Function at 0x437518
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4e6e00]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ebx, ecx
push 0x11
call edi
mov esi, dword [ebp + 8]
mov ecx, 0x8000
test cx, ax
je 0x43758e
mov eax, esi
sub eax, 0x21
je 0x437579
dec eax
je 0x437568
sub eax, 4
je 0x43755f
dec eax
dec eax
jne 0x43758e
mov eax, dword [ebx + 0x2ec]
jmp 0x437585
mov eax, dword [ebx + 0x2ec]
dec eax
jmp 0x437586
mov ecx, dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
dec ecx
add eax, ecx
jmp 0x437586
mov eax, dword [ebx + 0x2ec]
sub eax, dword [ebx + 0x2e4]
inc eax
push eax
mov ecx, ebx
call fcn.0044cb49
push 0x10
call edi
mov ecx, 0x8000
add esi, 0xffffffdf
test cx, ax
je 0x4376e8
cmp esi, 7
ja case.default.0x4376f1
jmp dword [esi*4 + 0x4377b0]
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2fc]
inc eax
jmp 0x437774
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2fc]
dec eax
jmp 0x437774
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
dec eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2fc]
jmp 0x437774
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
inc eax
jmp 0x43761a
mov eax, dword [ebx + 0x2f0]
mov ecx, dword [ebx + 0x2fc]
mov dword [ebp - 0x14], eax
dec ecx
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2e4]
add eax, ecx
jmp 0x437774
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2fc]
sub eax, dword [ebx + 0x2e4]
jmp 0x4375d4
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
and dword [ebp - 8], 0
mov dword [ebp - 0xc], eax
jmp 0x437777
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2dc]
jmp 0x4375fb
cmp esi, 7
ja case.default.0x4376f1
jmp dword [esi*4 + 0x4377d0]
mov eax, dword [ebx + 0x30c]
inc eax
jmp 0x437765
mov eax, dword [ebx + 0x30c]
dec eax
jmp 0x437765
mov ecx, dword [ebx + 0x308]
dec ecx
mov eax, dword [ebx + 0x30c]
jmp 0x43776b
mov ecx, dword [ebx + 0x308]
inc ecx
jmp 0x437711
mov eax, dword [ebx + 0x30c]
sub eax, dword [ebx + 0x2e4]
jmp 0x4376fe
mov ecx, dword [ebx + 0x30c]
mov edx, dword [ebx + 0x308]
dec ecx
mov eax, dword [ebx + 0x2e4]
mov dword [ebp - 0x14], edx
add eax, ecx
mov dword [ebp - 0xc], edx
jmp 0x437771
mov eax, dword [ebx + 0x308]
and dword [ebp - 0x10], 0
mov dword [ebp - 0x14], eax
jmp 0x4376b6
mov eax, dword [ebx + 0x2dc]
mov ecx, dword [ebx + 0x308]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], eax
sub esp, 0x10
lea esi, [ebp - 0x14]
mov edi, esp
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004458c7
push dword [ebx + 0x30c]
mov ecx, ebx
push dword [ebx + 0x308]
call fcn.0042398f
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00495535
mov esp, ebp
pop ebp
ret 0xc