Function at 0x4035ac
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa0
mov eax, 0x45d99c
push ebx
push esi
push edi
lea edi, [ebp - 0x58]
mov ebx, dword [ebp + 8]
call fcn.0045225c
push 0x3c
call fcn.00459cac
pop ecx
mov dword [ebp - 4], eax
test eax, eax
je 0x4035ef
mov word [edi + 0x10], 0x14
mov edx, dword [ebp - 4]
push edx
call fcn.0040b384
pop ecx
mov word [edi + 0x10], 8
mov esi, dword [ebp - 4]
jmp 0x4035f2
mov esi, dword [ebp - 4]
mov dword [ebx + 0x2c0], esi
mov eax, dword [ebp + 0xc]
push eax
push esi
call fcn.0040b758
add esp, 8
test al, al
jne 0x40362f
push 3
mov edx, dword [ebx + 0x2c0]
push edx
call fcn.0040b3c4
add esp, 8
xor ecx, ecx
mov dword [ebx + 0x2c0], ecx
mov eax, dword [edi]
mov dword fs:[0], eax
jmp 0x40396c
mov byte [ebx + 0x2fc], 1
mov edx, dword [ebx + 0x1c8]
mov eax, dword [edx + 0x130]
call fcn.00420dd4
push 0
mov word [edi + 0x10], 0x2c
mov edx, dword [ebx + 0x2c0]
mov ecx, dword [edx]
push ecx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, eax
lea eax, [ebp - 8]
call fcn.0042e7c4
inc dword [edi + 0x1c]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 0xc], edx
lea edx, [ebp - 0xc]
inc dword [edi + 0x1c]
call fcn.0044b9e0
lea eax, [ebp - 0xc]
mov ecx, dword [eax]
push ecx
mov esi, dword [ebx + 0x1c8]
mov eax, esi
call fcn.004218a8
mov edx, eax
mov eax, dword [esi + 0x130]
pop ecx
call fcn.00420bc0
mov esi, eax
dec dword [edi + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0042ea24
dec dword [edi + 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0042ea24
mov word [edi + 0x10], 0x20
mov edx, 1
mov eax, esi
call fcn.0041ffc8
mov edx, 3
mov eax, esi
call fcn.0041fffc
mov word [edi + 0x10], 0x38
xor eax, eax
lea edx, [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], esi
inc dword [edi + 0x1c]
mov eax, edx
push eax
lea ecx, [ebx + 0x2e0]
push ecx
lea eax, [ebp - 0x1c]
push eax
call fcn.00408d94
add esp, 0xc
inc dword [edi + 0x1c]
inc dword [edi + 0x1c]
dec dword [edi + 0x1c]
dec dword [edi + 0x1c]
push 0x10
call sub.USER32.dll_GetKeyState
test ah, 0x80
jne 0x403810
xor edx, edx
mov dword [ebp - 0x60], edx
mov word [edi + 0x10], 0x20
cmp dword [ebx + 0x324], 0
je 0x4037cf
mov eax, 0x463444
mov ecx, ebx
mov dl, 1
call fcn.004135ec
mov dword [ebp - 0x60], eax
mov word [edi + 0x10], 0x44
push 0x88
push 0x469e3c
call fcn.0041393c
add esp, 8
mov edx, eax
lea eax, [ebp - 0x20]
call fcn.0042e7c4
inc dword [edi + 0x1c]
lea ecx, [ebp - 0x20]
push ecx
mov eax, dword [ebp - 0x60]
push eax
call fcn.00413644
add esp, 8
dec dword [edi + 0x1c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0042ea24
mov word [edi + 0x10], 0x50
mov edx, 0x45ec19
lea eax, [ebp - 0x24]
call fcn.0042e7c4
inc dword [edi + 0x1c]
lea ecx, [ebp - 0x24]
push ecx
mov eax, dword [ebp - 0x60]
push eax
call fcn.004136a0
add esp, 8
dec dword [edi + 0x1c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0042ea24
mov eax, dword [ebp - 0x60]
call fcn.00435880
mov edx, dword [ebp - 0x60]
push edx
push esi
push ebx
call fcn.00403a0c
add esp, 0xc
cmp dword [ebp - 0x60], 0
je 0x403810
mov eax, dword [ebp - 0x60]
call fcn.004356c8
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0
je 0x403810
mov word [edi + 0x10], 0x68
mov edx, 3
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [edi + 0x10], 0x5c
mov esi, dword [ebx + 0x1c8]
mov eax, esi
call fcn.004218a8
mov edx, eax
mov eax, esi
call fcn.00421930
mov edx, dword [ebx + 0x1c8]
mov eax, dword [edx + 0x130]
call fcn.00420e20
mov byte [ebx + 0x2fc], 0
push 0
push ebx
call fcn.00403c9c
add esp, 8
push ebx
call fcn.00403974
pop ecx
mov word [edi + 0x10], 0x74
mov edx, dword [ebx + 0x2c0]
mov ecx, dword [edx]
push ecx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, eax
lea eax, [ebp - 0x2c]
call fcn.0042e7c4
inc dword [edi + 0x1c]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 0x30], edx
lea edx, [ebp - 0x30]
inc dword [edi + 0x1c]
call fcn.0044b9e0
cmp dword [ebp - 0x30], 0
je 0x40388e
mov eax, dword [ebp - 0x30]
jmp 0x403893
mov eax, 0x45ec1b
push eax
push 0x89
push 0x469e3c
call fcn.0041393c
add esp, 0xc
mov edx, eax
lea eax, [ebp - 0x34]
call fcn.0042e7c4
inc dword [edi + 0x1c]
mov edx, dword [eax]
mov eax, ebx
call fcn.00427fd0
dec dword [edi + 0x1c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0042ea24
dec dword [edi + 0x1c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0042ea24
dec dword [edi + 0x1c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0042ea24
mov dl, 1
mov eax, dword [ebx + 0x280]
call fcn.0043f0e8
mov dl, 1
mov eax, dword [ebx + 0x284]
call fcn.0043f0e8
mov dl, 1
mov eax, dword [ebx + 0x1f4]
call fcn.0043f0e8
mov dl, 1
mov eax, dword [ebx + 0x1f8]
call fcn.0043f0e8
mov dl, 1
mov eax, dword [ebx + 0x21c]
call fcn.0043f0e8
mov dl, 1
mov eax, dword [ebx + 0x228]
call fcn.0043f0e8
mov dl, 1
mov eax, dword [ebx + 0x22c]
call fcn.0043f0e8
mov dl, 1
mov eax, dword [ebx + 0x2b0]
call fcn.0043f0e8
push 1
mov eax, ebx
call fcn.0042b898
push eax
call sub.SHELL32.dll_DragAcceptFiles
mov edx, dword [edi]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret