Function at 0x1009be50
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 8
cmp byte [0x10164f79], 0
push esi
push edi
je 0x1009c2ca
mov eax, dword [0x10164f7c]
sub eax, 0
je 0x1009c233
sub eax, 1
je 0x1009c0ad
sub eax, 1
jne 0x1009c2ca
mov esi, dword [0x101650f8]
test esi, esi
je 0x1009c2ca
mov eax, dword [0x101c666c]
add eax, 0xffffffcc
xor eax, 0x9ad088d4
cmp dword [eax + esi], 0
jne 0x1009c2ca
push dword [0x10164de4]
call dword [sym.imp.USER32.dll_GetKeyState]
mov edx, dword [0x101650f8]
test ax, ax
mov edi, dword [0x101c6670]
sete cl
cmp byte [0x10164f8c], 0
mov dword [ebp - 4], ecx
je 0x1009befd
lea eax, [edi - 0x35]
xor eax, 0x9ad088d5
mov al, byte [eax + edx]
and al, 1
neg al
sbb al, al
and al, cl
mov dword [ebp - 4], eax
push dword [0x10164de4]
lea eax, [edi - 0x35]
xor eax, 0x9ad088d5
mov edi, dword [eax + edx]
and edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
movzx ecx, ax
mov eax, dword [0x101c6638]
add eax, 0xffffffd9
xor eax, 0x9ad088c7
movss xmm1, dword [eax + esi + 4]
movss xmm0, dword [eax + esi]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1001c2a0
comiss xmm0, dword [0x100e2c88]
mov edx, dword [0x101c649c]
jbe 0x1009bf94
test edi, edi
je 0x1009bf94
test cx, cx
jne 0x1009bf94
mov eax, dword [0x101c66b8]
mov ecx, dword [ebp - 4]
add eax, 0xffffffb9
movss xmm1, dword [edx]
xor eax, 0x9ad088e7
movzx ecx, cl
movss dword [0x10174d80], xmm1
movss xmm0, dword [eax + esi]
xor eax, eax
cmp byte [0x10164f8d], al
movss dword [0x10174d84], xmm0
cmovne ecx, eax
jmp 0x1009bfa7
movss xmm1, dword [0x10174d80]
movss xmm0, dword [0x10174d84]
mov ecx, dword [ebp - 4]
movss xmm2, dword [0x100e2e18]
ucomiss xmm1, xmm2
lahf
test ah, 0x44
jnp 0x1009c2ca
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1009c2ca
test cl, cl
jne 0x1009bfdd
mov byte [0x10174d8d], 1
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
movss xmm3, dword [edx]
movd xmm2, dword [0x10164f90]
movaps xmm0, xmm3
subss xmm0, xmm1
cvtdq2ps xmm2, xmm2
call fcn.10041cc0
comiss xmm0, xmm2
jbe 0x1009c00a
comiss xmm2, dword [0x100e2a98]
ja 0x1009c2ca
cmp byte [0x10164f94], 0
je 0x1009c04a
movd xmm0, dword [0x10164f84]
mov esi, dword [0x101651e4]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm3
addss xmm0, dword [0x100e2bb0]
mulss xmm0, dword [0x100e2b78]
call fcn.1001c290
movd xmm1, dword [0x10164f88]
jmp 0x1009c1dc
cmp byte [0x10174d8d], 0
je 0x1009c2ca
movd xmm0, dword [0x10164f88]
sub esp, 8
cvtdq2ps xmm0, xmm0
mov dword [esp + 4], 0x43b40000
movss dword [esp], xmm0
call dword [sym.imp.ucrtbased.dll_remainderf]
fstp dword [ebp - 4]
movss xmm0, dword [ebp - 4]
movss dword [esp + 4], xmm0
xorps xmm0, xmmword [0x100e2fe0]
movss dword [esp], xmm0
call dword [0x101c6568]
fstp st(0)
mov byte [0x10174d8d], 0
add esp, 8
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp byte [0x101650fc], 0
je 0x1009c2ca
cmp byte [0x10175dd1], 0
mov al, 1
jne 0x1009c2ca
cmp byte [0x10175dd2], 0
jne 0x1009c2ca
cmp byte [0x10175dd3], 0
jne 0x1009c2ca
movss xmm0, dword [0x1016527c]
xor edx, edx
mov edi, dword [0x10164f84]
movzx ecx, al
mov al, byte [0x10165288]
test al, al
cmove ecx, edx
mov edx, dword [0x10164f88]
comiss xmm0, dword [0x100e2c68]
mov dword [ebp - 4], ecx
mov dword [ebp - 8], edx
jbe 0x1009c164
test al, al
je 0x1009c164
push dword [0x10164de4]
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jne 0x1009c161
mov ecx, dword [0x101c66b8]
mov edx, dword [0x101c649c]
add ecx, 0xffffffb9
mov eax, dword [0x101650f8]
xor ecx, 0x9ad088e7
movss xmm0, dword [edx]
movss xmm1, dword [ecx + eax]
xor cl, cl
movss dword [0x10174d7c], xmm0
movss dword [0x10174d88], xmm1
jmp 0x1009c17a
mov ecx, dword [ebp - 4]
movss xmm0, dword [0x10174d7c]
mov edx, dword [0x101c649c]
movss xmm1, dword [0x10174d88]
movss xmm2, dword [0x100e2e18]
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1009c2ca
ucomiss xmm1, xmm2
lahf
test ah, 0x44
jnp 0x1009c2ca
test cl, cl
jne 0x1009c1b0
mov byte [0x10174d8c], 1
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp byte [0x10164f80], 0
mov esi, dword [0x101651e4]
jne 0x1009c1f6
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edx]
addss xmm0, dword [0x100e2b78]
call fcn.1001c290
movd xmm1, dword [ebp - 8]
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm1
addss xmm0, dword [esi + 0x10]
movss dword [esi + 0x10], xmm0
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
imul eax, edi, 0x64
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edx + 0x10]
movss dword [ebp - 8], xmm0
fld dword [ebp - 8]
fld dword [0x100e2dd8]
call sub.ucrtbased.dll__CIfmod
fstp dword [ebp - 8]
movss xmm0, dword [ebp - 8]
addss xmm0, dword [esi + 0x10]
movss dword [esi + 0x10], xmm0
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
movss xmm1, dword [0x100e2bb0]
movss xmm3, dword [0x10175dd4]
movaps xmm0, xmm1
movss xmm2, dword [0x101c662c]
subss xmm0, xmm3
mulss xmm2, dword [0x100e2ad4]
mov cl, byte [0x10175d51]
mulss xmm2, dword [0x100e2af8]
mulss xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [0x101c46e4]
mulss xmm1, xmm0
mulss xmm0, dword [0x100e2b78]
subss xmm1, xmm0
test cl, cl
jne 0x1009c293
xorps xmm1, xmmword [0x100e2fe0]
mov eax, dword [0x101651e4]
addss xmm2, xmm3
addss xmm1, dword [eax + 0x10]
comiss xmm2, dword [0x100e2b8c]
movss dword [eax + 0x10], xmm1
movss dword [0x10175dd4], xmm2
jb 0x1009c2ca
test cl, cl
mov dword [0x10175dd4], 0
sete byte [0x10175d51]
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret