Function at 0x1009e140
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push ecx
cmp dword [0x10175d88], 0
push esi
jle case.default.0x1009e4b9
mov eax, dword [0x10164f5c]
movss xmm4, dword [0x100e2dac]
movss xmm3, dword [0x100e2d40]
sub eax, 0
je 0x1009e343
sub eax, 1
je 0x1009e2af
sub eax, 1
jne 0x1009e21e
cmp byte [0x101cc7f0], al
jne 0x1009e1ae
mov eax, dword [0x101651b8]
mov byte [0x101cc7f0], 1
mov byte [eax], 0
jmp 0x1009e21e
mov eax, dword [0x101651e4]
mov dword [eax + 0xc], 0xc2b20000
mov eax, dword [0x101651e4]
movss xmm0, dword [eax + 0x10]
subss xmm0, xmm4
movss dword [eax + 0x10], xmm0
mov esi, dword [0x101651e4]
lea ecx, [esi + 0xc]
call fcn.100abdd0
lea ecx, [esi + 0x10]
call fcn.100abdd0
lea ecx, [esi + 0x14]
call fcn.100abdd0
cmp dword [0x101651b0], 6
mov eax, dword [0x101651b8]
jge 0x1009e204
mov byte [eax], 0
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov byte [eax], 1
mov byte [0x101cc7f0], 0
movss xmm4, dword [0x100e2dac]
movss xmm3, dword [0x100e2d40]
mov eax, dword [0x101651e4]
movss xmm0, dword [0x10175dbc]
movss dword [eax + 0x10], xmm0
mov eax, dword [0x10164cf4]
test eax, eax
jle 0x1009e484
cmp dword [0x10175d80], 0
jne 0x1009e484
cmp dword [0x101651b0], 0
mov dl, 1
jne 0x1009e514
movss xmm1, dword [0x10165278]
mov ecx, dword [0x101c649c]
movaps xmm0, xmm1
subss xmm0, dword [0x10165284]
movss xmm2, dword [ecx + 0x10]
comiss xmm2, xmm0
jb 0x1009e4a1
comiss xmm1, xmm2
jbe 0x1009e4a1
cmp eax, 4
jne 0x1009e4a1
mov eax, dword [0x101651e4]
movss xmm0, dword [eax + 0x10]
subss xmm0, xmm3
movss dword [eax + 0x10], xmm0
mov eax, dword [0x10164cf4]
jmp 0x1009e486
cmp dword [0x101651b0], 0
jne 0x1009e21e
mov eax, dword [0x101c649c]
movss xmm0, dword [eax + 0x10]
comiss xmm0, dword [0x10165278]
jb 0x1009e21e
push dword [0x10164de4]
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
call esi
test ax, ax
jne 0x1009e20e
cmp byte [0x10175d08], al
jne 0x1009e20e
push dword [0x10164f60]
call esi
movss xmm3, dword [0x100e2d40]
movss xmm4, dword [0x100e2dac]
test ax, ax
je 0x1009e21e
mov eax, dword [0x101651e4]
movss xmm0, dword [eax + 0x10]
subss xmm0, xmm3
movss dword [eax + 0x10], xmm0
mov eax, dword [0x101651e4]
mov dword [eax + 8], 0x7fffffff
mov eax, dword [0x101651b8]
mov byte [eax], 0
jmp 0x1009e21e
push dword [0x10164f50]
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
call esi
test ax, ax
je 0x1009e20e
cmp byte [0x10164f4c], 0
je 0x1009e20e
cmp byte [0x101cc85c], 0
je 0x1009e20e
mov edx, dword [0x101651e4]
xorps xmm3, xmm3
movss xmm4, dword [0x100e2dac]
movss xmm1, dword [0x100e2c50]
movss xmm2, dword [0x100e2e4c]
movss xmm0, dword [edx + 0x10]
addss xmm0, xmm4
movss dword [0x10175dbc], xmm0
movss xmm0, dword [edx + 0x28]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x1009e3d9
mov al, byte [0x101cc850]
test al, al
je 0x1009e3c2
movaps xmm0, xmm1
jmp 0x1009e3c5
movaps xmm0, xmm2
test al, al
movss dword [edx + 0x28], xmm0
mov edx, dword [0x101651e4]
sete byte [0x101cc850]
movss xmm0, dword [edx + 0x24]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x1009e407
mov al, byte [0x101cc851]
test al, al
jne 0x1009e3f3
movaps xmm1, xmm2
test al, al
movss dword [edx + 0x24], xmm1
mov edx, dword [0x101651e4]
sete byte [0x101cc851]
cmp byte [0x10175d52], 0
sete al
mov byte [0x10175d52], al
test al, al
je 0x1009e448
push dword [0x10164f58]
call esi
mov edx, dword [0x101651e4]
xor ecx, ecx
movss xmm4, dword [0x100e2dac]
test ax, ax
sete cl
lea ecx, [ecx*2 - 1]
imul ecx, dword [0x10164f54]
jmp 0x1009e44a
xor ecx, ecx
movss xmm1, dword [0x10175dbc]
xor eax, eax
cmp byte [0x10175d52], al
movd xmm0, ecx
mov ecx, 0x10
cvtdq2ps xmm0, xmm0
cmovne eax, ecx
mov dword [0x101cc858], eax
subss xmm1, xmm0
movss dword [0x10175dbc], xmm1
movss dword [edx + 0x10], xmm1
jmp 0x1009e216
xor dl, dl
cmp dword [0x101651b0], 0
jne 0x1009e514
movss xmm1, dword [0x10165278]
mov ecx, dword [0x101c649c]
movss xmm0, dword [ecx + 0x10]
comiss xmm0, xmm1
jb 0x1009e51a
test dl, dl
je 0x1009e51a
dec eax
cmp eax, 3
ja case.default.0x1009e4b9
jmp dword [eax*4 + 0x1009e664]
mov eax, dword [0x101651e4]
movss xmm0, dword [eax + 0x10]
addss xmm0, dword [0x100e2d5c]
jmp 0x1009e648
mov eax, dword [0x101651e4]
movss xmm0, dword [eax + 0x10]
subss xmm0, dword [0x100e2d5c]
jmp 0x1009e648
mov eax, dword [0x101651e4]
movss xmm0, dword [eax + 0x10]
addss xmm0, xmm4
jmp 0x1009e648
mov eax, dword [0x101651e4]
movss xmm0, dword [eax + 0x10]
addss xmm0, xmm3
jmp 0x1009e648
mov ecx, dword [0x101c649c]
mov eax, dword [0x10175d88]
sub eax, 2
je 0x1009e603
sub eax, 1
je 0x1009e596
sub eax, 1
jne case.default.0x1009e4b9
movss xmm0, dword [ecx + 0x10]
comiss xmm0, dword [0x10175db4]
jb 0x1009e584
mov eax, dword [0x101c6568]
sub esp, 8
mov dword [ebp - 4], eax
mov dword [esp + 4], 0x43340000
mov dword [esp], 0xc3340000
call dword [ebp - 4]
mov eax, dword [0x101c649c]
add esp, 8
fstp dword [0x10175db8]
movss xmm0, dword [eax + 0x10]
addss xmm0, dword [0x10175d98]
movss dword [0x10175db4], xmm0
movss xmm0, dword [0x10175db8]
mov eax, dword [0x101651e4]
jmp 0x1009e648
movss xmm0, dword [0x10175d90]
mulss xmm0, dword [0x100e2b78]
mov eax, dword [0x101651e4]
movss xmm1, dword [0x10175dbc]
subss xmm1, xmm0
movss dword [eax + 0x10], xmm1
movss xmm0, dword [0x10175d94]
mulss xmm0, dword [0x100e2cb4]
mov eax, dword [0x101c649c]
mov esi, dword [0x101651e4]
mulss xmm0, dword [eax + 0x10]
movss dword [ebp - 4], xmm0
fld dword [ebp - 4]
fld dword [0x10175d90]
call sub.ucrtbased.dll__CIfmod
fstp dword [ebp - 4]
movss xmm0, dword [ebp - 4]
addss xmm0, dword [esi + 0x10]
movss dword [esi + 0x10], xmm0
jmp case.default.0x1009e4b9
movss xmm0, dword [0x10175d8c]
sub esp, 8
mulss xmm0, dword [0x100e2b78]
mov eax, dword [0x101c6568]
mov dword [ebp - 4], eax
movss dword [esp + 4], xmm0
xorps xmm0, xmmword [0x100e2fe0]
movss dword [esp], xmm0
call dword [ebp - 4]
mov eax, dword [0x101651e4]
add esp, 8
fstp dword [ebp - 4]
movss xmm0, dword [ebp - 4]
addss xmm0, dword [eax + 0x10]
movss dword [eax + 0x10], xmm0
mov ecx, dword [0x101651e4]
lea ecx, [ecx + 0x10]
call fcn.100abdd0
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret