Function at 0x100a1a90
Capabilities:
Log keystrokes via polling
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc0
push ebx
push esi
push edi
mov edi, ebp
xor ecx, ecx
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov ecx, 0x101e9263
call fcn.1019d101
mov esi, esp
push 0x70
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1ad3
mov eax, dword [ebp + 8]
mov dword [eax], 0x87
mov esi, esp
push 0x71
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1af5
mov eax, dword [ebp + 8]
mov dword [eax], 0x88
mov esi, esp
push 0x72
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1b17
mov eax, dword [ebp + 8]
mov dword [eax], 0x89
mov esi, esp
push 0x73
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1b39
mov eax, dword [ebp + 8]
mov dword [eax], 0x8a
mov esi, esp
push 0x74
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1b5b
mov eax, dword [ebp + 8]
mov dword [eax], 0x8b
mov esi, esp
push 0x75
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1b7d
mov eax, dword [ebp + 8]
mov dword [eax], 0x8c
mov esi, esp
push 0x76
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1b9f
mov eax, dword [ebp + 8]
mov dword [eax], 0x8d
mov esi, esp
push 0x77
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1bc1
mov eax, dword [ebp + 8]
mov dword [eax], 0x8e
mov esi, esp
push 0x78
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1be3
mov eax, dword [ebp + 8]
mov dword [eax], 0x8f
mov esi, esp
push 0x79
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1c05
mov eax, dword [ebp + 8]
mov dword [eax], 0x90
mov esi, esp
push 0x7a
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1c27
mov eax, dword [ebp + 8]
mov dword [eax], 0x91
mov esi, esp
push 0x7b
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1c49
mov eax, dword [ebp + 8]
mov dword [eax], 0x92
mov esi, esp
push 0x30
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1c6b
mov eax, dword [ebp + 8]
mov dword [eax], 0x30
mov esi, esp
push 0x31
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1c8d
mov eax, dword [ebp + 8]
mov dword [eax], 0x31
mov esi, esp
push 0x32
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1caf
mov eax, dword [ebp + 8]
mov dword [eax], 0x32
mov esi, esp
push 0x33
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1cd1
mov eax, dword [ebp + 8]
mov dword [eax], 0x33
mov esi, esp
push 0x34
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1cf3
mov eax, dword [ebp + 8]
mov dword [eax], 0x34
mov esi, esp
push 0x35
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1d15
mov eax, dword [ebp + 8]
mov dword [eax], 0x35
mov esi, esp
push 0x36
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1d37
mov eax, dword [ebp + 8]
mov dword [eax], 0x36
mov esi, esp
push 0x37
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1d59
mov eax, dword [ebp + 8]
mov dword [eax], 0x37
mov esi, esp
push 0x38
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1d7b
mov eax, dword [ebp + 8]
mov dword [eax], 0x38
mov esi, esp
push 0x39
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1d9d
mov eax, dword [ebp + 8]
mov dword [eax], 0x39
mov esi, esp
push 0x60
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1dbf
mov eax, dword [ebp + 8]
mov dword [eax], 0xaa
mov esi, esp
push 0x61
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1de1
mov eax, dword [ebp + 8]
mov dword [eax], 0xa6
mov esi, esp
push 0x62
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1e03
mov eax, dword [ebp + 8]
mov dword [eax], 0xa7
mov esi, esp
push 0x63
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1e25
mov eax, dword [ebp + 8]
mov dword [eax], 0xa8
mov esi, esp
push 0x64
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1e47
mov eax, dword [ebp + 8]
mov dword [eax], 0xa3
mov esi, esp
push 0x65
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1e69
mov eax, dword [ebp + 8]
mov dword [eax], 0xa4
mov esi, esp
push 0x66
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1e8b
mov eax, dword [ebp + 8]
mov dword [eax], 0xa5
mov esi, esp
push 0x67
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1ead
mov eax, dword [ebp + 8]
mov dword [eax], 0xa0
mov esi, esp
push 0x68
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1ecf
mov eax, dword [ebp + 8]
mov dword [eax], 0xa1
mov esi, esp
push 0x69
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1ef1
mov eax, dword [ebp + 8]
mov dword [eax], 0xa2
mov esi, esp
push 0x20
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1f13
mov eax, dword [ebp + 8]
mov dword [eax], 0x20
mov esi, esp
push 0xd
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1f35
mov eax, dword [ebp + 8]
mov dword [eax], 0xd
mov esi, esp
push 9
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1f57
mov eax, dword [ebp + 8]
mov dword [eax], 9
mov esi, esp
push 0x26
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1f79
mov eax, dword [ebp + 8]
mov dword [eax], 0x80
mov esi, esp
push 0x28
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1f9b
mov eax, dword [ebp + 8]
mov dword [eax], 0x81
mov esi, esp
push 0x25
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1fbd
mov eax, dword [ebp + 8]
mov dword [eax], 0x82
mov esi, esp
push 0x27
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a1fdf
mov eax, dword [ebp + 8]
mov dword [eax], 0x83
mov esi, esp
push 0x12
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2001
mov eax, dword [ebp + 8]
mov dword [eax], 0x84
mov esi, esp
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2023
mov eax, dword [ebp + 8]
mov dword [eax], 0x85
mov esi, esp
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2045
mov eax, dword [ebp + 8]
mov dword [eax], 0x86
mov esi, esp
push 0x22
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2067
mov eax, dword [ebp + 8]
mov dword [eax], 0x95
mov esi, esp
push 0x21
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2089
mov eax, dword [ebp + 8]
mov dword [eax], 0x96
mov esi, esp
push 0x24
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a20ab
mov eax, dword [ebp + 8]
mov dword [eax], 0x97
mov esi, esp
push 0x23
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a20cd
mov eax, dword [ebp + 8]
mov dword [eax], 0x98
mov esi, esp
push 0x41
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a20ef
mov eax, dword [ebp + 8]
mov dword [eax], 0x61
mov esi, esp
push 0x42
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2111
mov eax, dword [ebp + 8]
mov dword [eax], 0x62
mov esi, esp
push 0x43
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2133
mov eax, dword [ebp + 8]
mov dword [eax], 0x63
mov esi, esp
push 0x44
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2155
mov eax, dword [ebp + 8]
mov dword [eax], 0x64
mov esi, esp
push 0x45
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2177
mov eax, dword [ebp + 8]
mov dword [eax], 0x65
mov esi, esp
push 0x46
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2199
mov eax, dword [ebp + 8]
mov dword [eax], 0x66
mov esi, esp
push 0x47
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a21bb
mov eax, dword [ebp + 8]
mov dword [eax], 0x67
mov esi, esp
push 0x48
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a21dd
mov eax, dword [ebp + 8]
mov dword [eax], 0x68
mov esi, esp
push 0x49
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a21ff
mov eax, dword [ebp + 8]
mov dword [eax], 0x69
mov esi, esp
push 0x4a
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2221
mov eax, dword [ebp + 8]
mov dword [eax], 0x6a
mov esi, esp
push 0x4b
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2243
mov eax, dword [ebp + 8]
mov dword [eax], 0x6b
mov esi, esp
push 0x4c
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2265
mov eax, dword [ebp + 8]
mov dword [eax], 0x6c
mov esi, esp
push 0x4d
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2287
mov eax, dword [ebp + 8]
mov dword [eax], 0x6d
mov esi, esp
push 0x4e
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a22a9
mov eax, dword [ebp + 8]
mov dword [eax], 0x6e
mov esi, esp
push 0x4f
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a22cb
mov eax, dword [ebp + 8]
mov dword [eax], 0x6f
mov esi, esp
push 0x50
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a22ed
mov eax, dword [ebp + 8]
mov dword [eax], 0x70
mov esi, esp
push 0x51
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a230f
mov eax, dword [ebp + 8]
mov dword [eax], 0x71
mov esi, esp
push 0x52
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2331
mov eax, dword [ebp + 8]
mov dword [eax], 0x72
mov esi, esp
push 0x53
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2353
mov eax, dword [ebp + 8]
mov dword [eax], 0x73
mov esi, esp
push 0x54
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2375
mov eax, dword [ebp + 8]
mov dword [eax], 0x74
mov esi, esp
push 0x55
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2397
mov eax, dword [ebp + 8]
mov dword [eax], 0x75
mov esi, esp
push 0x56
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a23b9
mov eax, dword [ebp + 8]
mov dword [eax], 0x76
mov esi, esp
push 0x57
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a23db
mov eax, dword [ebp + 8]
mov dword [eax], 0x77
mov esi, esp
push 0x58
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a23fd
mov eax, dword [ebp + 8]
mov dword [eax], 0x78
mov esi, esp
push 0x59
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a241f
mov eax, dword [ebp + 8]
mov dword [eax], 0x79
mov esi, esp
push 0x5a
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2441
mov eax, dword [ebp + 8]
mov dword [eax], 0x7a
mov esi, esp
push 0xdb
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2466
mov eax, dword [ebp + 8]
mov dword [eax], 0x5b
mov esi, esp
push 0xdd
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a248b
mov eax, dword [ebp + 8]
mov dword [eax], 0x5d
mov esi, esp
push 0xbc
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a24b0
mov eax, dword [ebp + 8]
mov dword [eax], 0x2c
mov esi, esp
push 0xbe
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a24d5
mov eax, dword [ebp + 8]
mov dword [eax], 0x2e
mov esi, esp
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a24f7
mov eax, dword [ebp + 8]
mov dword [eax], 0xf1
mov esi, esp
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a2519
mov eax, dword [ebp + 8]
mov dword [eax], 0xf2
mov esi, esp
push 4
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a253b
mov eax, dword [ebp + 8]
mov dword [eax], 0xf3
mov esi, esp
push 5
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a255d
mov eax, dword [ebp + 8]
mov dword [eax], 0xf4
mov esi, esp
push 6
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a257f
mov eax, dword [ebp + 8]
mov dword [eax], 0xf5
mov esi, esp
push 0x1b
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a25a1
mov eax, dword [ebp + 8]
mov dword [eax], 0xffffffff
mov esi, esp
push 8
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp esi, esp
call fcn.1019d0de
cwde
and eax, 0x8000
je 0x100a25c3
mov eax, dword [ebp + 8]
mov dword [eax], 0xffffffff
pop edi
pop esi
pop ebx
add esp, 0xc0
cmp ebp, esp
call fcn.1019d0de
mov esp, ebp
pop ebp
ret