Function at 0x1000dcd1
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x1005f040]
xor eax, ebp
mov dword [ebp - 4], eax
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
push esi
push edi
movss xmm1, dword [0x10059870]
addss xmm0, dword [0x10059898]
movss dword [0x383926bc], xmm0
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10059888]
movss dword [0x383926e0], xmm0
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10059898]
movss dword [0x38392704], xmm0
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x1005989c]
movss dword [0x38392728], xmm0
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10059834]
movss dword [0x3839274c], xmm0
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [0x38392770], xmm0
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [0x38392794], xmm0
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [0x383927b8], xmm0
movd xmm0, dword [0x100d5880]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10059828]
movss dword [0x38392800], xmm0
movd xmm0, dword [0x100d58a0]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10059874]
movss dword [0x383927dc], xmm0
cmp byte [0x100d589c], 0
je 0x1000de1d
cmp dword [0x383d8b74], 1
jne 0x1000de30
mov dword [0x383d8b74], 0xfffffffb
jmp 0x1000de30
cmp dword [0x383d8b74], 0xfffffffb
jne 0x1000de30
mov dword [0x383d8b74], 1
cmp byte [0x100d587c], 0
je 0x1000e10e
mov ecx, 0xa2
xor edx, edx
mov al, byte [edx + 0x10054910]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x14], al
and ecx, 0x800000ff
jns 0x1000de61
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x1000de44
lea eax, [ebp - 0x14]
mov byte [ebp - 8], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea edi, [ebp - 0x14]
mov eax, dword [eax + 0x6bf34]
mov dword [ebp - 0x20], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, dword [ebp - 0x20]
test edi, edi
je 0x1000e10e
mov ecx, dword [0x100d59a0]
mov eax, dword [ecx]
call dword [eax + 0xd0]
mov dword [0x100d59fc], eax
test eax, eax
je 0x1000e10e
movss xmm0, dword [eax + 0x54]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 0x58]
push 0x26
movss dword [ebp - 0x18], xmm0
call esi
shr eax, 0xf
and eax, 0xffffff01
push 0x28
mov dword [ebp - 0x1c], eax
call esi
shr eax, 0xf
and eax, 0xffffff01
push 0x25
mov dword [ebp - 0x24], eax
call esi
shr eax, 0xf
and eax, 0xffffff01
push 0x27
mov dword [ebp - 0x20], eax
call esi
shr eax, 0xf
and eax, 0xffffff01
cmp byte [ebp - 0x1c], 0
mov dword [ebp - 0x34], eax
jne 0x1000df2a
cmp byte [ebp - 0x24], 0
jne 0x1000df20
cmp byte [ebp - 0x20], 0
jne 0x1000dff1
test al, al
jmp 0x1000e07d
movss xmm0, dword [0x100598e4]
jmp 0x1000df32
movss xmm0, dword [0x1005974c]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0x18]
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1005f0d4]
mulss xmm0, dword [ebp - 0x1c]
mulss xmm1, xmm0
movss xmm0, dword [ebp - 0x2c]
xorps xmm0, xmmword [0x1005ab20]
addss xmm1, dword [edi + 0xc8]
cvtss2sd xmm0, xmm0
movss dword [edi + 0xc8], xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm1, dword [0x1005f0d4]
cvtsd2ss xmm2, xmm0
mulss xmm1, dword [ebp - 0x1c]
mulss xmm2, xmm1
movss xmm1, dword [ebp - 0x18]
cvtps2pd xmm0, xmm1
addss xmm2, dword [edi + 0xcc]
movss dword [edi + 0xcc], xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cmp byte [ebp - 0x20], 0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1005f0d4]
mulss xmm0, dword [ebp - 0x1c]
mulss xmm1, xmm0
addss xmm1, dword [edi + 0xd0]
movss dword [edi + 0xd0], xmm1
je 0x1000e079
movss xmm0, dword [ebp - 0x18]
subss xmm0, dword [0x1005975c]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x30], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm1, dword [0x1005f0d4]
cvtsd2ss xmm2, xmm0
movsd xmm0, qword [ebp - 0x30]
mulss xmm2, xmm1
movss xmm1, dword [edi + 0xcc]
addss xmm1, dword [0x100596a0]
addss xmm2, dword [edi + 0xc8]
movss dword [edi + 0xcc], xmm1
movss dword [edi + 0xc8], xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1005f0d4]
mulss xmm1, xmm0
addss xmm1, dword [edi + 0xd0]
movss dword [edi + 0xd0], xmm1
cmp byte [ebp - 0x34], 0
je 0x1000e10e
movss xmm0, dword [ebp - 0x18]
addss xmm0, dword [0x1005975c]
movss dword [ebp - 0x18], xmm0
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm1, dword [0x1005f0d4]
cvtsd2ss xmm2, xmm0
mulss xmm2, xmm1
movss xmm1, dword [edi + 0xcc]
addss xmm1, dword [0x100596a0]
addss xmm2, dword [edi + 0xc8]
movss dword [edi + 0xcc], xmm1
movss xmm1, dword [ebp - 0x18]
cvtps2pd xmm0, xmm1
movss dword [edi + 0xc8], xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1005f0d4]
mulss xmm1, xmm0
addss xmm1, dword [edi + 0xd0]
movss dword [edi + 0xd0], xmm1
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1004caf7
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret