Function at 0x460e10
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi + 0x167], 0
mov byte [esi + 0x18c], 0
je 0x4610ff
call dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
lea ecx, [esi + 4]
mov dword [esp + 0x14], edx
mov edi, eax
call fcn.0045b750
mov bh, al
mov bl, byte [0x5610cf]
mov eax, 0x989680
cdq
idiv dword [esi + 0x16c]
cdq
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
test bl, bl
je 0x460e7a
push 0
push 2
push edx
push eax
call fcn.00481fd0
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov ecx, dword [esi + 0x178]
mov eax, dword [esi + 0x17c]
test bh, bh
je 0x46108e
cmp eax, dword [esp + 0x14]
jg 0x4610ab
jl 0x460ea2
cmp ecx, edi
jae 0x4610ab
movsd xmm0, qword [0x5578f8]
mov eax, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsd qword [esp + 0x20], xmm0
mov dword [esp + 0x1c], eax
nop dword [eax]
test bl, bl
je 0x460f1d
cmp byte [esi], 0
je 0x460f00
cmp byte [esi + 0x18d], 0
je 0x460ef4
call fcn.00450250
test al, al
jne 0x460ef4
cmp byte [esi + 0x194], al
je 0x460ee8
cmp bh, byte [esi + 0x40]
je 0x460ef4
mov eax, dword [esi + 0x190]
dec eax
mov dword [0x5616a8], eax
mov ecx, dword [esi + 0x48]
cmp ecx, 0xffffffff
je 0x460f13
mov dl, 1
jmp 0x460f0a
mov ecx, dword [esi + 0x48]
cmp ecx, 0xffffffff
je 0x460f13
xor dl, dl
push ecx
call fcn.00453450
add esp, 4
cmp byte [esi], 0
sete al
mov byte [esi], al
jmp 0x460f6e
cmp byte [esi + 0x18d], 0
je 0x460f48
call fcn.00450250
test al, al
jne 0x460f48
cmp byte [esi + 0x194], al
je 0x460f3c
cmp bh, byte [esi + 0x40]
je 0x460f48
mov eax, dword [esi + 0x190]
dec eax
mov dword [0x5616a8], eax
mov ecx, dword [esi + 0x48]
cmp ecx, 0xffffffff
je 0x460f5b
push ecx
mov dl, 1
call fcn.00453450
add esp, 4
mov ecx, dword [esi + 0x48]
cmp ecx, 0xffffffff
je 0x460f6e
push ecx
xor dl, dl
call fcn.00453450
add esp, 4
cmp byte [esi + 0x170], 0
je 0x461050
call dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov bl, byte [esi + 0x180]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x557a44]
cvtps2pd xmm0, xmm0
movsd qword [esp + 0x28], xmm0
call fcn.00482360
mov edx, dword [esi + 0x17c]
mov ecx, dword [esi + 0x178]
movsd qword [esp + 0x30], xmm0
movss xmm0, dword [esi + 0x188]
movss dword [esp + 0x18], xmm0
call fcn.00482360
movaps xmm2, xmm0
test bl, bl
je 0x460ffd
movsd xmm1, qword [esp + 0x28]
cvtpd2ps xmm1, xmm1
movss dword [esi + 0x184], xmm1
mulss xmm1, dword [esp + 0x18]
cvtps2pd xmm0, xmm1
movsd xmm1, qword [esp + 0x20]
subsd xmm1, xmm0
jmp 0x461014
movss xmm0, dword [esp + 0x18]
mulss xmm0, dword [esi + 0x184]
cvtps2pd xmm1, xmm0
addsd xmm1, qword [esp + 0x20]
movsd xmm0, qword [esp + 0x30]
mulsd xmm0, xmm1
addsd xmm0, xmm2
call fcn.00482250
mov ecx, eax
mov dword [esi + 0x178], ecx
mov dword [esi + 0x17c], edx
cmp byte [0x5610cf], 0
je 0x461043
cmp byte [esi], 0
je 0x461070
test bl, bl
sete al
mov byte [esi + 0x180], al
jmp 0x461070
mov ecx, dword [esp + 0xc]
add ecx, dword [esi + 0x178]
mov edx, dword [esi + 0x17c]
adc edx, dword [esp + 0x10]
mov dword [esi + 0x178], ecx
mov dword [esi + 0x17c], edx
mov byte [esi + 0x18c], 1
cmp edx, dword [esp + 0x14]
jl 0x461083
jg 0x4610ab
cmp ecx, edi
jae 0x4610ab
mov bl, byte [0x5610cf]
jmp 0x460ec0
mov edx, dword [esp + 0x14]
cmp eax, edx
jg 0x4610a8
jl 0x46109c
cmp ecx, edi
jae 0x4610a8
mov dword [esi + 0x178], edi
mov dword [esi + 0x17c], edx
mov byte [esi], 1
cmp bh, byte [esi + 0x40]
je 0x4610fc
test bh, bh
jne 0x4610fc
mov eax, dword [esi + 0x48]
cmp eax, 0xffffffff
jne 0x4610c0
xor eax, eax
jmp 0x4610c8
push eax
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
mov ecx, dword [esi + 0x48]
shr eax, 0xf
test al, 1
je 0x4610ec
cmp ecx, 0xffffffff
je 0x4610fc
mov dl, 1
push ecx
call fcn.00453450
add esp, 4
mov byte [esi + 0x40], bh
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ecx, 0xffffffff
je 0x4610fc
xor dl, dl
push ecx
call fcn.00453450
add esp, 4
mov byte [esi + 0x40], bh
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret