Function at 0x10001dc0
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
sub esp, 0xc
push esi
mov esi, dword [sym.imp.USER32.dll_GetCursorPos]
push edi
lea eax, [esp + 8]
push eax
call esi
mov eax, dword [esp + 8]
cmp eax, 0x1b
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
jl 0x10001e17
cmp eax, 0x8e
jg 0x10001e17
mov eax, dword [esp + 0xc]
cmp eax, 0x3b
jl 0x10001e17
cmp eax, 0x4a
jg 0x10001e17
cmp byte [0x1000752c], 0
je 0x10001e17
push 1
call edi
test al, 1
je 0x10001e17
cmp byte [0x1000752d], 0
sete cl
mov byte [0x1000752d], cl
lea edx, [esp + 8]
push edx
call esi
mov eax, dword [esp + 8]
cmp eax, 0x1b
jl 0x10001e5c
cmp eax, 0x8e
jg 0x10001e5c
mov eax, dword [esp + 0xc]
cmp eax, 0x4a
jl 0x10001e5c
cmp eax, 0x59
jg 0x10001e5c
cmp byte [0x1000752c], 0
je 0x10001e5c
push 1
call edi
test al, 1
je 0x10001e5c
cmp byte [0x1000752e], 0
sete al
mov byte [0x1000752e], al
lea ecx, [esp + 8]
push ecx
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x10001ea5
cmp eax, 0x124
jg 0x10001ea5
mov eax, dword [esp + 0xc]
cmp eax, 0x3b
jl 0x10001ea5
cmp eax, 0x4a
jg 0x10001ea5
cmp byte [0x1000752d], 0
je 0x10001ea5
push 1
call edi
test al, 1
je 0x10001ea5
xor edx, edx
cmp dword [0x10007524], edx
sete dl
mov dword [0x10007524], edx
lea eax, [esp + 8]
push eax
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x10001ef7
cmp eax, 0x124
jg 0x10001ef7
mov eax, dword [esp + 0xc]
cmp eax, 0x4a
jl 0x10001ef7
cmp eax, 0x59
jg 0x10001ef7
cmp byte [0x1000752d], 0
je 0x10001ef7
push 1
call edi
test al, 1
je 0x10001ef7
mov eax, dword [0x100074f8]
inc eax
cmp eax, 5
mov dword [0x100074f8], eax
jle 0x10001ef7
mov dword [0x100074f8], 0
lea ecx, [esp + 8]
push ecx
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x10001f49
cmp eax, 0x124
jg 0x10001f49
mov eax, dword [esp + 0xc]
cmp eax, 0x59
jl 0x10001f49
cmp eax, 0x68
jg 0x10001f49
cmp byte [0x1000752d], 0
je 0x10001f49
push 1
call edi
test al, 1
je 0x10001f49
mov eax, dword [0x100074fc]
inc eax
cmp eax, 5
mov dword [0x100074fc], eax
jle 0x10001f49
mov dword [0x100074fc], 0
lea edx, [esp + 8]
push edx
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x10001f91
cmp eax, 0x124
jg 0x10001f91
mov eax, dword [esp + 0xc]
cmp eax, 0x68
jl 0x10001f91
cmp eax, 0x77
jg 0x10001f91
cmp byte [0x1000752d], 0
je 0x10001f91
push 1
call edi
test al, 1
je 0x10001f91
xor eax, eax
cmp dword [0x10007500], eax
sete al
mov dword [0x10007500], eax
lea ecx, [esp + 8]
push ecx
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x10001fdc
cmp eax, 0x124
jg 0x10001fdc
mov eax, dword [esp + 0xc]
cmp eax, 0x77
jl 0x10001fdc
cmp eax, 0x86
jg 0x10001fdc
cmp byte [0x1000752d], 0
je 0x10001fdc
push 1
call edi
test al, 1
je 0x10001fdc
xor edx, edx
cmp dword [0x1000750c], edx
sete dl
mov dword [0x1000750c], edx
lea eax, [esp + 8]
push eax
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x10002032
cmp eax, 0x124
jg 0x10002032
mov eax, dword [esp + 0xc]
cmp eax, 0x86
jl 0x10002032
cmp eax, 0x95
jg 0x10002032
cmp byte [0x1000752d], 0
je 0x10002032
push 1
call edi
test al, 1
je 0x10002032
mov eax, dword [0x10007508]
inc eax
cmp eax, 7
mov dword [0x10007508], eax
jle 0x10002032
mov dword [0x10007508], 0
lea ecx, [esp + 8]
push ecx
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x1000207b
cmp eax, 0x124
jg 0x1000207b
mov eax, dword [esp + 0xc]
cmp eax, 0x4a
jl 0x1000207b
cmp eax, 0x59
jg 0x1000207b
cmp byte [0x1000752e], 0
je 0x1000207b
push 1
call edi
test al, 1
je 0x1000207b
xor edx, edx
cmp dword [0x10007528], edx
sete dl
mov dword [0x10007528], edx
lea eax, [esp + 8]
push eax
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x100020c4
cmp eax, 0x124
jg 0x100020c4
mov eax, dword [esp + 0xc]
cmp eax, 0x59
jl 0x100020c4
cmp eax, 0x68
jg 0x100020c4
cmp byte [0x1000752e], 0
je 0x100020c4
push 1
call edi
test al, 1
je 0x100020c4
xor ecx, ecx
cmp dword [0x10007518], ecx
sete cl
mov dword [0x10007518], ecx
lea edx, [esp + 8]
push edx
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x1000210c
cmp eax, 0x124
jg 0x1000210c
mov eax, dword [esp + 0xc]
cmp eax, 0x68
jl 0x1000210c
cmp eax, 0x77
jg 0x1000210c
cmp byte [0x1000752e], 0
je 0x1000210c
push 1
call edi
test al, 1
je 0x1000210c
xor eax, eax
cmp dword [0x1000751c], eax
sete al
mov dword [0x1000751c], eax
lea ecx, [esp + 8]
push ecx
call esi
mov eax, dword [esp + 8]
cmp eax, 0xb1
jl 0x10002157
cmp eax, 0x124
jg 0x10002157
mov eax, dword [esp + 0xc]
cmp eax, 0x77
jl 0x10002157
cmp eax, 0x86
jg 0x10002157
cmp byte [0x1000752e], 0
je 0x10002157
push 1
call edi
test al, 1
je 0x10002157
xor edx, edx
cmp dword [0x10007520], edx
sete dl
mov dword [0x10007520], edx
pop edi
pop esi
add esp, 0xc
ret