Function at 0x100919d0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100dc2d9
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x1010502c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x40], 0x380
mov dword [ebp - 0x3c], 0xb3
mov dword [ebp - 0x38], 0x204
mov dword [ebp - 0x34], 0x216
mov dword [ebp - 0x30], 0x215
mov dword [ebp - 0x2c], 0x2fa
mov dword [ebp - 0x28], 0x2fb
mov dword [ebp - 0x24], 0x2f3
mov dword [ebp - 0x20], 0x2f6
mov dword [ebp - 0x1c], 0x20f
mov dword [ebp - 0x18], 0x210
mov dword [ebp - 0x14], 0x2fe
mov byte [0x1010638a], 0
test ebx, ebx
je 0x10092009
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10106354]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10106390]
cmp eax, dword [ecx + 4]
jle 0x10091ac7
push 0x10106390
call fcn.100d8ed3
add esp, 4
cmp dword [0x10106390], 0xffffffff
jne 0x10091ac7
push str.client.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x151a0
push 0x10106390
mov dword [0x10106394], eax
call fcn.100d8e89
add esp, 4
mov eax, dword [0x10106394]
mov ecx, ebx
call eax
add eax, 0x56
lea ecx, [ebp - 0x94]
push str.Claws
mov dword [ebp - 0x58], eax
call fcn.10007b20
mov edx, dword [ebp - 0x58]
mov ebx, 1
mov dword [ebp - 4], 0
mov ecx, eax
mov dword [ebp - 0x54], ebx
call fcn.10007000
test al, al
jne 0x10091b23
push str.Huge_Claws
lea ecx, [ebp - 0x7c]
call fcn.10007b20
mov edx, dword [ebp - 0x58]
mov ecx, eax
mov ebx, 3
call fcn.10007000
test al, al
je 0x10091b3e
cmp dword [0x10105768], 0
jne 0x10091b3e
mov ecx, dword [edi]
mov eax, dword [0x100f27ac]
mov byte [ebp - 0x4d], 1
mov al, byte [eax + ecx]
test al, al
jne 0x10091b42
mov byte [ebp - 0x4d], 0
test bl, 2
je 0x10091b8c
mov ecx, dword [ebp - 0x68]
and ebx, 0xfffffffd
cmp ecx, 0x10
jb 0x10091b7a
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10091b70
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10091bc4
push ecx
push edx
call fcn.100d8ffc
add esp, 8
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x10091bd4
mov ecx, dword [ebp - 0x80]
and ebx, 0xfffffffe
cmp ecx, 0x10
jb 0x10091bd4
mov edx, dword [ebp - 0x94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10091bca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10091bca
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d8ffc
add esp, 8
cmp byte [ebp - 0x4d], 0
jne 0x10092009
push str.Claws
lea ecx, [ebp - 0x94]
call fcn.10007b20
mov edx, dword [ebp - 0x58]
or ebx, 4
mov dword [ebp - 4], 1
mov ecx, eax
mov dword [ebp - 0x54], ebx
call fcn.10007000
test al, al
jne 0x10091c78
push str.Huge_Claws
lea ecx, [ebp - 0x7c]
call fcn.10007b20
mov edx, dword [ebp - 0x58]
or ebx, 8
mov ecx, eax
mov dword [ebp - 0x54], ebx
call fcn.10007000
test al, al
jne 0x10091c78
mov ecx, dword [edi]
mov eax, dword [0x100f2e44]
mov al, byte [ecx + eax]
test al, al
jne 0x10091c72
mov eax, dword [0x100edbd0]
push dword [ecx + eax]
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.100d8930
lea ecx, [ebp - 0x10]
cmp eax, ecx
jne 0x10091c72
cmp dword [esi + 0x2c], 0
jne 0x10091c72
mov eax, dword [0x100f5118]
mov ecx, dword [ebp - 0x5c]
mov al, byte [eax + ecx]
test al, al
jne 0x10091c72
test dword [esi + 0x24], 0x2000
je 0x10091c78
mov byte [ebp - 0x4d], 1
jmp 0x10091c7c
mov byte [ebp - 0x4d], 0
test bl, 8
je 0x10091cc9
mov ecx, dword [ebp - 0x68]
and ebx, 0xfffffff7
mov dword [ebp - 0x54], ebx
cmp ecx, 0x10
jb 0x10091cb7
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10091cad
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10091d04
push ecx
push edx
call fcn.100d8ffc
add esp, 8
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
mov dword [ebp - 4], 0xffffffff
test bl, 4
je 0x10091d14
mov ecx, dword [ebp - 0x80]
and ebx, 0xfffffffb
mov dword [ebp - 0x54], ebx
cmp ecx, 0x10
jb 0x10091d14
mov edx, dword [ebp - 0x94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10091d0a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10091d0a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d8ffc
add esp, 8
cmp byte [ebp - 0x4d], 0
jne 0x10092009
mov eax, dword [0x100f509c]
mov ecx, dword [ebp - 0x5c]
movss xmm0, dword [ecx + eax]
mov eax, dword [0x100f50f8]
mov ecx, dword [edi]
movss dword [ebp - 0x64], xmm0
mov ecx, dword [eax + ecx]
mov eax, dword [0x10107740]
movd xmm0, ecx
mov edx, dword [eax + 0xc]
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
cmp byte [0x101056a0], 0
addsd xmm0, qword [ecx*8 + 0x101003a0]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [edx + 0x1c]
movss dword [ebp - 0x60], xmm0
jne 0x10091e0b
push dword [0x101055c0]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x10091db4
push str.Claws
lea ecx, [ebp - 0x94]
call fcn.10007b20
mov edx, dword [ebp - 0x58]
or ebx, 0x10
mov ecx, eax
mov dword [ebp - 0x54], ebx
call fcn.10007000
test al, al
jne 0x10091dae
test byte [esi + 0x24], 1
jne 0x10091db4
mov byte [ebp - 0x4d], 0
jmp 0x10091db8
mov byte [ebp - 0x4d], 1
test bl, 0x10
je 0x10091dfc
mov ecx, dword [ebp - 0x80]
and ebx, 0xffffffef
mov dword [ebp - 0x54], ebx
cmp ecx, 0x10
jb 0x10091dfc
mov edx, dword [ebp - 0x94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10091df2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10091df2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d8ffc
add esp, 8
cmp byte [ebp - 0x4d], 0
jne 0x10092009
mov eax, dword [0x10107740]
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x4c]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x4c]
call eax
push dword [ebp - 0x5c]
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.10090c80
cmp byte [edi + 4], 0
je 0x10091fcf
cmp dword [0x10105684], 1
je 0x10091e65
push str.BaseMelee
lea ecx, [ebp - 0x94]
call fcn.10007b20
mov edx, dword [ebp - 0x58]
or ebx, 0x20
mov dword [ebp - 4], 2
mov ecx, eax
mov dword [ebp - 0x54], ebx
call fcn.10007000
test al, al
jne 0x10091e83
push str.Huge_Claws
lea ecx, [ebp - 0x7c]
call fcn.10007b20
mov edx, dword [ebp - 0x58]
mov ecx, eax
or ebx, 0x40
call fcn.10007000
test al, al
je 0x10091e92
movss xmm0, dword [ebp - 0x60]
comiss xmm0, dword [ebp - 0x64]
mov byte [ebp - 0x4d], 1
jae 0x10091e96
mov byte [ebp - 0x4d], 0
test bl, 0x40
je 0x10091ee0
mov ecx, dword [ebp - 0x68]
and ebx, 0xffffffbf
cmp ecx, 0x10
jb 0x10091ece
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10091ec4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10091f18
push ecx
push edx
call fcn.100d8ffc
add esp, 8
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
mov dword [ebp - 4], 0xffffffff
test bl, 0x20
je 0x10091f28
mov ecx, dword [ebp - 0x80]
and ebx, 0xffffffdf
cmp ecx, 0x10
jb 0x10091f28
mov edx, dword [ebp - 0x94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10091f1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10091f1e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d8ffc
add esp, 8
cmp byte [ebp - 0x4d], 0
je 0x10091f37
or dword [esi + 0x24], 1
jmp 0x10092002
push str.Claws
lea ecx, [ebp - 0xac]
call fcn.10007b20
mov edx, dword [ebp - 0x58]
mov ecx, eax
or ebx, 0x80
call fcn.10007000
test al, al
je 0x10091f6a
movss xmm0, dword [ebp - 0x60]
comiss xmm0, dword [ebp - 0x64]
mov byte [ebp - 0x4d], 1
jae 0x10091f6e
mov byte [ebp - 0x4d], 0
test bl, bl
jns 0x10091fc9
mov ecx, dword [ebp - 0x98]
cmp ecx, 0x10
jb 0x10091fae
mov edx, dword [ebp - 0xac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10091fa4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10091fa4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d8ffc
add esp, 8
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp byte [ebp - 0x4d], 0
jne 0x10091ffb
cmp byte [edi + 5], 0
je 0x10092009
push dword [ebp - 0x5c]
mov ecx, edi
push dword [edi]
call fcn.100917f0
test al, al
je 0x10092009
cmp dword [0x10105684], 0
je 0x10092009
mov ecx, dword [edi]
mov eax, dword [0x100f27bc]
cmp byte [eax + ecx], 0
je 0x10092009
or dword [esi + 0x24], 0x800
mov byte [0x1010638a], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100d8a78
mov esp, ebp
pop ebp
ret 8