Function at 0x1004bed0
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x30
mov eax, dword [0x10061040]
xor eax, esp
mov dword [esp + 0x2c], eax
movss xmm0, dword [0x1010ed8c]
addss xmm0, dword [0x1005dab0]
movss xmm1, dword [0x1005daac]
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
movss dword [0x38399b5c], xmm0
movss xmm0, dword [0x1010ed84]
addss xmm0, xmm1
movss dword [0x38399a3c], xmm0
movss xmm0, dword [0x1010ed84]
addss xmm0, dword [0x1005da78]
movss dword [0x38399acc], xmm0
movss xmm0, dword [0x1010ed84]
addss xmm0, xmm1
movss dword [0x38399af0], xmm0
movss xmm0, dword [0x1010ed84]
addss xmm0, xmm1
movss dword [0x38399b14], xmm0
movss xmm0, dword [0x1010ed84]
addss xmm0, xmm1
movss dword [0x38399b38], xmm0
movss xmm0, dword [0x1010ed84]
addss xmm0, dword [0x1005da68]
movss dword [0x38399b80], xmm0
cmp byte [0x1010ed83], 0
je 0x1004bfb2
push 0x20
call edi
test ax, ax
je 0x1004bfb2
mov eax, dword [0x1010ecc4]
mov eax, dword [eax + 0x10]
mov dword [eax + 0xb8], 0x44898000
jmp 0x1004bfc4
mov eax, dword [0x1010ecc4]
mov eax, dword [eax + 0x10]
mov dword [eax + 0xb8], 0xc4898000
cmp byte [0x1010ed82], 0
je 0x1004bfe2
cmp dword [0x383dfedc], 1
jne 0x1004bff5
mov dword [0x383dfedc], 0xfffffffb
jmp 0x1004bff5
cmp dword [0x383dfedc], 0xfffffffb
jne 0x1004bff5
mov dword [0x383dfedc], 1
cmp byte [0x1010ed81], 0
je 0x1004c296
mov dword [esp + 0x24], 0x18151739
xor ecx, ecx
mov dword [esp + 0x28], 0xf9c60b10
mov dword [esp + 0x2c], 0xe1fce5ac
mov word [esp + 0x30], 0x100
lea eax, [ecx + 0x7a]
xor byte [esp + ecx + 0x24], al
inc ecx
cmp ecx, 0xc
jb 0x1004c023
lea eax, [esp + 0x24]
mov byte [esp + 0x31], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, dword [eax + 0x6bf34]
test esi, esi
je 0x1004c296
mov eax, dword [0x1010ecc4]
test eax, eax
je 0x1004c296
movss xmm0, dword [eax + 0x54]
movss dword [esp + 0x18], xmm0
movss xmm0, dword [eax + 0x58]
push 0x26
movss dword [esp + 0xc], xmm0
call edi
shr eax, 0xf
and eax, 0xffffff01
push 0x28
mov dword [esp + 0x10], eax
call edi
shr eax, 0xf
and eax, 0xffffff01
push 0x25
mov dword [esp + 0x18], eax
call edi
shr eax, 0xf
and eax, 0xffffff01
push 0x27
mov dword [esp + 0x14], eax
call edi
shr eax, 0xf
and eax, 0xffffff01
cmp byte [esp + 0xc], 0
mov dword [esp + 0x20], eax
jne 0x1004c0db
cmp byte [esp + 0x14], 0
jne 0x1004c0d1
cmp byte [esp + 0x10], 0
jne 0x1004c19a
test al, al
jmp 0x1004c218
movss xmm0, dword [0x1005db18]
jmp 0x1004c0e3
movss xmm0, dword [0x1005d9a4]
movss dword [esp + 0xc], xmm0
movss xmm0, dword [esp + 8]
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss xmm0, dword [esp + 0xc]
mulss xmm0, dword [0x1010ed88]
mulss xmm1, xmm0
movss xmm0, dword [esp + 0x18]
xorps xmm0, xmmword [0x1005e060]
addss xmm1, dword [esi + 0xc8]
cvtss2sd xmm0, xmm0
movss dword [esi + 0xc8], xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
movss xmm1, dword [esp + 0xc]
xorps xmm2, xmm2
mulss xmm1, dword [0x1010ed88]
cvtsd2ss xmm2, xmm0
mulss xmm2, xmm1
movss xmm1, dword [esp + 8]
cvtps2pd xmm0, xmm1
addss xmm2, dword [esi + 0xcc]
movss dword [esi + 0xcc], xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cmp byte [esp + 0x10], 0
movss xmm1, dword [esp + 0xc]
mulss xmm1, dword [0x1010ed88]
cvtsd2ss xmm0, xmm0
mulss xmm0, xmm1
addss xmm0, dword [esi + 0xd0]
movss dword [esi + 0xd0], xmm0
je 0x1004c213
movss xmm0, dword [esp + 8]
subss xmm0, dword [0x1005d9bc]
cvtps2pd xmm0, xmm0
movsd qword [esp + 0x18], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
mulss xmm1, dword [0x1010ed88]
addss xmm1, dword [esi + 0xc8]
movss dword [esi + 0xc8], xmm1
movss xmm1, dword [esi + 0xcc]
addss xmm1, xmm0
movsd xmm0, qword [esp + 0x18]
movss dword [esi + 0xcc], xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x1010ed88]
addss xmm0, dword [esi + 0xd0]
movss dword [esi + 0xd0], xmm0
cmp byte [esp + 0x20], 0
je 0x1004c296
movss xmm0, dword [esp + 8]
addss xmm0, dword [0x1005d9bc]
movss dword [esp + 8], xmm0
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
mulss xmm1, dword [0x1010ed88]
addss xmm1, dword [esi + 0xc8]
movss dword [esi + 0xc8], xmm1
movss xmm1, dword [esi + 0xcc]
addss xmm1, xmm0
movss dword [esi + 0xcc], xmm1
movss xmm1, dword [esp + 8]
cvtps2pd xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x1010ed88]
addss xmm0, dword [esi + 0xd0]
movss dword [esi + 0xd0], xmm0
mov ecx, dword [esp + 0x34]
pop edi
pop esi
xor ecx, esp
call fcn.10054550
mov esp, ebp
pop ebp
ret