Function at 0x10011380
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
cmp byte [0x10132ffc], 0
push ebx
push esi
push edi
mov ebx, edx
mov dword [esp + 0x10], ecx
je case.0x1001140a.0
mov edi, dword [0x10131358]
mov eax, dword [0x10132ff0]
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
cmp edi, 3
ja case.0x100113b5.0
jmp dword [edi*4 + 0x100116cc]
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
setne al
jmp 0x100113e1
push eax
call esi
test ax, ax
setne al
jmp 0x100113e1
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
sete al
test al, al
je case.0x1001140a.0
cmp byte [0x10132fc8], 0
jne case.0x1001140a.0
mov ecx, dword [0x10131368]
mov eax, dword [0x10132fac]
cmp ecx, 3
ja case.0x1001140a.0
jmp dword [ecx*4 + 0x100116dc]
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
setne al
jmp 0x10011436
push eax
call esi
test ax, ax
setne al
jmp 0x10011436
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
sete al
test al, al
jne case.0x1001140a.0
cmp byte [0x10132fe9], al
jne case.0x1001140a.0
mov ecx, dword [0x10131370]
mov eax, dword [0x10132fd4]
cmp ecx, 3
ja case.0x1001140a.0
jmp dword [ecx*4 + 0x100116ec]
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
setne al
jmp 0x1001148a
push eax
call esi
test ax, ax
setne al
jmp 0x1001148a
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
sete al
test al, al
jne case.0x1001140a.0
mov ecx, dword [0x10131384]
mov eax, dword [0x10133000]
cmp ecx, 3
ja case.0x1001140a.0
jmp dword [ecx*4 + 0x100116fc]
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
setne al
jmp 0x100114d2
push eax
call esi
test ax, ax
setne al
jmp 0x100114d2
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
sete al
test al, al
jne case.0x1001140a.0
mov ecx, dword [0x1013137c]
mov eax, dword [0x10132fa4]
cmp ecx, 3
ja case.0x1001140a.0
jmp dword [ecx*4 + 0x1001170c]
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
setne al
jmp 0x1001151a
push eax
call esi
test ax, ax
setne al
jmp 0x1001151a
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
sete al
test al, al
jne case.0x1001140a.0
mov ecx, dword [0x1013135c]
mov eax, dword [0x10132fb0]
cmp ecx, 3
ja case.0x1001140a.0
jmp dword [ecx*4 + 0x1001171c]
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
setne al
jmp 0x10011562
push eax
call esi
test ax, ax
setne al
jmp 0x10011562
push eax
call esi
cwde
shr eax, 0x10
test eax, eax
sete al
test al, al
jne case.0x1001140a.0
mov ecx, dword [0x10132a7c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je case.0x1001140a.0
mov ecx, dword [0x10132a7c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
call eax
test al, al
je case.0x1001140a.0
mov edi, dword [0x10132ac8]
test edi, edi
je case.0x1001140a.0
mov eax, dword [0x10132ac4]
test eax, eax
jne 0x100115d9
mov edx, 0xe80c2f78
mov ecx, 0x101114a5
call fcn.10004930
mov edx, 0xc10bf213
mov ecx, 0x101113bd
mov esi, eax
call fcn.10004930
mov edx, esi
mov ecx, eax
call fcn.1007b050
mov dword [0x10132ac4], eax
cmp dword [eax + edi], 0
jle case.0x1001140a.0
call fcn.1000a160
cmp eax, 8
je case.0x1001140a.0
call fcn.1000a160
cmp eax, 9
je case.0x1001140a.0
call fcn.1000a160
cmp eax, 0xa
je case.0x1001140a.0
mov eax, dword [0x10132af8]
mov edi, dword [0x10132ac8]
test eax, eax
jne 0x1001164a
mov edx, 0xe80c2f78
mov ecx, 0x101115e9
call fcn.10004930
mov edx, 0xc10bf213
mov ecx, 0x101113bd
mov esi, eax
call fcn.10004930
mov edx, esi
mov ecx, eax
call fcn.1007b050
mov dword [0x10132af8], eax
test byte [eax + edi], 1
jne case.0x1001140a.0
mov esi, dword [esp + 0x10]
lea ecx, [esp + 0x14]
movss xmm2, dword [0x10131364]
mov edx, 0x10131364
movss xmm3, dword [0x1012cb90]
movaps xmm0, xmm2
xorps xmm0, xmm3
mov eax, edx
movss xmm1, dword [esi]
comiss xmm1, xmm0
movss dword [esp + 0x14], xmm0
cmovae ecx, esi
comiss xmm2, xmm1
cmovae eax, ecx
mov eax, dword [eax]
mov dword [esi], eax
cmp byte [0x10132fa2], 0
je case.0x1001140a.0
movss xmm2, dword [0x10131364]
lea eax, [esp + 0x14]
movss xmm1, dword [ebx]
movaps xmm0, xmm2
xorps xmm0, xmm3
comiss xmm1, xmm0
movss dword [esp + 0x14], xmm0
cmovae eax, ebx
comiss xmm2, xmm1
cmovae edx, eax
mov eax, dword [edx]
mov dword [ebx], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret