Function at 0x40b5f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42c76c
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x158
mov eax, dword [0x43e070]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movss dword [ebp - 0x124], xmm1
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
xorps xmm0, xmm0
push 0x25
movss dword [ebp - 0x128], xmm0
movss dword [ebp - 0x13c], xmm0
call esi
test ax, ax
je 0x40b66b
movss xmm1, dword [0x438c38]
movss dword [ebp - 0x128], xmm1
push 0x27
call esi
test ax, ax
je 0x40b67e
movss xmm0, dword [0x438c5c]
jmp 0x40b686
movss xmm0, dword [ebp - 0x128]
mulss xmm0, dword [ebp - 0x124]
push 0x26
mulss xmm0, dword [0x438c4c]
movss dword [ebp - 0x128], xmm0
call esi
test ax, ax
je 0x40b6b7
movss xmm0, dword [0x438c38]
movss dword [ebp - 0x13c], xmm0
push 0x28
call esi
test ax, ax
je 0x40b6ca
movss xmm0, dword [0x438c5c]
jmp 0x40b6d2
movss xmm0, dword [ebp - 0x13c]
mulss xmm0, dword [ebp - 0x124]
movss xmm1, dword [ebp - 0x128]
mulss xmm0, dword [0x438c4c]
movaps xmm2, xmm0
call fcn.00404570
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push 2
call esi
mov ecx, dword [ebp - 0x150]
mov edx, dword [ebp - 0x154]
test ax, ax
je 0x40b7c7
movss xmm0, dword [0x43f8d4]
mov eax, edx
sub eax, dword [0x43fc40]
movd xmm1, eax
mov eax, ecx
sub eax, dword [0x43fad0]
cvtdq2ps xmm1, xmm1
movd xmm3, eax
mulss xmm1, dword [0x438c34]
cvtdq2ps xmm3, xmm3
addss xmm0, xmm1
movss xmm1, dword [0x438c58]
mulss xmm3, dword [0x438c34]
comiss xmm0, xmm1
movss dword [0x43f8d4], xmm0
jbe 0x40b773
subss xmm0, xmm1
movss dword [0x43f8d4], xmm0
xorps xmm2, xmm2
comiss xmm2, xmm0
jbe 0x40b787
addss xmm0, xmm1
movss dword [0x43f8d4], xmm0
movss xmm1, dword [0x43f8d8]
addss xmm1, xmm3
comiss xmm1, dword [0x438c54]
movss dword [0x43f8d8], xmm1
jbe 0x40b7b0
mov dword [0x43f8d8], 0x42aa0000
jmp 0x40b7c7
movss xmm0, dword [0x438c48]
comiss xmm0, xmm1
jbe 0x40b7c7
mov dword [0x43f8d8], 0x40a00000
movss xmm0, dword [0x43f8f0]
lea eax, [ebp - 0x14c]
movss xmm3, dword [0x43f8ec]
sub esp, 8
movss xmm2, dword [0x43f8e8]
mov dword [0x43fad0], ecx
mov ecx, 0x43fa90
mov dword [0x43fc40], edx
mov dword [esp + 4], 0x44160000
movss dword [esp], xmm0
push eax
call fcn.00407080
mov dword [ebp - 4], 0
mov edi, dword [ebp - 0x14c]
mov esi, edi
cmp edi, dword [ebp - 0x148]
je 0x40bb74
nop word [eax + eax]
movups xmm0, xmmword [esi]
mov edi, dword [0x43f9c0]
mov ecx, edi
movups xmmword [ebp - 0x78], xmm0
mov edx, dword [ebp - 0x78]
movups xmm0, xmmword [esi + 0x10]
movups xmmword [ebp - 0x68], xmm0
movups xmm0, xmmword [esi + 0x20]
movups xmmword [ebp - 0x58], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebp - 0x48], xmm0
movups xmm0, xmmword [esi + 0x40]
movups xmmword [ebp - 0x38], xmm0
movups xmm0, xmmword [esi + 0x50]
movups xmmword [ebp - 0x28], xmm0
mov eax, dword [edi + 4]
cmp byte [eax + 0xd], 0
jne 0x40b890
cmp dword [eax + 0x10], edx
jge 0x40b87d
mov eax, dword [eax + 8]
jmp 0x40b881
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x40b873
cmp ecx, edi
je 0x40b890
cmp edx, dword [ecx + 0x10]
jge 0x40b892
mov ecx, edi
cmp ecx, edi
jne 0x40ba55
sub esp, 0x18
mov edx, esp
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
cmp dword [edx + 0x14], 0x10
jb 0x40b8b7
mov eax, dword [edx]
jmp 0x40b8b9
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x63], 0
jne 0x40b8c6
xor ecx, ecx
jmp 0x40b8d9
lea ecx, [ebp - 0x63]
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b8d0
sub ecx, edi
push ecx
lea eax, [ebp - 0x63]
mov ecx, edx
push eax
call fcn.00403310
lea eax, [ebp - 0x120]
push eax
call fcn.0040be40
mov byte [ebp - 4], 1
movss xmm0, dword [ebp - 0x73]
mov edi, dword [ebp - 0x78]
movss dword [ebp - 0xa0], xmm0
movss xmm0, dword [ebp - 0x6f]
movss dword [ebp - 0x9c], xmm0
movss xmm0, dword [ebp - 0x6b]
movss dword [ebp - 0x98], xmm0
movss xmm0, dword [ebp - 0x67]
xorps xmm0, xmmword [0x438cd0]
mulss xmm0, dword [0x438c30]
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x94], 0x3f800000
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x140], xmm0
call fcn.0042afd0
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x124], xmm0
movsd xmm0, qword [ebp - 0x140]
call fcn.0042ae10
movss xmm2, dword [ebp - 0x124]
lea eax, [ebp - 0x124]
xorps xmm1, xmm1
movss dword [ebp - 0xc8], xmm2
xorps xmm2, xmmword [0x438cd0]
mov ecx, 0x43f9c0
cvtsd2ss xmm1, xmm0
push eax
lea eax, [ebp - 0x12c]
mov dword [ebp - 0xcc], 0
push eax
mov dword [ebp - 0xc4], 0
movaps xmm0, xmmword [0x438c80]
movaps xmmword [ebp - 0xc0], xmm0
movss xmm0, dword [ebp - 0x53]
movss dword [ebp - 0x90], xmm0
movss xmm0, dword [ebp - 0x4f]
movss dword [ebp - 0x8c], xmm0
movss xmm0, dword [ebp - 0x4b]
movss dword [ebp - 0xd0], xmm1
movss dword [ebp - 0xb0], xmm2
mov dword [ebp - 0xac], 0
movss dword [ebp - 0xa8], xmm1
mov dword [ebp - 0xa4], 0
movss dword [ebp - 0x88], xmm0
mov dword [ebp - 0x124], edi
call fcn.0040cce0
mov ecx, dword [ebp - 0x12c]
lea eax, [ebp - 0x120]
push eax
add ecx, 0x20
call fcn.00408c90
push fcn.00401180
push 4
push 0x10
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 2
push eax
call fcn.0040f417
mov byte [ebp - 4], 0
jmp 0x40bb5f
lea eax, [ebp - 0x124]
mov dword [ebp - 0x124], edx
push eax
lea eax, [ebp - 0x15c]
mov ecx, 0x43f9c0
push eax
call fcn.0040cce0
mov edi, dword [ebp - 0x15c]
movss xmm1, dword [ebp - 0x6f]
movss xmm2, dword [ebp - 0x6b]
movss xmm0, dword [ebp - 0x73]
movss dword [edi + 0xa0], xmm0
movss dword [edi + 0xa4], xmm1
movss dword [edi + 0xa8], xmm2
mov dword [edi + 0xac], 0x3f800000
movss xmm0, dword [ebp - 0x67]
xorps xmm0, xmmword [0x438cd0]
mulss xmm0, dword [0x438c30]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x168], xmm0
call fcn.0042ae10
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x140], xmm0
movsd xmm0, qword [ebp - 0x168]
call fcn.0042afd0
movss xmm1, dword [ebp - 0x140]
cvtsd2ss xmm0, xmm0
mov dword [edi + 0x74], 0
mov dword [edi + 0x7c], 0
movss dword [edi + 0x70], xmm1
movss dword [edi + 0x78], xmm0
xorps xmm0, xmmword [0x438cd0]
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0x3f800000
mov dword [edi + 0x88], 0
mov dword [edi + 0x8c], 0
movss dword [edi + 0x90], xmm0
mov dword [edi + 0x94], 0
movss dword [edi + 0x98], xmm1
mov dword [edi + 0x9c], 0
add esi, 0x60
cmp esi, dword [ebp - 0x148]
jne 0x40b830
mov edi, dword [ebp - 0x14c]
test edi, edi
je 0x40bb98
mov ecx, dword [ebp - 0x144]
mov eax, 0x2aaaaaab
sub ecx, edi
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push edi
call fcn.00407440
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040eedb
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret