Function at 0x1004aa90
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x10184080]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x10188271], 0
je 0x1004af93
mov dword [ebp - 0x20], 0
call fcn.100261e0
mov ecx, eax
call fcn.1003fbf0
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.1003fc90
push dword [ebp - 0x20]
lea ecx, [ebp - 0x48]
call fcn.100271a0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
call fcn.100261e0
mov ecx, eax
call fcn.1003fbf0
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.1003fc90
push dword [ebp - 0x20]
lea ecx, [ebp - 0x24]
call fcn.100289b0
add esp, 8
cmp dword [ebp - 0x24], 0
jne 0x1004af93
mov eax, dword [ebp - 0x48]
cmp eax, 7
je 0x1004ab22
cmp eax, 9
jne 0x1004af93
push edi
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 2
call edi
test ax, ax
jns 0x1004ab3b
mov byte [0x10187e8d], 0
jmp 0x1004ab54
mov edx, 5
mov byte [0x10187e8d], 1
call fcn.100311f0
test al, al
je 0x1004af92
push esi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0
call fcn.10029e60
mov esi, dword [ebp - 0x40]
xorps xmm0, xmm0
push esi
movss dword [ebp - 0x24], xmm0
movss dword [ebp - 0x28], xmm0
movss dword [ebp - 0x3c], xmm0
movss dword [ebp - 0x38], xmm0
call fcn.1003b850
add esp, 4
test al, al
je 0x1004ac32
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003b7a0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003b6f0
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003bf30
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bdf0
mulss xmm0, dword [0x1017c1f0]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x20]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [ebp - 0x38], xmm1
call fcn.1003bdf0
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bdf0
mulss xmm0, dword [0x1017c1f0]
mulss xmm0, dword [ebp - 0x20]
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bf30
mulss xmm0, dword [0x1017c1f0]
addss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x28], xmm0
push 1
call edi
test ax, ax
mov al, byte [0x10187e8a]
jns 0x1004ac4f
test al, al
jne 0x1004ac4f
mov word [0x10187e8a], 1
jmp 0x1004ac77
cmp al, 1
jne 0x1004ac65
push 1
call edi
test ax, ax
js 0x1004ac65
mov word [0x10187e8a], 0x100
mov edx, 7
call fcn.1002a670
test al, al
je 0x1004af91
call fcn.10051668
cdq
mov ecx, 0x69
idiv ecx
mov ecx, dword [edx*4 + 0x1008faa8]
call fcn.1002afe0
mov esi, eax
mov ecx, esi
call fcn.10040a70
call fcn.1003b3e0
movss xmm3, dword [ebp - 0x28]
lea edx, [ebp - 0x20]
movss xmm2, dword [ebp - 0x3c]
movss xmm1, dword [ebp - 0x38]
push ecx
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.10043ce0
mov ecx, esi
call fcn.10040bb0
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x40]
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x54]
call fcn.1003b6f0
mov dword [ebp - 0x28], 0
call fcn.100261e0
mov ecx, eax
call fcn.1003fbf0
lea edx, [ebp - 0x28]
mov ecx, eax
call fcn.1003fc90
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x28]
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x2c]
call fcn.10026d30
movss xmm0, dword [ebp - 0x4c]
add esp, 0xc
movss xmm3, dword [ebp - 0x54]
movss xmm2, dword [ebp - 0x34]
movss xmm1, dword [ebp - 0x30]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x50]
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x2c]
call fcn.1004b5f0
addss xmm0, dword [0x1017c100]
mov esi, dword [ebp - 0x40]
push esi
movss dword [ebp - 0x38], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x28], xmm0
movss dword [ebp - 0x3c], xmm0
call fcn.1003b850
add esp, 0xc
test al, al
je 0x1004ae09
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003b7a0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003b6f0
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003bf30
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bdf0
mulss xmm0, dword [0x1017c250]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x24]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [ebp - 0x3c], xmm1
call fcn.1003bdf0
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bdf0
mulss xmm0, dword [0x1017c250]
mulss xmm0, dword [ebp - 0x24]
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bf30
mulss xmm0, dword [0x1017c250]
addss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x24], xmm0
mov esi, dword [ebp - 0x40]
push esi
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
call fcn.1003b850
add esp, 4
test al, al
je 0x1004aece
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003b7a0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003b6f0
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003bf30
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bdf0
mulss xmm0, dword [ebp - 0x38]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x44]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [ebp - 0x2c], xmm1
call fcn.1003bdf0
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bdf0
mulss xmm0, dword [ebp - 0x38]
mulss xmm0, dword [ebp - 0x44]
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003bf30
mulss xmm0, dword [ebp - 0x38]
addss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x34], xmm0
jmp 0x1004aed3
movss xmm0, dword [ebp - 0x34]
movss xmm3, dword [ebp - 0x2c]
lea ecx, [ebp - 0x58]
movss xmm2, dword [ebp - 0x24]
sub esp, 8
movss xmm1, dword [ebp - 0x28]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x30]
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x3c]
call fcn.10040ef0
movss xmm2, dword [ebp - 0x24]
xor edx, edx
subss xmm2, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x3c]
subss xmm4, dword [ebp - 0x2c]
movss xmm3, dword [ebp - 0x28]
lea ecx, [edx + 1]
subss xmm3, dword [ebp - 0x30]
movss xmm1, dword [0x1017c22c]
movss xmm0, dword [ebp - 0x58]
mulss xmm2, xmm1
push 0
mulss xmm4, xmm1
sub esp, 0x10
mulss xmm3, xmm1
divss xmm2, xmm0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
divss xmm4, xmm0
divss xmm3, xmm0
movss dword [esp], xmm2
push dword [ebp - 0x20]
movss dword [ebp - 0x34], xmm2
movaps xmm2, xmm4
movss dword [ebp - 0x2c], xmm4
movss dword [ebp - 0x30], xmm3
call fcn.100406e0
add esp, 0x20
lea ecx, [ebp - 0x20]
call fcn.10043f10
pop esi
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ca58
mov esp, ebp
pop ebp
ret