Function at 0x100191f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
mov eax, dword [0x1005200c]
xor eax, esp
mov dword [esp + 0x24], eax
mov eax, dword [0x1006c4c8]
movss xmm0, dword [ebp + 0xc]
push esi
push edi
push dword [ebp + 0x10]
mov eax, dword [eax + 4]
mov edi, dword [ebp + 8]
push ecx
movss dword [esp], xmm0
mov ecx, edx
mov eax, dword [eax + 0x48]
push edi
mov dword [esp + 0x20], edi
call eax
mov ecx, dword [0x1006c4b4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x1006c4c0]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [0x1006c4c0]
mov esi, eax
mov dword [esp + 0x10], esi
mov edx, dword [ecx]
push dword [esi + 0xb38]
mov edx, dword [edx + 0x10]
call edx
mov ecx, eax
test ecx, ecx
jne 0x1001926b
mov dword [esp + 0xc], eax
jmp 0x10019276
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
mov dword [esp + 0xc], eax
mov ecx, dword [0x1006c4d0]
test ecx, ecx
je 0x10019baf
mov byte [0x11e38c78], 1
mov eax, dword [ecx]
push edi
mov eax, dword [eax + 0x20]
call eax
cmp byte [0x1006c40b], 0
mov edi, eax
je 0x100192bf
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x100192b8
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x100192bf
and dword [edi + 0x24], 0xfffff1e6
movss xmm0, dword [edi + 0x1c]
mov ecx, dword [0x1006c4b4]
movss dword [0x11dca1d8], xmm0
movss xmm0, dword [edi + 0x18]
movss dword [0x11dca1dc], xmm0
mov eax, dword [ecx]
push 0x11dca1ec
mov eax, dword [eax + 0x4c]
call eax
movss xmm0, dword [edi + 0xc]
movss dword [0x11dca1e0], xmm0
movss xmm0, dword [edi + 0x10]
movss dword [0x11dca1e4], xmm0
movss xmm0, dword [edi + 0x14]
movss dword [0x11dca1e8], xmm0
call fcn.10038c90
inc dword [0x1006c4cc]
cmp byte [0x10fec38c], 0
je 0x1001941b
push 0x75
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x10f7ce14]
test ax, ax
mov eax, 1
cmovne ecx, eax
push 0x76
mov dword [0x10f7ce14], ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x10019378
mov eax, str.qszwF
lea ecx, [esp + 0x24]
sub eax, 0x10633008
push eax
call fcn.10019c00
mov dword [0x1006d220], eax
mov word [0x1006d224], 1
push 0x77
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x100193a1
push 0x472d8d72
lea ecx, [esp + 0x28]
call fcn.10019c60
mov dword [0x1006d220], eax
mov word [0x1006d224], 0x100
push 0x78
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x10f7ce14]
test ax, ax
mov edx, 2
cmovne ecx, edx
push 0x79
mov dword [0x10f7ce14], ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x10f7ce14]
xor edx, edx
test ax, ax
push 0x7a
cmovne ecx, edx
mov dword [0x10f7ce14], ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x10f7ce14]
test ax, ax
mov edx, 3
cmovne ecx, edx
sub esp, 0xc
mov dword [0x10f7ce14], ecx
mov ecx, esp
movq xmm0, qword [edi + 0xc]
mov eax, dword [edi + 0x14]
push esi
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x10f7ce08
push edi
call fcn.10034f40
mov ecx, esi
call fcn.1000bf80
cmp dword [eax], 0
jne 0x10019baf
cmp byte [0x10febd0a], 0
je 0x10019440
push esi
push edi
mov ecx, 0x11dca098
call fcn.1003b840
cmp byte [0x10febd0d], 0
je 0x10019450
push esi
push edi
call fcn.1003b8d0
cmp byte [0x10febd32], 0
movss xmm0, dword [esi + 0xdc]
movss dword [esp + 0x24], xmm0
je 0x100194e6
mov ecx, dword [0x1006c4b4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x1006c4c0]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
test byte [edi + 0x24], 4
je 0x100194df
mov ecx, eax
call fcn.1000bd10
test byte [eax], 1
je 0x100194df
cmp byte [0x11e3953c], 0
movss xmm1, dword [esp + 0x24]
jne 0x100194b9
ucomiss xmm1, dword [0x1004d028]
lahf
test ah, 0x44
jp 0x100194e6
mov byte [0x11e3953c], 1
jmp 0x100194e6
ucomiss xmm1, dword [0x1004d044]
lahf
test ah, 0x44
jp 0x100194cc
or dword [edi + 0x24], 4
jmp 0x100194e6
movss xmm0, dword [0x1004d040]
comiss xmm0, xmm1
jb 0x100194e6
and dword [edi + 0x24], 0xfffffffb
jmp 0x100194e6
mov byte [0x11e3953c], 0
push esi
push edi
mov ecx, 0x10f797c0
call fcn.100345e0
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x24]
call eax
cmp byte [0x10febd10], 0
movss xmm2, dword [esi + 0xd4]
movss xmm1, dword [esi + 0xd8]
movss xmm0, dword [esi + 0xdc]
addss xmm2, dword [eax]
addss xmm1, dword [eax + 4]
addss xmm0, dword [eax + 8]
unpcklps xmm2, xmm1
movss dword [esp + 0x20], xmm0
mov eax, dword [esp + 0x20]
movq qword [0x100b3ac4], xmm2
mov dword [0x100b3acc], eax
je 0x10019554
push dword [esp + 0xc]
mov ecx, 0x11dca234
push esi
push edi
call fcn.1003c1d0
cmp byte [0x1006c40a], 0
jne 0x1001984c
cmp byte [0x10febc60], 0
je 0x10019575
push dword [esp + 0xc]
push esi
push edi
call fcn.1003a1a0
cmp byte [0x10feba6c], 0
je 0x10019661
movq xmm0, qword [edi + 0xc]
mov ecx, 0x1006d430
mov eax, dword [edi + 0x14]
push esi
push edi
movq qword [esp + 0x20], xmm0
mov dword [esp + 0x28], eax
call fcn.1000deb0
cmp byte [0x10feba7b], 0
je 0x10019661
cmp dword [0x10febbac], 0x28
jg 0x10019661
cmp byte [0x10feba79], 0
jne 0x10019661
movss xmm1, dword [edi + 0xc]
subss xmm1, dword [esp + 0x18]
call fcn.10037be0
movss xmm1, dword [edi + 0x10]
subss xmm1, dword [esp + 0x1c]
movss dword [esp + 0x24], xmm0
call fcn.10037be0
mov eax, dword [0x10febbac]
movaps xmm3, xmm0
cmp eax, 0xb4
jl 0x10019606
movss xmm1, dword [0x1004d07c]
jmp 0x1001961c
movd xmm1, dword [0x10febb9c]
movd xmm0, eax
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
movss xmm2, dword [esp + 0x24]
comiss xmm1, xmm2
jbe 0x10019640
movaps xmm0, xmm1
xorps xmm0, xmmword [0x1004d270]
comiss xmm2, xmm0
jbe 0x10019640
comiss xmm1, xmm3
jbe 0x10019640
comiss xmm3, xmm0
ja 0x10019661
movss xmm0, dword [esp + 0x18]
movss dword [edi + 0xc], xmm0
movss xmm0, dword [esp + 0x1c]
movss dword [edi + 0x10], xmm0
movss xmm0, dword [esp + 0x20]
movss dword [edi + 0x14], xmm0
cmp byte [0x10feba6d], 0
je 0x10019699
mov ecx, dword [0x1006c4b4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x1006c4c0]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov esi, eax
mov ecx, esi
call fcn.10036350
mov ecx, esi
call fcn.10036420
mov esi, dword [esp + 0x10]
cmp byte [0x10feba6f], 0
je 0x100196bd
test byte [edi + 0x24], 1
je 0x100196bd
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
cmp byte [0x10feba6e], 0
je 0x100196d3
mov eax, dword [edi + 0x24]
test al, 1
je 0x100196d3
or eax, 4
mov dword [edi + 0x24], eax
test byte [edi + 0x24], 1
je 0x10019831
mov eax, dword [esp + 0xc]
test eax, eax
je 0x10019831
mov ecx, eax
call fcn.1000c250
test al, al
je 0x10019831
push dword [esp + 0xc]
push esi
call fcn.1003bcb0
test al, al
je 0x100197f9
mov eax, dword [0x1006d8cc]
cmp eax, 0xffffffff
je 0x10019724
cmp byte [eax + 0x1006d1e0], 0
je 0x10019724
inc dword [eax*4 + 0x1006c5e0]
mov cl, byte [0x10febc60]
mov byte [0x100683a5], 1
mov dword [0x100683b4], 0
test cl, cl
je 0x1001974c
cmp byte [0x10febc62], 0
jne 0x1001974c
mov al, 1
jmp 0x1001974e
xor al, al
test cl, cl
je 0x1001975a
test al, al
je 0x100197e0
cmp byte [0x10febc58], 0
je 0x10019769
push edi
call fcn.10039970
cmp byte [0x10febc59], 0
je 0x100197e0
movzx eax, byte [0x10febc5a]
sub eax, 1
je 0x100197ba
sub eax, 1
je 0x100197a1
sub eax, 1
movzx eax, byte [0x10febd2c]
push eax
push dword [esp + 0x10]
lea eax, [edi + 0xc]
push ecx
push eax
push edi
jne 0x100197cc
call fcn.1002e610
jmp 0x100197d1
movzx eax, byte [0x10febd2c]
push eax
push dword [esp + 0x10]
lea eax, [edi + 0xc]
push ecx
push eax
push edi
call fcn.1002f690
jmp 0x100197d1
movzx eax, byte [0x10febd2c]
push eax
push dword [esp + 0x10]
lea eax, [edi + 0xc]
push ecx
push eax
push edi
call fcn.1002f090
movzx eax, byte [0x10febd2c]
push eax
push esi
push edi
call fcn.1003a960
mov ecx, edi
call fcn.10018b30
cmp byte [0x10feba78], 0
je 0x1001984c
mov byte [0x11e38c78], 0
jmp 0x1001984c
cmp byte [0x10feba79], 0
jne 0x10019822
cmp byte [0x10febd8e], 0
mov eax, 1
mov edx, edi
mov ecx, esi
cmovne eax, dword [0x10febd94]
push eax
call fcn.10018280
add esp, 4
cmp byte [0x10feba74], 0
je 0x1001984c
and dword [edi + 0x24], 0xfffffffe
jmp 0x1001984c
cmp byte [0x10feba79], 0
jne 0x1001984c
push dword [0x10febd94]
mov edx, edi
mov ecx, esi
call fcn.10018280
add esp, 4
mov eax, dword [0x10febda4]
cmp eax, 1
jne 0x10019883
push 0x56
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
je 0x1001987a
cmp byte [0x10febd0b], 0
je 0x1001987a
mov edx, esi
mov ecx, edi
call fcn.1003ab40
push esi
push edi
call fcn.1003b7a0
jmp 0x1001989b
cmp eax, 2
jne 0x10019890
push edi
call fcn.1003b7e0
jmp 0x1001989b
cmp eax, 3
jne 0x1001989b
push edi
call fcn.1003b290
push edi
mov ecx, 0x11dca208
call fcn.10037c70
mov eax, dword [0x20390990]
mov ecx, 0x10f797c0
push esi
push edi
mov dword [esp + 0x18], eax
call fcn.10034820
xor eax, eax
mov dword [esp + 0xc], eax
cmp byte [0x10febd15], al
je 0x100198fc
push 0x46
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x100198e6
cmp byte [0x10febd16], 0
sete al
mov byte [0x10febd16], al
jmp 0x100198eb
mov al, byte [0x10febd16]
test al, al
je 0x100198fc
test byte [edi + 0x24], 1
jne 0x100198fc
mov dword [edi + 8], 0x7fffffff
cmp byte [0x10febd1a], 0
je 0x1001995d
push 0x5a
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1001995d
mov eax, 0x66666667
imul dword [esp + 0x14]
push 0x10047db0
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
add eax, eax
cmp dword [esp + 0x18], eax
sete byte [0x11e38c78]
add dword [edi + 4], 0x1c2
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add dword [eax + 0xe54e70], 0x1c2
mov eax, dword [0x20390990]
add dword [eax + 8], 0x1c2
cmp byte [0x10febd19], 0
je 0x10019990
mov ecx, esi
call fcn.100178e0
test byte [edi + 0x24], 1
je 0x10019990
mov eax, dword [edi + 4]
mov ecx, 0x14
cdq
idiv ecx
mov dword [esp + 0xc], 6
cmp edx, 1
sete byte [0x11e38c78]
cmp byte [0x10febd18], 0
je 0x100199ec
mov ecx, esi
call fcn.100178e0
test byte [edi + 0x24], 1
je 0x100199ec
mov eax, 0x66666667
imul dword [esp + 0x14]
push str.engine.dll
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
add eax, eax
cmp dword [esp + 0x18], eax
sete byte [0x11e38c78]
add dword [edi + 4], 0x1c2
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add dword [eax + 0xe54e70], 0x1c2
mov eax, 6
jmp 0x100199f0
mov eax, dword [esp + 0xc]
cmp byte [0x10febd17], 0
je 0x10019a06
cmp dword [edi + 0x2c], 0
je 0x10019a06
mov eax, 0x5a
jmp 0x10019a0a
test eax, eax
je 0x10019a11
mov ecx, dword [esp + 0x10]
add dword [ecx + 8], eax
cmp byte [0x10febd0c], 0
je 0x10019a61
push 0x43
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x10019a61
mov ecx, dword [0x11e39420]
cmp ecx, 7
jle 0x10019a93
xor ecx, ecx
mov dword [0x11e39420], ecx
xorps xmm1, xmm1
movaps xmm0, xmm1
lea eax, [ecx - 2]
movss dword [edi + 0x18], xmm0
cmp eax, 3
ja 0x10019a52
movss xmm1, dword [edi + 0x1c]
cmp ecx, 1
movss dword [edi + 0x1c], xmm1
setl byte [0x11e38c78]
cmp byte [0x11e38c78], 0
movss xmm0, dword [edi + 0xc]
je 0x10019aac
movss dword [0x100a1a54], xmm0
movss xmm0, dword [edi + 0x10]
movss dword [0x100a1a58], xmm0
movss xmm0, dword [edi + 0x14]
movss dword [0x100a1a5c], xmm0
jmp 0x10019ace
inc ecx
mov dword [0x11e39420], ecx
lea eax, [ecx - 2]
cmp eax, 3
ja 0x10019a3a
movss xmm0, dword [edi + 0x18]
xorps xmm1, xmm1
jmp 0x10019a40
movss dword [0x100b3f98], xmm0
movss xmm0, dword [edi + 0x10]
movss dword [0x100b3f9c], xmm0
movss xmm0, dword [edi + 0x14]
movss dword [0x100b3fa0], xmm0
cmp byte [0x10feba79], 0
je 0x10019ade
mov ecx, edi
call fcn.10018eb0
movss xmm0, dword [edi + 0x18]
movss xmm1, dword [0x1004d0ac]
comiss xmm0, xmm1
movss xmm2, dword [0x1004d14c]
jbe 0x10019afd
movaps xmm0, xmm1
jmp 0x10019b01
maxss xmm0, xmm2
movss dword [edi + 0x18], xmm0
movss xmm0, dword [edi + 0x1c]
comiss xmm0, xmm1
ja 0x10019b17
maxss xmm0, xmm2
movaps xmm1, xmm0
movss xmm0, dword [edi + 0x20]
movss dword [edi + 0x1c], xmm1
movss xmm1, dword [0x1004d0a0]
comiss xmm0, xmm1
ja 0x10019b39
maxss xmm0, dword [0x1004d148]
movaps xmm1, xmm0
mov ecx, dword [0x10068354]
movss dword [edi + 0x20], xmm1
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x11e39538]
cmp eax, dword [ecx + 4]
jle 0x10019b7d
push 0x11e39538
call fcn.1003e015
add esp, 4
cmp dword [0x11e39538], 0xffffffff
jne 0x10019b7d
push 0x11e39538
call fcn.1003dfd6
add esp, 4
mov al, byte [0x1006c40b]
cmp al, byte [0x11e39529]
je 0x10019baf
mov ecx, dword [0x1006c4b4]
test al, al
push 0x11e39514
mov eax, dword [ecx]
je 0x10019ba0
mov eax, dword [eax + 0x4c]
jmp 0x10019ba3
mov eax, dword [eax + 0x50]
call eax
mov al, byte [0x1006c40b]
mov byte [0x11e39529], al
mov ecx, dword [esp + 0x2c]
pop edi
pop esi
xor ecx, esp
call fcn.1003da32
mov esp, ebp
pop ebp
ret 0xc