Function at 0x1000236f
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp byte [0x100222b4], 0
push ebx
push esi
push edi
mov ebx, ecx
je 0x100026db
mov ecx, dword [0x10021798]
mov eax, dword [ecx]
call dword [eax + 0x68]
test al, al
je 0x100026db
mov ecx, dword [0x10021798]
mov eax, dword [ecx]
call dword [eax + 0x144]
test al, al
jne 0x100026db
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x100026db
and dword [ebx], 0
lea edi, [ebx + 0x90]
and dword [edi], 0
or eax, 0xffffffff
and dword [edi + 4], 0
and dword [edi + 8], 0
and dword [ebx + 4], 0
and dword [ebx + 8], 0
push esi
mov word [ebx + 0x9c], ax
mov byte [ebx + 0xac], 0
call fcn.100067aa
test al, al
jne 0x100026db
cmp dword [0x100222d4], 3
jne 0x10002414
push dword [0x10021030]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x100026db
push esi
lea eax, [ebp - 0x14]
push eax
call fcn.1000661f
mov ecx, dword [0x10021798]
and dword [ebp + 0xc], 0
mov eax, dword [ecx]
call dword [eax + 0x54]
test eax, eax
js 0x10002606
mov esi, dword [ebp + 0xc]
mov ecx, dword [0x10021798]
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp esi, eax
je 0x100025ef
mov ecx, dword [0x100217ac]
push esi
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edi, eax
test edi, edi
je 0x100025ef
lea ecx, [edi + 8]
mov edx, dword [ecx]
call dword [edx + 0x20]
test al, al
jne 0x100025ef
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
mov edi, eax
mov dword [ebp - 8], edi
test edi, edi
je 0x100025ef
lea ecx, [edi + 8]
mov edx, dword [ecx]
call dword [edx + 0x20]
test al, al
jne 0x100025ef
mov eax, dword [0x10021e28]
cmp dword [eax + edi], 0
jne 0x100025ef
mov ecx, dword [0x10021798]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
lea eax, [ebx + 0xc]
push eax
push esi
call edx
test al, al
je 0x100025ef
cmp byte [esi + 0x100223c5], 0
jne 0x100025ef
cmp byte [0x100222cf], 0
jne 0x100024f3
mov eax, dword [0x10021e10]
mov esi, dword [eax + edi]
call fcn.1000151a
mov ecx, dword [0x10021e10]
cmp esi, dword [ecx + eax]
mov esi, dword [ebp + 0xc]
je 0x100025ef
mov eax, dword [0x10021e0c]
cmp dword [eax + edi], 0
jle 0x100025ef
mov eax, dword [ebp + 0x10]
cmp dword [eax + 0x6fc], 0
jle 0x100025ef
and dword [ebp - 4], 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x10021f68
call fcn.100030ca
push edi
lea eax, [ebp - 0x20]
push eax
call fcn.1000661f
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100017d5
comiss xmm0, dword [ebp - 4]
ja 0x100025ef
cmp byte [0x100222c4], 0
push dword [0x100222b8]
jne 0x10002568
push edi
lea edi, [ebx + 0x90]
push edi
call fcn.10001f0a
test al, al
je 0x100025ef
jmp 0x10002580
lea edx, [ebx + 0x90]
mov ecx, edi
call fcn.10001b8d
pop ecx
test al, al
je 0x100025ef
lea edi, [ebx + 0x90]
cmp byte [0x100222d8], 0
je 0x100025b5
mov esi, edi
mov ecx, dword [ebp - 8]
sub esp, 0xc
mov edi, esp
sub esp, 0xc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.10001900
add esp, 0x18
test al, al
je 0x100025ec
lea edi, [ebx + 0x90]
jmp 0x100025c6
push ecx
push ecx
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
call fcn.10001765
test al, al
je 0x100025ef
mov eax, dword [edi]
mov dword [ebx], eax
mov eax, dword [edi + 4]
mov dword [ebx + 4], eax
mov eax, dword [ebp + 0xc]
mov word [ebx + 0x9c], ax
mov eax, dword [ebx + 0x94]
mov dword [ebx + 4], eax
mov eax, dword [ebx + 0x98]
mov dword [ebx + 8], eax
mov esi, dword [ebp + 0xc]
mov ecx, dword [0x10021798]
inc esi
mov dword [ebp + 0xc], esi
mov eax, dword [ecx]
call dword [eax + 0x54]
cmp esi, eax
jle 0x10002438
xor ecx, ecx
inc ecx
cmp word [ebx + 0x9c], cx
jl 0x100026db
mov esi, dword [ebp + 8]
mov byte [ebx + 0xac], cl
mov eax, dword [0x100222d4]
cmp eax, ecx
jne 0x1000262d
or dword [esi + 0x24], ecx
jmp 0x1000269d
cmp eax, 2
jne 0x1000269d
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10021740]
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10023114]
cmp eax, dword [ecx + 4]
jle 0x1000267d
push 0x10023114
call fcn.10018ad3
cmp dword [0x10023114], 0xffffffff
pop ecx
jne 0x1000267d
call edi
add eax, 0x3b
push 0x10023114
mov dword [0x10023118], eax
call fcn.10018a89
pop ecx
call edi
mov edi, eax
push edi
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
or dword [esi + 0x24], 1
pop ecx
cmp edi, dword [0x10023118]
jbe 0x1000269d
lea eax, [edi + 1]
mov dword [0x10023118], eax
lea edi, [ebx + 0xa0]
push edi
push ebx
lea eax, [ebp - 0x14]
push eax
call fcn.10001617
mov eax, dword [edi]
mov dword [esi + 0xc], eax
mov eax, dword [edi + 4]
mov dword [esi + 0x10], eax
mov eax, dword [edi + 8]
mov dword [esi + 0x14], eax
cmp dword [0x100222c0], 0
jne 0x100026d4
mov ecx, dword [0x10021798]
push edi
mov eax, dword [ecx]
call dword [eax + 0x50]
mov byte [ebx + 0xac], 0
pop edi
pop esi
pop ebx
leave
ret 0xc