Function at 0x41c537
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x60]
add eax, 0x168
push eax
mov ecx, dword [ebp - 0x60]
call fcn.0041dbc5
test eax, eax
jne 0x41c56e
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x60]
call fcn.0043a0a0
jmp 0x41cb97
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0x168]
mov eax, dword [ecx + 0x16c]
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
test ecx, ecx
je case.0x41c5bf.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x64]
sub eax, 0x41
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x17
ja case.0x41c5bf.4
mov edx, dword [ebp - 0x64]
xor ecx, ecx
mov cl, byte [edx + 0x41cbb1]
jmp dword [ecx*4 + 0x41cb9d]
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x60]
call dword [edx + 0xdc]
jmp case.0x41c5bf.4
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x60]
call dword [edx + 0xd0]
jmp case.0x41c5bf.4
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x60]
call dword [edx + 0xd4]
jmp case.0x41c5bf.4
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x60]
call dword [edx + 0xd8]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x68]
sub ecx, 9
mov dword [ebp - 0x68], ecx
cmp dword [ebp - 0x68], 0x25
ja case.0x41c628.10
mov eax, dword [ebp - 0x68]
xor edx, edx
mov dl, byte [eax + 0x41cbf5]
jmp dword [edx*4 + 0x41cbc9]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0x16c]
push edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0x168]
push ecx
mov ecx, dword [ebp - 0x60]
call fcn.004242b1
test eax, eax
je 0x41c6e8
push 0xffffffffffffff97
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0x16c]
push eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0x168]
push edx
mov ecx, dword [ebp - 0x60]
call fcn.0041bc0c
push 0x48f650
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0x16c]
push ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0x168]
push eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
call dword [edx + 0xbc]
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0x16c]
push ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0x168]
push eax
push 1
mov ecx, dword [ebp - 0x60]
call fcn.00424001
push 0xffffffffffffff96
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0x16c]
push edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0x168]
push ecx
mov ecx, dword [ebp - 0x60]
call fcn.0041bc0c
push 0
mov edx, dword [ebp - 0x60]
add edx, 0x168
push edx
mov ecx, dword [ebp - 0x60]
call fcn.0041dd15
jmp 0x41c9b1
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
test eax, eax
je 0x41c76c
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 4]
cmp edx, dword [ecx + 0xa0]
jle 0x41c71a
mov eax, dword [ebp - 4]
sub eax, 1
mov dword [ebp - 4], eax
jmp 0x41c76a
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 4]
cmp edx, dword [ecx + 0xa0]
jne 0x41c756
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 8]
cmp ecx, dword [eax + 0x98]
jle 0x41c756
mov edx, dword [ebp - 8]
sub edx, 1
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 0x60]
call fcn.0040de40
sub eax, 1
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 1
jmp 0x41c76a
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x60]
call fcn.0043a0a0
jmp 0x41c7d9
mov ecx, dword [ebp - 0x60]
call fcn.0040de40
sub eax, 1
cmp dword [ebp - 4], eax
jge 0x41c787
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x41c7d9
mov ecx, dword [ebp - 0x60]
call fcn.0040de40
sub eax, 1
cmp dword [ebp - 4], eax
jne 0x41c7c5
mov ecx, dword [ebp - 0x60]
call fcn.0040de20
sub eax, 1
cmp dword [ebp - 8], eax
jge 0x41c7c5
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xa0]
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 1
jmp 0x41c7d9
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x60]
call fcn.0043a0a0
jmp 0x41c9b1
mov ecx, dword [ebp - 0x60]
call fcn.0040de20
sub eax, 1
cmp dword [ebp - 8], eax
jge 0x41c7f7
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x41c9b1
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 8]
cmp eax, dword [edx + 0x98]
jle 0x41c813
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
jmp 0x41c9b1
mov ecx, dword [ebp - 0x60]
call fcn.0040de40
sub eax, 1
cmp dword [ebp - 4], eax
jge 0x41c831
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x41c9b1
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 4]
cmp ecx, dword [eax + 0xa0]
jle 0x41c84d
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
jmp 0x41c9b1
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0x60]
call fcn.0041fd3a
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push 0
push 3
push 0x115
mov ecx, dword [ebp - 0x60]
call fcn.00401690
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x60]
call fcn.0041fd3a
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x41c8c9
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x60]
call fcn.0040de20
sub eax, 1
cmp dword [ebp - 8], eax
jle 0x41c8c7
mov ecx, dword [ebp - 0x60]
call fcn.0040de20
sub eax, 1
mov dword [ebp - 8], eax
jmp 0x41c8d7
mov ecx, dword [ebp - 0x60]
call fcn.0040de20
sub eax, 1
mov dword [ebp - 8], eax
jmp 0x41c9b1
lea edx, [ebp - 0x4c]
push edx
mov ecx, dword [ebp - 0x60]
call fcn.0041fd3a
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], edx
push 0
push 2
push 0x115
mov ecx, dword [ebp - 0x60]
call fcn.00401690
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x60]
call fcn.0041fd3a
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x41c94f
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 8]
cmp eax, dword [edx + 0x98]
jge 0x41c94d
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0x98]
mov dword [ebp - 8], edx
jmp 0x41c95b
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0x98]
mov dword [ebp - 8], ecx
jmp 0x41c9b1
push 0
push 6
push 0x115
mov ecx, dword [ebp - 0x60]
call fcn.00401690
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0x98]
mov dword [ebp - 8], eax
jmp 0x41c9b1
push 0
push 7
push 0x115
mov ecx, dword [ebp - 0x60]
call fcn.00401690
mov ecx, dword [ebp - 0x60]
call fcn.0040de20
sub eax, 1
mov dword [ebp - 8], eax
jmp 0x41c9b1
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x60]
call fcn.0043a0a0
mov ecx, dword [ebp - 0x60]
add ecx, 0x168
push ecx
lea ecx, [ebp - 8]
call fcn.00428890
test eax, eax
je 0x41cb97
mov edx, dword [ebp - 0x60]
cmp dword [edx + 0x144], 0
jne 0x41ca43
mov ecx, dword [ebp - 0x60]
add ecx, 0x1a4
call fcn.00429890
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0x74]
neg ecx
sbb ecx, ecx
add ecx, 4
mov edx, dword [ebp - 0x60]
mov dword [edx + 0x144], ecx
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
test eax, eax
je 0x41ca15
cmp dword [ebp + 8], 9
jne 0x41ca2a
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 8]
mov dword [ecx + 0x160], edx
mov eax, dword [ebp - 4]
mov dword [ecx + 0x164], eax
lea ecx, [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x60]
call fcn.0041e978
mov edx, dword [ebp - 0x60]
mov dword [edx + 0x144], 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x60]
call fcn.0041e0eb
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x60]
call fcn.004242f7
test eax, eax
jne 0x41cb97
lea edx, [ebp - 8]
push edx
mov ecx, dword [ebp - 0x60]
call fcn.004288f0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x6c]
sub ecx, 9
mov dword [ebp - 0x6c], ecx
cmp dword [ebp - 0x6c], 0x1f
ja case.0x41ca9f.5
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov dl, byte [eax + 0x41cc33]
jmp dword [edx*4 + 0x41cc1b]
push 0
push 1
push 0x114
mov ecx, dword [ebp - 0x60]
call fcn.00401690
jmp case.0x41ca9f.5
push 0
push 0
push 0x114
mov ecx, dword [ebp - 0x60]
call fcn.00401690
jmp case.0x41ca9f.5
push 0
push 1
push 0x115
mov ecx, dword [ebp - 0x60]
call fcn.00401690
jmp case.0x41ca9f.5
push 0
push 0
push 0x115
mov ecx, dword [ebp - 0x60]
call fcn.00401690
jmp case.0x41ca9f.5
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
test ecx, ecx
je 0x41cb55
cmp dword [ebp - 0xc], 0
je 0x41cb42
push 0
push 0
push 0x115
mov ecx, dword [ebp - 0x60]
call fcn.00401690
push 1
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xdc]
push eax
push 0
mov ecx, dword [ebp - 0x60]
call fcn.00420356
jmp case.0x41ca9f.5
push 0
push 0
push 0x114
mov ecx, dword [ebp - 0x60]
call fcn.00401690
jmp case.0x41ca9f.5
cmp dword [ebp - 0xc], 0
je 0x41cb7c
push 0
push 1
push 0x115
mov ecx, dword [ebp - 0x60]
call fcn.00401690
push 1
push 0
push 0
mov ecx, dword [ebp - 0x60]
call fcn.00420356
jmp case.0x41ca9f.5
push 0
push 1
push 0x114
mov ecx, dword [ebp - 0x60]
call fcn.00401690
push 1
mov ecx, dword [ebp - 0x60]
call fcn.00406550
mov esp, ebp
pop ebp
ret 0xc