Function at 0x1009b790
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 8
cmp byte [0x10161f81], 0
push esi
push edi
je 0x1009bc0a
mov eax, dword [0x10161f84]
sub eax, 0
je 0x1009bb73
sub eax, 1
je 0x1009b9ed
sub eax, 1
jne 0x1009bc0a
mov esi, dword [0x10162100]
test esi, esi
je 0x1009bc0a
mov eax, dword [0x101c3634]
add eax, 0xffffffcc
xor eax, 0xd5b8f0f
cmp dword [eax + esi], 0
jne 0x1009bc0a
push dword [0x10161dec]
call dword [sym.imp.USER32.dll_GetKeyState]
mov edx, dword [0x10162100]
test ax, ax
mov edi, dword [0x101c3638]
sete cl
cmp byte [0x10161f94], 0
mov dword [ebp - 4], ecx
je 0x1009b83d
lea eax, [edi - 0x35]
xor eax, 0xd5b8f10
mov al, byte [eax + edx]
and al, 1
neg al
sbb al, al
and al, cl
mov dword [ebp - 4], eax
push dword [0x10161dec]
lea eax, [edi - 0x35]
xor eax, 0xd5b8f10
mov edi, dword [eax + edx]
and edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
movzx ecx, ax
mov eax, dword [0x101c3600]
add eax, 0xffffffd9
xor eax, 0xd5b8f02
movss xmm1, dword [eax + esi + 4]
movss xmm0, dword [eax + esi]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1001c2a0
comiss xmm0, dword [0x100e0af0]
mov edx, dword [0x101c346c]
jbe 0x1009b8d4
test edi, edi
je 0x1009b8d4
test cx, cx
jne 0x1009b8d4
mov eax, dword [0x101c3680]
mov ecx, dword [ebp - 4]
add eax, 0xffffffb9
movss xmm1, dword [edx]
xor eax, 0xd5b8f22
movzx ecx, cl
movss dword [0x10171d90], xmm1
movss xmm0, dword [eax + esi]
xor eax, eax
cmp byte [0x10161f95], al
movss dword [0x10171d94], xmm0
cmovne ecx, eax
jmp 0x1009b8e7
movss xmm1, dword [0x10171d90]
movss xmm0, dword [0x10171d94]
mov ecx, dword [ebp - 4]
movss xmm2, dword [0x100e0c80]
ucomiss xmm1, xmm2
lahf
test ah, 0x44
jnp 0x1009bc0a
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1009bc0a
test cl, cl
jne 0x1009b91d
mov byte [0x10171d9d], 1
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
movss xmm3, dword [edx]
movd xmm2, dword [0x10161f98]
movaps xmm0, xmm3
subss xmm0, xmm1
cvtdq2ps xmm2, xmm2
call fcn.10041ce0
comiss xmm0, xmm2
jbe 0x1009b94a
comiss xmm2, dword [0x100e0900]
ja 0x1009bc0a
cmp byte [0x10161f9c], 0
je 0x1009b98a
movd xmm0, dword [0x10161f8c]
mov esi, dword [0x101621ec]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm3
addss xmm0, dword [0x100e0a18]
mulss xmm0, dword [0x100e09e0]
call fcn.1001c290
movd xmm1, dword [0x10161f90]
jmp 0x1009bb1c
cmp byte [0x10171d9d], 0
je 0x1009bc0a
movd xmm0, dword [0x10161f90]
sub esp, 8
cvtdq2ps xmm0, xmm0
mov dword [esp + 4], 0x43b40000
movss dword [esp], xmm0
call dword [sym.imp.ucrtbased.dll_remainderf]
fstp dword [ebp - 4]
movss xmm0, dword [ebp - 4]
movss dword [esp + 4], xmm0
xorps xmm0, xmmword [0x100e0e50]
movss dword [esp], xmm0
call dword [0x101c3534]
fstp st(0)
mov byte [0x10171d9d], 0
add esp, 8
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp byte [0x10162104], 0
je 0x1009bc0a
cmp byte [0x10172da1], 0
mov al, 1
jne 0x1009bc0a
cmp byte [0x10172da2], 0
jne 0x1009bc0a
cmp byte [0x10172da3], 0
jne 0x1009bc0a
movss xmm0, dword [0x10162284]
xor edx, edx
mov edi, dword [0x10161f8c]
movzx ecx, al
mov al, byte [0x10162290]
test al, al
cmove ecx, edx
mov edx, dword [0x10161f90]
comiss xmm0, dword [0x100e0ad0]
mov dword [ebp - 4], ecx
mov dword [ebp - 8], edx
jbe 0x1009baa4
test al, al
je 0x1009baa4
push dword [0x10161dec]
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jne 0x1009baa1
mov ecx, dword [0x101c3680]
mov edx, dword [0x101c346c]
add ecx, 0xffffffb9
mov eax, dword [0x10162100]
xor ecx, 0xd5b8f22
movss xmm0, dword [edx]
movss xmm1, dword [ecx + eax]
xor cl, cl
movss dword [0x10171d8c], xmm0
movss dword [0x10171d98], xmm1
jmp 0x1009baba
mov ecx, dword [ebp - 4]
movss xmm0, dword [0x10171d8c]
mov edx, dword [0x101c346c]
movss xmm1, dword [0x10171d98]
movss xmm2, dword [0x100e0c80]
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1009bc0a
ucomiss xmm1, xmm2
lahf
test ah, 0x44
jnp 0x1009bc0a
test cl, cl
jne 0x1009baf0
mov byte [0x10171d9c], 1
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp byte [0x10161f88], 0
mov esi, dword [0x101621ec]
jne 0x1009bb36
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edx]
addss xmm0, dword [0x100e09e0]
call fcn.1001c290
movd xmm1, dword [ebp - 8]
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm1
addss xmm0, dword [esi + 0x10]
movss dword [esi + 0x10], xmm0
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
imul eax, edi, 0x64
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edx + 0x10]
movss dword [ebp - 8], xmm0
fld dword [ebp - 8]
fld dword [0x100e0c40]
call sub.ucrtbased.dll__CIfmod
fstp dword [ebp - 8]
movss xmm0, dword [ebp - 8]
addss xmm0, dword [esi + 0x10]
movss dword [esi + 0x10], xmm0
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
movss xmm1, dword [0x100e0a18]
movss xmm3, dword [0x10172da4]
movaps xmm0, xmm1
movss xmm2, dword [0x101c386c]
subss xmm0, xmm3
mulss xmm2, dword [0x100e093c]
mov cl, byte [0x10172d21]
mulss xmm2, dword [0x100e0960]
mulss xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [0x101c16b4]
mulss xmm1, xmm0
mulss xmm0, dword [0x100e09e0]
subss xmm1, xmm0
test cl, cl
jne 0x1009bbd3
xorps xmm1, xmmword [0x100e0e50]
mov eax, dword [0x101621ec]
addss xmm2, xmm3
addss xmm1, dword [eax + 0x10]
comiss xmm2, dword [0x100e09f4]
movss dword [eax + 0x10], xmm1
movss dword [0x10172da4], xmm2
jb 0x1009bc0a
test cl, cl
mov dword [0x10172da4], 0
sete byte [0x10172d21]
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret