Function at 0x1006ba3b
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x1008bda0
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x130
mov eax, dword [0x10165f34]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 8], ecx
mov ecx, 0x108cb13e
call fcn.1006d309
mov eax, dword [0x108c6348]
mov edx, dword [eax]
mov ecx, dword [0x108c6348]
mov eax, dword [edx + 0x68]
call eax
movzx ecx, al
test ecx, ecx
je 0x1008bdf7
cmp dword [0x10166a24], 0
jne 0x1008bdfc
jmp 0x1008c7cf
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x14]
call fcn.1006c15c
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 8]
mov dword [eax + 0xc3010], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 1
jmp 0x1008be4c
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
mov eax, dword [0x108c6348]
mov edx, dword [eax]
mov ecx, dword [0x108c6348]
mov eax, dword [edx + 0x50]
call eax
cmp dword [ebp - 0x20], eax
jg 0x1008c07d
mov eax, dword [0x108c634c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [0x108c634c]
call dword [ebp - 0x12c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x1008bec6
mov ecx, dword [ebp - 0x24]
call fcn.1006a41f
movzx eax, al
test eax, eax
je 0x1008bec6
mov ecx, dword [ebp - 0x24]
add ecx, 8
mov eax, dword [ebp - 0x24]
mov edx, dword [eax + 8]
mov eax, dword [edx + 0x24]
call eax
movzx ecx, al
test ecx, ecx
jne 0x1008bec6
mov ecx, dword [ebp - 0x24]
call fcn.1006c27e
movzx eax, al
test eax, eax
je 0x1008bed9
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x102d3200
call fcn.1006cfb7
jmp 0x1008be43
mov eax, dword [ebp - 0x24]
push eax
mov ecx, 0x102d3200
call fcn.1006a5dc
mov eax, dword [ebp - 0x24]
cmp eax, dword [0x10166a24]
je 0x1008bf0b
mov ecx, dword [ebp - 0x24]
call fcn.1006a2a3
mov esi, eax
mov ecx, dword [0x10166a24]
call fcn.1006a2a3
cmp esi, eax
jne 0x1008bf10
jmp 0x1008be43
lea eax, [ebp - 0xa0]
push eax
mov ecx, dword [ebp - 0x24]
call fcn.1006a2c6
push eax
imul ecx, dword [ebp - 0x20], 0xc
add ecx, 0x10166a38
call fcn.1006a5fa
imul ecx, dword [ebp - 0x20], 0x14
add ecx, 0x10334c08
call fcn.1006d859
test eax, eax
je 0x1008bf6f
mov ecx, dword [0x10166a24]
call fcn.1006a41f
movzx eax, al
test eax, eax
je 0x1008bf6f
call fcn.1006d115
movzx eax, byte [eax + 0xe4]
test eax, eax
je 0x1008bf6f
movzx eax, byte [0x108c4ed7]
test eax, eax
je 0x1008bf74
jmp 0x1008be43
mov ecx, dword [0x10166a24]
call fcn.1006b65d
test eax, eax
je 0x1008bf95
mov ecx, dword [0x10166a24]
call fcn.1006b496
movzx eax, al
test eax, eax
je 0x1008bf9a
jmp 0x1008be43
mov eax, dword [ebp - 8]
xorps xmm0, xmm0
movss dword [eax + 0xc300c], xmm0
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 8]
call fcn.1006a253
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0xac]
call fcn.1006c15c
push eax
lea ecx, [ebp - 0x30]
call fcn.1006aa41
movzx eax, al
test eax, eax
je 0x1008bff3
jmp 0x1008be43
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0xb8]
call fcn.1006c15c
push eax
lea ecx, [ebp - 0x30]
call fcn.1006aef6
movzx eax, al
test eax, eax
je 0x1008c078
cvtsi2ss xmm0, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
movss xmm1, dword [eax + 0xc300c]
comiss xmm1, xmm0
jb 0x1008c078
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x14]
call fcn.1006a5fa
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
add ecx, 8
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 8]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xc3010], eax
mov eax, dword [ebp - 8]
cvttss2si ecx, dword [eax + 0xc300c]
mov dword [ebp - 0x1c], ecx
jmp 0x1008be43
mov ecx, dword [0x10166a24]
call fcn.1006a41f
movzx eax, al
test eax, eax
jne 0x1008c09b
mov byte [0x102ab644], 0
jmp 0x1008c7cf
mov ecx, dword [0x10166a24]
call fcn.1006b65d
test eax, eax
je 0x1008c0bc
mov ecx, dword [0x10166a24]
call fcn.1006b496
movzx eax, al
test eax, eax
je 0x1008c0c8
mov byte [0x102ab644], 0
jmp 0x1008c7cf
movzx eax, byte [0x102ab644]
test eax, eax
je 0x1008c0da
mov byte [0x102ab644], 0
mov ecx, dword [0x10166a24]
call fcn.1006a19a
cvtsi2ss xmm0, eax
mov eax, dword [0x108c6358]
mulss xmm0, dword [eax + 0x20]
movss dword [ebp - 0x34], xmm0
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006c1ac
fstp dword [ebp - 0x12c]
movss xmm0, dword [ebp - 0x34]
comiss xmm0, dword [ebp - 0x12c]
jb 0x1008c140
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006c224
test eax, eax
jle 0x1008c140
mov dword [ebp - 0x130], 1
jmp 0x1008c14a
mov dword [ebp - 0x130], 0
mov eax, dword [ebp - 8]
mov cl, byte [ebp - 0x130]
mov byte [eax + 0xc3015], cl
cmp dword [ebp - 0x18], 0
je 0x1008c7cf
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc3010]
mov dword [0x1016500c], ecx
xorps xmm0, xmm0
movss dword [ebp - 0x38], xmm0
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc3010]
mov edx, dword [ebp - 8]
movzx eax, byte [edx + ecx + 0xc303c]
test eax, eax
je 0x1008c1c4
mov eax, dword [ebp - 8]
imul ecx, dword [eax + 0xc3010], 0x14
add ecx, 0x10334c08
mov dword [ebp - 0x12c], ecx
push 0
mov ecx, dword [ebp - 0x12c]
call fcn.1006be1e
movss xmm0, dword [eax + 0x1804]
movss dword [ebp - 0x38], xmm0
jmp 0x1008c217
mov eax, dword [ebp - 8]
imul ecx, dword [eax + 0xc3010], 0x14
add ecx, 0x10334c08
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 8]
imul ecx, dword [edx + 0xc3010], 0x14
add ecx, 0x10334c08
call fcn.1006d859
sub eax, 1
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x12c]
call fcn.1006be1e
movss xmm0, dword [eax + 0x1804]
movss dword [ebp - 0x38], xmm0
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc3010]
mov edx, dword [ebp - 8]
movzx eax, byte [edx + ecx + 0xc307d]
test eax, eax
je 0x1008c26e
mov eax, dword [ebp - 8]
imul ecx, dword [eax + 0xc3010], 0x14
add ecx, 0x10334c08
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0xc3010]
mov ecx, dword [eax*4 + 0x10334a00]
push ecx
mov ecx, dword [ebp - 0x12c]
call fcn.1006be1e
movss xmm0, dword [eax + 0x1804]
movss dword [ebp - 0x38], xmm0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0xc4]
push ecx
mov ecx, dword [0x10166a24]
call fcn.1006d5a2
push eax
lea edx, [ebp - 0xd0]
push edx
mov ecx, 0x108c63fc
call fcn.1006b0db
sub esp, 0xc
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
lea ecx, [ebp - 0xdc]
push ecx
mov ecx, 0x108c63fc
call fcn.1006a57d
sub esp, 0xc
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov eax, dword [eax + 8]
mov dword [edx + 8], eax
lea ecx, [ebp - 0x44]
push ecx
mov ecx, 0x108c63fc
call fcn.1006a05f
call fcn.1006d115
cmp dword [eax + 0x104], 0
jne 0x1008c31a
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006b9cd
movss xmm0, dword [eax + 0x134]
mulss xmm0, dword [0x1014dd80]
cvttss2si eax, xmm0
mov dword [0x102ab74c], eax
jmp 0x1008c353
call fcn.1006d115
cmp dword [eax + 0x104], 1
jne 0x1008c353
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006b9cd
movss xmm0, dword [eax + 0x134]
mulss xmm0, dword [0x1014dd7c]
cvttss2si eax, xmm0
mov dword [0x102ab74c], eax
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006ac5d
cmp ax, 0x28
je 0x1008c38f
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006ac5d
cmp ax, 9
je 0x1008c38f
mov dword [ebp - 0x12c], 0
jmp 0x1008c399
mov dword [ebp - 0x12c], 1
mov al, byte [ebp - 0x12c]
mov byte [ebp - 0x45], al
call fcn.1006d115
movzx eax, byte [eax + 0x101]
test eax, eax
je 0x1008c3e1
movzx ecx, byte [ebp - 0x45]
test ecx, ecx
je 0x1008c3cc
mov ecx, 0x101e6870
call fcn.1006b149
mov byte [ebp - 0x129], al
jmp 0x1008c3d3
mov byte [ebp - 0x129], 1
mov dl, byte [ebp - 0x129]
mov byte [ebp - 0x12a], dl
jmp 0x1008c3f1
mov ecx, 0x101e6870
call fcn.1006b149
mov byte [ebp - 0x12a], al
mov al, byte [ebp - 0x12a]
mov byte [ebp - 0x46], al
lea eax, [ebp - 0xe8]
push eax
mov ecx, dword [0x10166a24]
call fcn.1006c3f5
mov ecx, eax
call fcn.1006da9d
fstp dword [ebp - 0x12c]
movss xmm0, dword [ebp - 0x12c]
cvtsi2ss xmm1, dword [0x102ab74c]
comiss xmm0, xmm1
jb 0x1008c486
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x1008c486
push 0x20
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
jne 0x1008c486
call fcn.1006d115
movzx eax, byte [eax + 0xe4]
test eax, eax
je 0x1008c486
call fcn.1006d115
movzx eax, byte [eax + 0xd]
test eax, eax
je 0x1008c47e
mov eax, dword [ebp - 8]
movss xmm0, dword [0x1014ddc0]
comiss xmm0, dword [eax + 0xc3020]
jbe 0x1008c47c
mov ecx, dword [ebp - 8]
call fcn.1006b4e1
jmp 0x1008c486
mov ecx, dword [ebp - 8]
call fcn.1006b4e1
mov byte [ebp - 0x47], 0
mov eax, dword [0x10166a24]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x10166a20]
mov dword [ebp - 0x50], eax
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006ac5d
cmp ax, 0x26
je 0x1008c4e2
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006ac5d
cmp ax, 0xb
je 0x1008c4e2
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov ecx, eax
call fcn.1006ac5d
cmp ax, 0x28
jne 0x1008c524
call fcn.1006d115
movzx eax, byte [eax + 0x108]
test eax, eax
je 0x1008c524
mov ecx, dword [ebp - 0x4c]
call fcn.1006b9be
movzx eax, al
test eax, eax
jne 0x1008c524
movzx eax, byte [ebp - 0x47]
test eax, eax
jne 0x1008c524
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax + 0x30]
or ecx, 0x800
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x30], ecx
mov byte [ebp - 0x47], 1
jmp 0x1008c7cf
mov ecx, 0x101e6870
call fcn.1006b149
movzx eax, al
test eax, eax
je 0x1008c7cf
mov ecx, dword [ebp - 8]
call fcn.1006cab2
call fcn.10139f30
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x100], edx
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x124], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xf8], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0xf4], ecx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x114], ecx
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x110], edx
mov ecx, dword [0x10166a24]
call fcn.1006b65d
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x12c]
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x128]
mov dword [ecx], edx
mov eax, dword [ebp - 0x124]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x120]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x118]
mov dword [eax], ecx
mov edx, dword [ebp - 0x114]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x110]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
call fcn.1006a9c9
movzx ecx, al
test ecx, ecx
je 0x1008c7cf
call fcn.1006d115
movzx eax, byte [eax + 0x10a]
test eax, eax
je 0x1008c667
call fcn.1006d115
mov eax, dword [eax + 0x110]
push eax
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
test ecx, ecx
jne 0x1008c690
call fcn.1006d115
movzx eax, byte [eax + 0x14c]
test eax, eax
je 0x1008c699
call fcn.1006d115
mov eax, dword [eax + 0x150]
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movsx ecx, ax
test ecx, ecx
je 0x1008c699
mov byte [0x10165009], 0
jmp 0x1008c6a0
mov byte [0x10165009], 1
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc3010]
mov edx, dword [ebp - 8]
movzx eax, byte [edx + ecx + 0xc303c]
test eax, eax
jne 0x1008c6e0
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc3010]
mov edx, dword [ebp - 8]
movzx eax, byte [edx + ecx + 0xc307d]
test eax, eax
jne 0x1008c6e0
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc3010]
mov byte [ecx + 0x102d30a0], 1
mov byte [0x102d30ef], 1
mov eax, dword [ebp - 0x18]
mov dword [0x102d30f0], eax
call fcn.1006d115
movzx eax, byte [eax + 0xe4]
test eax, eax
je 0x1008c77c
call fcn.1006d115
movzx eax, byte [eax + 0xd]
test eax, eax
je 0x1008c74f
mov eax, dword [ebp - 8]
movss xmm0, dword [0x1014ddbc]
comiss xmm0, dword [eax + 0xc3020]
jbe 0x1008c74d
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [0x10166a20]
add ecx, 0xc
call fcn.1006a5fa
mov eax, dword [0x10166a20]
mov ecx, dword [eax + 0x30]
or ecx, 1
mov edx, dword [0x10166a20]
mov dword [edx + 0x30], ecx
mov byte [0x102d30ee], 1
jmp 0x1008c77c
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [0x10166a20]
add ecx, 0xc
call fcn.1006a5fa
mov eax, dword [0x10166a20]
mov ecx, dword [eax + 0x30]
or ecx, 1
mov edx, dword [0x10166a20]
mov dword [edx + 0x30], ecx
mov byte [0x102d30ee], 1
mov byte [0x102ab644], 1
mov ecx, 0x102d3200
call fcn.1006a979
fstp dword [ebp - 0x12c]
movss xmm0, dword [ebp - 0x12c]
addss xmm0, dword [ebp - 0x38]
mov eax, dword [0x108c6358]
divss xmm0, dword [eax + 0x20]
cvtss2sd xmm0, xmm0
addsd xmm0, qword [0x1014d3f8]
cvttsd2si ecx, xmm0
mov dword [ebp - 0x130], ecx
mov edx, dword [0x10166a20]
mov eax, dword [ebp - 0x130]
mov dword [edx + 8], eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1006b644
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret