Function at 0x417101
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push edi
push 0x12
call esi
push 0x10
movzx edi, ax
pop eax
push eax
call esi
and dword [0x506bdc], 0
movzx eax, ax
shr eax, 0xf
shr edi, 0xf
and eax, edi
mov dword [0x4f7d74], 1
mov dword [ebp - 4], eax
xor esi, esi
mov dword [0x506bd8], 0xbf19999a
mov dword [0x506bc8], 5
mov dword [0x506bcc], 8
mov dword [0x506bc4], 0x506c00
push esi
call fcn.00416aad
inc esi
pop ecx
cmp esi, dword [0x506bcc]
jl 0x417164
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
push 0
push 0
push ecx
push ecx
mov dword [esp + 4], 0x42f00000
mov dword [esp], 0x3f800000
push edi
push esi
call fcn.0045d26a
mov ebx, eax
lea ecx, [esi - 1]
xor eax, eax
mov dword [0x506b8c], ebx
inc eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], eax
lea eax, [edi - 1]
mov dword [ebx + 0x18], eax
mov eax, esi
cdq
sub eax, edx
mov dword [ebx + 0x20], esi
sar eax, 1
mov dword [ebx + 0x28], eax
mov eax, edi
cdq
sub eax, edx
mov dword [ebx + 0x24], edi
sar eax, 1
mov dword [ebx + 0x1c], ecx
mov dword [ebx + 4], 0x3f800000
mov dword [ebx + 0x2c], eax
mov byte [ebx + 8], 1
mov dword [ebx + 0x38], 0xc2700000
call fcn.0045df5f
push dword [ebp + 0x10]
mov dword [0x506be0], eax
push 0x506b70
call fcn.00417ec5
mov edi, dword [ebp - 4]
add esp, 0x20
test edi, edi
push dword [0x506b70]
push 0xc
pop eax
push 0x18
pop ecx
cmovne eax, ecx
push eax
push ecx
mov dword [esp], 0x43fa0000
call fcn.00417cf4
add esp, 0xc
mov dword [0x506b90], eax
push dword [0x506b84]
sub esp, 0xc
mov dword [esp + 8], 0x42000000
mov dword [esp + 4], 0x42000000
mov dword [esp], 0x42000000
call fcn.0045e078
add esp, 0x10
mov dword [0x506bc0], eax
and dword [eax + 0x50], 0
mov dword [eax + 0x60], 0x42960000
mov dword [eax + 0x5c], 0xc3260000
mov dword [eax + 0x70], 0xc2b40000
mov dword [eax + 0x6c], 0x42b40000
push dword [0x506b80]
push 1
push ecx
push ecx
mov dword [esp + 4], 0x42b40000
mov dword [esp], 0x43260000
call fcn.0045e258
add esp, 0x10
mov dword [0x506bbc], eax
mov dword [eax + 0x60], 0x42960000
mov dword [eax + 0x5c], 0x43260000
mov dword [eax + 0x70], 0xc2b40000
and dword [eax + 0x50], 0
xor esi, esi
movss xmm0, dword [0x4ceb9c]
test edi, edi
push 6
pop ebx
mov dword [eax + 0x6c], 0x42b40000
mov eax, ebx
push 0xc
pop ebx
cmovne eax, ebx
movss dword [ebp + 0xc], xmm0
mov dword [ebp + 8], eax
push 0
push 0
call fcn.00460015
movss xmm1, dword [ebp + 0xc]
mov dword [esi*4 + 0x506b94], eax
movaps xmm0, xmm1
addss xmm0, dword [0x4ceb90]
and dword [eax + 0x5c], 0
mov dword [eax + 0x60], 0x42b40000
and dword [eax + 0x64], 0
mov eax, esi
pop ecx
and eax, 1
test edi, edi
pop ecx
mov ecx, ebx
push dword [eax*4 + 0x506b74]
lea eax, [esi*4 + 0x40]
push dword [ebp + 8]
cmovne ecx, eax
push ecx
push ecx
push ecx
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
call fcn.0045e877
movss xmm0, dword [ebp + 0xc]
add esp, 0x14
mov ecx, dword [esi*4 + 0x506b94]
add ebx, 2
addss xmm0, dword [0x4ceb98]
inc esi
mov dword [ecx + 0x10], eax
movss dword [ebp + 0xc], xmm0
cmp ebx, 0x1c
jb 0x4172d5
push 6
pop ebx
push 0x10
pop eax
push dword [0x506b7c]
mov esi, edi
shl esi, 4
add esi, 8
test edi, edi
push esi
cmovne ebx, eax
push ebx
push ecx
mov dword [esp], 0x41880000
call fcn.0045e485
add esp, 0x10
mov dword [0x506bb4], eax
push dword [0x506b7c]
push esi
push ebx
push ecx
mov dword [esp], 0x41880000
call fcn.0045e485
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
add esp, 0x10
mov dword [0x506bb8], eax
call esi
and dword [0x506ca0], 0
or dword [0x506ca4], 0xffffffff
mov dword [0x506bfc], eax
call esi
pop edi
pop esi
mov dword [0x506be4], eax
pop ebx
leave
ret