Function at 0x10014377
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10089c1b
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x2730
call fcn.10078770
mov eax, dword [0x100e5bc8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov eax, ebx
mov edi, ebx
mov dword [ebp - 0x271c], edi
mov dword [ebp - 0x270c], eax
mov dword [ebp - 0x2724], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, dword [0x100eea28]
push 0x2a4
mov dword [ebp - 0x2714], eax
lea eax, [ebp - 0x578]
push ebx
push eax
mov dword [ebp - 0x2710], esi
call fcn.10074510
push 0xc0
lea eax, [ebp - 0x2d4]
push 0xff
push eax
call fcn.10074510
push 0x234
lea eax, [ebp - 0x8d0]
push ebx
push eax
call fcn.10074510
add esp, 0x24
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x272c], eax
lea eax, [ebp - 0x2734]
inc ebx
push eax
mov dword [ebp - 0x2734], 8
mov dword [ebp - 0x2730], ebx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0x40
push 0x1009ca1c
lea eax, [ebp - 0x214]
push 0x40
push eax
call fcn.100787ba
push 5
push 0x1009ca24
lea eax, [ebp - 0x94]
push 0x40
push eax
call fcn.100787ba
add esp, 0x20
lea eax, [ebp - 0x114]
push 0x40
push eax
push 0x9d0a
push esi
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
call esi
push 0x40
lea eax, [ebp - 0x194]
push eax
push 0x9d13
push dword [ebp - 0x2710]
call esi
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x9d89
call fcn.1005868d
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
add esp, 0x14
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0xa
push 0x1009ca2c
lea eax, [ebp - 0x94]
push 0x40
push eax
call fcn.100787ba
add esp, 0x10
lea eax, [ebp - 0x114]
push 0x40
push eax
push 0x9d09
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x40
lea eax, [ebp - 0x194]
push eax
push 0x9d14
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x9d89
call fcn.1005868d
add esp, 0x14
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x80
push 0x1009ca34
lea eax, [ebp - 0x214]
push 0x40
push eax
call fcn.100787ba
push 0xd
push 0x1009ca3c
lea eax, [ebp - 0x94]
push 0x40
push eax
call fcn.100787ba
add esp, 0x20
lea eax, [ebp - 0x114]
push 0x40
push eax
push 0x9d0a
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x40
lea eax, [ebp - 0x194]
push eax
push 0x9d13
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x9d89
call fcn.1005868d
add esp, 0x14
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x1a
push 0x1009ca44
lea eax, [ebp - 0x94]
push 0x40
push eax
call fcn.100787ba
add esp, 0x10
lea eax, [ebp - 0x114]
push 0x40
push eax
push 0x9d09
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x40
lea eax, [ebp - 0x194]
push eax
push 0x9d14
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x9d89
call fcn.1005868d
add esp, 0x14
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x98
push 0x1009ca4c
lea eax, [ebp - 0x214]
push 0x40
push eax
call fcn.100787ba
push 0x10
push 0x1009ca54
lea eax, [ebp - 0x94]
push 0x40
push eax
call fcn.100787ba
add esp, 0x20
lea eax, [ebp - 0x114]
push 0x40
push eax
push 0x9d0a
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x40
lea eax, [ebp - 0x194]
push eax
push 0x9d13
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x9d89
call fcn.1005868d
add esp, 0x14
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x20
push 0x1009ca5c
lea eax, [ebp - 0x94]
push 0x40
push eax
call fcn.100787ba
add esp, 0x10
lea eax, [ebp - 0x114]
push 0x40
push eax
push 0x9d09
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x40
lea eax, [ebp - 0x194]
push eax
push 0x9d14
push dword [ebp - 0x2710]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x9d89
call fcn.1005868d
add esp, 0x14
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x9d88
call fcn.1005868d
pop ecx
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x9e4e
call fcn.1005868d
pop ecx
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x9e43
call fcn.1005868d
pop ecx
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x9f00
call fcn.1005868d
pop ecx
push 0x10
call esi
test ax, ax
js 0x100148b6
push 0x9d97
call fcn.1005868d
pop ecx
push 0x10
call esi
test ax, ax
js 0x100148b6
and dword [ebp - 4], edi
push 4
call fcn.10073ca8
pop ecx
mov dword [ebp - 0x2720], eax
mov byte [ebp - 4], bl
test eax, eax
je 0x1001482e
mov ecx, eax
call fcn.10012f93
jmp 0x10014830
xor eax, eax
and dword [ebp - 0x494], 0
push 0
lea ecx, [ebp - 0x578]
push ecx
push ebx
push dword [ebp - 0x2714]
mov ecx, eax
mov dword [ebp - 0x2718], eax
mov byte [ebp - 4], 0
mov dword [ebp - 0x2720], eax
mov dword [ebp - 0x524], ebx
mov dword [ebp - 0x520], 0x40
mov dword [ebp - 0x49c], ebx
mov dword [ebp - 0x498], 2
call fcn.10012fa3
push 0x10
call esi
test ax, ax
jns 0x100148df
or dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x270c]
mov ecx, dword [ebp - 0x2718]
test ecx, ecx
je 0x100148a0
mov eax, dword [ecx]
push ebx
call dword [eax]
test edi, edi
je 0x100148ab
mov eax, dword [edi]
push ebx
mov ecx, edi
call dword [eax]
test esi, esi
je 0x100148b6
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax]
cmp dword [ebp - 0x272c], 0
jl 0x100148c5
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10075551
leave
ret
mov ecx, dword [ebp - 0x2718]
and dword [ebp - 0x498], 0
push 0
lea eax, [ebp - 0x578]
push eax
push ebx
push dword [ebp - 0x2714]
mov dword [ebp - 0x524], ebx
mov dword [ebp - 0x520], 0x80
mov dword [ebp - 0x494], ebx
mov dword [ebp - 0x49c], 2
call fcn.10012fa3
push 0x10
call esi
test ax, ax
js 0x10014887
mov ecx, dword [ebp - 0x2718]
push 0
lea eax, [ebp - 0x578]
push eax
push ebx
push dword [ebp - 0x2714]
mov dword [ebp - 0x524], ebx
mov dword [ebp - 0x520], 0x98
mov dword [ebp - 0x494], ebx
mov dword [ebp - 0x49c], 3
mov dword [ebp - 0x498], ebx
call fcn.10012fa3
push 0x10
call esi
test ax, ax
js 0x10014887
push 0x2a4
lea eax, [ebp - 0x578]
push 0
push eax
call fcn.10074510
push 4
mov dword [ebp - 4], 3
call fcn.10073ca8
add esp, 0x10
mov dword [ebp - 0x271c], eax
mov byte [ebp - 4], 4
test eax, eax
je 0x100149bb
mov ecx, eax
call fcn.10013477
mov edi, eax
xor edx, edx
jmp 0x100149bf
xor edx, edx
mov edi, edx
mov byte [ebp - 4], 3
mov dword [ebp - 0x271c], edi
mov byte [ebp - 0x2d4], dl
mov ecx, edx
lea eax, [ecx + 1]
mov byte [ebp + ecx - 0x2cc], al
inc ecx
cmp ecx, 0xb
jl 0x100149d1
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x578]
push eax
push edx
push edx
lea eax, [ebp - 0x8d0]
push eax
push edx
push ebx
push dword [ebp - 0x2714]
mov ecx, edi
mov byte [ebp - 0x240], dl
mov byte [ebp - 0x23f], bl
mov byte [ebp - 0x23e], bl
mov byte [ebp - 0x23a], bl
mov byte [ebp - 0x239], 2
mov byte [ebp - 0x224], dl
mov byte [ebp - 0x223], bl
mov byte [ebp - 0x222], bl
mov byte [ebp - 0x221], 2
mov dword [ebp - 0x8d0], 2
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 0x464], ebx
call fcn.10013487
push 0x10
call esi
test ax, ax
js 0x10014887
lea eax, [ebp - 0x2d4]
push eax
xor ecx, ecx
lea eax, [ebp - 0x578]
push eax
push ecx
push ecx
lea eax, [ebp - 0x8d0]
push eax
push ecx
push ebx
push dword [ebp - 0x2714]
mov ecx, edi
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 0x464], 2
call fcn.10013487
push 0x10
call esi
test ax, ax
js 0x10014887
push 0x2a4
lea eax, [ebp - 0x578]
push 0
push eax
call fcn.10074510
add esp, 0xc
lea eax, [ebp - 0x2d4]
push eax
xor ecx, ecx
lea eax, [ebp - 0x578]
push eax
push ecx
push ecx
lea eax, [ebp - 0x8d0]
push eax
push ecx
push ebx
push dword [ebp - 0x2714]
mov ecx, edi
mov dword [ebp - 0x2f0], ebx
mov byte [ebp - 0x2ec], bl
call fcn.10013487
push 0x10
call esi
test ax, ax
js 0x10014887
lea eax, [ebp - 0x2d4]
push eax
xor ecx, ecx
lea eax, [ebp - 0x578]
push eax
push ecx
push ecx
lea eax, [ebp - 0x8d0]
push eax
push ecx
push ebx
push dword [ebp - 0x2714]
mov ecx, edi
mov dword [ebp - 0x2f0], ebx
mov byte [ebp - 0x2ec], 2
call fcn.10013487
push 0x10
call esi
test ax, ax
js 0x10014887
push 0x2a4
lea eax, [ebp - 0x578]
push 0
push eax
call fcn.10074510
push 0xc0
lea eax, [ebp - 0x2d4]
push 0xff
push eax
call fcn.10074510
push 0x234
lea eax, [ebp - 0x8d0]
push 0
push eax
call fcn.10074510
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x8d0]
push eax
lea eax, [ebp - 0x1050]
push eax
lea eax, [ebp - 0x2708]
push eax
call fcn.10014d40
add esp, 0x30
lea eax, [ebp - 0x2728]
push eax
mov dword [ebp - 0x2728], 8
mov dword [ebp - 0x2724], 0x8ff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
test eax, eax
je 0x1001488b
lea ecx, [ebp - 0x69c]
call fcn.1002fb70
push dword [ebp - 0x2714]
lea ecx, [ebp - 0x69c]
push 0xa02b
push dword [ebp - 0x2710]
mov dword [ebp - 4], 6
mov dword [ebp - 0x680], ebx
call fcn.10005120
push 0x10
call esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x69c]
test ax, ax
jns 0x10014c17
call fcn.1002fb9c
jmp 0x1001488b
call fcn.1002fb9c
push 4
mov dword [ebp - 4], 7
call fcn.10073ca8
pop ecx
mov dword [ebp - 0x2724], eax
mov byte [ebp - 4], 8
test eax, eax
je 0x10014c4a
mov ecx, eax
call fcn.10026c17
mov dword [ebp - 0x270c], eax
xor ecx, ecx
jmp 0x10014c54
xor ecx, ecx
mov eax, ecx
mov dword [ebp - 0x270c], ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push dword [ebp - 0x2714]
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.10026c27
push 0x10
call esi
jmp 0x10014887