Function at 0x401bf0
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, dword [0x41cfc8]
test eax, eax
je 0x401fb0
mov eax, dword [0x41a2f0]
test eax, eax
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push edi
mov edi, 1
mov ebp, 2
je 0x401dcd
mov eax, dword [0x41c61c]
push eax
mov dword [0x41906c], edi
call esi
test ax, ax
jne 0x401c41
cmp dword [0x41c0d0], edi
jne 0x401c70
mov eax, dword [0x41c0d4]
test eax, eax
je 0x401c70
mov eax, dword [0x41c650]
fld dword [0x41a2e4]
test eax, eax
je 0x401c56
fmul dword [0x417284]
fmul dword [esp + 0x10]
mov dword [0x41906c], edi
fld dword [0x41a2dc]
fsub st(1)
fstp dword [0x41a2dc]
fstp st(0)
mov ecx, dword [0x41c620]
push ecx
call esi
test ax, ax
jne 0x401c8f
cmp dword [0x41c0d0], edi
jne 0x401cba
mov eax, dword [0x41c0d8]
test eax, eax
je 0x401cba
mov eax, dword [0x41c650]
fld dword [0x41a2e4]
test eax, eax
je 0x401ca4
fmul dword [0x417284]
fmul dword [esp + 0x10]
mov dword [0x41906c], edi
fadd dword [0x41a2dc]
fstp dword [0x41a2dc]
mov edx, dword [0x41c624]
push edx
call esi
test ax, ax
jne 0x401cd9
cmp dword [0x41c0d0], edi
jne 0x401d0c
mov eax, dword [0x41c0dc]
test eax, eax
je 0x401d0c
mov eax, dword [0x41c650]
fld dword [0x41a2e0]
test eax, eax
je 0x401cee
fmul dword [0x417284]
fmul dword [esp + 0x10]
mov dword [0x41906c], 0
fld dword [0x41a2d8]
fsub st(1)
fstp dword [0x41a2d8]
fstp st(0)
mov eax, dword [0x41c628]
push eax
call esi
test ax, ax
jne 0x401d2a
cmp dword [0x41c0d0], edi
jne 0x401d55
mov eax, dword [0x41c0e0]
test eax, eax
je 0x401d55
mov eax, dword [0x41c650]
fld dword [0x41a2e0]
test eax, eax
je 0x401d3f
fmul dword [0x417284]
fmul dword [esp + 0x10]
mov dword [0x41906c], ebp
fadd dword [0x41a2d8]
fstp dword [0x41a2d8]
fld dword [0x41a2d8]
fcomp dword [0x417280]
fnstsw ax
test ah, 5
jp 0x401d74
mov dword [0x41a2d8], 0
jmp 0x401d91
fld dword [0x41a2d8]
fcomp dword [0x41727c]
fnstsw ax
test ah, 0x41
jne 0x401d91
mov dword [0x41a2d8], 0x44160000
fld dword [0x41a2dc]
fcomp dword [0x417280]
fnstsw ax
test ah, 5
jp 0x401db0
mov dword [0x41a2dc], 0
jmp 0x401dcd
fld dword [0x41a2dc]
fcomp dword [0x417278]
fnstsw ax
test ah, 0x41
jne 0x401dcd
mov dword [0x41a2dc], 0x43dc0000
mov eax, dword [0x41a328]
test eax, eax
je 0x401fad
mov ecx, dword [0x41c638]
push ecx
mov dword [0x419070], edi
call esi
test ax, ax
jne 0x401dff
cmp dword [0x41c0d0], ebp
jne 0x401e36
mov eax, dword [0x41c0d4]
test eax, eax
je 0x401e36
mov eax, dword [0x41c654]
fld dword [0x41a31c]
test eax, eax
je 0x401e16
fmul dword [0x417284]
jmp 0x401e1c
fmul dword [0x417274]
fmul dword [esp + 0x10]
fld dword [0x41a314]
mov dword [0x419070], edi
fsub st(1)
fstp dword [0x41a314]
fstp st(0)
mov edx, dword [0x41c63c]
push edx
call esi
test ax, ax
jne 0x401e55
cmp dword [0x41c0d0], ebp
jne 0x401e88
mov eax, dword [0x41c0d8]
test eax, eax
je 0x401e88
mov eax, dword [0x41c654]
fld dword [0x41a31c]
test eax, eax
je 0x401e6c
fmul dword [0x417284]
jmp 0x401e72
fmul dword [0x417274]
fmul dword [esp + 0x10]
mov dword [0x419070], edi
fadd dword [0x41a314]
fstp dword [0x41a314]
mov eax, dword [0x41c640]
push eax
call esi
test ax, ax
jne 0x401ea6
cmp dword [0x41c0d0], ebp
jne 0x401ee1
mov eax, dword [0x41c0dc]
test eax, eax
je 0x401ee1
mov eax, dword [0x41c654]
fld dword [0x41a318]
test eax, eax
je 0x401ebd
fmul dword [0x417284]
jmp 0x401ec3
fmul dword [0x417274]
fmul dword [esp + 0x10]
fld dword [0x41a310]
mov dword [0x419070], 0
fsub st(1)
fstp dword [0x41a310]
fstp st(0)
mov ecx, dword [0x41c644]
push ecx
call esi
test ax, ax
jne 0x401f00
cmp dword [0x41c0d0], ebp
jne 0x401f33
mov eax, dword [0x41c0e0]
test eax, eax
je 0x401f33
mov eax, dword [0x41c654]
fld dword [0x41a318]
test eax, eax
je 0x401f17
fmul dword [0x417284]
jmp 0x401f1d
fmul dword [0x417274]
fmul dword [esp + 0x10]
mov dword [0x419070], ebp
fadd dword [0x41a310]
fstp dword [0x41a310]
fld dword [0x41a310]
fcomp dword [0x417280]
fnstsw ax
test ah, 5
jp 0x401f52
mov dword [0x41a310], 0
jmp 0x401f6f
fld dword [0x41a310]
fcomp dword [0x41727c]
fnstsw ax
test ah, 0x41
jne 0x401f6f
mov dword [0x41a310], 0x44160000
fld dword [0x41a314]
fcomp dword [0x417280]
fnstsw ax
test ah, 5
jp 0x401f90
pop edi
pop esi
mov dword [0x41a314], 0
pop ebp
ret
fld dword [0x41a314]
fcomp dword [0x417278]
fnstsw ax
test ah, 0x41
jne 0x401fad
mov dword [0x41a314], 0x43dc0000
pop edi
pop esi
pop ebp
ret