Function at 0x101594d0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov dword [ebp - 4], ecx
call fcn.100ff070
cmp eax, dword [0x101b4ba8]
jae 0x101594ed
xor al, al
jmp 0x1015974a
push 0x54
mov eax, 0x791050
call eax
add esp, 4
test eax, eax
je 0x10159568
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
je 0x10159568
mov edx, dword [0x101b4ba8]
mov dword [ebp - 8], edx
cvtsi2sd xmm0, dword [ebp - 8]
mov eax, dword [ebp - 8]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101a10c0]
movsd qword [ebp - 0x18], xmm0
cvtsd2ss xmm0, qword [ebp - 0x18]
mov ecx, dword [ebp - 4]
movss xmm1, dword [ecx + 0xc]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x10159551
mov dword [ebp - 0xc], 0
jmp 0x10159558
mov dword [ebp - 0xc], 1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov dword [edx + 0x2c], eax
mov al, 1
jmp 0x1015974a
mov ecx, dword [0x101b4ba8]
mov dword [ebp - 0x10], ecx
cvtsi2sd xmm0, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x101a10c0]
movsd qword [ebp - 0x20], xmm0
cvtsd2ss xmm0, qword [ebp - 0x20]
mov eax, dword [ebp - 4]
movss xmm1, dword [eax + 0xc]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1015960e
push 1
mov ecx, 0x101b96a0
call fcn.1012f410
movzx ecx, al
test ecx, ecx
jne 0x10159609
mov edx, dword [ebp - 4]
cvttss2si eax, dword [edx + 0x3c]
push eax
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0x38]
push edx
mov eax, dword [ebp - 4]
cvttss2si ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp - 4]
cvttss2si eax, dword [edx + 0x30]
push eax
mov ecx, 0x101b96a0
call fcn.1012f440
movzx ecx, al
test ecx, ecx
je 0x10159609
push 1
mov edx, 0x791050
call edx
add esp, 4
test eax, eax
je 0x10159609
mov eax, dword [ebp - 4]
mov dword [eax + 0x2c], 0
mov al, 1
jmp 0x1015974a
jmp 0x10159748
push 0x14
push 0x28
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 4]
movss xmm0, dword [eax + 0xc]
addss xmm0, dword [0x101a0c4c]
cvttss2si ecx, xmm0
push ecx
mov ecx, 0x101b96a0
call fcn.1012f440
movzx edx, al
test edx, edx
je 0x10159662
push 1
mov eax, 0x791050
call eax
add esp, 4
test eax, eax
je 0x10159662
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x2c], 1
mov al, 1
jmp 0x1015974a
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1c]
cmp dword [eax + 0x10], 0
jne 0x10159675
xor al, al
jmp 0x1015974a
push 0
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x40]
call fcn.100989e0
push 0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x44]
call fcn.100989e0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
call fcn.10098a80
movzx ecx, al
test ecx, ecx
je 0x101596e8
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
test eax, eax
jne 0x101596d1
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1c]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0x28]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1c]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx]
push edx
mov ecx, 0x10275c38
call fcn.10153cc0
jmp 0x101596d8
mov eax, dword [ebp - 4]
mov byte [eax + 0x20], 0
push 0x19
mov ecx, 0x101e2e2c
call fcn.10100450
mov al, 1
jmp 0x1015974a
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x44]
call fcn.10098a80
movzx edx, al
test edx, edx
je 0x10159748
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
test ecx, ecx
jne 0x1015970e
mov edx, dword [ebp - 4]
mov byte [edx + 0x20], 1
jmp 0x10159738
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1c]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax]
push ecx
mov ecx, 0x10275c38
call fcn.10153c50
mov edx, dword [ebp - 4]
mov byte [edx + 0x20], 0
push 0x19
mov ecx, 0x101e2e2c
call fcn.10100450
mov al, 1
jmp 0x1015974a
mov al, 1
mov esp, ebp
pop ebp
ret