Function at 0x4377f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4e6e00]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ebx, ecx
push 0x11
call edi
mov esi, dword [ebp + 8]
mov ecx, 0x8000
test cx, ax
je 0x437866
mov eax, esi
sub eax, 0x21
je 0x437851
dec eax
je 0x437840
sub eax, 4
je 0x437837
dec eax
dec eax
jne 0x437866
mov eax, dword [ebx + 0x2ec]
jmp 0x43785d
mov eax, dword [ebx + 0x2ec]
dec eax
jmp 0x43785e
mov ecx, dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
dec ecx
add eax, ecx
jmp 0x43785e
mov eax, dword [ebx + 0x2ec]
sub eax, dword [ebx + 0x2e4]
inc eax
push eax
mov ecx, ebx
call fcn.0044ce93
push 0x10
call edi
mov ecx, 0x8000
add esi, 0xffffffdf
test cx, ax
je 0x4379c0
cmp esi, 7
ja case.default.0x4379c9
jmp dword [esi*4 + 0x437a88]
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2fc]
inc eax
jmp 0x437a4c
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2fc]
dec eax
jmp 0x437a4c
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
dec eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2fc]
jmp 0x437a4c
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
inc eax
jmp 0x4378f2
mov eax, dword [ebx + 0x2f0]
mov ecx, dword [ebx + 0x2fc]
mov dword [ebp - 0x14], eax
dec ecx
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2e4]
add eax, ecx
jmp 0x437a4c
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2fc]
sub eax, dword [ebx + 0x2e4]
jmp 0x4378ac
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
and dword [ebp - 8], 0
mov dword [ebp - 0xc], eax
jmp 0x437a4f
mov eax, dword [ebx + 0x2f0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2f4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2f8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x2dc]
jmp 0x4378d3
cmp esi, 7
ja case.default.0x4379c9
jmp dword [esi*4 + 0x437aa8]
mov eax, dword [ebx + 0x30c]
inc eax
jmp 0x437a3d
mov eax, dword [ebx + 0x30c]
dec eax
jmp 0x437a3d
mov ecx, dword [ebx + 0x308]
dec ecx
mov eax, dword [ebx + 0x30c]
jmp 0x437a43
mov ecx, dword [ebx + 0x308]
inc ecx
jmp 0x4379e9
mov eax, dword [ebx + 0x30c]
sub eax, dword [ebx + 0x2e4]
jmp 0x4379d6
mov ecx, dword [ebx + 0x30c]
mov edx, dword [ebx + 0x308]
dec ecx
mov eax, dword [ebx + 0x2e4]
mov dword [ebp - 0x14], edx
add eax, ecx
mov dword [ebp - 0xc], edx
jmp 0x437a49
mov eax, dword [ebx + 0x308]
and dword [ebp - 0x10], 0
mov dword [ebp - 0x14], eax
jmp 0x43798e
mov eax, dword [ebx + 0x2dc]
mov ecx, dword [ebx + 0x308]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], eax
sub esp, 0x10
lea esi, [ebp - 0x14]
mov edi, esp
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004458c7
push dword [ebx + 0x30c]
mov ecx, ebx
push dword [ebx + 0x308]
call fcn.004239f7
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00495535
mov esp, ebp
pop ebp
ret 0xc