Function at 0x10135a80
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x101fc850
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x10293044]
xor eax, esp
mov dword [esp + 0xb0], eax
push ebx
push esi
push edi
mov eax, dword [0x10293044]
xor eax, esp
push eax
lea eax, [esp + 0xc8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, ecx
lea ecx, [esp + 0x34]
push ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], eax
lea esi, [ebx - 0xa4]
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [esi + 4]
lea edx, [esp + 0x34]
push edx
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
lea eax, [esp + 0x4c]
push eax
push 0
mov dword [esp + 0x54], ecx
mov ecx, dword [esi + 4]
push 0x1111
push ecx
mov dword [esp + 0x60], edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
test edi, edi
je 0x10135c9e
cmp dword [ebx + 0x18], 0
je 0x10135c9e
push esi
call fcn.1002e370
push 0
lea eax, [esp + 0x18]
xor ecx, ecx
xor edx, edx
mov byte [ebx - 0x7b], 1
call fcn.1002d430
lea edx, [esp + 0x14]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [esi + 4]
lea eax, [esp + 0x14]
push eax
push ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x3c]
push ecx
xor eax, eax
push 0
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], edx
mov edx, dword [esi + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x20]
push 0x1111
push edx
mov dword [esp + 0x50], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebx - 0x70], eax
lea ebx, [esi + 4]
push edi
mov edx, ebx
call fcn.1002eca0
test eax, eax
je 0x10135bc6
mov eax, dword [ebx]
push 0x20
push edi
push 0x1127
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
and eax, 0x20
test al, 0x20
jne 0x10135be0
push 0
push esi
push 0x1002d980
push 1
push 0x3e8
call dword [sym.imp.WINMM.dll_timeSetEvent]
mov dword [esi + 0x48], eax
jmp 0x10135bf5
mov eax, dword [esi + 0x48]
test eax, eax
je 0x10135bf5
push eax
call dword [sym.imp.WINMM.dll_timeKillEvent]
mov dword [esi + 0x48], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movzx ebx, ax
shr ebx, 7
push edi
mov ecx, esi
and bl, 1
call fcn.10133790
mov esi, eax
xor edi, edi
cmp esi, edi
mov dword [esp + 0x14], esi
jne 0x10135c22
test bl, bl
je 0x10135db1
lea ecx, [esp + 0x5c]
push ecx
call fcn.1006bd00
mov dword [esp + 0xd0], edi
mov edx, dword [esp + 0x20]
mov ecx, dword [edx + 0x18]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
lea edx, [esp + 0x5c]
push edx
push esi
call eax
test al, al
je 0x10135c89
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov byte [esp + 0xd0], 1
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x24]
push edx
push 0xd
push eax
call fcn.1019fef0
add esp, 0xc
cmp esi, 0xffffffff
jne 0x10135cc6
mov byte [esp + 0xd0], 0
lea esi, [esp + 0x24]
call fcn.100025b0
mov dword [esp + 0xd0], 0xffffffff
lea ecx, [esp + 0x5c]
push ecx
call fcn.10007e40
xor eax, eax
mov ecx, dword [esp + 0xc8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xb0]
xor ecx, esp
call fcn.101d19cc
mov esp, ebp
pop ebp
ret 4
xor ebx, ebx
jmp 0x10135cd0
mov eax, dword [esp + 0x28]
cmp eax, edi
je 0x10135d8b
mov ecx, dword [esp + 0x2c]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jae 0x10135d8b
mov edi, ebx
lea esi, [esp + 0x24]
call fcn.10031bd0
cmp dword [eax + 0x18], 8
jb 0x10135d13
mov eax, dword [eax + 4]
jmp 0x10135d16
add eax, 4
call fcn.1019c340
mov ecx, dword [esp + 0x14]
cmp eax, ecx
je 0x10135d65
mov edx, dword [esp + 0x20]
push ecx
push eax
push ecx
mov ecx, dword [edx + 0x18]
test ecx, ecx
mov eax, esp
mov dword [esp + 0x28], esp
mov dword [eax], ecx
je 0x10135d3f
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
mov byte [esp + 0xdc], 2
mov byte [esp + 0xdc], 1
call fcn.100f34b0
add esp, 0xc
test al, al
jne 0x10135d65
add ebx, 1
xor edi, edi
jmp 0x10135cd0
mov byte [esp + 0xd0], 0
lea esi, [esp + 0x24]
call fcn.100025b0
mov dword [esp + 0xd0], 0xffffffff
lea eax, [esp + 0x5c]
push eax
jmp 0x10135c99
mov byte [esp + 0xd0], 0
lea esi, [esp + 0x24]
call fcn.100025b0
mov dword [esp + 0xd0], 0xffffffff
lea ecx, [esp + 0x5c]
push ecx
call fcn.10007e40
mov eax, 1
jmp 0x10135ca0