Function at 0x100010e0
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, dword [esp + 4]
push edi
add eax, 0xffffffcf
or edi, 0xffffffff
cmp eax, 0x49
ja case.default.0x100010fc
movzx eax, byte [eax + 0x10001454]
push esi
jmp dword [eax*4 + 0x10001414]
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x5a
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 5
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 4
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x1f
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x20
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl 0x100011f7
push 0x11
call esi
test ax, ax
jl 0x100011f7
mov edi, 0x21
pop esi
mov eax, edi
pop edi
ret
push 0x12
call esi
test ax, ax
jl 0x10001213
push 0x11
call esi
test ax, ax
jge 0x10001213
mov edi, 0xb
pop esi
mov eax, edi
pop edi
ret
push 0x12
call esi
test ax, ax
jge case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0xc
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x32
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x3c
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x33
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 1
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jge case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 3
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl 0x1000132b
push 0x11
call esi
test ax, ax
jge 0x1000132b
mov edi, 0xd
pop esi
mov eax, edi
pop edi
ret
push 0x12
call esi
test ax, ax
jge case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x11
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl 0x10001371
push 0x11
call esi
test ax, ax
jge 0x10001371
mov edi, 0xe
pop esi
mov eax, edi
pop edi
ret
push 0x12
call esi
test ax, ax
jge case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x12
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl 0x100013b7
push 0x11
call esi
test ax, ax
jge 0x100013b7
mov edi, 0xf
pop esi
mov eax, edi
pop edi
ret
push 0x12
call esi
test ax, ax
jge case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x13
pop esi
mov eax, edi
pop edi
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ax, ax
jl 0x100013f5
push 0x11
call esi
test ax, ax
jge 0x100013f5
mov edi, 0x10
pop esi
mov eax, edi
pop edi
ret
push 0x12
call esi
test ax, ax
jge case.0x100010fc.64
push 0x11
call esi
test ax, ax
jl case.0x100010fc.64
mov edi, 0x14
pop esi
mov eax, edi
pop edi
ret