Function at 0x10034730
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, dword [0x101d3580]
test edi, edi
je 0x10034a77
mov ecx, edi
call fcn.10014420
test al, al
jne 0x10034a77
cmp byte [0x101d5f19], al
je 0x10034a77
mov eax, dword fs:[0x2c]
mov ecx, dword [0x101d5a74]
push ebx
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x1028c364]
cmp eax, dword [esi + 4]
jle 0x100347b2
push 0x1028c364
call fcn.1012b230
add esp, 4
cmp dword [0x1028c364], 0xffffffff
jne 0x100347b2
push 0x1028c364
mov dword [0x1028c35c], 0
mov dword [0x1028c358], 0x101cf12c
call fcn.1012b1df
add esp, 4
cmp byte [0x101d5dcd], 0
jne 0x100347d1
cmp byte [0x101d5dcf], 0
jne 0x100347d1
cmp byte [0x101d5dcc], 0
jne 0x100347d1
xor bl, bl
jmp 0x100347d3
mov bl, 1
mov eax, dword [0x1028c358]
mov eax, dword [eax]
test eax, eax
jne 0x100347e5
mov dword [0x1028c35c], eax
jmp 0x100347fb
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x1028c35c], eax
jne 0x10034808
cmp byte [0x101d5f3b], 0
jne 0x10034808
xor cl, cl
jmp 0x1003480a
mov cl, 1
cmp dword [0x101d6094], 2
je 0x10034823
mov eax, dword [0x101d5dd0]
cmp eax, dword [0x101cf130]
setl al
jmp 0x1003482d
cmp dword [0x101d5dd0], 0
sete al
test bl, bl
jne 0x10034839
test al, al
je 0x10034839
test cl, cl
jne 0x10034846
cmp byte [0x101d5dce], 0
jne 0x10034846
xor al, al
jmp 0x10034848
mov al, 1
mov byte [0x101d5dce], al
mov eax, dword [0x1028c368]
cmp eax, dword [esi + 4]
jle 0x10034891
push 0x1028c368
call fcn.1012b230
add esp, 4
cmp dword [0x1028c368], 0xffffffff
jne 0x10034891
push 0x1028c368
mov dword [0x1028c37c], 0
mov dword [0x1028c378], 0x101cf134
call fcn.1012b1df
add esp, 4
cmp byte [0x101d5dce], 0
jne 0x100348d8
cmp byte [0x101d5dcf], 0
jne 0x100348d8
cmp byte [0x101d5dcc], 0
jne 0x100348d8
mov eax, dword [0x1028c378]
mov ebx, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov eax, dword [eax]
test eax, eax
jne 0x100348c4
mov dword [0x1028c37c], eax
jmp 0x100348de
push eax
call ebx
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x1028c37c], eax
jne 0x100348f0
jmp 0x100348de
mov ebx, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp byte [0x101d5dcd], 0
je 0x100348fd
cmp dword [0x101d6094], 2
je 0x100348fd
cmp dword [0x101d5dd0], 0
je 0x100348fd
mov al, 1
jmp 0x100348ff
xor al, al
mov byte [0x101d5dcd], al
mov eax, dword [0x1028c374]
cmp eax, dword [esi + 4]
jle 0x10034948
push 0x1028c374
call fcn.1012b230
add esp, 4
cmp dword [0x1028c374], 0xffffffff
jne 0x10034948
push 0x1028c374
mov dword [0x1028c370], 0
mov dword [0x1028c36c], 0x101cf13c
call fcn.1012b1df
add esp, 4
cmp byte [0x101d5dcd], 0
jne 0x10034a39
cmp byte [0x101d5dce], 0
jne 0x10034a39
cmp byte [0x101d5dcc], 0
jne 0x10034a39
cmp dword [0x101d60a8], 0
je 0x10034985
cmp byte [0x101d6098], 0
jne 0x10034a39
cmp byte [0x101d5f00], 0
jne 0x10034a39
mov esi, dword [ebp + 8]
test esi, esi
je 0x10034a39
cmp dword [0x101d5f3c], 0
je 0x10034a39
mov eax, dword [0x101d609c]
sub eax, 0
je 0x100349e4
sub eax, 2
je 0x100349be
sub eax, 1
jmp 0x10034a06
mov eax, dword [0x1028c36c]
mov eax, dword [eax]
test eax, eax
jne 0x100349d0
mov dword [0x1028c370], eax
jmp 0x10034a08
push eax
call ebx
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x1028c370], eax
jne 0x10034a39
jmp 0x10034a08
mov eax, dword [0x1028c36c]
mov eax, dword [eax]
test eax, eax
jne 0x100349f6
mov dword [0x1028c370], eax
jmp 0x10034a39
push eax
call ebx
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x1028c370], eax
je 0x10034a39
cmp byte [0x101d5f3a], 0
jne 0x10034a20
cmp dword [0x101d606c], 3
jne 0x10034a39
test byte [esi + 0x24], 1
je 0x10034a39
cmp byte [0x101d6091], 0
je 0x10034a32
mov ecx, edi
call fcn.10014740
jmp 0x10034a34
mov al, 1
mov byte [0x101d5dcf], al
mov al, byte [0x101d6090]
mov byte [0x101d5dcc], al
pop esi
pop ebx
test al, al
je 0x10034a59
mov word [0x101d5dcd], 0
mov byte [0x101d5dcf], 0
mov al, byte [0x101d5dcf]
mov byte [0x101d5f00], al
mov al, byte [0x101d5dcd]
mov byte [0x101d60a4], al
mov al, byte [0x101d5dce]
mov byte [0x101d5f39], al
pop edi
pop ebp
ret 4