Function at 0x10003690
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [0x1018d004]
xor eax, esp
mov dword [esp + 0x38], eax
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], 0
push 0xffffffffffffffff
mov dword [esp + 0x1c], 0
mov word [esp + 0x20], 0
push dword [edi + 0x734]
mov byte [esp + 0x1a], 0
mov byte [esp + 0x1b], 0
mov dword [esp + 0x28], 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov al, byte [edi + 0x730]
push dword [edi + 0x734]
mov byte [edi + 0x738], al
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp byte [edi + 0x738], 0
je 0x100038e2
lea esi, [edi + 0x24]
nop dword [eax + eax]
push 3
push dword [edi + 0xb4]
xor ebx, ebx
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x10003755
mov edx, dword [edi + 0x778]
mov ecx, dword [edx]
cmp ecx, edx
je 0x1000373b
cmp dword [ecx + 8], eax
je 0x1000373b
mov ecx, dword [ecx]
cmp ecx, edx
jne 0x10003730
cmp ecx, edx
lea esi, [ebx + 1]
push 3
cmovne esi, ebx
push eax
mov ebx, esi
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
jne 0x10003724
lea esi, [edi + 0x24]
cmp ebx, dword [esp + 0x20]
je 0x10003779
push 0
lea ecx, [edi + 0x124]
call fcn.10021c80
push 0
lea ecx, [edi + 0xa0]
call fcn.10021c80
mov dword [esp + 0x20], ebx
mov ecx, edi
call fcn.10004300
movq xmm0, qword [esp + 0x14]
mov eax, dword [esp + 0x1c]
push 0x1018f014
movq qword [esp + 0x28], xmm0
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [0x1018f014]
mov ebx, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [esp + 0x14], eax
mov eax, dword [0x1018f018]
push 1
mov dword [esp + 0x1c], eax
call ebx
test ax, ax
push 2
setne byte [esp + 0x21]
call ebx
test ax, ax
lea eax, [esp + 0x30]
push eax
lea eax, [edi + 0x248]
setne byte [esp + 0x20]
mov ecx, eax
call fcn.10007e30
cmp byte [esp + 0x1d], 0
mov bl, byte [esp + 0x2d]
je 0x10003830
test bl, bl
jne 0x10003830
push dword [esp + 0x18]
mov ecx, esi
push dword [esp + 0x18]
call fcn.1002c600
test al, al
je 0x1000380f
cmp byte [edi + 0x96], bl
je 0x1000380f
mov al, 1
jmp 0x10003811
xor al, al
cmp byte [edi + 0x73d], 0
mov byte [edi + 0x73c], al
jne 0x1000382b
test al, al
jne 0x1000382b
mov byte [esp + 0x12], 1
jmp 0x1000384c
mov byte [esp + 0x13], 1
cmp byte [esp + 0x12], 0
jne 0x1000384c
cmp byte [edi + 0x96], 0
je 0x1000384c
lea eax, [esp + 0x14]
mov ecx, esi
push eax
call fcn.1002c4d0
push 0
mov ecx, esi
call fcn.1002bf60
cmp byte [esp + 0x13], 0
jne 0x10003880
push 0
lea eax, [esp + 0x18]
push eax
lea ecx, [edi + 0xf4]
call fcn.100074a0
push 1
lea eax, [esp + 0x34]
push eax
lea ecx, [edi + 0xf4]
call fcn.10007500
cmp byte [esp + 0x1d], 0
jne 0x10003895
test bl, bl
je 0x10003895
mov byte [esp + 0x12], 0
mov byte [esp + 0x13], 0
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [edi + 0xf4]
call fcn.10007490
mov ecx, esi
call fcn.1002bf50
push 0xffffffffffffffff
push dword [edi + 0x734]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov al, byte [edi + 0x730]
mov byte [edi + 0x738], al
push dword [edi + 0x734]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
cmp byte [edi + 0x738], 0
jne 0x10003710
mov ecx, dword [esp + 0x44]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1007f9c8
mov esp, ebp
pop ebp
ret