Function at 0x3006d9e2
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
and dword [ebp - 0x24], 0
or dword [ebp - 0xc], 0xffffffff
and dword [ebp - 0x10], 0
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
mov ebx, eax
push dword [ebx + 0x100]
call esi
push dword [ebx + 0xfc]
mov dword [ebp - 0x20], eax
call esi
push dword [ebx + 0xf8]
mov dword [ebp - 0x28], eax
call esi
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
mov dword [ebp - 0x14], eax
call esi
push 0x11
shr eax, 8
movzx edi, al
mov dword [ebp - 0x18], edi
call esi
xor ecx, ecx
shr eax, 8
movzx eax, al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0xb0]
cmp eax, dword [ebx + 0xc4]
setne cl
test edi, edi
mov dword [ebp - 0x30], ecx
jne 0x3006dab0
test ecx, ecx
je 0x3006dabe
lea eax, [ebx + 0xc4]
push eax
push dword [ebx + 0x1c8]
lea eax, [ebx + 0xb0]
mov esi, ebx
call fcn.30069310
cmp dword [ebp + 0xc], edi
jg 0x3006da8e
cmp dword [ebp + 0x10], edi
jg 0x3006da8e
lea eax, [ebx + 0xb0]
lea edi, [ebx + 0xc4]
jmp 0x3006da9a
lea eax, [ebx + 0xc4]
lea edi, [ebx + 0xb0]
push 5
pop ecx
mov esi, eax
rep movsd dword es:[edi], dword [esi]
push 5
lea edi, [ebx + 0xd8]
pop ecx
mov esi, eax
rep movsd dword es:[edi], dword [esi]
jmp 0x3006dabe
xor ecx, ecx
cmp dword [ebx + 0xd8], eax
sete cl
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, ecx
imul eax, eax, 0x14
add ecx, 9
imul ecx, ecx, 0x14
add eax, ebx
lea esi, [eax + 0xb0]
mov dword [ebp - 0x2c], eax
mov eax, dword [esi]
mov dword [ebp - 4], eax
mov eax, dword [ecx + ebx]
xor edx, edx
cmp dword [ebp + 0xc], edx
mov dword [ebp - 8], eax
je 0x3006dd4c
cmp dword [ebp + 0x10], edx
jne 0x3006ddc7
cmp dword [ebp - 0x30], edx
je 0x3006db04
cmp dword [ebp - 0x18], edx
je 0x3006dbdf
mov edi, dword [ebp - 4]
add edi, dword [ebp + 0xc]
mov eax, ebx
push edi
mov dword [ebp - 4], edi
call fcn.30068aeb
test eax, eax
je 0x3006db26
cmp dword [ebp + 0xc], 0
jle 0x3006db22
inc edi
jmp 0x3006db23
dec edi
mov dword [ebp - 4], edi
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x3006dba4
cmp dword [ebp + 0xc], eax
mov eax, dword [ebp - 4]
push 5
lea edi, [ebp - 0x44]
pop ecx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x44], eax
mov ecx, ebx
lea eax, [ebp - 0x44]
jge 0x3006db6a
push 0
call fcn.3006d7f5
mov eax, dword [ebp - 0x44]
test eax, eax
jl 0x3006db63
mov ecx, dword [ebp - 0x14]
cmp byte [eax + ecx], 0xd
jne 0x3006db63
mov dword [ebp - 0x10], 1
cmp dword [ebp - 4], eax
jge 0x3006db9b
jmp 0x3006db95
push eax
xor eax, eax
call fcn.3006d7f5
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x3006db8a
mov ecx, dword [ebp - 0x14]
cmp byte [eax + ecx - 1], 0xd
jne 0x3006db8a
mov dword [ebp - 0x10], 1
cmp dword [ebp - 4], eax
jl 0x3006db9b
cmp dword [ebp - 0x18], 0
je 0x3006db9b
cmp dword [ebp - 0x10], 0
je 0x3006dbdf
and dword [ebp - 0x1c], 0
mov dword [ebp - 4], eax
jmp 0x3006dbdf
cmp dword [ebp + 0xc], eax
jle 0x3006dbbf
cmp edi, dword [ebx + 0xec]
jge 0x3006dbdf
cmp edi, eax
je 0x3006dbdf
mov eax, dword [ebp - 0x14]
cmp byte [eax + edi - 1], 0xd
jmp 0x3006dbd6
cmp edi, eax
jl 0x3006df1d
cmp edi, dword [ebx + 0xec]
jge 0x3006dbdf
mov eax, dword [ebp - 0x14]
cmp byte [eax + edi], 0xd
jne 0x3006dbdf
mov dword [ebp - 0x10], 1
mov esi, dword [ebp - 4]
xor edi, edi
cmp esi, edi
jl 0x3006df1d
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x20]
imul eax, eax, 0x30
add eax, edx
mov ecx, dword [eax + 0x24]
cmp esi, ecx
jge 0x3006dc47
cmp dword [ebp - 8], edi
je 0x3006df1d
dec dword [ebp - 8]
mov eax, dword [ebp - 8]
imul eax, eax, 0x30
lea ecx, [eax + edx]
mov eax, dword [ecx + 0x2c]
add eax, dword [ecx + 0x24]
mov dword [ebp - 4], eax
je 0x3006de10
mov ecx, dword [ebp - 0x14]
cmp byte [ecx + eax - 1], 0x20
je 0x3006dc3e
cmp dword [ebp - 0x18], edi
je 0x3006de10
cmp dword [ebp - 0x10], edi
jne 0x3006de10
dec eax
mov dword [ebp - 4], eax
jmp 0x3006de10
mov eax, dword [eax + 0x2c]
add eax, ecx
cmp esi, eax
jg 0x3006dcf3
jne 0x3006dc7b
cmp dword [ebp - 0x18], edi
je 0x3006dc66
cmp dword [ebp - 0x24], 1
jne 0x3006dc66
cmp dword [ebp + 0xc], edi
jg 0x3006dc80
cmp esi, dword [ebx + 0xec]
jge 0x3006dcf3
mov ecx, dword [ebp - 0x14]
cmp byte [ecx + esi], 0xd
jne 0x3006dcf3
cmp dword [ebp + 0xc], edi
jle 0x3006dcba
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0xb8]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0xc], eax
imul eax, eax, 0x50
add eax, ecx
mov ecx, dword [eax + 0x30]
add ecx, dword [eax + 0x2c]
cmp esi, ecx
jl 0x3006de10
mov eax, dword [ebx + 0xf0]
dec eax
cmp dword [ebp - 0xc], eax
jge 0x3006de10
inc dword [ebp - 0xc]
jmp 0x3006de10
jge 0x3006de10
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0xb8]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0xc], eax
imul eax, eax, 0x50
add eax, ecx
mov ecx, dword [eax + 0x30]
add ecx, dword [eax + 0x2c]
cmp esi, ecx
jge 0x3006de10
cmp dword [ebp - 0xc], edi
je 0x3006de10
dec dword [ebp - 0xc]
jmp 0x3006de10
mov ecx, dword [ebx + 0xf4]
dec ecx
cmp dword [ebp - 8], ecx
jge 0x3006dd3f
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
imul eax, eax, 0x30
cmp dword [ebp - 0x18], 0
mov eax, dword [eax + edx + 0x24]
mov dword [ebp - 4], eax
je 0x3006de10
cmp eax, dword [ebx + 0xec]
jge 0x3006de10
cmp dword [ebp - 0x10], 0
jne 0x3006de10
cmp dword [ebp - 0x24], 1
jne 0x3006de10
inc eax
jmp 0x3006dc3f
cmp esi, eax
jle 0x3006de10
jmp 0x3006df1d
cmp dword [ebp + 0x10], edx
je 0x3006dded
mov dword [ebp - 0x1c], edx
jle 0x3006dd6b
mov eax, dword [ebx + 0xf4]
dec eax
cmp dword [ebp - 8], eax
jge 0x3006dd6b
inc dword [ebp - 8]
jmp 0x3006dd78
cmp dword [ebp + 0x10], edx
jge 0x3006dd78
cmp dword [ebp - 8], edx
je 0x3006dd78
dec dword [ebp - 8]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0xbc]
mov edi, dword [ebp - 8]
lea ecx, [ebp - 0xc]
imul edi, edi, 0x30
add edi, dword [ebp - 0x20]
push ecx
lea ecx, [ebp + 0x10]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp + 0x10], eax
push dword [ebx + 0xf0]
push dword [ebp - 0x28]
push dword [ebx + 0x1cc]
push dword [ebx + 0x1c8]
call fcn.3006c51b
mov dword [ebp - 4], eax
push eax
mov eax, ebx
call fcn.30068aeb
test eax, eax
je 0x3006de10
inc dword [ebp - 4]
jmp 0x3006de10
jle 0x3006dded
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x20]
imul eax, eax, 0x30
cmp dword [ebp + 0xc], edx
jle 0x3006dde4
add eax, ecx
mov ecx, dword [eax + 0x2c]
add ecx, dword [eax + 0x24]
mov dword [ebp - 4], ecx
jmp 0x3006de0d
mov eax, dword [ecx + eax + 0x24]
mov dword [ebp - 4], eax
jmp 0x3006de0d
cmp dword [ebp + 0xc], edx
jle 0x3006de07
mov eax, dword [ebx + 0xec]
mov dword [ebp - 4], eax
mov eax, dword [ebx + 0xf4]
dec eax
mov dword [ebp - 8], eax
jmp 0x3006de0d
mov dword [ebp - 4], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x20]
mov esi, dword [ebp - 4]
mov dword [ebp - 0x40], eax
imul eax, eax, 0x30
add eax, ecx
xor ecx, ecx
cmp esi, dword [eax + 0x24]
mov edi, ebx
sete cl
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0xc]
push ecx
push esi
push dword [ebp - 0x14]
push dword [ebp - 0x28]
push eax
call fcn.3006c369
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xc]
xor esi, esi
cmp dword [ebp - 0x1c], esi
mov dword [ebp - 0x3c], eax
je 0x3006de67
cmp dword [ebp + 0xc], esi
lea eax, [ebp - 0x44]
mov ecx, ebx
jge 0x3006de5f
push esi
jmp 0x3006de62
push eax
xor eax, eax
call fcn.3006d7f5
push dword [ebp + 8]
mov eax, ebx
call fcn.300692c8
cmp dword [ebp - 0x18], esi
jne 0x3006de86
push 5
lea edi, [ebx + 0xd8]
pop ecx
lea esi, [ebp - 0x44]
rep movsd dword es:[edi], dword [esi]
xor esi, esi
mov eax, dword [ebp - 0x44]
lea edi, [ebx + 0xd8]
cmp eax, dword [edi]
jne 0x3006dee9
cmp dword [ebp - 0x30], esi
je 0x3006deb7
cmp dword [ebp - 0x18], esi
je 0x3006deb7
lea eax, [ebx + 0xc4]
push eax
push dword [ebx + 0x1c8]
lea eax, [ebx + 0xb0]
mov esi, ebx
call fcn.30069310
push 5
pop ecx
push 5
lea esi, [ebp - 0x44]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 5
lea esi, [ebp - 0x44]
lea edi, [ebx + 0xb0]
rep movsd dword es:[edi], dword [esi]
pop ecx
push 1
push dword [ebp + 8]
lea esi, [ebp - 0x44]
lea edi, [ebx + 0xc4]
rep movsd dword es:[edi], dword [esi]
mov esi, ebx
call fcn.3006d1a2
jmp 0x3006def4
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.30069669
xor eax, eax
mov esi, ebx
call fcn.300697ab
push dword [ebp - 0x20]
lea eax, [ebp - 0x44]
push dword [ebp + 8]
mov ecx, ebx
call fcn.30069834
cmp dword [ebx + 0x1c0], 0
je 0x3006df1d
push 0
call fcn.3006b391
push dword [ebx + 0x100]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalUnlock]
call esi
push dword [ebx + 0xfc]
call esi
push dword [ebx + 0xf8]
call esi
pop edi
pop esi
pop ebx
leave
ret 0xc