Function at 0x4178d0
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x14
push ebx
mov ebx, dword [esp + 0x24]
push ebp
push esi
push edi
push ebx
push str._keyData__04x
push 8
xor edi, edi
push 0x445ec8
mov esi, ecx
mov dword [esp + 0x30], edi
call fcn.00403360
shr ebx, 0x18
add esp, 0x10
test bl, 1
je 0x417941
push str.__extended_
push 8
push 0x445ec8
call fcn.00403360
mov eax, dword [esp + 0x38]
add esp, 0xc
sub eax, 0xd
je 0x417939
sub eax, 4
je 0x41792f
dec eax
jne 0x417941
mov dword [esp + 0x2c], 0xa5
jmp 0x417941
mov dword [esp + 0x2c], 0xa3
jmp 0x417941
mov dword [esp + 0x2c], 0x1234
mov ebp, dword [esp + 0x2c]
xor eax, eax
jmp 0x417950
cmp dword [eax*8 + 0x43c1b8], ebp
je 0x417abf
inc eax
cmp eax, 0x4b
jb 0x417950
push str.not_in_special_keymap_
push 8
push 0x445ec8
call fcn.00403360
add esp, 0xc
lea ebx, [esi + 4]
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardState]
push 0
push esi
push ebx
push 0
push ebp
call dword [sym.imp.USER32.dll_ToAscii]
mov cl, byte [esi + 0x16]
mov ebx, eax
mov al, 0x80
test al, cl
je 0x417a70
test byte [esi + 0x15], al
je 0x417a70
cmp ebx, 1
jl 0x417a70
mov al, byte [esi]
cmp al, 0x20
jb 0x4179b9
cmp al, 0x7e
jbe 0x4179c9
cmp al, 0xa0
jb 0x417a70
cmp al, 0xff
ja 0x417a70
mov ebp, dword [sym.imp.USER32.dll_GetKeyState]
push 0xa2
call ebp
test ah, ah
jns 0x4179e2
mov dword [esp + 0x20], 1
push 0xa4
call ebp
test ah, ah
jns 0x4179f2
or dword [esp + 0x20], 4
push 0xa5
call ebp
test ah, ah
jns 0x417a02
or dword [esp + 0x20], 8
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x417a12
mov dword [esp + 0x20], 0xd
push ebx
push str.Ctrl_Alt_pressed:_ToAscii__without_modifiers__returns__d_byte_s_:
push 8
push 0x445ec8
call fcn.00403360
add esp, 0x10
xor ebp, ebp
test ebx, ebx
jle 0x417a54
lea ecx, [ecx]
movzx eax, byte [esi + ebp]
push eax
push eax
push str._02x___c_
push 8
mov dword [esp + edi*4 + 0x20], eax
push 0x445ec8
inc edi
call fcn.00403360
add esp, 0x14
inc ebp
cmp ebp, ebx
jl 0x417a30
push 0x43c454
push 8
push 0x445ec8
call fcn.00403360
add esp, 0xc
test edi, edi
jne 0x417bb5
mov ecx, dword [esp + 0x2c]
push 0
push esi
lea eax, [esi + 4]
push eax
push 0
push ecx
mov byte [esi + 0xa7], 0
mov byte [esi + 0xa6], 0
mov byte [esi + 0x15], 0
call dword [sym.imp.USER32.dll_ToAscii]
mov ebp, eax
test ebp, ebp
jge case.0x417ab8.40
movzx eax, byte [esi]
add eax, 0xffffffd9
cmp eax, 0x81
ja case.0x417ab8.40
movzx edx, byte [eax + 0x417c08]
jmp dword [edx*4 + 0x417bf0]
mov esi, dword [eax*8 + 0x43c1bc]
cmp esi, 0xffe9
mov dword [esp + 0x10], esi
mov edi, 1
je 0x417adf
cmp esi, 0xffea
jne 0x417b03
push 0x91
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x417b03
xor eax, eax
cmp esi, 0xffe9
setne al
add eax, 0xffe7
mov dword [esp + 0x10], eax
push esi
push esi
push str.keymap_gives__u___x_
push 8
push 0x445ec8
call fcn.00403360
add esp, 0x14
jmp 0x417bb5
mov dword [esp + 0x10], 0xfe50
jmp 0x417b6c
mov dword [esp + 0x10], 0xfe51
jmp 0x417b6c
mov dword [esp + 0x10], 0xfe53
jmp 0x417b6c
mov dword [esp + 0x10], 0xfe52
jmp 0x417b6c
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
test ah, ah
jns 0x417b64
push 0x12
call edi
test ah, ah
mov dword [esp + 0x10], 0xfe53
js 0x417b6c
mov dword [esp + 0x10], 0xfe57
mov edi, 1
cmp ebp, 1
jl 0x417bb5
push ebp
push str.ToAscii__without_ctrl__returns__d_byte_s_:
push 8
push 0x445ec8
call fcn.00403360
add esp, 0x10
xor ebx, ebx
test ebp, ebp
jle 0x417bb5
movzx eax, byte [ebx + esi]
push eax
push eax
push str._02x___c_
push 8
mov dword [esp + edi*4 + 0x20], eax
push 0x445ec8
inc edi
call fcn.00403360
add esp, 0x14
inc ebx
cmp ebx, ebp
jl 0x417b91
mov eax, dword [esp + 0x28]
mov dword [esp + edi*4 + 0x10], 0xffffff
mov edx, dword [esp + 0x10]
mov ecx, eax
mov dword [ecx], edx
mov edx, dword [esp + 0x14]
mov dword [ecx + 4], edx
mov edx, dword [esp + 0x18]
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x1c]
pop edi
pop esi
mov dword [ecx + 0xc], edx
mov edx, dword [esp + 0x18]
pop ebp
mov dword [ecx + 0x10], edx
pop ebx
add esp, 0x14
ret 0xc