Function at 0x1003a574
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xd0
mov eax, dword [0x1005200c]
xor eax, esp
mov dword [esp + 0xcc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x40], eax
push esi
mov esi, dword [ebp + 0xc]
mov dword [esp + 0x18], esi
push edi
mov edi, dword [ebp + 8]
mov dword [esp + 0x38], edi
test eax, eax
je case.default.0x1003a546
mov ecx, eax
call fcn.1000c250
test al, al
je case.default.0x1003a546
mov byte [0x10febc62], 0
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 0x24]
call eax
movss xmm0, dword [esi + 0xd4]
movss xmm1, dword [0x1004ce58]
addss xmm0, dword [eax]
movss dword [esp + 0x54], xmm0
movss xmm0, dword [esi + 0xd8]
addss xmm0, dword [eax + 4]
movss dword [esp + 0x58], xmm0
movss xmm0, dword [esi + 0xdc]
addss xmm0, dword [eax + 8]
mov eax, dword [edi + 0x14]
mov dword [esp + 0x50], eax
mov dword [esp + 0x44], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x30]
movss dword [esp + 0x5c], xmm0
movq xmm0, qword [edi + 0xc]
movq qword [esp + 0x70], xmm0
movq qword [esp + 0x3c], xmm0
movss xmm0, dword [esp + 0x40]
mulss xmm0, xmm1
mov dword [esp + 0xc], eax
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fsincos
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [esp + 0x3c]
lea eax, [esp + 0x18]
mulss xmm0, xmm1
mov dword [esp + 0x10], eax
lea eax, [esp + 0x2c]
mov dword [esp + 0xc], eax
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fsincos
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [esp + 0x44]
lea eax, [esp + 0x20]
mulss xmm0, xmm1
mov dword [esp + 0x10], eax
lea eax, [esp + 0x28]
mov dword [esp + 0xc], eax
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fsincos
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
fstp dword [edx]
fstp dword [eax]
movss xmm5, dword [esp + 0x34]
movss xmm0, dword [esp + 0x18]
movss xmm4, dword [esp + 0x30]
movss xmm2, dword [esp + 0x2c]
movss xmm7, dword [esp + 0x20]
movss xmm3, dword [esp + 0x28]
mulss xmm0, xmm5
movaps xmm1, xmm3
mulss xmm1, xmm2
movss dword [esp + 0xc], xmm0
movss xmm0, dword [esp + 0x18]
mulss xmm0, xmm4
movss dword [esp + 0x10], xmm0
movaps xmm0, xmm2
xorps xmm0, xmmword [0x1004d270]
movss dword [esp + 0x14], xmm0
movaps xmm0, xmm7
mulss xmm7, dword [0x1004d110]
mulss xmm0, xmm4
mulss xmm7, xmm5
movss dword [esp + 0x24], xmm0
movaps xmm0, xmm1
movss xmm6, dword [esp + 0x24]
mulss xmm1, xmm4
mulss xmm0, xmm5
subss xmm7, xmm1
movaps xmm1, xmm3
mulss xmm1, dword [0x1004d110]
subss xmm6, xmm0
mulss xmm1, dword [esp + 0x18]
movss dword [esp + 0x30], xmm7
movss xmm7, dword [esp + 0x20]
movss dword [esp + 0x34], xmm1
movaps xmm1, xmm7
movss dword [esp + 0x24], xmm6
mulss xmm1, xmm2
mulss xmm7, dword [esp + 0x18]
movaps xmm0, xmm1
mov ecx, esi
movaps xmm2, xmm3
mulss xmm0, xmm5
mulss xmm2, xmm4
mulss xmm1, xmm4
mulss xmm3, xmm5
addss xmm2, xmm0
movss dword [esp + 0x2c], xmm7
subss xmm1, xmm3
movss dword [esp + 0x4c], xmm2
movss dword [esp + 0x28], xmm1
call fcn.1000bb40
mov eax, dword [eax]
mov dword [esp + 0x20], eax
mov eax, dword [0x1006c4bc]
mov esi, dword [eax + 0x14]
mov dword [esp + 0x18], esi
cmp esi, 1
jl 0x1003a538
nop dword [eax]
mov ecx, dword [0x1006c4b4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
cmp esi, eax
je 0x1003a526
mov ecx, dword [0x1006c4c0]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov edi, eax
test edi, edi
je 0x1003a526
mov edx, dword [edi + 8]
lea ecx, [edi + 8]
mov edx, dword [edx + 0x20]
call edx
test al, al
jne 0x1003a526
mov ecx, dword [esp + 0x1c]
call fcn.1000bb40
mov ecx, edi
mov esi, eax
call fcn.1000bb40
mov ecx, dword [eax]
cmp ecx, dword [esi]
mov esi, dword [esp + 0x18]
je 0x1003a526
cmp dword [edi + 0x87], 0
jne 0x1003a526
cmp byte [esi + 0x10febfb0], 0
jne 0x1003a526
mov eax, dword [edi + 4]
lea ecx, [edi + 4]
lea edx, [esp + 0x3c]
push edx
lea edx, [esp + 0x64]
push edx
call dword [eax + 0x4c]
movss xmm0, dword [edi + 0x2d4]
movss xmm1, dword [esp + 0x44]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1003a4b9
movss xmm0, dword [edi + 0x2f8]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp case.default.0x1003a546
movss dword [edi + 0x2d4], xmm1
movss xmm0, dword [esp + 0x44]
movss dword [edi + 0x2f8], xmm0
movss xmm2, dword [esp + 0x3c]
movss xmm0, dword [esp + 0x40]
subss xmm0, dword [esp + 0x64]
subss xmm2, dword [esp + 0x60]
movss xmm1, dword [esp + 0x44]
subss xmm1, dword [esp + 0x68]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.1000ba40
mulss xmm0, dword [0x1004cef8]
movss dword [edi + 0x2fa], xmm0
or dword [edi + 0x130], 0x4000
dec esi
mov dword [esp + 0x18], esi
cmp esi, 1
jge 0x1003a400
mov edi, dword [esp + 0x38]
mov eax, dword [0x10febc6c]
cmp eax, 5
ja case.default.0x1003a546
jmp dword [eax*4 + 0x1003a93c]
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne case.0x1003a546.0
pop edi
pop esi
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.1003da32
mov esp, ebp
pop ebp
ret 0xc
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne case.0x1003a546.0
pop edi
pop esi
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.1003da32
mov esp, ebp
pop ebp
ret 0xc
push 4
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne case.0x1003a546.0
pop edi
pop esi
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.1003da32
mov esp, ebp
pop ebp
ret 0xc
push 5
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne case.0x1003a546.0
pop edi
pop esi
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.1003da32
mov esp, ebp
pop ebp
ret 0xc
push 6
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je case.default.0x1003a546
cmp byte [0x10febc61], 0
jne 0x1003a6ee
push dword [edi + 0x34]
movss xmm0, dword [esp + 0x50]
push dword [esp + 0x20]
mov ecx, dword [esp + 0x58]
push dword [esp + 0x50]
push dword [esp + 0x2c]
sub esp, 0x10
mov eax, esp
sub esp, 0xc
movss dword [eax], xmm0
movss xmm0, dword [esp + 0x54]
movss dword [eax + 4], xmm0
movss xmm0, dword [esp + 0x58]
movss dword [eax + 8], xmm0
mov eax, esp
movss xmm0, dword [esp + 0x50]
sub esp, 0xc
movss dword [eax], xmm0
movss xmm0, dword [esp + 0x68]
movss dword [eax + 4], xmm0
movss xmm0, dword [esp + 0x6c]
movss dword [eax + 8], xmm0
mov eax, esp
movss xmm0, dword [esp + 0x44]
sub esp, 0xc
movss dword [eax], xmm0
movss xmm0, dword [esp + 0x54]
movss dword [eax + 4], xmm0
movss xmm0, dword [esp + 0x58]
movss dword [eax + 8], xmm0
mov eax, esp
movq xmm0, qword [esp + 0xb4]
sub esp, 0xc
movq qword [eax], xmm0
movss xmm0, dword [esp + 0xa4]
mov dword [eax + 8], ecx
mov eax, esp
movss dword [eax], xmm0
movss xmm0, dword [esp + 0xa8]
movss dword [eax + 4], xmm0
movss xmm0, dword [esp + 0xac]
movss dword [eax + 8], xmm0
call fcn.10039bd0
test al, al
je case.default.0x1003a546
mov byte [0x10febc62], 1
or dword [edi + 0x24], 1
pop edi
pop esi
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.1003da32
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x10febc68]
mov edi, 0x100
test eax, eax
jne 0x1003a701
lea edi, [eax + 0x20]
jmp 0x1003a71d
cmp eax, 1
jne 0x1003a70b
lea edi, [eax + 0x3f]
jmp 0x1003a71d
cmp eax, 2
jne 0x1003a715
lea edi, [eax + 0x7e]
jmp 0x1003a71d
cmp eax, 3
mov ecx, edi
cmove edi, ecx
xor esi, esi
nop
movss xmm0, dword [esp + 0x4c]
push esi
push dword [esp + 0x20]
mov ecx, dword [esp + 0x58]
push dword [esp + 0x50]
push dword [esp + 0x2c]
sub esp, 0x10
mov eax, esp
sub esp, 0xc
movss dword [eax], xmm0
movss xmm0, dword [esp + 0x54]
movss dword [eax + 4], xmm0
movss xmm0, dword [esp + 0x58]
movss dword [eax + 8], xmm0
mov eax, esp
movss xmm0, dword [esp + 0x50]
sub esp, 0xc
movss dword [eax], xmm0
movss xmm0, dword [esp + 0x68]
movss dword [eax + 4], xmm0
movss xmm0, dword [esp + 0x6c]
movss dword [eax + 8], xmm0
mov eax, esp
movss xmm0, dword [esp + 0x44]
sub esp, 0xc
movss dword [eax], xmm0
movss xmm0, dword [esp + 0x54]
movss dword [eax + 4], xmm0
movss xmm0, dword [esp + 0x58]
movss dword [eax + 8], xmm0
mov eax, esp
movq xmm0, qword [esp + 0xb4]
sub esp, 0xc
movq qword [eax], xmm0
movss xmm0, dword [esp + 0xa4]
mov dword [eax + 8], ecx
mov eax, esp
movss dword [eax], xmm0
movss xmm0, dword [esp + 0xa8]
movss dword [eax + 4], xmm0
movss xmm0, dword [esp + 0xac]
movss dword [eax + 8], xmm0
call fcn.10039bd0
test al, al
jne 0x1003a80b
inc esi
cmp esi, edi
jl 0x1003a720
pop edi
pop esi
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.1003da32
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x539
je case.default.0x1003a546
mov edi, dword [esp + 0x38]
lea eax, [esp + 0x78]
push 0x58
push 0
push eax
mov edi, dword [edi + 4]
mov dword [esp + 0x28], edi
call sub.VCRUNTIME140.dll_memset
add esp, 8
mov dword [esp + 0x7c], 0x67452301
lea edx, [esp + 0x20]
mov dword [esp + 0x80], 0xefcdab89
lea ecx, [esp + 0x7c]
mov dword [esp + 0x84], 0x98badcfe
mov dword [esp + 0x88], 0x10325476
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
call fcn.10036d60
add esp, 4
lea edx, [esp + 0x78]
lea ecx, [esp + 0x60]
call fcn.10036e20
movzx eax, byte [esp + 0x66]
cmp eax, esi
je 0x1003a913
push 0x58
lea eax, [esp + 0x7c]
inc edi
push 0
push eax
mov dword [esp + 0x28], edi
call sub.VCRUNTIME140.dll_memset
add esp, 8
mov dword [esp + 0x7c], 0x67452301
lea edx, [esp + 0x20]
mov dword [esp + 0x80], 0xefcdab89
lea ecx, [esp + 0x7c]
mov dword [esp + 0x84], 0x98badcfe
mov dword [esp + 0x88], 0x10325476
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
call fcn.10036d60
add esp, 4
lea edx, [esp + 0x78]
lea ecx, [esp + 0x60]
call fcn.10036e20
movzx eax, byte [esp + 0x66]
cmp eax, esi
jne 0x1003a898
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
mov byte [0x10febc62], 1
or dword [eax + 0x24], 1
mov ecx, dword [esp + 0xd4]
pop edi
pop esi
xor ecx, esp
call fcn.1003da32
mov esp, ebp
pop ebp
ret 0xc