Function at 0x10013574
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x1006a230
call fcn.10055640
sub esp, 0x4c
push ebx
push esi
xor ebx, ebx
push edi
mov edi, ecx
mov dword [ebp - 0x10], ebx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp + 8]
mov dword [ebp - 4], ebx
call fcn.10004704
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.10002131
test eax, eax
mov esi, 0x10074514
je 0x100135c7
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 8]
call fcn.10004704
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], 1
jmp 0x100135de
push esi
lea ecx, [ebp - 0x18]
call fcn.100014a0
mov dword [ebp - 4], 3
mov dword [ebp - 0x10], 2
mov eax, dword [eax]
cmp eax, ebx
je 0x100135e8
mov eax, dword [eax]
jmp 0x100135ea
xor eax, eax
push eax
lea ecx, [ebp - 0x3c]
call fcn.10005748
test byte [ebp - 0x10], 2
je 0x1001360c
mov ecx, dword [ebp - 0x18]
and dword [ebp - 0x10], 0xfffffffd
cmp ecx, ebx
je 0x1001360c
call fcn.100015ca
mov dword [ebp - 0x18], ebx
test byte [ebp - 0x10], 1
je 0x10013621
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
je 0x10013621
call fcn.100015ca
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
mov dword [ebp - 4], 5
je 0x10013637
call fcn.100015ca
mov dword [ebp - 0x20], ebx
lea ecx, [ebp + 8]
call fcn.10001d4e
test al, al
je 0x10013659
cmp dword [ebp - 0x24], 8
mov eax, dword [ebp - 0x38]
jae 0x1001364f
lea eax, [ebp - 0x38]
push 1
push eax
mov ecx, edi
call fcn.1000e1c5
cmp dword [ebp - 0x28], ebx
jbe 0x100136be
cmp byte [edi + 0x26], bl
je 0x100136aa
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x58]
call fcn.1000570a
push ecx
mov ecx, esp
mov dword [ebp - 0x10], esp
push esi
mov byte [ebp - 4], 8
call fcn.100014a0
mov ecx, edi
call fcn.1000d155
cmp dword [ebp - 0x40], 8
mov eax, dword [ebp - 0x54]
jae 0x10013692
lea eax, [ebp - 0x54]
push eax
mov ecx, edi
call fcn.100114ce
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.1000289a
jmp 0x100136be
cmp dword [ebp - 0x24], 8
mov eax, dword [ebp - 0x38]
jae 0x100136b6
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
call fcn.100114ce
push 0x12
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x100136d4
mov byte [ebp + 0xe0], 1
lea eax, [ebp - 0x14]
push 0x2713
push eax
call fcn.1001c8f5
lea eax, [ebp - 0x14]
push 0x10074bcc
push eax
mov byte [ebp - 4], 9
call fcn.1000f316
add esp, 0x10
test al, al
je 0x10013740
push 0x10075adc
push dword [ebp - 0x14]
call fcn.10055eac
test eax, eax
pop ecx
pop ecx
je 0x10013740
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push 0x100763b4
push eax
call fcn.1000cdfc
add esp, 0xc
push dword [eax]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa
call fcn.10005987
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 9
call fcn.10001337
mov ecx, edi
call fcn.10009fb9
lea ecx, [ebp + 8]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1001b89d
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xb
call fcn.100028c7
mov ecx, edi
call fcn.10012f3f
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
je 0x10013777
call fcn.100015ca
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.10001337
push 1
lea ecx, [ebp - 0x3c]
call fcn.1000289a
lea ecx, [ebp + 8]
call fcn.10007091
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x1c4