Function at 0x10008400
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [0x1006b040]
xor eax, ebp
mov dword [ebp - 8], eax
mov al, byte [0x100e1844]
mov dl, cl
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x3a], al
push ebx
mov bl, byte [0x100e1845]
push esi
mov esi, dword [0x1006b0d8]
push edi
mov edi, dword [0x100e183c]
test al, al
jne 0x1000844a
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1000863f
mov dl, byte [ebp - 0x39]
cmp dword [0x1006b0a0], 0xffffffff
jne 0x10008485
cmp dword [0x1006b9c4], 0
je 0x1000863f
movzx ecx, bl
push esi
test dl, dl
je 0x1000846f
call fcn.10007da0
jmp 0x10008474
call fcn.100080c0
add esp, 4
mov dword [0x1006b0a0], eax
cmp eax, 0xffffffff
je 0x1000863f
cmp dword [0x1006b9c4], 0
je 0x1000863f
mov ecx, dword [0x3845c9a8]
mov eax, dword [ecx]
call dword [eax + 0xf4]
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov esi, eax
push 4
push esi
call ebx
test eax, eax
jne 0x1000862b
test esi, esi
je 0x1000862b
mov ecx, dword [esi + 0x184]
mov eax, dword [0x1006b0a0]
push 4
mov esi, dword [ecx + eax*4]
push esi
call ebx
test eax, eax
jne 0x1000863f
test esi, esi
je 0x1000863f
mov eax, dword [esi + 0x10]
push 4
push eax
mov dword [ebp - 0x40], eax
call ebx
test eax, eax
jne 0x1000863f
cmp dword [ebp - 0x40], eax
je 0x1000863f
push 4
push 0x38410350
call ebx
test eax, eax
jne 0x10008650
mov ecx, dword [0x3841036c]
mov ebx, dword [0x3845ce7c]
cmp edi, 1
jne 0x10008544
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push edi
push edx
push 8
push dword [esi + 0x10]
call dword [eax + 0x40]
movss xmm0, dword [ebp - 0x34]
addss xmm0, dword [0x10066cbc]
movss dword [ebp - 0x34], xmm0
jmp 0x100085c8
cmp edi, 2
jne 0x10008553
push 1
lea edx, [ebp - 0x38]
push edx
push 7
jmp 0x100085c0
cmp edi, 3
jne 0x1000857c
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push 1
push edx
push 6
push dword [esi + 0x10]
call dword [eax + 0x40]
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x10066c7c]
movss dword [ebp - 0x34], xmm0
jmp 0x100085c8
cmp edi, 4
jne 0x100085a4
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push 1
push edx
push edi
push dword [esi + 0x10]
call dword [eax + 0x40]
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x10066cbc]
movss dword [ebp - 0x34], xmm0
jmp 0x100085c8
cmp edi, 5
jne 0x100085b3
push 1
lea edx, [ebp - 0x38]
push edx
push 0x15
jmp 0x100085c0
cmp edi, 6
jne 0x100085c8
push 1
lea edx, [ebp - 0x38]
push edx
push 0x24
mov eax, dword [ecx]
push dword [esi + 0x10]
call dword [eax + 0x40]
mov eax, dword [ebx + 0x13c]
sub esp, 0xc
mov ecx, esp
sub esp, 0xc
movq xmm0, qword [eax + 0x10]
mov eax, dword [eax + 0x18]
movq qword [ecx], xmm0
movq xmm0, qword [ebp - 0x38]
mov dword [ecx + 8], eax
mov ecx, esp
mov eax, dword [ebp - 0x30]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x4c]
call fcn.10005820
movss xmm0, dword [ebp - 0x48]
add esp, 0x18
cmp byte [ebp - 0x39], 1
mulss xmm0, dword [0x10066bd0]
movss dword [ebx + 0x58], xmm0
movss xmm0, dword [ebp - 0x4c]
mulss xmm0, dword [0x10066bd0]
movss dword [ebx + 0x54], xmm0
jne 0x1000863f
mov dword [0x1006b9c4], 1
mov dword [0x1006b0a0], 0xffffffff
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10051626
mov esp, ebp
pop ebp
ret
xor eax, eax
cmp byte [ebp - 0x3a], al
setne al
mov dword [0x1006b9c4], eax
jmp 0x10008635