ebp - 0x38]
lea eax, [ebx + 1]
imul eax, ecx
mov dword [ebp - 0x18], edi
add eax, edx
add eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x2c]
cmp dword [esi + 0x1d14], eax
jge 0x10003069
push dword [ebp + 8]
mov eax, dword [ebp - 0x40]
push 0xff4f5254
add eax, 3
push ecx
push eax
mov eax, dword [ebp - 0x44]
add eax, 0xb
push eax
lea eax, [edi + 1]
push eax
call fcn.10002590
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], 0xffde6a34
mov dword [eax], ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x10]
mov edi, dword [eax]
mov eax, ecx
cdq
sub eax, edx
imul edi, ebx
mov edx, dword [ebp - 0x20]
sar eax, 1
add edi, ecx
mov ecx, dword [ebp - 4]
add eax, edi
mov edi, 0xffea0000
add eax, dword [ecx]
cmp dword [edx], 2
mov ecx, dword [ebp - 0x28]
cmove ecx, edi
mov dword [ebp - 0x28], ecx
lea ecx, [eax + 0xe]
lea eax, [edx - 0x64]
push eax
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x24]
push ecx
mov eax, dword [eax]
add eax, dword [ebp - 0x18]
push eax
push esi
call fcn.100026c0
mov eax, dword [ebp - 0xc]
add esp, 0x14
mov edi, dword [eax]
mov eax, dword [ebp - 0x20]
add eax, 0xffffffce
push eax
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x28]
mov ecx, dword [eax]
mov eax, edi
imul ecx, ebx
cdq
sub eax, edx
sar eax, 1
add ecx, edi
mov edi, dword [ebp - 4]
add eax, ecx
mov ecx, dword [edi]
add ecx, 0xe
add eax, ecx
mov ecx, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, dword [ecx]
push eax
push esi
call fcn.100026c0
mov ecx, dword [ebp - 0x20]
inc ebx
add ecx, 0x74
add esp, 0x14
mov edx, 0xffea0000
mov dword [ebp - 0x20], ecx
cmp ebx, dword [esi + 0x1d34]
jl 0x10002f40
mov ecx, dword [esi + 0x1d34]
jmp 0x1000311e
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov edx, dword [esi + 0x1d10]
mov ebx, dword [eax]
cmp edx, ebx
jle 0x100031c2
mov eax, dword [ebp - 8]
mov eax, dword [eax]
add eax, ebx
cmp edx, eax
jge 0x100031c2
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc]
mov dword [ebp + 8], edx
imul ecx, dword [ebp + 8]
mov ebx, dword [eax]
mov eax, ebx
cdq
sub eax, edx
mov edx, dword [edi]
sar eax, 1
mov dword [ebp - 0x44], eax
mov edi, eax
add ecx, edi
mov eax, dword [esi + 0x1d14]
add ecx, edx
add ecx, ebx
cmp eax, ecx
jge 0x100031c2
cmp eax, edx
jle 0x100031c2
mov ecx, eax
sub ecx, ebx
cmp ecx, edx
jle 0x100031c2
sub eax, edi
sub eax, edx
sub eax, ebx
cdq
idiv dword [ebp + 8]
mov edx, eax
cmp edx, 0x3e7
je 0x100031c2
cmp dword [ebp - 0x48], 0
je 0x100031a5
imul ecx, edx, 0x74
mov ecx, dword [ecx + esi + 0x70]
mov eax, dword [ecx]
test eax, eax
jle 0x100031a5
dec eax
mov dword [ecx], eax
cmp dword [ebp - 0x4c], 0
je 0x100031c2
imul eax, edx, 0x74
mov ecx, dword [eax + esi + 0x70]
mov eax, dword [eax + esi + 0x68]
dec eax
mov edx, dword [ecx]
cmp edx, eax
jge 0x100031c2
lea eax, [edx + 1]
mov dword [ecx], eax
cmp dword [ebp - 0x50], 0
mov ecx, dword [ebp - 0x1c]
je 0x100031db
imul eax, dword [ecx], 0x74
mov edx, dword [eax + esi + 0x70]
mov eax, dword [edx]
test eax, eax
jle 0x100031db
dec eax
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je 0x100031f8
imul eax, dword [ecx], 0x74
mov edx, dword [eax + esi + 0x70]
mov eax, dword [eax + esi + 0x68]
dec eax
mov edi, dword [edx]
cmp edi, eax
jge 0x100031f8
lea eax, [edi + 1]
mov dword [edx], eax
cmp dword [ebp - 0x58], 0
mov edx, dword [ecx]
je 0x10003217
test edx, edx
jne 0x1000320a
mov edx, dword [esi + 0x1d34]
dec edx
imul eax, edx, 0x74
mov dword [ecx], edx
cmp dword [eax + esi + 0x64], 0
je 0x10003200
cmp dword [ebp - 0x5c], 0
jne 0x10003227
imul eax, edx, 0x74
cmp dword [eax + esi + 0x64], 0
jne 0x10003242
mov edi, dword [esi + 0x1d34]
nop dword [eax]
lea eax, [edx + 1]
cdq
idiv edi
imul eax, edx, 0x74
mov dword [ecx], edx
cmp dword [eax + esi + 0x64], 0
je 0x10003230
mov eax, dword [esi + 0x1d34]
cmp edx, eax
jle 0x1000324f
dec eax
mov dword [ecx], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4