Function at 0x1000b4b0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x10096400]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [0x10096ebc]
push esi
mov esi, ecx
push edi
test eax, eax
jne 0x1000b4d7
mov dword [0x100979c4], eax
jmp 0x1000b55d
cmp eax, 1
jne 0x1000b4e8
mov dword [0x100979c4], 0xa
jmp 0x1000b55d
cmp eax, 2
jne 0x1000b4f9
mov dword [0x100979c4], 0x14
jmp 0x1000b55d
cmp eax, 3
jne 0x1000b50a
mov dword [0x100979c4], 0x1e
jmp 0x1000b55d
cmp eax, 4
jne 0x1000b51b
mov dword [0x100979c4], 0x28
jmp 0x1000b55d
cmp eax, 5
jne 0x1000b52c
mov dword [0x100979c4], 0x32
jmp 0x1000b55d
cmp eax, 6
jne 0x1000b53d
mov dword [0x100979c4], 0x3c
jmp 0x1000b55d
cmp eax, 7
jne 0x1000b54e
mov dword [0x100979c4], 0x46
jmp 0x1000b55d
cmp eax, 8
jne 0x1000b55d
mov dword [0x100979c4], 0x50
mov eax, dword [0x100989ec]
cmp dword [eax], 0
je 0x1000b5ab
mov ecx, dword [0x10098718]
sub ecx, dword [0x1009a75c]
add ecx, dword [0x1009a88c]
mov eax, dword [0x1009a934]
mov ecx, dword [ecx + eax]
call fcn.10009720
test eax, eax
jle 0x1000b5ab
mov eax, dword [0x100989ec]
mov ecx, dword [eax]
add ecx, dword [0x1009a748]
call fcn.1001afb0
mov ecx, dword [0x1009a768]
add ecx, eax
call fcn.1001aff0
jmp 0x1000b5ae
mov eax, dword [ebp - 0xc]
cmp eax, 2
jge 0x1000b840
cmp dword [0x10098954], 0
je 0x1000b657
cmp dword [0x10096aa8], 0
je 0x1000b657
mov ecx, dword [0x10098718]
sub ecx, dword [0x1009a75c]
add ecx, dword [0x1009a88c]
mov eax, dword [0x1009a934]
mov ecx, dword [ecx + eax]
call fcn.10009720
test eax, eax
jle 0x1000b657
mov eax, dword [0x10098784]
mov edx, 0xffff0000
shr eax, 1
movd xmm2, dword [0x100979c4]
push dword [ebp + 8]
cvtdq2ps xmm2, xmm2
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10090c70]
mov eax, dword [0x10098780]
shr eax, 1
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10090c70]
cvtpd2ps xmm0, xmm0
cmp esi, 0xffffffff
jne 0x1000b64f
mov edx, 0xff00ff00
call fcn.1000bbd0
add esp, 4
mov eax, dword [0x100989fc]
lea ecx, [ebp - 0x28]
mov edx, esi
push dword [eax*4 + 0x1008cab8]
call fcn.100097b0
add esp, 4
test al, al
je 0x1000b840
push str.Head
mov edx, esi
lea ecx, [ebp - 0x18]
call fcn.100097b0
add esp, 4
test al, al
je 0x1000b840
movq xmm0, qword [ebp - 0x28]
sub esp, 0xc
mov eax, dword [ebp - 0x20]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x28]
call fcn.10009890
add esp, 0xc
test al, al
je 0x1000b840
movss xmm1, dword [ebp - 0x14]
sub esp, 0xc
addss xmm1, dword [0x10090b74]
movss xmm2, dword [ebp - 0x18]
mov ecx, esp
movss xmm0, dword [ebp - 0x10]
movss dword [ebp - 0x10], xmm0
mov eax, dword [ebp - 0x10]
unpcklps xmm2, xmm1
movq qword [ecx], xmm2
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x18]
call fcn.10009890
add esp, 0xc
test al, al
je 0x1000b840
mov eax, dword [0x10096a94]
dec eax
cmp eax, 3
ja case.default.0x1000b705
jmp dword [eax*4 + 0x1000b850]
mov esi, 1
mov dword [0x100987dc], esi
jmp 0x1000b746
mov esi, 2
mov dword [0x100987dc], esi
jmp 0x1000b746
mov esi, 0x11
mov dword [0x100987dc], esi
jmp 0x1000b746
mov esi, 0x10
mov dword [0x100987dc], esi
jmp 0x1000b746
mov esi, dword [0x100987dc]
cvttss2si eax, dword [ebp - 0x28]
xorps xmm2, xmm2
xorps xmm0, xmm0
cvtsi2ss xmm2, eax
mov eax, dword [0x10098780]
cvtsi2sd xmm0, eax
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10090c70]
cvttss2si eax, dword [ebp - 0x24]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x10090b80]
subss xmm2, xmm0
xorps xmm0, xmm0
movss dword [ebp - 0xc], xmm2
xorps xmm2, xmm2
cvtsi2ss xmm2, eax
mov eax, dword [0x10098784]
cvtsi2sd xmm0, eax
shr eax, 0x1f
cmp dword [0x10098954], 0
addsd xmm0, qword [eax*8 + 0x10090c70]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x10090b80]
subss xmm2, xmm0
movss dword [ebp - 0x1c], xmm2
je 0x1000b840
cmp dword [0x10096a94], 0
je 0x1000b816
push esi
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
shr eax, 0x10
test eax, eax
je 0x1000b80e
cmp byte [esi*8 + 0x1009b2b0], 0
lea edi, [esi*8 + 0x1009b2b4]
je 0x1000b7fc
cmp dword [edi], 0
je 0x1000b816
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [edi]
inc ecx
cmp ecx, eax
ja 0x1000b816
mov byte [esi*8 + 0x1009b2b0], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi], eax
jmp 0x1000b828
mov byte [esi*8 + 0x1009b2b0], 0
cmp dword [0x10098954], 0
je 0x1000b840
cmp dword [0x10096a94], 0
jne 0x1000b840
cvttss2si eax, dword [ebp - 0x1c]
push 0
push 0
push eax
cvttss2si eax, dword [ebp - 0xc]
push eax
push 1
call dword [sym.imp.USER32.dll_mouse_event]
mov ecx, dword [ebp - 8]
pop edi
xor ecx, ebp
pop esi
call fcn.100773eb
mov esp, ebp
pop ebp
ret