Function at 0x10022bbe
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
cmp byte [0x1015824a], 0
push esi
push edi
je 0x100231a0
mov eax, dword [0x1011f248]
mov ecx, dword [0x10158250]
dec eax
cmp eax, 3
ja case.default.0x10022b99
jmp dword [eax*4 + 0x100231a8]
push ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
setne al
jmp 0x10022bd1
push ecx
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
setne al
jmp 0x10022bd1
push ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
sete al
jmp 0x10022bd1
mov al, byte [esp + 0xf]
test al, al
je 0x100231a0
mov ecx, dword [0x10122698]
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
call eax
test al, al
je 0x100231a0
mov ecx, dword [0x10122698]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x100231a0
mov edi, dword [0x101227d4]
test edi, edi
je 0x100231a0
mov eax, dword [0x101226d4]
test eax, eax
jne 0x10022c4b
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x101100f5
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x1011000d
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov dword [0x101226d4], eax
cmp dword [eax + edi], 0
jle 0x100231a0
call fcn.1000f990
cmp eax, 9
je 0x100231a0
call fcn.1000f990
cmp eax, 8
je 0x100231a0
mov eax, dword [0x1012268c]
or edx, 0xffffffff
movss xmm0, dword [0x1011804c]
movss dword [esp + 0x18], xmm0
mov dword [esp + 0x14], edx
cmp dword [eax + 0x18], 1
mov dword [esp + 0x10], 1
jle 0x10022e10
nop dword [eax]
mov ecx, dword [0x101226c0]
push dword [esp + 0x10]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov edi, eax
test edi, edi
je 0x10022df5
mov edx, dword [edi + 8]
lea ecx, [edi + 8]
mov edx, dword [edx + 0x24]
call edx
test al, al
jne 0x10022df5
mov eax, dword [0x101226d4]
test eax, eax
jne 0x10022d08
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x101100f5
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x1011000d
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov dword [0x101226d4], eax
cmp dword [eax + edi], 0
jle 0x10022df5
mov eax, dword [0x101227d4]
mov dword [esp + 0x1c], eax
cmp edi, eax
je 0x10022df5
mov eax, dword [0x10122690]
test eax, eax
jne 0x10022d5d
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x10110019
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x10110025
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov dword [0x10122690], eax
mov ecx, dword [esp + 0x1c]
add ecx, eax
mov dword [esp + 0x1c], ecx
test eax, eax
jne 0x10022da0
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x10110019
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x10110025
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov ecx, dword [esp + 0x1c]
mov dword [0x10122690], eax
movss xmm2, dword [ecx]
movss xmm0, dword [ecx + 4]
subss xmm0, dword [eax + edi + 4]
subss xmm2, dword [eax + edi]
movss xmm1, dword [ecx + 8]
subss xmm1, dword [eax + edi + 8]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.100016f0
movss xmm1, dword [esp + 0x18]
comiss xmm1, xmm0
mov ecx, dword [esp + 0x10]
jbe 0x10022df9
mov edx, ecx
movss dword [esp + 0x18], xmm0
mov dword [esp + 0x14], edx
jmp 0x10022dfd
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov eax, dword [0x1012268c]
inc ecx
mov dword [esp + 0x10], ecx
cmp ecx, dword [eax + 0x18]
jl 0x10022ca0
mov ecx, dword [0x101226c0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov edi, eax
test edi, edi
je 0x100231a0
mov eax, dword [0x10158094]
test eax, eax
jne 0x10022e62
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x10110459
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x10110025
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov dword [0x10158094], eax
movss xmm2, dword [eax + edi + 4]
movss xmm0, dword [eax + edi]
movss xmm1, dword [eax + edi + 8]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.100016f0
mov esi, dword [0x10122690]
movss dword [esp + 0x14], xmm0
test esi, esi
jne 0x10022ed0
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x10110019
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x10110025
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov esi, eax
mov dword [0x10122690], esi
mov eax, dword [0x101227d4]
lea ecx, [esi + edi]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
test esi, esi
jne 0x10022f2d
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x10110019
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x10110025
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov ecx, dword [esp + 0x1c]
mov esi, eax
mov eax, dword [0x101227d4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x10]
mov dword [0x10122690], esi
movss xmm0, dword [ecx]
subss xmm0, dword [esi + eax]
movss dword [esp + 0x1c], xmm0
movss xmm0, dword [ecx + 4]
subss xmm0, dword [esi + eax + 4]
movss dword [esp + 0x10], xmm0
test esi, esi
jne 0x10022f85
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x10110019
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x10110025
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov esi, eax
mov dword [0x10122690], esi
push 6
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.10011d50
movss xmm1, dword [eax + 8]
mov eax, dword [esp + 0x18]
movss xmm0, dword [esi + eax + 8]
comiss xmm0, xmm1
jbe 0x100230ec
mov eax, dword [0x101227d4]
mov dword [esp + 0x18], eax
mov eax, dword [0x10122690]
test eax, eax
jne 0x10022fee
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x10110019
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x10110025
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov dword [0x10122690], eax
mov ecx, dword [esp + 0x18]
add ecx, eax
mov dword [esp + 0x18], ecx
test eax, eax
jne 0x10023031
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x10110019
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x10110025
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov ecx, dword [esp + 0x18]
mov dword [0x10122690], eax
movss xmm2, dword [ecx]
movss xmm0, dword [ecx + 4]
subss xmm0, dword [eax + edi + 4]
subss xmm2, dword [eax + edi]
movss xmm1, dword [ecx + 8]
subss xmm1, dword [eax + edi + 8]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.100016f0
movss xmm1, dword [0x10117fd4]
comiss xmm1, xmm0
jbe 0x100230ec
mov esi, dword [ebp + 8]
movss xmm0, dword [esi + 0x10]
mulss xmm0, dword [0x10117e38]
movss dword [esp + 0x18], xmm0
call fcn.1000ff40
movss dword [esp + 0x20], xmm0
movss xmm0, dword [esp + 0x18]
call fcn.1000ff60
movss xmm3, dword [esp + 0x20]
movaps xmm2, xmm0
mulss xmm2, dword [esp + 0x10]
movaps xmm1, xmm3
mulss xmm0, dword [esp + 0x1c]
mulss xmm1, dword [esp + 0x1c]
mulss xmm3, dword [esp + 0x10]
addss xmm2, xmm1
subss xmm0, xmm3
mulss xmm2, dword [esp + 0x14]
mulss xmm0, dword [esp + 0x14]
movss dword [esi + 0x24], xmm2
movss dword [esi + 0x28], xmm0
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
movss xmm5, dword [esp + 0x10]
movss xmm4, dword [esp + 0x1c]
cvtps2pd xmm0, xmm5
movsd qword [esp + 0x20], xmm0
fld qword [esp + 0x20]
cvtps2pd xmm0, xmm4
movsd qword [esp + 0x20], xmm0
fld qword [esp + 0x20]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIatan2
fstp qword [esp + 0x20]
movsd xmm1, qword [esp + 0x20]
cvtpd2ps xmm1, xmm1
mov eax, dword [ebp + 8]
mulss xmm1, dword [0x10117fe4]
divss xmm1, dword [0x10117f30]
subss xmm1, dword [eax + 0x10]
comiss xmm1, dword [0x10117fe4]
jbe 0x10023150
subss xmm1, dword [0x10118004]
jmp 0x10023165
movss xmm0, dword [0x101180bc]
comiss xmm0, xmm1
jbe 0x10023165
addss xmm1, dword [0x10118004]
comiss xmm1, dword [0x10117e68]
jbe 0x10023188
movss xmm0, dword [esp + 0x14]
xorps xmm0, xmmword [0x10119820]
movss dword [eax + 0x28], xmm0
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
movss xmm0, dword [0x10118060]
comiss xmm0, xmm1
jbe 0x100231a0
movss xmm1, dword [esp + 0x14]
movss dword [eax + 0x28], xmm1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4