Function at 0x4335f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov eax, dword [0x49a080]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0xc]
push 0
push 4
push eax
mov eax, dword [0x4b6150]
add eax, 0xc33034
push eax
push dword [0x4b60a4]
call edi
push 0
push 4
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x14
push eax
push dword [0x4b60a4]
call edi
push 0
push 4
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
add eax, 0x3c
push eax
push dword [0x4b60a4]
call edi
push 0
push 4
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0xc]
push dword [0x4b60a4]
call edi
mov esi, dword [ebp - 0x6c]
lea eax, [ebp - 0x20]
push 0
push 8
push eax
lea ebx, [esi + 0x1a8]
push ebx
push dword [0x4b60a4]
call edi
push 0
push 8
lea ecx, [ebp - 0x18]
lea eax, [esi + 0x1b0]
push ecx
push eax
push dword [0x4b60a4]
mov dword [ebp - 0xc], eax
call edi
push 0
push 8
lea ecx, [ebp - 0x20]
lea eax, [esi + 0x1b8]
push ecx
push eax
push dword [0x4b60a4]
mov dword [ebp - 8], eax
call edi
push 0x46
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x433bff
mov eax, dword [0x4b6128]
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp eax, 1
jne 0x43373a
movsd xmm0, qword [0x48c378]
lea eax, [ebp - 0x78]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x78], xmm0
call esi
mov edi, dword [ebp - 0xc]
lea eax, [ebp - 0x28]
movsd xmm0, qword [0x48c2b0]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x28], xmm0
call esi
movsd xmm0, qword [0x48c3b0]
lea eax, [ebp - 0x78]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x78], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
jmp 0x43373d
mov edi, dword [ebp - 0xc]
cmp eax, 2
jne 0x4337a3
movsd xmm0, qword [0x48c370]
lea eax, [ebp - 0x28]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x28], xmm0
call esi
movsd xmm0, qword [0x48c298]
lea eax, [ebp - 0x10]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x10], xmm0
call esi
movsd xmm0, qword [0x48c318]
lea eax, [ebp - 0x28]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x28], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 3
jne 0x433809
movsd xmm0, qword [0x48c300]
lea eax, [ebp - 0x10]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x10], xmm0
call esi
movsd xmm0, qword [0x48c2a8]
lea eax, [ebp - 0x30]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x30], xmm0
call esi
movsd xmm0, qword [0x48c360]
lea eax, [ebp - 0x10]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x10], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 4
jne 0x43386f
movsd xmm0, qword [0x48c3b8]
lea eax, [ebp - 0x30]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x30], xmm0
call esi
movsd xmm0, qword [0x48c280]
lea eax, [ebp - 0x38]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x38], xmm0
call esi
movsd xmm0, qword [0x48c350]
lea eax, [ebp - 0x30]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x30], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 5
jne 0x4338d5
movsd xmm0, qword [0x48c3a0]
lea eax, [ebp - 0x38]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x38], xmm0
call esi
movsd xmm0, qword [0x48c278]
lea eax, [ebp - 0x40]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x40], xmm0
call esi
movsd xmm0, qword [0x48c358]
lea eax, [ebp - 0x38]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x38], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 6
jne 0x43393b
movsd xmm0, qword [0x48c398]
lea eax, [ebp - 0x40]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x40], xmm0
call esi
movsd xmm0, qword [0x48c288]
lea eax, [ebp - 0x48]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x48], xmm0
call esi
movsd xmm0, qword [0x48c3c0]
lea eax, [ebp - 0x40]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x40], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 7
jne 0x4339a1
movsd xmm0, qword [0x48c320]
lea eax, [ebp - 0x48]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x48], xmm0
call esi
movsd xmm0, qword [0x48c2a0]
lea eax, [ebp - 0x50]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x50], xmm0
call esi
movsd xmm0, qword [0x48c330]
lea eax, [ebp - 0x48]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x48], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 8
jne 0x433a06
movsd xmm0, qword [0x48c340]
push 0
push eax
lea eax, [ebp - 0x50]
movsd qword [ebp - 0x50], xmm0
push eax
push ebx
push dword [0x4b60a4]
call esi
movsd xmm0, qword [0x48c2b8]
lea eax, [ebp - 0x58]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x58], xmm0
call esi
movsd xmm0, qword [0x48c388]
lea eax, [ebp - 0x50]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x50], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 9
jne 0x433a6c
movsd xmm0, qword [0x48c310]
lea eax, [ebp - 0x58]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x58], xmm0
call esi
movsd xmm0, qword [0x48c2c8]
lea eax, [ebp - 0x60]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x60], xmm0
call esi
movsd xmm0, qword [0x48c2e8]
lea eax, [ebp - 0x58]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x58], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 0xa
jne 0x433ad2
movsd xmm0, qword [0x48c308]
lea eax, [ebp - 0x60]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x60], xmm0
call esi
movsd xmm0, qword [0x48c2c0]
lea eax, [ebp - 0x68]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x68], xmm0
call esi
movsd xmm0, qword [0x48c2f0]
lea eax, [ebp - 0x60]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x60], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 0xb
jne 0x433b38
movsd xmm0, qword [0x48c338]
lea eax, [ebp - 0x68]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x68], xmm0
call esi
movsd xmm0, qword [0x48c258]
lea eax, [ebp - 0x18]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x18], xmm0
call esi
movsd xmm0, qword [0x48c348]
lea eax, [ebp - 0x68]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x68], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 0xc
jne 0x433b9e
movsd xmm0, qword [0x48c390]
lea eax, [ebp - 0x18]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x18], xmm0
call esi
movsd xmm0, qword [0x48c260]
lea eax, [ebp - 0x20]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x20], xmm0
call esi
movsd xmm0, qword [0x48c380]
lea eax, [ebp - 0x18]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x18], xmm0
push dword [0x4b60a4]
call esi
mov eax, dword [0x4b6128]
cmp eax, 0xd
jne 0x433bff
movsd xmm0, qword [0x48c368]
lea eax, [ebp - 0x20]
push 0
push 8
push eax
push ebx
push dword [0x4b60a4]
movsd qword [ebp - 0x20], xmm0
call esi
movsd xmm0, qword [0x48c270]
lea eax, [ebp - 0x18]
push 0
push 8
push eax
push edi
push dword [0x4b60a4]
movsd qword [ebp - 0x18], xmm0
call esi
movsd xmm0, qword [0x48c328]
lea eax, [ebp - 0x20]
push 0
push 8
push eax
push dword [ebp - 8]
movsd qword [ebp - 0x20], xmm0
push dword [0x4b60a4]
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00478b79
mov esp, ebp
pop ebp
ret