Function at 0x100491d0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004b2c0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xd8
mov eax, dword [0x10072040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 6
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1004956c
mov ecx, dword [0x10072770]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x20]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 0x474]
call eax
mov ecx, dword [0x10072770]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 4], 1
lea edx, [ebp - 0x2c]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 0x568]
call eax
movss xmm0, dword [ebp - 0x2c]
addss xmm0, dword [edi + 0xc]
mulss xmm0, dword [0x1006f234]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0xa0], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x90], xmm0
movss xmm0, dword [ebp - 0x28]
addss xmm0, dword [edi + 0x10]
mulss xmm0, dword [0x1006f234]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x88], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movsd xmm0, qword [ebp - 0x88]
movss dword [ebp - 0x8c], xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movsd xmm0, qword [ebp - 0xa0]
movss dword [ebp - 0x84], xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
movss xmm2, dword [ebp - 0x8c]
xorps xmm1, xmm1
mulss xmm2, dword [ebp - 0x90]
mov eax, dword [0x10072770]
cvtsd2ss xmm1, xmm0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x88], 0x1006f1fc
movss xmm0, dword [0x1006f378]
mulss xmm2, xmm0
mulss xmm1, xmm0
addss xmm2, dword [ebp - 0x20]
movss dword [ebp - 0xa0], xmm2
movss xmm2, dword [ebp - 0x84]
mulss xmm2, dword [ebp - 0x90]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x20]
mulss xmm2, xmm0
push eax
movss xmm0, dword [ebp - 0x18]
subss xmm0, xmm1
addss xmm2, dword [ebp - 0x1c]
movss dword [ebp - 0x98], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x9c], xmm2
movlpd qword [ebp - 0x68], xmm0
movlpd qword [ebp - 0x60], xmm0
movlpd qword [ebp - 0x58], xmm0
movlpd qword [ebp - 0x50], xmm0
movlpd qword [ebp - 0x48], xmm0
movlpd qword [ebp - 0x40], xmm0
movlpd qword [ebp - 0x38], xmm0
movups xmmword [ebp - 0x80], xmm0
lea ecx, [ebp - 0xe8]
call fcn.10048ab0
mov ecx, dword [0x10072780]
lea edx, [ebp - 0x80]
mov dword [ebp - 4], 2
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x88]
push edx
mov eax, dword [eax + 0x14]
lea edx, [ebp - 0xe8]
push 0x46004009
push edx
call eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x1004955e
mov dword [ebp - 4], 3
mov eax, dword [ecx]
mov eax, dword [eax + 0x278]
call eax
mov dword [ebp - 4], 0xffffffff
test al, al
je 0x1004955e
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x270]
call eax
mov dword [ebp - 4], 0xffffffff
test al, al
je 0x1004956c
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x160]
call eax
mov ecx, dword [0x10072770]
mov esi, eax
mov dword [ebp - 4], 6
mov edx, dword [ecx]
mov edx, dword [edx + 0x160]
call edx
mov dword [ebp - 4], 0xffffffff
cmp esi, eax
je 0x1004956c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov cl, byte [0x1007278d]
mov esi, eax
test cl, cl
jne 0x100494de
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx]
mov edx, dword [edx + 0x278]
call edx
mov dword [ebp - 4], 0xffffffff
test al, al
je 0x100494d8
mov eax, dword [0x1007273c]
mov cl, 1
add eax, esi
mov byte [0x1007278d], cl
mov dword [0x10072788], eax
jmp 0x100494e3
mov cl, byte [0x1007278d]
mov eax, dword [0x10072788]
cmp esi, eax
jle 0x100494f3
mov dword [0x10072788], 0
jmp 0x100494f5
jne 0x1004950f
test cl, cl
je 0x1004950f
cmp byte [0x1007278c], 0
jne 0x10049518
or dword [edi + 0x30], 1
mov byte [0x1007278c], 1
jmp 0x10049518
cmp byte [0x1007278c], 0
je 0x1004956e
mov dword [ebp - 4], 8
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x278]
call eax
mov dword [ebp - 4], 0xffffffff
test al, al
je 0x1004956e
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x270]
call eax
test al, al
je 0x1004956e
cmp byte [0x1007278d], 0
je 0x1004956e
or dword [edi + 0x30], 1
jmp 0x1004956e
mov byte [0x1007278c], 0
mov byte [0x1007278d], 0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10049591
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret