Function at 0x1017ada0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov dword [ebp - 4], ecx
call fcn.1011c470
cmp eax, dword [0x101e6d34]
jae 0x1017adbd
xor al, al
jmp 0x1017b01a
push 0x54
mov eax, 0x791050
call eax
add esp, 4
test eax, eax
je 0x1017ae38
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
je 0x1017ae38
mov edx, dword [0x101e6d34]
mov dword [ebp - 8], edx
cvtsi2sd xmm0, dword [ebp - 8]
mov eax, dword [ebp - 8]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101c99b0]
movsd qword [ebp - 0x18], xmm0
cvtsd2ss xmm0, qword [ebp - 0x18]
mov ecx, dword [ebp - 4]
movss xmm1, dword [ecx + 0xc]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1017ae21
mov dword [ebp - 0xc], 0
jmp 0x1017ae28
mov dword [ebp - 0xc], 1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov dword [edx + 0x2c], eax
mov al, 1
jmp 0x1017b01a
mov ecx, dword [0x101e6d34]
mov dword [ebp - 0x10], ecx
cvtsi2sd xmm0, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x101c99b0]
movsd qword [ebp - 0x20], xmm0
cvtsd2ss xmm0, qword [ebp - 0x20]
mov eax, dword [ebp - 4]
movss xmm1, dword [eax + 0xc]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1017aede
push 1
mov ecx, 0x101eb298
call fcn.1014e080
movzx ecx, al
test ecx, ecx
jne 0x1017aed9
mov edx, dword [ebp - 4]
cvttss2si eax, dword [edx + 0x3c]
push eax
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0x38]
push edx
mov eax, dword [ebp - 4]
cvttss2si ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp - 4]
cvttss2si eax, dword [edx + 0x30]
push eax
mov ecx, 0x101eb298
call fcn.1014e0b0
movzx ecx, al
test ecx, ecx
je 0x1017aed9
push 1
mov edx, 0x791050
call edx
add esp, 4
test eax, eax
je 0x1017aed9
mov eax, dword [ebp - 4]
mov dword [eax + 0x2c], 0
mov al, 1
jmp 0x1017b01a
jmp 0x1017b018
push 0x14
push 0x28
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 4]
movss xmm0, dword [eax + 0xc]
addss xmm0, dword [0x101c950c]
cvttss2si ecx, xmm0
push ecx
mov ecx, 0x101eb298
call fcn.1014e0b0
movzx edx, al
test edx, edx
je 0x1017af32
push 1
mov eax, 0x791050
call eax
add esp, 4
test eax, eax
je 0x1017af32
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x2c], 1
mov al, 1
jmp 0x1017b01a
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1c]
cmp dword [eax + 0x10], 0
jne 0x1017af45
xor al, al
jmp 0x1017b01a
push 0
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x40]
call fcn.100afb70
push 0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x44]
call fcn.100afb70
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
call fcn.100afc10
movzx ecx, al
test ecx, ecx
je 0x1017afb8
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
test eax, eax
jne 0x1017afa1
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1c]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0x28]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1c]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx]
push edx
mov ecx, 0x102a6490
call fcn.101753c0
jmp 0x1017afa8
mov eax, dword [ebp - 4]
mov byte [eax + 0x20], 0
push 0x19
mov ecx, 0x10212c14
call fcn.1011def0
mov al, 1
jmp 0x1017b01a
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x44]
call fcn.100afc10
movzx edx, al
test edx, edx
je 0x1017b018
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
test ecx, ecx
jne 0x1017afde
mov edx, dword [ebp - 4]
mov byte [edx + 0x20], 1
jmp 0x1017b008
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1c]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax]
push ecx
mov ecx, 0x102a6490
call fcn.10175350
mov edx, dword [ebp - 4]
mov byte [edx + 0x20], 0
push 0x19
mov ecx, 0x10212c14
call fcn.1011def0
mov al, 1
jmp 0x1017b01a
mov al, 1
mov esp, ebp
pop ebp
ret