Function at 0x4442f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d9645
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x50b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov edi, dword [ebp + 8]
lea eax, [esi + 0x1e0]
mov dword [ebp - 0x14], eax
cmp dword [eax], edi
jne 0x444336
cmp byte [ebp + 0xc], 0
je 0x4445fa
xor al, al
mov byte [ebp + 0xf], al
cmp byte [esi + 0x220], al
je 0x444359
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0xff00
test cx, ax
setne al
mov byte [ebp + 0xf], al
mov ecx, dword [esi + 0x1e0]
test ecx, ecx
je 0x444370
test al, al
jne 0x444370
push 0
push 0
call fcn.00446730
cmp byte [esi + 0x220], 0
je 0x444445
test edi, edi
je 0x444445
add esi, 0x1e4
cmp byte [ebp + 0xf], 0
je 0x4444a8
mov eax, dword [esi]
xor dh, dh
xor dl, dl
mov byte [ebp + 0xf], dh
cmp eax, dword [esi + 4]
je 0x4443ce
mov ecx, dword [eax]
cmp ecx, edi
jne 0x4443af
mov dh, 1
test dl, dl
jne 0x4443cb
mov edi, dword [ebp - 0x10]
cmp ecx, dword [edi + 0x1e0]
mov edi, dword [ebp + 8]
jne 0x4443c3
mov dl, 1
test dh, dh
jne 0x4443cb
add eax, 4
cmp eax, dword [esi + 4]
jne 0x4443a3
mov byte [ebp + 0xf], dh
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
test ecx, ecx
je 0x4443fa
test dl, dl
jne 0x4443fa
mov edx, dword [esi + 4]
cmp edx, dword [esi + 8]
je 0x4443f1
mov dword [edx], ecx
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
add dword [esi + 4], 4
jmp 0x4443fa
push eax
push edx
mov ecx, esi
call fcn.00448e40
cmp byte [ebp + 0xf], 0
jne 0x444442
mov eax, dword [edi]
push edi
mov dword [ebp + 8], edi
call dword [eax + 4]
mov dword [ebp - 4], 0
mov ecx, dword [esi + 4]
cmp ecx, dword [esi + 8]
je 0x444422
xor eax, eax
mov dword [ecx], edi
add dword [esi + 4], 4
jmp 0x444431
lea eax, [ebp + 8]
push eax
push ecx
mov ecx, esi
call fcn.00448d10
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x444442
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
cmp dword [ecx], edi
je 0x444467
test edi, edi
je 0x444459
mov eax, dword [edi]
push edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov dword [ecx], edi
test eax, eax
je 0x444467
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test edi, edi
je 0x4445e9
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x90]
call eax
xor ecx, ecx
mov dword [ebp + 0xc], ecx
test eax, eax
je 0x4445b5
mov ecx, dword [eax]
lea edx, [ebp + 0xc]
push edx
push 0x4f10c8
push eax
call dword [ecx]
test eax, eax
jns 0x4445b2
xor ecx, ecx
mov dword [ebp + 0xc], ecx
jmp 0x4445b5
mov eax, dword [esi + 4]
mov esi, dword [esi]
mov dword [ebp + 0xc], eax
sub eax, esi
sar eax, 2
mov dword [ebp + 8], esi
test eax, eax
je 0x444442
mov edx, dword [ebp + 0xc]
cmp esi, edx
je 0x44456e
nop word [eax + eax]
mov esi, dword [esi]
cmp esi, edi
je 0x44455d
mov ecx, dword [esi + 0x25c]
test ecx, ecx
je 0x444500
cmp byte [ecx + 0x220], 0
je 0x444500
mov ecx, esi
mov dword [esi + 0x258], 0
call fcn.0040b710
jmp 0x44455a
mov eax, dword [esi + 0x258]
test eax, eax
je 0x44455d
mov dword [esi + 0x258], 0
cmp eax, 3
jne 0x444526
test ecx, ecx
je 0x444526
push 0
push 0
call fcn.004442f0
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0xd0]
call eax
test eax, eax
je 0x44455a
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x98]
call eax
test eax, eax
je 0x44455a
mov ecx, dword [esi + 0x44]
sub esp, 0x10
movups xmm0, xmmword [esi + 0x58]
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x30]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
add esi, 4
mov dword [ebp + 8], esi
cmp esi, edx
jne 0x4444d0
mov eax, dword [ebp - 0x10]
mov esi, dword [eax + 0x1e4]
mov eax, dword [eax + 0x1e8]
mov dword [ebp + 0xc], eax
cmp esi, eax
je 0x444442
mov ecx, dword [esi]
test ecx, ecx
je 0x444597
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp + 0xc]
add esi, 4
cmp esi, eax
jne 0x444588
mov esi, dword [ebp - 0x10]
mov eax, dword [esi + 0x1e4]
mov dword [esi + 0x1e8], eax
jmp 0x444445
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 4], 1
test ecx, ecx
je 0x4445ca
mov eax, dword [ecx]
push 1
call dword [eax + 0x158]
push 0
push 3
mov ecx, edi
call fcn.00446730
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4445e9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x14]
mov eax, dword [esi]
push dword [ecx]
mov ecx, esi
push 0x44f
call dword [eax + 0x28]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8