Function at 0x10010b70
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x30
mov eax, dword [0x1006d040]
xor eax, esp
mov dword [esp + 0x2c], eax
mov ecx, dword [0x10127ba4]
push esi
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0xd0]
call eax
cmp byte [0x10127b11], 0
mov ecx, eax
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [0x10127c0c], ecx
je 0x10010bcb
push 0x20
call edi
mov ecx, dword [0x10127c0c]
test ax, ax
je 0x10010bcb
mov eax, dword [ecx + 0x10]
mov dword [eax + 0xb8], 0x44898000
jmp 0x10010bd8
mov eax, dword [ecx + 0x10]
mov dword [eax + 0xb8], 0xc4898000
cmp byte [0x10127b12], 0
je 0x10010c15
mov eax, dword [ecx + 0x10]
mov dword [eax + 0x394], 0
mov eax, dword [ecx + 0x10]
mov dword [eax + 0x3a8], 0
mov eax, dword [ecx + 0x10]
mov dword [eax + 0x4f4], 0
mov eax, dword [ecx + 0x10]
mov dword [eax + 0x398], 0
cmp byte [0x10127b10], 0
je 0x10010c3c
push 0x20
call edi
mov ecx, dword [0x10127c0c]
test ax, ax
je 0x10010c3c
mov eax, dword [ecx + 0x10]
mov dword [eax + 0x8c], 1
jmp 0x10010c49
mov eax, dword [ecx + 0x10]
mov dword [eax + 0x8c], 0
movss xmm0, dword [0x10127b68]
mov eax, dword [ecx + 4]
movss xmm1, dword [0x10067f14]
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
cvtdq2ps xmm0, xmm0
mov eax, dword [0x100b2560]
addss xmm0, dword [0x10067f58]
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
mov eax, dword [0x10127bfc]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10067f34]
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
mov eax, dword [0x100b26b8]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10067f58]
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
mov eax, dword [0x10127c08]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10067f5c]
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
mov eax, dword [0x10127be8]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10067ed8]
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
mov eax, dword [0x10127b9c]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
mov eax, dword [0x10127b94]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
mov eax, dword [0x100b26c0]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [eax], xmm0
movd xmm0, dword [0x10127af0]
mov eax, dword [0x10127bc0]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10067ec4]
movss dword [eax], xmm0
movd xmm0, dword [0x10127b14]
mov eax, dword [0x10127c04]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10067f1c]
movss dword [eax], xmm0
cmp byte [0x10127b07], 0
je 0x10010d8a
cmp dword [0x383dab74], 1
jne 0x10010d9d
mov dword [0x383dab74], 0xfffffffb
jmp 0x10010d9d
cmp dword [0x383dab74], 0xfffffffb
jne 0x10010d9d
mov dword [0x383dab74], 1
cmp dword [0x10127aec], 0
je 0x10011096
mov ecx, 0xa2
xor edx, edx
mov al, byte [edx + 0x10061be4]
xor al, cl
inc ecx
mov byte [esp + edx + 0x24], al
and ecx, 0x800000ff
jns 0x10010dce
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x10010db1
lea eax, [esp + 0x24]
mov byte [esp + 0x30], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov esi, dword [eax + 0x6bf34]
movq qword [esp + 0x24], xmm0
mov dword [esp + 0x2c], 0
mov byte [esp + 0x30], 0
test esi, esi
je 0x10011096
mov ecx, dword [0x10127ba4]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd0]
call eax
mov dword [0x10127c0c], eax
test eax, eax
je 0x10011096
movss xmm0, dword [eax + 0x54]
movss dword [esp + 0x18], xmm0
movss xmm0, dword [eax + 0x58]
push 0x26
movss dword [esp + 0xc], xmm0
call edi
shr eax, 0xf
and eax, 0xffffff01
push 0x28
mov dword [esp + 0x10], eax
call edi
shr eax, 0xf
and eax, 0xffffff01
push 0x25
mov dword [esp + 0x18], eax
call edi
shr eax, 0xf
and eax, 0xffffff01
push 0x27
mov dword [esp + 0x14], eax
call edi
shr eax, 0xf
and eax, 0xffffff01
cmp byte [esp + 0xc], 0
mov dword [esp + 0x20], eax
jne 0x10010ea5
cmp byte [esp + 0x14], 0
jne 0x10010e9b
cmp byte [esp + 0x10], 0
jne 0x10010f74
test al, al
jmp 0x10011003
movss xmm0, dword [0x10067f9c]
jmp 0x10010ead
movss xmm0, dword [0x10067dec]
movss dword [esp + 0xc], xmm0
movss xmm0, dword [esp + 8]
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x10074544]
mulss xmm0, dword [esp + 0xc]
mulss xmm1, xmm0
movss xmm0, dword [esp + 0x18]
xorps xmm0, xmmword [0x10068480]
addss xmm1, dword [esi + 0xc8]
cvtss2sd xmm0, xmm0
movss dword [esi + 0xc8], xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm1, dword [0x10074544]
cvtsd2ss xmm2, xmm0
mulss xmm1, dword [esp + 0xc]
mulss xmm2, xmm1
movss xmm1, dword [esp + 8]
cvtps2pd xmm0, xmm1
addss xmm2, dword [esi + 0xcc]
movss dword [esi + 0xcc], xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cmp byte [esp + 0x10], 0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x10074544]
mulss xmm0, dword [esp + 0xc]
mulss xmm1, xmm0
addss xmm1, dword [esi + 0xd0]
movss dword [esi + 0xd0], xmm1
je 0x10010ffe
movss xmm0, dword [esp + 8]
subss xmm0, dword [0x10067e04]
cvtps2pd xmm0, xmm0
movsd qword [esp + 0x18], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm1, dword [0x10074544]
cvtsd2ss xmm2, xmm0
xorps xmm0, xmm0
mulss xmm2, xmm1
movss xmm1, dword [esi + 0xcc]
addss xmm1, xmm0
movsd xmm0, qword [esp + 0x18]
addss xmm2, dword [esi + 0xc8]
movss dword [esi + 0xcc], xmm1
movss dword [esi + 0xc8], xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x10074544]
mulss xmm1, xmm0
addss xmm1, dword [esi + 0xd0]
movss dword [esi + 0xd0], xmm1
cmp byte [esp + 0x20], 0
je 0x10011096
movss xmm0, dword [esp + 8]
addss xmm0, dword [0x10067e04]
movss dword [esp + 8], xmm0
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm1, dword [0x10074544]
cvtsd2ss xmm2, xmm0
xorps xmm0, xmm0
mulss xmm2, xmm1
movss xmm1, dword [esi + 0xcc]
addss xmm1, xmm0
addss xmm2, dword [esi + 0xc8]
movss dword [esi + 0xcc], xmm1
movss xmm1, dword [esp + 8]
cvtps2pd xmm0, xmm1
movss dword [esi + 0xc8], xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x10074544]
mulss xmm1, xmm0
addss xmm1, dword [esi + 0xd0]
movss dword [esi + 0xd0], xmm1
mov ecx, dword [esp + 0x34]
pop edi
pop esi
xor ecx, esp
call fcn.1005d7a4
mov esp, ebp
pop ebp
ret