Function at 0x6d8812a3
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
call sym._AmoesProtection_0
mov dword [esp], 0x61
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881310
mov dword [0x6d885028], 1
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x62
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881340
mov dword [0x6d885028], 2
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x63
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881370
mov dword [0x6d885028], 3
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x64
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d8813a0
mov dword [0x6d885028], 4
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x65
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d8813d0
mov dword [0x6d885028], 5
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x66
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881400
mov dword [0x6d885028], 6
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x67
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881430
mov dword [0x6d885028], 7
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x68
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881460
mov dword [0x6d885028], 8
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x69
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881490
mov dword [0x6d885028], 9
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x24
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d8814c0
mov dword [0x6d885028], 0xa
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x23
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d8814f0
mov dword [0x6d885028], 0xb
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x70
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881520
mov dword [0x6d885028], 0xc
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
mov dword [esp], 0x60
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
cwde
and eax, 1
test eax, eax
je 0x6d881550
mov dword [0x6d885028], 0
mov dword [esp], 0x40
call sub.USER32.dll_MessageBeep
sub esp, 4
cmp dword [0x6d885028], 1
jne 0x6d8815e9
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
cmp dword [ebp - 8], 0x14
jg 0x6d8815e9
mov dword [esp + 8], 0xbec0859
mov edx, dword [ebp - 8]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 8]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 8]
inc dword [eax]
jmp 0x6d881576
cmp dword [0x6d885028], 2
jne 0x6d881682
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
cmp dword [ebp - 0xc], 0x14
jg 0x6d881682
mov dword [esp + 8], 0x5f5ecec
mov edx, dword [ebp - 0xc]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0xc]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0xc]
inc dword [eax]
jmp 0x6d88160f
cmp dword [0x6d885028], 3
jne 0x6d88171b
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], 0x14
jg 0x6d88171b
mov dword [esp + 8], 0x5f5ece0
mov edx, dword [ebp - 0x10]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x10]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x10]
inc dword [eax]
jmp 0x6d8816a8
cmp dword [0x6d885028], 4
jne 0x6d8817b4
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x14
jg 0x6d8817b4
mov dword [esp + 8], 0xbebd1bd
mov edx, dword [ebp - 0x14]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x14]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x14]
inc dword [eax]
jmp 0x6d881741
cmp dword [0x6d885028], 5
jne 0x6d88184d
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x18], 0x14
jg 0x6d88184d
mov dword [esp + 8], 0x5f5ecf2
mov edx, dword [ebp - 0x18]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x18]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x18]
inc dword [eax]
jmp 0x6d8817da
cmp dword [0x6d885028], 6
jne 0x6d8818e6
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 0x14
jg 0x6d8818e6
mov dword [esp + 8], 0x17d79b75
mov edx, dword [ebp - 0x1c]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x1c]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x1c]
inc dword [eax]
jmp 0x6d881873
cmp dword [0x6d885028], 7
jne 0x6d88197f
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 0x14
jg 0x6d88197f
mov dword [esp + 8], 0x11e1b699
mov edx, dword [ebp - 0x20]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x20]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x20]
inc dword [eax]
jmp 0x6d88190c
cmp dword [0x6d885028], 8
jne 0x6d881a18
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x24], 0
cmp dword [ebp - 0x24], 0x14
jg 0x6d881a18
mov dword [esp + 8], 0xbebd1bf
mov edx, dword [ebp - 0x24]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x24]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x24]
inc dword [eax]
jmp 0x6d8819a5
cmp dword [0x6d885028], 9
jne 0x6d881ab1
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x28], 0
cmp dword [ebp - 0x28], 0x14
jg 0x6d881ab1
mov dword [esp + 8], 0xbebd982
mov edx, dword [ebp - 0x28]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x28]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x28]
inc dword [eax]
jmp 0x6d881a3e
cmp dword [0x6d885028], 0xa
jne 0x6d881b4a
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 0x14
jg 0x6d881b4a
mov dword [esp + 8], 0x5f5ecc2
mov edx, dword [ebp - 0x2c]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x2c]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x2c]
inc dword [eax]
jmp 0x6d881ad7
cmp dword [0x6d885028], 0xb
jne 0x6d881be3
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x30], 0
cmp dword [ebp - 0x30], 0x14
jg 0x6d881be3
mov dword [esp + 8], 0x5f5ecf1
mov edx, dword [ebp - 0x30]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x30]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x30]
inc dword [eax]
jmp 0x6d881b70
cmp dword [0x6d885028], 0xc
jne 0x6d881c7c
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x34], 0
cmp dword [ebp - 0x34], 0x14
jg 0x6d881c7c
mov dword [esp + 8], 0x11e1b6a8
mov edx, dword [ebp - 0x34]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0x29d7af76
mov edx, dword [ebp - 0x34]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x34]
inc dword [eax]
jmp 0x6d881c09
cmp dword [0x6d885028], 0
jne 0x6d881d15
mov dword [esp], str.PointBlank.i3Exec
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x38], 0
cmp dword [ebp - 0x38], 0x14
jg 0x6d881d15
mov dword [esp + 8], 0
mov edx, dword [ebp - 0x38]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x66c
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
mov dword [esp + 8], 0
mov edx, dword [ebp - 0x38]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
add eax, edx
shl eax, 4
add eax, 0x674
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
add eax, 0x640440
mov dword [esp], eax
call sym._AndiAmoes
lea eax, [ebp - 0x38]
inc dword [eax]
jmp 0x6d881ca2
mov dword [esp], 0
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x6d8812a9