Function at 0x100311a0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp byte [0x101633c4], 0
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
je 0x100311c4
cmp byte [0x101633e5], 0
jne 0x1003131c
mov eax, dword [0x1015d15c]
sub eax, 0
je 0x100313e4
sub eax, 1
je 0x1003131c
sub eax, 1
jne 0x10031405
vmovss xmm0, dword [esi]
vsubss xmm0, xmm0, dword [0x1015dec4]
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10162de0]
vmovss dword [esi], xmm0
vmovss xmm0, dword [esi + 4]
vsubss xmm0, xmm0, dword [0x1015dec8]
mov ecx, dword [eax + ecx*4]
vmovss dword [esi + 4], xmm0
vmovss xmm0, dword [esi + 8]
vsubss xmm0, xmm0, dword [0x1015decc]
vmovss dword [esi + 8], xmm0
mov eax, dword [0x101d316c]
cmp eax, dword [ecx + 4]
jle 0x1003126b
push 0x101d316c
call fcn.100d50bc
add esp, 4
cmp dword [0x101d316c], 0xffffffff
jne 0x1003126b
push 0x101d316c
mov dword [0x101d3194], 0
mov dword [0x101d3190], 0x1015d148
call fcn.100d506b
add esp, 4
mov eax, dword [0x101d3190]
mov ecx, dword [eax]
test ecx, ecx
jne 0x1003127e
mov dword [0x101d3194], ecx
jmp 0x100312b4
push ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x101d3194], eax
je 0x100312af
cmp dword [0x101632a0], 0
jle 0x100312af
cmp byte [0x101633e4], 0
jne 0x100312af
cmp byte [0x101633e7], 0
je 0x10031303
mov eax, dword [0x101d3190]
mov eax, dword [eax]
test eax, eax
jne 0x100312c1
mov dword [0x101d3194], eax
jmp 0x100312f6
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x101d3194], eax
je 0x100312f6
cmp dword [0x101632a0], 0
jle 0x100312f6
cmp byte [0x101633e4], 0
jne 0x100312f6
cmp byte [0x101633e7], 0
je 0x10031405
cmp byte [0x10163268], 0
je 0x10031405
mov eax, dword [esi]
mov dword [edi + 0xc], eax
mov eax, dword [esi + 4]
mov dword [edi + 0x10], eax
mov eax, dword [esi + 8]
mov dword [edi + 0x14], eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
add edi, 0xc
cmp dword [0x1015d150], 0
jne 0x10031346
mov eax, dword [esi]
mov ecx, dword [0x1016322c]
mov dword [edi], eax
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 8]
mov dword [edi + 8], eax
mov eax, dword [ecx]
push edi
mov eax, dword [eax + 0x50]
call eax
mov ecx, dword [0x1016322c]
lea edx, [ebp - 0xc]
vxorps xmm0, xmm0, xmm0
vmovss dword [ebp - 4], xmm0
vmovss dword [ebp - 8], xmm0
mov eax, dword [ecx]
vmovss dword [ebp - 0xc], xmm0
push edx
mov eax, dword [eax + 0x4c]
call eax
vmovss xmm0, dword [esi]
vsubss xmm0, xmm0, dword [ebp - 0xc]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [esi + 4]
vsubss xmm0, xmm0, dword [ebp - 8]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [esi + 8]
vsubss xmm0, xmm0, dword [ebp - 4]
lea ecx, [ebp - 0x18]
vmovss dword [ebp - 0x10], xmm0
call fcn.10010590
vmovss xmm0, dword [ebp - 0x18]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [0x1015d150]
vdivss xmm0, xmm0, xmm1
vaddss xmm0, xmm0, dword [edi]
vmovss dword [edi], xmm0
vmovss xmm0, dword [ebp - 0x14]
vdivss xmm0, xmm0, xmm1
vaddss xmm0, xmm0, dword [edi + 4]
vmovss dword [edi + 4], xmm0
vmovss xmm0, dword [ebp - 0x10]
vdivss xmm0, xmm0, xmm1
vaddss xmm0, xmm0, dword [edi + 8]
vmovss dword [edi + 8], xmm0
push edi
jmp 0x100313f8
mov eax, dword [esi]
lea edx, [edi + 0xc]
mov dword [edx], eax
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov eax, dword [esi + 8]
mov dword [edx + 8], eax
push edx
mov ecx, dword [0x1016322c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x50]
call eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8