Function at 0x412888
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
cmp dword [ebp + 8], 0x200
jb 0x4128a7
cmp dword [ebp + 8], 0x20a
jbe 0x4128b4
cmp dword [ebp + 8], 0x2a1
jne 0x412baf
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
cmp dword [ebp + 8], 0x20a
je 0x4128ed
mov eax, dword [ebp + 0x10]
and eax, 0xffff
mov dword [ebp - 8], eax
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
and ecx, 0xffff
and ecx, 0xffff
mov dword [ebp - 0xc], ecx
jmp 0x4128ff
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b79b8
call fcn.0040545a
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x4b79b8
call fcn.0040543b
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004030a1
add esp, 0xc
test eax, eax
je 0x41294a
xor eax, eax
mov al, byte [0x4b7a40]
test eax, eax
je 0x412945
mov byte [0x4b7a40], 0
mov ecx, 0x4b94a0
call fcn.0047a96e
jmp 0x412e29
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov ecx, 0x4b6d38
call fcn.00401b0f
cmp dword [0x4b79a4], 0
je 0x41296f
mov eax, dword [0x4b79a4]
mov dword [ebp - 4], eax
jmp 0x4129d3
cmp dword [0x4b79a8], 0
jne 0x4129ca
cmp dword [ebp + 8], 0x201
je 0x412993
cmp dword [ebp + 8], 0x204
je 0x412993
cmp dword [ebp + 8], 0x207
jne 0x4129b3
cmp dword [0x4b7a10], 0
jne 0x4129b3
push 1
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.00412e4e
add esp, 0xc
mov dword [ebp - 4], eax
jmp 0x4129c8
push 0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.00412e4e
add esp, 0xc
mov dword [ebp - 4], eax
jmp 0x4129d3
mov edx, dword [0x4b79a8]
mov dword [ebp - 4], edx
mov dword [ebp - 0x14], 0
cmp dword [ebp - 4], 0
je 0x4129f6
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
call dword [eax + 0x2c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [0x4b79a0]
je 0x412aaf
mov ecx, 0x4b6d38
call fcn.00401630
mov dword [ebp - 0x18], 0
cmp dword [0x4b79a0], 0
je 0x412a66
push 0
push 0
push 0x507
mov edx, dword [0x4b79a0]
mov eax, dword [edx]
mov ecx, dword [0x4b79a0]
call dword [eax + 0x10]
mov ecx, dword [0x4b79a0]
call fcn.00413410
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x412a66
push 0
mov ecx, dword [0x4b79a0]
push ecx
push 0x509
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
call dword [eax + 0x10]
cmp dword [ebp - 0x14], 0
je 0x412aa7
push 0
push 0
push 0x506
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
call dword [edx + 0x10]
mov ecx, dword [ebp - 0x14]
call fcn.00413410
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x412aa7
push 0
mov eax, dword [ebp - 0x14]
push eax
push 0x508
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
call dword [edx + 0x10]
mov eax, dword [ebp - 0x14]
mov dword [0x4b79a0], eax
cmp dword [0x4b799c], 0
je 0x412ae8
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [0x4b799c]
je 0x412ae8
cmp dword [ebp + 8], 0x201
je 0x412ade
cmp dword [ebp + 8], 0x204
je 0x412ade
cmp dword [ebp + 8], 0x207
jne 0x412ae8
push 0
call fcn.00412fc4
add esp, 4
mov byte [ebp - 0x10], 0
cmp dword [0x4b79a0], 0
je 0x412b14
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [0x4b79a0]
mov eax, dword [edx]
mov ecx, dword [0x4b79a0]
call dword [eax + 0x10]
jmp 0x412b81
cmp dword [0x4b79a4], 0
je 0x412b3c
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [0x4b79a4]
mov edx, dword [ecx]
mov ecx, dword [0x4b79a4]
call dword [edx + 0x10]
jmp 0x412b81
cmp dword [0x4b79a8], 0
jne 0x412b81
xor eax, eax
mov al, byte [0x4b7a38]
test eax, eax
jne 0x412b81
cmp dword [0x4b7a34], 0
je 0x412b81
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [0x4b7a34]
mov edx, dword [ecx]
mov ecx, dword [0x4b7a34]
call dword [edx + 0x10]
mov byte [0x4b7a40], 1
mov byte [ebp - 0x10], 1
mov eax, dword [ebp - 0x10]
and eax, 0xff
test eax, eax
jne 0x412baa
xor ecx, ecx
mov cl, byte [0x4b7a40]
test ecx, ecx
je 0x412baa
mov byte [0x4b7a40], 0
mov ecx, 0x4b94a0
call fcn.0047a96e
jmp 0x412e29
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004030a1
add esp, 0xc
test eax, eax
je 0x412bcc
jmp 0x412e29
cmp dword [0x4b799c], 0
je 0x412bfb
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [0x4b799c]
mov eax, dword [edx]
mov ecx, dword [0x4b799c]
call dword [eax + 0x10]
test eax, eax
je 0x412bfb
jmp 0x412e29
cmp dword [0x4b79a8], 0
je 0x412c26
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [0x4b79a8]
mov edx, dword [ecx]
mov ecx, dword [0x4b79a8]
call dword [edx + 0x10]
jmp 0x412e29
cmp dword [ebp + 8], 0x100
je 0x412c42
cmp dword [ebp + 8], 0x101
jne 0x412cbf
cmp dword [ebp + 0xc], 0x2c
jne 0x412cbf
mov dword [ebp - 0x24], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
test eax, eax
je 0x412c66
mov ecx, dword [ebp - 0x24]
or ecx, 2
mov dword [ebp - 0x24], ecx
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x8000
test edx, edx
je 0x412c83
mov eax, dword [ebp - 0x24]
or al, 1
mov dword [ebp - 0x24], eax
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
test ecx, ecx
je 0x412ca1
mov edx, dword [ebp - 0x24]
or edx, 4
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0046ed27
add esp, 8
test eax, eax
je 0x412cba
jmp 0x412e29
jmp 0x412d40
cmp dword [ebp + 8], 0x104
jne 0x412d40
mov dword [ebp - 0x28], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x8000
test edx, edx
je 0x412cec
mov eax, dword [ebp - 0x28]
or al, 2
mov dword [ebp - 0x28], eax
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
test ecx, ecx
je 0x412d0a
mov edx, dword [ebp - 0x28]
or edx, 1
mov dword [ebp - 0x28], edx
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
test eax, eax
je 0x412d27
mov ecx, dword [ebp - 0x28]
or ecx, 4
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.0046ed27
add esp, 8
test eax, eax
je 0x412d40
jmp 0x412e29
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x412d59
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 3
jge 0x412df2
cmp dword [ebp - 0x1c], 0
jne 0x412df2
cmp dword [ebp - 0x20], 0
jne 0x412d82
mov ecx, 0x4b7960
call fcn.004133f0
mov dword [ebp - 4], eax
jmp 0x412da4
cmp dword [ebp - 0x20], 1
jne 0x412d97
mov ecx, 0x4b7924
call fcn.004133f0
mov dword [ebp - 4], eax
jmp 0x412da4
mov ecx, 0x4b78e8
call fcn.004133f0
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x412ded
mov ecx, dword [ebp - 4]
call fcn.004133f0
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 4]
call fcn.004160b1
test eax, eax
je 0x412de5
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
call dword [eax + 0x10]
test eax, eax
je 0x412de5
mov dword [ebp - 0x1c], 1
jmp 0x412ded
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 4], ecx
jmp 0x412da4
jmp 0x412d50
cmp dword [ebp - 0x1c], 0
jne 0x412e29
cmp dword [0x4b7a34], 0
je 0x412e29
xor edx, edx
mov dl, byte [0x4b7a38]
test edx, edx
jne 0x412e29
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [0x4b7a34]
mov edx, dword [eax]
mov ecx, dword [0x4b7a34]
call dword [edx + 0x10]
mov esp, ebp
pop ebp
ret