Function at 0x101772c0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov dword [ebp - 4], ecx
call fcn.10119520
cmp eax, dword [0x101d9d10]
jae 0x101772dd
xor al, al
jmp 0x1017753a
push 0x54
mov eax, 0x791050
call eax
add esp, 4
test eax, eax
je 0x10177358
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
je 0x10177358
mov edx, dword [0x101d9d10]
mov dword [ebp - 8], edx
cvtsi2sd xmm0, dword [ebp - 8]
mov eax, dword [ebp - 8]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101c3940]
movsd qword [ebp - 0x18], xmm0
cvtsd2ss xmm0, qword [ebp - 0x18]
mov ecx, dword [ebp - 4]
movss xmm1, dword [ecx + 0xc]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x10177341
mov dword [ebp - 0xc], 0
jmp 0x10177348
mov dword [ebp - 0xc], 1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov dword [edx + 0x2c], eax
mov al, 1
jmp 0x1017753a
mov ecx, dword [0x101d9d10]
mov dword [ebp - 0x10], ecx
cvtsi2sd xmm0, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x101c3940]
movsd qword [ebp - 0x20], xmm0
cvtsd2ss xmm0, qword [ebp - 0x20]
mov eax, dword [ebp - 4]
movss xmm1, dword [eax + 0xc]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x101773fe
push 1
mov ecx, 0x101de258
call fcn.1014a960
movzx ecx, al
test ecx, ecx
jne 0x101773f9
mov edx, dword [ebp - 4]
cvttss2si eax, dword [edx + 0x3c]
push eax
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0x38]
push edx
mov eax, dword [ebp - 4]
cvttss2si ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp - 4]
cvttss2si eax, dword [edx + 0x30]
push eax
mov ecx, 0x101de258
call fcn.1014a990
movzx ecx, al
test ecx, ecx
je 0x101773f9
push 1
mov edx, 0x791050
call edx
add esp, 4
test eax, eax
je 0x101773f9
mov eax, dword [ebp - 4]
mov dword [eax + 0x2c], 0
mov al, 1
jmp 0x1017753a
jmp 0x10177538
push 0x14
push 0x28
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 4]
movss xmm0, dword [eax + 0xc]
addss xmm0, dword [0x101c34ac]
cvttss2si ecx, xmm0
push ecx
mov ecx, 0x101de258
call fcn.1014a990
movzx edx, al
test edx, edx
je 0x10177452
push 1
mov eax, 0x791050
call eax
add esp, 4
test eax, eax
je 0x10177452
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x2c], 1
mov al, 1
jmp 0x1017753a
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1c]
cmp dword [eax + 0x10], 0
jne 0x10177465
xor al, al
jmp 0x1017753a
push 0
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x40]
call fcn.100ae590
push 0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x44]
call fcn.100ae590
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
call fcn.100ae630
movzx ecx, al
test ecx, ecx
je 0x101774d8
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
test eax, eax
jne 0x101774c1
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1c]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0x28]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1c]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx]
push edx
mov ecx, 0x102993d8
call fcn.10171900
jmp 0x101774c8
mov eax, dword [ebp - 4]
mov byte [eax + 0x20], 0
push 0x19
mov ecx, 0x10205be4
call fcn.1011afa0
mov al, 1
jmp 0x1017753a
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x44]
call fcn.100ae630
movzx edx, al
test edx, edx
je 0x10177538
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
test ecx, ecx
jne 0x101774fe
mov edx, dword [ebp - 4]
mov byte [edx + 0x20], 1
jmp 0x10177528
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1c]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax]
push ecx
mov ecx, 0x102993d8
call fcn.10171890
mov edx, dword [ebp - 4]
mov byte [edx + 0x20], 0
push 0x19
mov ecx, 0x10205be4
call fcn.1011afa0
mov al, 1
jmp 0x1017753a
mov al, 1
mov esp, ebp
pop ebp
ret