Function at 0x403791
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov eax, 0x20dc
mov ebp, esp
call fcn.00418110
push ebx
push esi
push edi
mov esi, ecx
push 0x11
mov ebx, 0x8000
mov dword [esi + 0x40ec], 0x120
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
and ax, bx
push 0x10
cmp ax, 1
sbb edi, edi
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
and ax, bx
inc edi
cmp ax, 1
push 2
sbb eax, eax
inc eax
mov dword [ebp - 0xe0], eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
and ax, bx
cmp ax, 1
sbb eax, eax
inc eax
test edi, edi
je 0x403816
cmp dword [ebp - 0xe0], 0
je 0x40380e
cmp eax, 1
sbb eax, eax
and eax, 0x10
add eax, 0x40
mov dword [esi + 0x40ec], eax
jmp 0x40382b
test edi, edi
jne 0x403b9a
cmp dword [ebp - 0xe0], 0
jne 0x403b9a
test eax, eax
jne 0x403b9a
cmp dword [esi + 0x822c], 0
je 0x40384f
push 0
mov eax, dword [esi]
push 0x41d268
mov ecx, esi
push str.Busy...try_again
call dword [eax + 0x90]
jmp 0x403b9a
mov dword [esi + 0x8130], 0x107
push 0x3ec
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x403875
or dword [esi + 0x40ec], 0x100200
push 0x3ed
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x40388e
or byte [esi + 0x40ed], 0x80
mov eax, dword [esi + 0x40d0]
test eax, eax
je 0x4038a5
cmp dword [eax + 0x1c], 0
je 0x4038a5
or byte [esi + 0x40ee], 0x20
xor ebx, ebx
mov ecx, esi
push ebx
mov eax, dword [esi]
push ebx
push 0x1032
push 0x415
call dword [eax + 0xa8]
cmp eax, ebx
mov edi, eax
mov dword [esi + 0x40e8], eax
jg 0x4038d4
mov dword [esi + 0x8130], ebx
jmp 0x403b9a
mov eax, edi
imul eax, eax, 0x14
add eax, 4
push eax
call fcn.00417e70
add esp, 4
mov ebx, eax
test ebx, ebx
je 0x403919
lea eax, [ebx + 4]
mov dword [ebx], edi
dec edi
mov dword [ebp - 0xe0], eax
js 0x40390e
mov ecx, dword [ebp - 0xe0]
call fcn.00403ba3
add dword [ebp - 0xe0], 0x14
dec edi
jns 0x4038f9
add ebx, 4
mov dword [esi + 0x40e4], ebx
jmp 0x403923
mov dword [esi + 0x40e4], 0
xor eax, eax
cmp dword [esi + 0x40e4], eax
jne 0x403938
mov dword [esi + 0x8130], eax
jmp 0x403b9c
push 0x4000
lea eax, [esi + 0xcc]
push eax
mov ecx, esi
push 0x3e9
mov ebx, dword [esi]
call dword [ebx + 0x84]
mov ecx, dword [esi + 0x40]
call fcn.004050f0
mov eax, dword [esi + 0x40e8]
cmp eax, 1
jle 0x40396d
or byte [esi + 0x40ed], 8
xor ecx, ecx
cmp eax, 0xa
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], ecx
jg 0x403999
mov eax, dword [esi + 0x3c]
cmp dword [eax + 0x298], ecx
jne 0x40398d
cmp dword [eax + 0x2a8], ecx
je 0x403999
mov dword [ebp - 0xe0], 0x400000
jmp 0x4039a3
mov dword [ebp - 0xe0], 0
xor edi, edi
cmp dword [esi + 0x40e0], edi
jle 0x403a8f
mov dword [ebp - 0x14], edi
mov dword [ebp - 0xc], edi
mov eax, dword [ebp - 0x10]
cmp dword [esi + 0x40e8], eax
jle 0x403a8f
push 2
mov ecx, esi
push edi
mov eax, dword [esi]
push 0x102c
push 0x415
call dword [eax + 0xa8]
test al, 2
je 0x403a7e
mov ecx, dword [esi + 0x40dc]
mov eax, dword [ebp - 0xc]
inc dword [ebp - 0x10]
mov ebx, dword [ecx + eax]
mov ecx, dword [esi + 0x40e4]
mov eax, dword [ebx + 0xd0]
add ecx, dword [ebp - 0x14]
and eax, 0x400000
mov dword [ebp - 4], ecx
or dword [ebp - 8], eax
add dword [ebp - 0x14], 0x14
lea ecx, [ebp - 0xdc]
push ecx
push ebx
push dword [esi + 0x3c]
call fcn.0040b733
add esp, 0xc
lea eax, [ebp - 0xdc]
mov ecx, dword [esi + 0x40]
push eax
call fcn.004050f5
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xe0]
mov dword [ecx], ebx
inc dword [ebx + 0xdc]
test dword [ebx + 0xd0], eax
mov eax, 2
je 0x403a5c
cmp dword [ebx + 0xe0], 1
sbb eax, eax
inc eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 4], eax
sub eax, 2
cmp eax, 1
mov eax, 0
adc eax, 0xffffffff
and eax, 0x400000
or eax, dword [esi + 0x40ec]
mov dword [ecx + 8], eax
add dword [ebp - 0xc], 4
inc edi
cmp dword [esi + 0x40e0], edi
jg 0x4039b7
mov byte [esi + 0x1ecc], 0
mov eax, dword [ebp - 0xe0]
test dword [ebp - 8], eax
je 0x403aa8
or byte [esi + 0x40ee], 0x40
lea eax, [esi + 0xcc]
mov ecx, dword [esi + 0x40]
push dword [esi + 0x40d0]
push dword [esi + 0x40ec]
push eax
call fcn.0040512e
mov eax, dword [esi + 0x40d0]
test eax, eax
je 0x403b37
cmp dword [eax + 0x1c], 0
je 0x403b37
push 0x2000
lea ecx, [ebp - 0x20dc]
push ecx
lea edi, [esi + 0x40f0]
push eax
call fcn.00412374
add esp, 0xc
lea ecx, [ebp - 0x20dc]
push ecx
call fcn.00417f10
add esp, 4
inc eax
push eax
call fcn.00417e70
add esp, 4
mov dword [edi], eax
lea eax, [ebp - 0x20dc]
push eax
push dword [edi]
call fcn.00417c10
add esp, 8
mov ecx, dword [esi + 0x40cc]
push dword [esi + 0x40e8]
push dword [esi + 0x40e4]
push dword [esi + 0x40d0]
call fcn.004107e4
mov ecx, esi
call fcn.00404040
mov ecx, 0x102
push 0
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x8130], ecx
push dword [eax + 0x364]
push ecx
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
jne 0x403b76
push esi
push 0
push 0x47b
call fcn.00417914
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
push esi
push 0
push 0x47c
call fcn.00417914
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
mov ecx, esi
call fcn.0040f2bf
mov eax, 1
jmp 0x403b9c
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret