Function at 0x1003bcff
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 4], 0
fild dword [0x113efc00]
fstp qword [ebp - 0xc]
fld qword [ebp - 0xc]
fild dword [ebp + 8]
fstp qword [ebp - 0x14]
fadd qword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
call fcn.10001bbe
mov dword [ebp + 8], eax
fild dword [0x113efc04]
fstp qword [ebp - 0xc]
fld qword [ebp - 0xc]
fild dword [ebp + 0xc]
fstp qword [ebp - 0x14]
fadd qword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
call fcn.10001bbe
mov dword [ebp + 0xc], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [0x113efe50]
call fcn.1002bb90
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push dword [ebp - 0xc]
fild dword [ebp + 0x14]
fstp dword [ebp - 0x18]
push dword [ebp - 0x18]
fild dword [ebp + 0x10]
fstp dword [ebp - 0x1c]
push dword [ebp - 0x1c]
fild dword [ebp + 0xc]
fstp dword [ebp - 0x20]
push dword [ebp - 0x20]
fild dword [ebp + 8]
fstp dword [ebp - 0x24]
push dword [ebp - 0x24]
call fcn.1002ea6f
mov dword [ebp - 8], esp
push 1
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
cmp dword [ebp - 8], esp
je 0x1003bde1
push 0x155
push 0x4011237
push 6
call fcn.10068410
add esp, 0xc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x1003bee5
push dword [ebp + 8]
call fcn.10037111
test eax, eax
je 0x1003be6b
push dword [ebp + 0xc]
call fcn.1003717f
test eax, eax
je 0x1003be6b
fild dword [ebp + 8]
fstp qword [ebp - 0x14]
fld qword [ebp - 0x14]
fild dword [ebp + 0x10]
fstp qword [ebp - 0x1c]
fadd qword [ebp - 0x1c]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
call fcn.10001bbe
push eax
call fcn.10037148
test eax, eax
je 0x1003be6b
fild dword [ebp + 0xc]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp + 0x14]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.10001bbe
push eax
call fcn.100371b6
test eax, eax
je 0x1003be6b
mov eax, 1
jmp 0x1003be70
mov eax, 0
test eax, eax
je 0x1003bee5
fild dword [ebp + 8]
fstp qword [ebp - 0xc]
fld qword [ebp - 0xc]
fild dword [ebp + 0xc]
fstp qword [ebp - 0x14]
fadd qword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
call fcn.10001bbe
mov dword [0x113efeb0], eax
xor ecx, ecx
lea eax, [ebp - 4]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0xff
jg 0x1003bee2
mov dword [ebp - 8], esp
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
cmp dword [ebp - 8], esp
je 0x1003bede
push 0x2c2
push 0x4011237
push 6
call fcn.10068410
add esp, 0xc
pop ebx
pop ecx
jmp 0x1003bea1
add esp, 8
fild dword [ebp + 8]
fstp qword [ebp - 0xc]
fld qword [ebp - 0xc]
fild dword [ebp + 0xc]
fstp qword [ebp - 0x14]
fadd qword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fild dword [0x113efeb0]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x1c]
fsub qword [ebp - 0x24]
ftst
fnstsw ax
test ah, 1
je 0x1003bf14
fchs
fcomp qword [0x10083b4e]
fnstsw ax
test ah, 0x41
je 0x1003c044
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xff
call fcn.1002bb90
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push dword [ebp - 0xc]
push 0x3f800000
fild dword [ebp + 0x14]
fstp dword [ebp - 0x18]
push dword [ebp - 0x18]
fild dword [ebp + 0x10]
fstp dword [ebp - 0x1c]
push dword [ebp - 0x1c]
fild dword [ebp + 0xc]
fstp dword [ebp - 0x20]
push dword [ebp - 0x20]
fild dword [ebp + 8]
fstp dword [ebp - 0x24]
push dword [ebp - 0x24]
call fcn.1002e74e
xor ecx, ecx
lea eax, [ebp - 4]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0xff
jg 0x1003c03c
mov dword [ebp - 8], esp
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
cmp dword [ebp - 8], esp
je 0x1003bfcb
push 0x44b
push 0x4011237
push 6
call fcn.10068410
add esp, 0xc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x1003c035
cmp dword [ebp - 4], 0x1b
je 0x1003bff3
cmp dword [ebp - 4], 8
je 0x1003bff3
mov eax, 1
jmp 0x1003bff8
mov eax, 0
test eax, eax
je 0x1003c035
cmp dword [ebp - 4], 1
jne 0x1003c00f
jmp 0x1003c035
cmp dword [ebp - 4], 2
jne 0x1003c01e
jmp 0x1003c035
mov eax, dword [ebp - 4]
mov ebx, dword [ebp + 0x18]
mov dword [ebx], eax
mov dword [0x113efeb0], 0
jmp 0x1003c03c
pop ebx
pop ecx
jmp 0x1003bf8e
add esp, 8
jmp 0x1003c0a6
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xff8800
call fcn.1002bb90
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push dword [ebp - 0xc]
push 0x3f800000
fild dword [ebp + 0x14]
fstp dword [ebp - 0x18]
push dword [ebp - 0x18]
fild dword [ebp + 0x10]
fstp dword [ebp - 0x1c]
push dword [ebp - 0x1c]
fild dword [ebp + 0xc]
fstp dword [ebp - 0x20]
push dword [ebp - 0x20]
fild dword [ebp + 8]
fstp dword [ebp - 0x24]
push dword [ebp - 0x24]
call fcn.1002e74e
fild dword [ebp + 8]
fstp qword [ebp - 0xc]
fld qword [ebp - 0xc]
fadd qword [0x100838d8]
fstp qword [ebp - 0x14]
fild dword [ebp + 0xc]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x100838e0]
fstp qword [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
push dword [ebx]
call fcn.100301c7
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push dword [0x113efe3c]
call fcn.1002bb90
mov dword [ebp - 0x30], eax
push 1
push 0x41600000
push dword [ebp - 0x30]
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
fstp dword [ebp - 0x34]
push dword [ebp - 0x34]
fld qword [ebp - 0x14]
fstp dword [ebp - 0x38]
push dword [ebp - 0x38]
call fcn.1002bec8
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1003c126
push ebx
call fcn.10068422
add esp, 4
mov esp, ebp
pop ebp
ret 0x14