Function at 0x1000cbb0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x30
mov eax, dword [0x1006d040]
xor eax, esp
mov dword [esp + 0x2c], eax
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
push esi
push edi
movss xmm1, dword [0x100684a4]
addss xmm0, dword [0x100684c8]
movss dword [0x3847cfb4], xmm0
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x100684b8]
movss dword [0x3847cfd8], xmm0
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x100684c8]
movss dword [0x3847cffc], xmm0
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x100684cc]
movss dword [0x3847d020], xmm0
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10068484]
movss dword [0x3847d044], xmm0
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [0x3847d08c], xmm0
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [0x3847d068], xmm0
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movss dword [0x3847d0b0], xmm0
movd xmm0, dword [0x100e49cc]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10068478]
movss dword [0x3847d0f8], xmm0
movd xmm0, dword [0x100e49d0]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x100684a8]
movss dword [0x3847d0d4], xmm0
cmp byte [0x100e49cb], 0
je 0x1000ccee
cmp dword [0x3842c690], 1
jne 0x1000cd01
mov dword [0x3842c690], 0xfffffffb
jmp 0x1000cd01
cmp dword [0x3842c690], 0xfffffffb
jne 0x1000cd01
mov dword [0x3842c690], 1
cmp byte [0x100e49c9], 0
je 0x1000cf8c
mov ecx, 0xa2
xor edx, edx
mov al, byte [edx + 0x10062370]
xor al, cl
inc ecx
mov byte [esp + edx + 0x24], al
and ecx, 0x800000ff
jns 0x1000cd32
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x1000cd15
lea eax, [esp + 0x24]
mov byte [esp + 0x30], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov edi, dword [eax + 0x6cf34]
movq qword [esp + 0x24], xmm0
mov dword [esp + 0x2c], 0
mov byte [esp + 0x30], 0
test edi, edi
je 0x1000cf8c
mov eax, dword [0x38452e7c]
mov dword [0x100e4a24], eax
test eax, eax
je 0x1000cf8c
movss xmm0, dword [eax + 0x54]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
movss dword [esp + 0x18], xmm0
movss xmm0, dword [eax + 0x58]
push 0x26
movss dword [esp + 0xc], xmm0
call esi
shr eax, 0xf
and eax, 0xffffff01
push 0x28
mov dword [esp + 0x10], eax
call esi
shr eax, 0xf
and eax, 0xffffff01
push 0x25
mov dword [esp + 0x18], eax
call esi
shr eax, 0xf
and eax, 0xffffff01
push 0x27
mov dword [esp + 0x14], eax
call esi
shr eax, 0xf
and eax, 0xffffff01
cmp byte [esp + 0xc], 0
mov dword [esp + 0x20], eax
jne 0x1000ce04
cmp byte [esp + 0x14], 0
jne 0x1000cdfa
cmp byte [esp + 0x10], 0
jne 0x1000cea0
test al, al
jmp 0x1000cf16
movss xmm1, dword [0x10068514]
jmp 0x1000ce0c
movss xmm1, dword [0x10068398]
movss xmm0, dword [esp + 8]
addss xmm1, xmm1
cvtps2pd xmm0, xmm0
movss dword [esp + 0xc], xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [esp + 0xc]
addss xmm0, dword [edi + 0xc8]
movss dword [edi + 0xc8], xmm0
movss xmm0, dword [esp + 0x18]
xorps xmm0, xmmword [0x10068ed0]
cvtss2sd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
mulss xmm1, dword [esp + 0xc]
addss xmm1, dword [edi + 0xcc]
movss dword [edi + 0xcc], xmm1
movss xmm1, dword [esp + 8]
cvtps2pd xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cmp byte [esp + 0x10], 0
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [esp + 0xc]
addss xmm0, dword [edi + 0xd0]
movss dword [edi + 0xd0], xmm0
je 0x1000cf11
movss xmm0, dword [esp + 8]
subss xmm0, dword [0x100683a8]
cvtps2pd xmm0, xmm0
movsd qword [esp + 0x18], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
addss xmm1, xmm1
addss xmm1, dword [edi + 0xc8]
movss dword [edi + 0xc8], xmm1
movss xmm1, dword [edi + 0xcc]
addss xmm1, xmm0
movsd xmm0, qword [esp + 0x18]
movss dword [edi + 0xcc], xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cvtsd2ss xmm0, xmm0
addss xmm0, xmm0
addss xmm0, dword [edi + 0xd0]
movss dword [edi + 0xd0], xmm0
cmp byte [esp + 0x20], 0
je 0x1000cf8c
movss xmm0, dword [esp + 8]
addss xmm0, dword [0x100683a8]
movss dword [esp + 8], xmm0
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
addss xmm1, xmm1
addss xmm1, dword [edi + 0xc8]
movss dword [edi + 0xc8], xmm1
movss xmm1, dword [edi + 0xcc]
addss xmm1, xmm0
movss dword [edi + 0xcc], xmm1
movss xmm1, dword [esp + 8]
cvtps2pd xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cvtsd2ss xmm0, xmm0
addss xmm0, xmm0
addss xmm0, dword [edi + 0xd0]
movss dword [edi + 0xd0], xmm0
mov ecx, dword [esp + 0x34]
pop edi
pop esi
xor ecx, esp
call fcn.10052006
mov esp, ebp
pop ebp
ret