Function at 0x10040720
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [0x10187080]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x38]
mov ecx, eax
call fcn.100414c0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
call fcn.10029d10
add esp, 4
cmp byte [0x1018b0fb], 0
je 0x10040da3
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0
call fcn.1002b1c0
push dword [0x1018b318]
call fcn.1003ce80
add esp, 4
test al, al
jne 0x100408a7
mov edx, 0x1018b318
mov byte [0x1018b0b0], al
mov byte [0x1018b066], al
call fcn.1003cd40
push dword [0x1018b318]
mov cl, 1
call fcn.1002b110
push dword [0x1018b318]
call fcn.1003d1c0
mov edx, 1
mov ecx, edx
call fcn.1003dd20
lea eax, [ebp - 8]
push eax
push dword [ebp - 0x38]
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003cf20
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push dword [0x1018b318]
movss xmm3, dword [ebp - 8]
movss xmm2, dword [ebp - 0xc]
movss xmm1, dword [ebp - 0x10]
movq qword [0x1018b0c8], xmm0
mov dword [0x1018b0d0], eax
call fcn.1002b260
add esp, 0x14
call fcn.10027530
xor dl, dl
mov ecx, eax
call fcn.10027700
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x10040848
push eax
xor cl, cl
call fcn.1002ce90
push dword [ebp - 0x34]
mov cl, 1
call fcn.10029c60
add esp, 8
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ecf8
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x30], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x30]
mov ecx, eax
call fcn.100414c0
push dword [ebp - 0x30]
xor cl, cl
call fcn.1002cd40
mov dword [ebp - 0x30], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x30]
mov ecx, eax
call fcn.100414c0
push dword [ebp - 0x30]
mov cl, 1
call fcn.10027e90
add esp, 8
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ecf8
mov esp, ebp
pop ebp
ret
push esi
push edi
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x38]
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x28]
call fcn.1003cfd0
push dword [0x1018b318]
movss xmm3, dword [ebp - 0x20]
movss xmm2, dword [ebp - 0x24]
movss xmm1, dword [ebp - 0x28]
call fcn.1002b310
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
lea edx, [ebp - 0x44]
call fcn.10042530
movss xmm0, dword [0x1017e36c]
add esp, 0x18
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
movss dword [ebp - 0x30], xmm0
push 0xa0
call edi
test ax, ax
jns 0x10040921
movss xmm0, dword [0x1017e478]
mov byte [0x1018afa9], 0
movss dword [ebp - 0x30], xmm0
jmp 0x10040928
mov byte [0x1018afa9], 1
push 0x57
call edi
xorps xmm0, xmm0
movss dword [ebp - 0x3c], xmm0
test ax, ax
jns 0x10040942
mov byte [0x1018af17], 0
jmp 0x1004095d
cmp dword [ebp - 0x44], 0
mov byte [0x1018af17], 1
jne 0x10040a60
cmp dword [ebp - 0x48], 0xffffff81
jne 0x10040a60
mov esi, dword [0x1018b318]
push esi
mov dword [0x1018b0d0], 0
mov dword [0x1018b0cc], 0
mov dword [0x1018b0c8], 0
call fcn.1003d080
add esp, 4
test al, al
je 0x10040a37
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003cfd0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003cf20
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003d760
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [ebp - 0x30]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x2c]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [0x1018b0c8], xmm1
call fcn.1003d620
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [ebp - 0x30]
mulss xmm0, dword [ebp - 0x2c]
addss xmm0, dword [ebp - 0x18]
movss dword [0x1018b0cc], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d760
mulss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x14]
movss dword [0x1018b0d0], xmm0
jmp 0x10040a3f
movss xmm0, dword [0x1018b0d0]
push dword [0x1018b318]
movss xmm2, dword [0x1018b0cc]
movaps xmm3, xmm0
movss xmm1, dword [0x1018b0c8]
call fcn.1002b260
add esp, 4
push 0x53
call edi
test ax, ax
jns 0x10040a72
mov byte [0x1018af0f], 0
jmp 0x10040a8d
cmp dword [ebp - 0x44], 0
mov byte [0x1018af0f], 1
jne 0x10040ba2
cmp dword [ebp - 0x48], 0x7f
jne 0x10040ba2
movss xmm0, dword [ebp - 0x30]
mulss xmm0, dword [0x1017e544]
mov esi, dword [0x1018b318]
push esi
mov dword [0x1018b0d0], 0
movss dword [ebp - 0x30], xmm0
mov dword [0x1018b0cc], 0
mov dword [0x1018b0c8], 0
call fcn.1003d080
add esp, 4
test al, al
je 0x10040b79
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003cfd0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003cf20
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003d760
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [ebp - 0x30]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x2c]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [0x1018b0c8], xmm1
call fcn.1003d620
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [ebp - 0x30]
mulss xmm0, dword [ebp - 0x2c]
addss xmm0, dword [ebp - 0x18]
movss dword [0x1018b0cc], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d760
mulss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x14]
movss dword [0x1018b0d0], xmm0
jmp 0x10040b81
movss xmm0, dword [0x1018b0d0]
push dword [0x1018b318]
movss xmm2, dword [0x1018b0cc]
movaps xmm3, xmm0
movss xmm1, dword [0x1018b0c8]
call fcn.1002b260
add esp, 4
cmp dword [ebp - 0x34], 0
xorps xmm0, xmm0
mov esi, dword [0x1018b318]
push esi
je 0x10040ca3
movss dword [ebp - 0x30], xmm0
movss dword [ebp - 0x3c], xmm0
call fcn.1003d080
add esp, 4
test al, al
je 0x10040c70
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003cfd0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003cf20
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003d760
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [0x1017e4bc]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x2c]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [ebp - 0x3c], xmm1
call fcn.1003d620
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [0x1017e4bc]
mulss xmm0, dword [ebp - 0x2c]
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d760
mulss xmm0, dword [0x1017e4bc]
addss xmm0, dword [ebp - 0x14]
jmp 0x10040c73
xorps xmm0, xmm0
subss xmm0, dword [0x1017e468]
push dword [ebp - 0x34]
movss xmm2, dword [ebp - 0x30]
movss xmm1, dword [ebp - 0x3c]
movaps xmm3, xmm0
call fcn.100420b0
add esp, 4
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ecf8
mov esp, ebp
pop ebp
ret
movss dword [ebp - 0x40], xmm0
movss dword [ebp - 0x2c], xmm0
call fcn.1003d080
add esp, 4
test al, al
je 0x10040d54
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003cfd0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003cf20
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003d760
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
movss xmm1, dword [ebp - 0x1c]
addss xmm0, xmm0
mulss xmm0, dword [ebp - 0x2c]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [ebp - 0x2c], xmm1
call fcn.1003d620
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
addss xmm0, xmm0
mulss xmm0, dword [ebp - 0x40]
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d760
addss xmm0, xmm0
addss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x3c], xmm0
mov dword [ebp - 0x30], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x30]
mov ecx, eax
call fcn.100414c0
movss xmm3, dword [ebp - 0x3c]
subss xmm3, dword [0x1017e468]
push dword [ebp - 0x30]
movss xmm2, dword [ebp - 0x40]
movss xmm1, dword [ebp - 0x2c]
call fcn.10028ea0
add esp, 4
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ecf8
mov esp, ebp
pop ebp
ret
push dword [0x1018b318]
call fcn.1003ce80
add esp, 4
test al, al
je 0x10040c95
push dword [0x1018b318]
call fcn.1003cde0
add esp, 4
xor edx, edx
xor ecx, ecx
call fcn.1003dd20
call fcn.10027530
mov dl, 1
mov ecx, eax
call fcn.10027700
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x10040e08
push eax
mov cl, 1
call fcn.1002ce90
push dword [ebp - 0x34]
xor cl, cl
call fcn.10029c60
add esp, 8
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ecf8
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x2c], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x2c]
mov ecx, eax
call fcn.100414c0
push dword [ebp - 0x2c]
mov cl, 1
call fcn.1002cd40
mov dword [ebp - 0x2c], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x2c]
mov ecx, eax
call fcn.100414c0
push dword [ebp - 0x2c]
xor cl, cl
call fcn.10027e90
mov ecx, dword [ebp - 4]
add esp, 8
xor ecx, ebp
call fcn.1004ecf8
mov esp, ebp
pop ebp
ret