Function at 0x1000cae0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x70
mov eax, dword [0x1006e040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x10128acb], 0
mov al, byte [0x10128ad0]
movss xmm0, dword [0x10075540]
mov ecx, dword [0x10075538]
mov byte [ebp - 0x36], al
mov al, byte [0x10128ad3]
mov byte [ebp - 0x68], al
mov al, byte [0x10128ad8]
push esi
mov esi, dword [0x10128acc]
mov byte [ebp - 0x64], al
mov al, byte [0x10128ad1]
push edi
mov edi, dword [0x10128ad4]
movss dword [ebp - 0x4c], xmm0
mov byte [ebp - 0x35], al
mov dword [ebp - 0x44], ecx
jne 0x1000cb6b
push dword [0x1007553c]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1000cf6c
mov al, byte [ebp - 0x35]
mov ecx, dword [ebp - 0x44]
cmp dword [0x1006e098], 0xffffffff
jne 0x1000cbb0
test esi, esi
jne 0x1000cb88
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push ecx
mov cl, al
call fcn.1000bfd0
jmp 0x1000cb9f
cmp esi, 1
jne 0x1000cf58
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push ecx
mov cl, al
call fcn.1000c420
add esp, 0xc
mov dword [0x1006e098], eax
cmp eax, 0xffffffff
je 0x1000cf58
mov ecx, dword [0x10128b8c]
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
call eax
mov esi, eax
push 4
push esi
mov dword [0x100b36ac], esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000cf6c
test esi, esi
je 0x1000cf6c
mov eax, dword [0x100b36ac]
push 4
mov ecx, dword [eax + 0x184]
mov eax, dword [0x1006e098]
mov esi, dword [ecx + eax*4]
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000cf6c
test esi, esi
je 0x1000cf6c
mov eax, dword [esi + 0x10]
push 4
push eax
mov dword [ebp - 0x44], eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000cf6c
cmp dword [ebp - 0x44], eax
je 0x1000cf6c
test edi, edi
jne 0x1000cc5e
mov ecx, dword [0x10128b68]
lea edx, [ebp - 0x34]
push 1
push edx
push 8
mov eax, dword [ecx]
push dword [esi + 0x10]
call dword [eax + 0x40]
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [0x10068e2c]
movss dword [ebp - 0x30], xmm0
jmp 0x1000ccf4
cmp edi, 1
jne 0x1000cc6c
push edi
lea edx, [ebp - 0x34]
push edx
push 7
jmp 0x1000cce6
cmp edi, 2
jne 0x1000cc9b
mov ecx, dword [0x10128b68]
lea edx, [ebp - 0x34]
push 1
push edx
push 6
mov eax, dword [ecx]
push dword [esi + 0x10]
call dword [eax + 0x40]
movss xmm0, dword [ebp - 0x30]
subss xmm0, dword [0x10068de0]
movss dword [ebp - 0x30], xmm0
jmp 0x1000ccf4
cmp edi, 3
jne 0x1000ccca
mov ecx, dword [0x10128b68]
lea edx, [ebp - 0x34]
push 1
push edx
push 4
mov eax, dword [ecx]
push dword [esi + 0x10]
call dword [eax + 0x40]
movss xmm0, dword [ebp - 0x30]
subss xmm0, dword [0x10068e2c]
movss dword [ebp - 0x30], xmm0
jmp 0x1000ccf4
cmp edi, 4
jne 0x1000ccd9
push 1
lea edx, [ebp - 0x34]
push edx
push 0x15
jmp 0x1000cce6
cmp edi, 5
jne 0x1000ccf4
push 1
lea edx, [ebp - 0x34]
push edx
push 0x24
mov ecx, dword [0x10128b68]
push dword [esi + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x40]
mov esi, dword [0x10128bf8]
movss xmm2, dword [ebp - 0x2c]
movss xmm1, dword [ebp - 0x34]
movss xmm6, dword [0x10068eb8]
mov eax, dword [esi + 0x13c]
movss xmm4, dword [0x10068ed8]
movq xmm0, qword [eax + 0x10]
mov eax, dword [eax + 0x18]
movq qword [ebp - 0x60], xmm0
movss xmm0, dword [ebp - 0x30]
subss xmm0, dword [ebp - 0x5c]
subss xmm1, dword [ebp - 0x60]
mov dword [ebp - 0x58], eax
subss xmm2, dword [ebp - 0x58]
movss dword [ebp - 0x44], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x6c], xmm1
ucomiss xmm2, xmm0
movss dword [ebp - 0x58], xmm2
lahf
test ah, 0x44
jp 0x1000cd72
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1000cd72
movss xmm2, dword [0x10068ec8]
xorps xmm3, xmm3
jmp 0x1000ce4b
cvtps2pd xmm0, xmm2
movsd qword [ebp - 0x40], xmm0
movaps xmm0, xmm1
xorps xmm0, xmmword [0x10069a80]
fld qword [ebp - 0x40]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x40], xmm0
fld qword [ebp - 0x40]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIatan2
fstp qword [ebp - 0x40]
movsd xmm0, qword [ebp - 0x40]
xorps xmm1, xmm1
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x10068eb8]
divss xmm0, dword [0x10068e08]
subss xmm0, dword [0x10068e98]
comiss xmm1, xmm0
movss dword [ebp - 0x3c], xmm0
jbe 0x1000cdd6
addss xmm0, dword [0x10068ed8]
movss dword [ebp - 0x3c], xmm0
movss xmm1, dword [ebp - 0x44]
movss xmm0, dword [ebp - 0x6c]
cvtps2pd xmm1, xmm1
mulss xmm0, xmm0
movsd qword [ebp - 0x48], xmm1
movss xmm1, dword [ebp - 0x58]
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10002840
fld qword [ebp - 0x48]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x60], xmm0
fld qword [ebp - 0x60]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIatan2
movss xmm6, dword [0x10068eb8]
xorps xmm0, xmm0
fstp qword [ebp - 0x60]
movsd xmm2, qword [ebp - 0x60]
cvtpd2ps xmm2, xmm2
movss xmm4, dword [0x10068ed8]
mulss xmm2, xmm6
movss xmm3, dword [ebp - 0x3c]
divss xmm2, dword [0x10068e08]
comiss xmm0, xmm2
jbe 0x1000ce4b
addss xmm2, xmm4
xorps xmm2, xmmword [0x10069a80]
comiss xmm2, xmm6
movss xmm5, dword [0x10068f6c]
jbe 0x1000ce65
subss xmm2, xmm4
jmp 0x1000ce6e
comiss xmm5, xmm2
jbe 0x1000ce6e
addss xmm2, xmm4
comiss xmm3, xmm6
jbe 0x1000ce79
subss xmm3, xmm4
jmp 0x1000ce82
comiss xmm5, xmm3
jbe 0x1000ce82
addss xmm3, xmm4
cmp byte [ebp - 0x36], 0
movss xmm1, dword [esi + 0x58]
mulss xmm1, dword [0x10068e88]
movss dword [ebp - 0x44], xmm1
movss xmm1, dword [esi + 0x54]
mulss xmm1, dword [0x10068e88]
movss dword [ebp - 0x3c], xmm1
je 0x1000cf3e
subss xmm3, dword [ebp - 0x44]
movss xmm7, dword [0x10068da4]
subss xmm7, dword [ebp - 0x4c]
movaps xmm1, xmm3
comiss xmm5, xmm1
jbe 0x1000ced9
nop word [eax + eax]
addss xmm1, xmm4
comiss xmm5, xmm1
ja 0x1000ced0
comiss xmm1, xmm6
jbe 0x1000cee9
nop
subss xmm1, xmm4
comiss xmm1, xmm6
ja 0x1000cee0
subss xmm2, dword [ebp - 0x3c]
movaps xmm0, xmm2
comiss xmm5, xmm0
jbe 0x1000ceff
addss xmm0, xmm4
comiss xmm5, xmm0
ja 0x1000cef6
comiss xmm0, xmm6
jbe 0x1000cf0d
subss xmm0, xmm4
comiss xmm0, xmm6
ja 0x1000cf04
movaps xmm2, xmm7
xorps xmm2, xmmword [0x10069a80]
comiss xmm2, xmm1
jbe 0x1000cf21
movaps xmm3, xmm2
jmp 0x1000cf28
movaps xmm3, xmm7
minss xmm3, xmm1
comiss xmm2, xmm0
ja 0x1000cf34
movaps xmm2, xmm7
minss xmm2, xmm0
addss xmm2, dword [ebp - 0x3c]
addss xmm3, dword [ebp - 0x44]
mulss xmm3, dword [0x10068d30]
mulss xmm2, dword [0x10068d30]
movss dword [esi + 0x58], xmm3
movss dword [esi + 0x54], xmm2
mov dword [0x1006e098], 0xffffffff
mov dword [0x1007556c], 1
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1005e254
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret