Function at 0x41f0a0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetKeyState]
push ebp
push esi
push edi
mov esi, ecx
push 0x11
call ebx
xor ecx, ecx
push 0x10
mov cl, ah
and ecx, 0xff
mov edi, ecx
call ebx
xor edx, edx
push 0x12
mov dl, ah
and edx, 0xff
mov ebp, edx
call ebx
mov edx, dword [esp + 0x14]
xor ecx, ecx
mov cl, ah
and ecx, 0xff
mov eax, ecx
lea ecx, [edx - 0x1b]
cmp ecx, 0xa2
ja case.0x41f0f7.51
xor edx, edx
mov dl, byte [ecx + 0x41f684]
jmp dword [edx*4 + 0x41f620]
mov eax, dword [0x6ede78]
test eax, eax
je case.0x41f0f7.51
mov ecx, esi
call fcn.0041e280
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
push 0
je 0x41f144
mov eax, dword [esi + 0x1c]
push 0x8149
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov ecx, dword [esi + 0x1c]
push 0x800a
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
push 0
je 0x41f18a
mov edx, dword [esi + 0x1c]
push 0x814a
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov eax, dword [esi + 0x1c]
push 0x800b
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov ecx, dword [esi + 0x1c]
push 0
push 0x8009
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov edx, dword [esi + 0x1c]
push 0
push 0x800c
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test ebp, ebp
je 0x41f230
mov ecx, esi
call fcn.0041dcf0
mov esi, eax
test esi, esi
je case.0x41f0f7.51
mov eax, dword [esi + 0xc4]
push ecx
add eax, 0x34
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.005eacfb
mov ecx, dword [esi + 0xc4]
call fcn.004349d0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov eax, dword [esi + 0x1c]
push 0
push 0x8087
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
test ebp, ebp
push 0
je 0x41f280
mov ecx, dword [esi + 0x1c]
push 0x80a4
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov edx, dword [esi + 0x1c]
push 0xe103
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov eax, dword [esi + 0x1c]
push 0
push 0xe107
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov ecx, dword [esi + 0x1c]
push 0
push 0xe102
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov edx, dword [esi + 0x1c]
push 0
push 0xe122
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov eax, dword [esi + 0x1c]
push 0
push 0xe124
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov ecx, dword [esi + 0x1c]
push 0
push 0x800d
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov edx, dword [esi + 0x1c]
push 0
push 0x8015
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
test ebp, ebp
je case.0x41f0f7.51
mov eax, dword [esi + 0x1c]
push 0
push 0x800d
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
test ebp, ebp
push 0
je 0x41f3fc
mov ecx, dword [esi + 0x1c]
push 0x80a7
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov edx, dword [esi + 0x1c]
push 0x8013
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
test ebp, ebp
push 0
je 0x41f44a
mov eax, dword [esi + 0x1c]
push 0x80ad
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov ecx, dword [esi + 0x1c]
push 0x8014
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je 0x41f490
mov edx, dword [esi + 0x1c]
push 0
push 0x800e
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov eax, dword [esi + 0x1c]
push 0
push 0x8016
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je 0x41f4e0
mov ecx, dword [esi + 0x1c]
push 0
push 0x800f
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov edx, dword [esi + 0x1c]
push 0
push 0x8017
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je 0x41f530
mov eax, dword [esi + 0x1c]
push 0
push 0x8010
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f0f7.51
mov ecx, dword [esi + 0x1c]
push 0
push 0x8018
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f0f7.51
mov edx, dword [esi + 0x1c]
push 0
push 0x8011
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f0f7.51
mov eax, dword [esi + 0x1c]
push 0
push 0x8012
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f0f7.51
mov ecx, dword [esi + 0x1c]
push 0
push 0x80d1
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f0f7.51
mov edx, dword [esi + 0x1c]
push 0
push 0x80db
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f0f7.51
mov eax, dword [esi + 0x1c]
push 0
push 0x8019
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 4