Function at 0x41cc10
Capabilities:
Create thread
Log keystrokes
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x467808
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x398
mov eax, dword [0x4b6100]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x1e8], esi
mov eax, dword [esi + 0x1c]
xorps xmm0, xmm0
sub eax, dword [esi + 0x18]
push ecx
sar eax, 2
lea ecx, [ebp - 0x54]
push eax
mov dword [ebp - 0x1e4], 0
movups xmmword [ebp - 0x54], xmm0
call fcn.0041edc0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
mov eax, dword [esi + 0x1c]
xorps xmm0, xmm0
sub eax, dword [esi + 0x18]
sar eax, 2
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x1c], 0
push eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
call fcn.0041ef40
mov byte [ebp - 4], 1
xor edi, edi
mov eax, dword [esi + 0x1c]
sub eax, dword [esi + 0x18]
sar eax, 2
test eax, eax
je 0x41cd1b
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x1c]
je 0x41cd00
xorps xmm0, xmm0
push 0
movups xmmword [ecx], xmm0
push 0x46ff86
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004051d0
mov ecx, dword [ebp - 0x20]
add ecx, 0x18
mov dword [ebp - 0x20], ecx
jmp 0x41cd0d
push ecx
push ecx
lea ecx, [ebp - 0x24]
call fcn.0041f040
mov ecx, dword [ebp - 0x20]
mov eax, dword [esi + 0x1c]
inc edi
sub eax, dword [esi + 0x18]
sar eax, 2
cmp edi, eax
jb 0x41ccd0
push str.Hotkeys
call fcn.0045d2d0
mov ecx, dword [esi + 0x1c]
xor edi, edi
mov edx, dword [esi + 0x18]
mov eax, ecx
sub eax, edx
mov dword [ebp - 0x1ec], edi
sar eax, 2
add esp, 4
xorps xmm1, xmm1
movss dword [ebp - 0x1fc], xmm1
test eax, eax
je 0x41d177
mov dword [ebp - 0x1f0], edi
nop word [eax + eax]
mov esi, dword [edx + edi*4]
lea eax, [edi*4]
push esi
lea ecx, [ebp - 0x200]
call fcn.00404c80
mov eax, dword [ebp - 0x200]
lea edi, [ebp - 0x1e0]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
mov ecx, dword [ebp - 0x1f0]
add ecx, dword [ebp - 0x24]
cmp dword [ebp - 0x1b4], 0
jne 0x41cdb3
push 4
push str.Bind
call fcn.0040da70
jmp 0x41d0ac
push 0
push 0x46ff86
call fcn.0040da70
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1ec]
lea ecx, [edx*4]
mov dword [ebp - 0x18], 0
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x1f4]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x1f4]
lea edi, [ebp - 0x1e0]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
cmp dword [ebp - 0x164], 0
jle 0x41d0ac
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1ec]
lea ecx, [edx*4]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x204]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x204]
lea edi, [ebp - 0x3a8]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x37c], 0
je 0x41d05a
mov ecx, dword [ebp - 0x1f0]
add ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x41ceae
mov esi, dword [ecx + 0x14]
mov eax, esi
sub eax, edx
cmp eax, 1
jb 0x41ce9a
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
cmp esi, 0xf
jbe 0x41ce8b
mov ecx, dword [ecx]
mov al, byte [0x4acf14]
mov byte [ecx + edx], al
mov byte [ecx + edx + 1], 0
jmp 0x41ceae
push 1
push 0x4acf14
push dword [ebp - 0x1f8]
push 1
call fcn.00405400
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1ec]
lea ecx, [edx*4]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x208]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x208]
lea edi, [ebp - 0x3a8]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
mov eax, dword [ebp - 0x18]
push 0
push dword [ebp + eax*4 - 0x37c]
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
push 0x100
lea ecx, [ebp - 0x158]
shl eax, 0x10
push ecx
push eax
call dword [sym.imp.USER32.dll_GetKeyNameTextA]
test eax, eax
jne 0x41d042
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1ec]
lea ecx, [edx*4]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x20c]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x20c]
lea edi, [ebp - 0x3a8]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x37c]
dec eax
cmp eax, 5
ja case.0x41cf6c.3
jmp dword [eax*4 + 0x41d75c]
mov eax, 0x4ac220
mov edx, 2
jmp 0x41cfb9
mov eax, 0x4ac224
mov edx, 2
jmp 0x41cfb9
mov eax, 0x4ac228
mov edx, 2
jmp 0x41cfb9
mov eax, 0x4ac22c
mov edx, 3
jmp 0x41cfb9
mov eax, 0x4ac230
mov edx, 3
jmp 0x41cfb9
mov eax, str.Unknown_mouse_button
mov edx, 0x14
mov esi, dword [ebp - 0x1e4]
lea ecx, [ebp - 0x3c]
push edx
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
or esi, 2
mov dword [ebp - 0x2c], 0
push eax
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x1e4], esi
call fcn.004051d0
cmp dword [ebp - 0x28], 0xf
lea eax, [ebp - 0x3c]
cmova eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x158]
push 0x100
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov ecx, dword [ebp - 0x28]
add esp, 0xc
cmp ecx, 0xf
jbe 0x41d042
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d032
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d712
push ecx
push edx
call fcn.004640ea
add esp, 8
mov dword [ebp - 0x1e4], esi
mov ecx, dword [ebp - 0x1f0]
lea eax, [ebp - 0x158]
add ecx, dword [ebp - 0x24]
push eax
call fcn.00404ab0
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x18], eax
lea ecx, [edx*4]
mov eax, dword [ebp - 0x1e8]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x1f4]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x1f4]
lea edi, [ebp - 0x1e0]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x164]
jl 0x41ce12
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1ec]
lea ecx, [edx*4]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x1f8]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x1f8]
lea edi, [ebp - 0x3a8]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
cmp byte [ebp - 0x22e], 0
mov esi, dword [ebp - 0x1f0]
jne 0x41d10b
mov ecx, dword [ebp - 0x24]
push 3
add ecx, esi
push 0x4ad014
call fcn.0040da70
mov eax, dword [ebp - 0x24]
add eax, esi
cmp dword [eax + 0x14], 0xf
jbe 0x41d118
mov eax, dword [eax]
push ecx
mov dword [esp], 0xbf800000
push 0
push 0
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0043a580
movss xmm1, dword [ebp - 0x44]
add esi, 0x18
maxss xmm1, dword [ebp - 0x1fc]
mov edi, dword [ebp - 0x1ec]
add esp, 0x14
mov dword [ebp - 0x1f0], esi
inc edi
mov esi, dword [ebp - 0x1e8]
mov dword [ebp - 0x1ec], edi
movss dword [ebp - 0x1fc], xmm1
mov ecx, dword [esi + 0x1c]
mov eax, ecx
mov edx, dword [esi + 0x18]
sub eax, edx
sar eax, 2
cmp edi, eax
jb 0x41cd60
sub ecx, edx
xor edi, edi
sar ecx, 2
mov dword [ebp - 0x1e4], edi
test ecx, ecx
je 0x41d6e1
addss xmm1, dword [0x4ad660]
mov dword [ebp - 0x1ec], edi
movss dword [ebp - 0x1fc], xmm1
push edi
call fcn.00446970
mov eax, dword [esi + 0x18]
lea ecx, [edi*4]
add esp, 4
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x1f8]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x1f8]
lea edi, [ebp - 0x3a8]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
lea eax, [ebp - 0x3a8]
push eax
push 0x4ad028
call fcn.004607b0
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.00449430
add esp, 4
mov dword [esp], 0x42e60000
call fcn.00449ca0
mov eax, dword [ebp - 0x24]
add esp, 4
mov esi, dword [ebp - 0x1ec]
add eax, esi
cmp dword [eax + 0x14], 0xf
jbe 0x41d228
mov eax, dword [eax]
movss xmm0, dword [ebp - 0x1fc]
lea ecx, [ebp - 0x21c]
push ecx
push eax
movss dword [ebp - 0x21c], xmm0
mov dword [ebp - 0x218], 0
call fcn.004569c0
add esp, 8
test al, al
je 0x41d2b0
mov ecx, dword [ebp - 0x24]
add ecx, esi
cmp dword [ecx + 0x14], 0xf
mov edx, dword [ecx + 0x10]
jbe 0x41d266
mov ecx, dword [ecx]
push 0xe
push str.in_progress...
call fcn.00417470
add esp, 8
test al, al
jne 0x41d2b0
mov edi, dword [ebp - 0x1e4]
mov edx, 1
mov esi, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x1e4]
and ecx, 0x1f
shr edi, 5
shl edx, cl
push 0xe
push str.in_progress...
or dword [esi + edi*4], edx
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x1ec]
lea ecx, [esi + ecx]
call fcn.0040da70
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.00449430
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0
push eax
push str.Reset
mov dword [ebp - 0x40], 0
call fcn.004569c0
add esp, 0x10
test al, al
je 0x41d3af
mov ecx, dword [ebp - 0x24]
push 0
push 0x46ff86
lea ecx, [esi + ecx]
call fcn.0040da70
mov eax, dword [0x4b6168]
mov edx, dword [ebp - 0x1e4]
lea ecx, [edx*4]
mov dword [eax], 1
mov eax, dword [ebp - 0x1e8]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x20c]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x20c]
lea edi, [ebp - 0x1e0]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
xor eax, eax
cmp dword [ebp - 0x164], eax
jle 0x41d368
mov dword [ebp + eax*4 - 0x1b4], 0
inc eax
cmp eax, dword [ebp - 0x164]
jl 0x41d354
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1e4]
lea ecx, [edx*4]
mov byte [ebp - 0x66], 1
mov byte [ebp - 0x5c], 1
mov eax, dword [eax + 0x18]
mov edi, dword [eax + ecx]
lea ecx, [ebp - 0x208]
push edi
call fcn.00404c80
mov eax, dword [ebp - 0x208]
lea esi, [ebp - 0x1e0]
add edi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1e4]
lea ecx, [edx*4]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x204]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x204]
lea edi, [ebp - 0x3a8]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
cmp byte [ebp - 0x22e], 1
jne 0x41d6b1
mov esi, dword [ebp - 0x1ec]
add esi, dword [ebp - 0x24]
mov ecx, esi
cmp dword [esi + 0x14], 0xf
jbe 0x41d40e
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
push 0xe
push str.in_progress...
call fcn.00417470
add esp, 8
test al, al
je 0x41d6b1
push 0
push 0x46ff86
mov ecx, esi
call fcn.0040da70
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1e4]
lea ecx, [edx*4]
mov dword [ebp - 0x18], 0
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x1f4]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x1f4]
lea edi, [ebp - 0x1e0]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
cmp dword [ebp - 0x164], 0
jle 0x41d5f5
nop dword [eax]
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1e4]
lea ecx, [edx*4]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x200]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x200]
lea edi, [ebp - 0x3a8]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
cmp dword [ebp - 0x37c], 0
je 0x41d5a4
mov ecx, dword [ebp - 0x1ec]
add ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x41d528
mov esi, dword [ecx + 0x14]
mov eax, esi
sub eax, edx
cmp eax, 1
jb 0x41d514
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
cmp esi, 0xf
jbe 0x41d505
mov ecx, dword [ecx]
mov al, byte [0x4acf14]
mov byte [ecx + edx], al
mov byte [ecx + edx + 1], 0
jmp 0x41d528
push 1
push 0x4acf14
push dword [ebp - 0x1f8]
push 1
call fcn.00405400
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1e4]
lea ecx, [edx*4]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x1f0]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x1f0]
lea edi, [ebp - 0x3a8]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
mov eax, dword [ebp - 0x18]
push 0
push dword [ebp + eax*4 - 0x37c]
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
push 0x100
lea ecx, [ebp - 0x158]
shl eax, 0x10
push ecx
push eax
call dword [sym.imp.USER32.dll_GetKeyNameTextA]
mov ecx, dword [ebp - 0x1ec]
lea eax, [ebp - 0x158]
add ecx, dword [ebp - 0x24]
push eax
call fcn.00404ab0
mov eax, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1e4]
inc dword [ebp - 0x18]
lea ecx, [edx*4]
mov eax, dword [eax + 0x18]
mov esi, dword [eax + ecx]
lea ecx, [ebp - 0x1f4]
push esi
call fcn.00404c80
mov eax, dword [ebp - 0x1f4]
lea edi, [ebp - 0x1e0]
add esi, 4
mov ecx, 0x62
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
xchg dword [eax], ecx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x164]
jl 0x41d490
mov ecx, dword [ebp - 0x1e4]
mov edi, 1
mov eax, dword [ebp - 0x54]
mov esi, ecx
shr esi, 5
and ecx, 0x1f
shl edi, cl
test dword [eax + esi*4], edi
je 0x41d6b1
mov ecx, dword [ebp - 0x1ec]
add ecx, dword [ebp - 0x24]
push 0xe
push str.in_progress...
call fcn.0040da70
mov eax, dword [ebp - 0x54]
not edi
push 4
and dword [eax + esi*4], edi
mov esi, dword [ebp - 0x1e8]
mov edi, dword [ebp - 0x1e4]
mov dword [esi + 0x58], edi
call fcn.004640b5
add esp, 4
mov dword [ebp - 0x18], eax
mov dword [eax], esi
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 2
push ecx
push 0
push eax
push 0x41f4a0
push 0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x18
mov dword [ebp - 0x214], eax
test eax, eax
je 0x41d720
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x210]
test ecx, ecx
je 0x41d718
push ecx
push eax
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
jne 0x41d718
xorps xmm0, xmm0
mov byte [ebp - 4], 1
movlpd qword [ebp - 0x214], xmm0
jmp 0x41d6bd
mov esi, dword [ebp - 0x1e8]
mov edi, dword [ebp - 0x1e4]
call fcn.00446650
mov eax, dword [esi + 0x1c]
inc edi
sub eax, dword [esi + 0x18]
add dword [ebp - 0x1ec], 0x18
sar eax, 2
mov dword [ebp - 0x1e4], edi
cmp edi, eax
jb 0x41d1a2
lea ecx, [ebp - 0x24]
call fcn.0040d770
mov edx, dword [ebp - 0x54]
test edx, edx
je 0x41d73c
mov ecx, dword [ebp - 0x4c]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x41d732
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d732
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x210], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push ecx
push edx
call fcn.004640ea
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004640a7
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret