Function at 0x1004cd30
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x10187080]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1018b259], 0
je 0x1004d233
mov dword [ebp - 0x20], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.100414c0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x48]
call fcn.100284f0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.100414c0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x24]
call fcn.10029d10
add esp, 8
cmp dword [ebp - 0x24], 0
jne 0x1004d233
mov eax, dword [ebp - 0x48]
cmp eax, 7
je 0x1004cdc2
cmp eax, 9
jne 0x1004d233
push edi
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 2
call edi
test ax, ax
jns 0x1004cddb
mov byte [0x1018ae6d], 0
jmp 0x1004cdf4
mov edx, 5
mov byte [0x1018ae6d], 1
call fcn.10032960
test al, al
je 0x1004d232
push esi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0
call fcn.1002b1c0
mov esi, dword [ebp - 0x40]
xorps xmm0, xmm0
push esi
movss dword [ebp - 0x24], xmm0
movss dword [ebp - 0x28], xmm0
movss dword [ebp - 0x3c], xmm0
movss dword [ebp - 0x38], xmm0
call fcn.1003d080
add esp, 4
test al, al
je 0x1004ced2
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003cfd0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003cf20
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003d760
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [0x1017e4a8]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x20]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [ebp - 0x38], xmm1
call fcn.1003d620
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [0x1017e4a8]
mulss xmm0, dword [ebp - 0x20]
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d760
mulss xmm0, dword [0x1017e4a8]
addss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x28], xmm0
push 1
call edi
test ax, ax
mov al, byte [0x1018ae6a]
jns 0x1004ceef
test al, al
jne 0x1004ceef
mov word [0x1018ae6a], 1
jmp 0x1004cf17
cmp al, 1
jne 0x1004cf05
push 1
call edi
test ax, ax
js 0x1004cf05
mov word [0x1018ae6a], 0x100
mov edx, 7
call fcn.1002b9d0
test al, al
je 0x1004d231
call fcn.10053908
cdq
mov ecx, 0x69
idiv ecx
mov ecx, dword [edx*4 + 0x10091cb8]
call fcn.1002c340
mov esi, eax
mov ecx, esi
call fcn.100422a0
call fcn.1003cc10
movss xmm3, dword [ebp - 0x28]
lea edx, [ebp - 0x20]
movss xmm2, dword [ebp - 0x3c]
movss xmm1, dword [ebp - 0x38]
push ecx
mov ecx, esi
mov dword [ebp - 0x20], 0
call fcn.10045620
mov ecx, esi
call fcn.100423e0
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x40]
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x54]
call fcn.1003cf20
mov dword [ebp - 0x28], 0
call fcn.10027530
mov ecx, eax
call fcn.10041420
lea edx, [ebp - 0x28]
mov ecx, eax
call fcn.100414c0
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x28]
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x2c]
call fcn.10028080
movss xmm0, dword [ebp - 0x4c]
add esp, 0xc
movss xmm3, dword [ebp - 0x54]
movss xmm2, dword [ebp - 0x34]
movss xmm1, dword [ebp - 0x30]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x50]
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x2c]
call fcn.1004d890
addss xmm0, dword [0x1017e3b4]
mov esi, dword [ebp - 0x40]
push esi
movss dword [ebp - 0x38], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x28], xmm0
movss dword [ebp - 0x3c], xmm0
call fcn.1003d080
add esp, 0xc
test al, al
je 0x1004d0a9
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003cfd0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003cf20
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003d760
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [0x1017e508]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x24]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [ebp - 0x3c], xmm1
call fcn.1003d620
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [0x1017e508]
mulss xmm0, dword [ebp - 0x24]
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d760
mulss xmm0, dword [0x1017e508]
addss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x24], xmm0
mov esi, dword [ebp - 0x40]
push esi
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
call fcn.1003d080
add esp, 4
test al, al
je 0x1004d16e
lea eax, [ebp - 8]
push eax
push esi
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.1003cfd0
lea eax, [ebp - 0x14]
push eax
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
call fcn.1003cf20
movss xmm0, dword [ebp - 8]
add esp, 0x10
call fcn.1003d760
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [ebp - 0x38]
movss xmm1, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x44]
subss xmm1, xmm0
movss xmm0, dword [ebp - 8]
movss dword [ebp - 0x2c], xmm1
call fcn.1003d620
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d620
mulss xmm0, dword [ebp - 0x38]
mulss xmm0, dword [ebp - 0x44]
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x10]
call fcn.1003d760
mulss xmm0, dword [ebp - 0x38]
addss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x34], xmm0
jmp 0x1004d173
movss xmm0, dword [ebp - 0x34]
movss xmm3, dword [ebp - 0x2c]
lea ecx, [ebp - 0x58]
movss xmm2, dword [ebp - 0x24]
sub esp, 8
movss xmm1, dword [ebp - 0x28]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x30]
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x3c]
call fcn.10042720
movss xmm2, dword [ebp - 0x24]
xor edx, edx
subss xmm2, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x3c]
subss xmm4, dword [ebp - 0x2c]
movss xmm3, dword [ebp - 0x28]
lea ecx, [edx + 1]
subss xmm3, dword [ebp - 0x30]
movss xmm1, dword [0x1017e4e4]
movss xmm0, dword [ebp - 0x58]
mulss xmm2, xmm1
push 0
mulss xmm4, xmm1
sub esp, 0x10
mulss xmm3, xmm1
divss xmm2, xmm0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
divss xmm4, xmm0
divss xmm3, xmm0
movss dword [esp], xmm2
push dword [ebp - 0x20]
movss dword [ebp - 0x34], xmm2
movaps xmm2, xmm4
movss dword [ebp - 0x2c], xmm4
movss dword [ebp - 0x30], xmm3
call fcn.10041f10
add esp, 0x20
lea ecx, [ebp - 0x20]
call fcn.10045850
pop esi
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ecf8
mov esp, ebp
pop ebp
ret