Function at 0x434b90
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov dword [ebp - 0x4c], ecx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xbbd
mov ecx, dword [0x6de314]
call fcn.005389f0
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x2a1
ja 0x434bec
cmp dword [ebp - 0x50], 0x2a1
je case.0x434be5.0
mov ecx, dword [ebp - 0x50]
sub ecx, 0x200
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 5
ja case.0x434be5.3
mov edx, dword [ebp - 0x50]
jmp dword [edx*4 + 0x434fcc]
cmp dword [ebp - 0x50], 0x507
je 0x434f79
jmp case.0x434be5.3
cmp dword [ebp - 4], 0
jne 0x434c9e
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 4]
and ecx, 0x800
jne 0x434c9e
push 0
call fcn.0043af70
add esp, 4
test eax, eax
je 0x434c4b
push 0
mov edx, dword [ebp + 0x10]
shr edx, 0x10
movsx eax, dx
push eax
mov ecx, dword [ebp + 0x10]
and ecx, 0xffff
movsx edx, cx
push edx
mov ecx, dword [ebp - 0x4c]
call fcn.00435140
jmp 0x434c9c
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
je 0x434c7d
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
movsx edx, cx
push edx
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
push ecx
mov ecx, dword [ebp - 0x4c]
call fcn.00434ae0
jmp 0x434c9c
mov edx, dword [ebp + 0x10]
shr edx, 0x10
movsx eax, dx
push eax
mov ecx, dword [ebp + 0x10]
and ecx, 0xffff
movsx edx, cx
push edx
mov ecx, dword [ebp - 0x4c]
call fcn.004350b0
jmp 0x434cf6
cmp dword [ebp - 4], 0
je 0x434cf6
push 0
call fcn.0043af70
add esp, 4
test eax, eax
jne 0x434cf6
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
je 0x434cf6
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
je 0x434cf6
mov edx, dword [ebp + 0x10]
shr edx, 0x10
movsx eax, dx
push eax
mov ecx, dword [ebp + 0x10]
and ecx, 0xffff
movsx edx, cx
push edx
mov ecx, dword [ebp - 0x4c]
call fcn.00434ae0
jmp 0x434fc3
cmp dword [ebp - 4], 0
jne 0x434d13
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 4]
and ecx, 0x800
je 0x434dcb
mov edx, dword [ebp - 0x4c]
cmp dword [edx + 0x60], 0
je 0x434dcb
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x138], 0xfff46287
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
movsx edx, cx
push edx
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
push ecx
mov ecx, dword [ebp - 0x4c]
call fcn.00434ff0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x434dcb
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x8000
jne 0x434dcb
push 0x18
push 0
lea eax, [ebp - 0x20]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0x130]
add eax, ecx
mov ecx, dword [eax]
mov dword [ebp - 0x20], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x1c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x14], edx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x20]
push ecx
push 0x512
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0x60]
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ecx + 0x60]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
call eax
jmp 0x434fc3
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0x138], 0xfff46287
mov edx, dword [ebp - 0x4c]
cmp dword [edx + 0x60], 0
je 0x434e78
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movsx ecx, ax
push ecx
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movsx eax, dx
push eax
mov ecx, dword [ebp - 0x4c]
call fcn.00434ff0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x434e78
push 0x18
push 0
lea ecx, [ebp - 0x3c]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x24]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x130]
add ecx, edx
mov edx, dword [ecx]
mov dword [ebp - 0x3c], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x38], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0x34], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x30], eax
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x2c], edx
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 0x513
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x60]
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0x60]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
jmp 0x434fc3
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 4]
or edx, 0x400
mov eax, dword [ebp - 0x4c]
mov dword [eax + 4], edx
mov ecx, dword [ebp + 0x10]
and ecx, 0xffff
movsx edx, cx
mov dword [ebp - 0x44], edx
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movsx ecx, ax
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x4c]
call fcn.00434ff0
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
mov dword [ecx + 0x134], edx
cmp dword [ebp - 0x48], 0
jl 0x434f30
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov ecx, 0x68e0e8
call fcn.00422dc0
test eax, eax
jne 0x434f2e
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0x148]
push edx
mov eax, dword [ebp - 0x48]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0x130]
mov eax, dword [edx + eax + 4]
push eax
mov ecx, dword [ebp - 0x48]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0x130]
mov ecx, dword [eax + ecx]
push ecx
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp - 0x4c]
push eax
call fcn.00422850
add esp, 0x1c
jmp 0x434f3a
mov ecx, 0x68e0e8
call fcn.00422e00
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 4]
and edx, 0x1000
je 0x434f77
push 0
call fcn.0043af70
add esp, 4
test eax, eax
je 0x434f77
push 1
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movsx ecx, ax
push ecx
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movsx eax, dx
push eax
mov ecx, dword [ebp - 0x4c]
call fcn.00435140
jmp 0x434fc3
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0x138], 0xfff46287
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 4]
and eax, 0xfffffbff
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 4], eax
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x4c]
call fcn.004428d0
jmp 0x434fc3
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x4c]
call fcn.004428d0
jmp 0x434fc5
xor eax, eax
mov esp, ebp
pop ebp
ret 0xc