Function at 0x41f220
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetKeyState]
push ebp
push esi
push edi
mov esi, ecx
push 0x11
call ebx
xor ecx, ecx
push 0x10
mov cl, ah
and ecx, 0xff
mov edi, ecx
call ebx
xor edx, edx
push 0x12
mov dl, ah
and edx, 0xff
mov ebp, edx
call ebx
mov edx, dword [esp + 0x14]
xor ecx, ecx
mov cl, ah
and ecx, 0xff
mov eax, ecx
lea ecx, [edx - 0x1b]
cmp ecx, 0xa2
ja case.0x41f277.51
xor edx, edx
mov dl, byte [ecx + 0x41f804]
jmp dword [edx*4 + 0x41f7a0]
mov eax, dword [0x6e8960]
test eax, eax
je case.0x41f277.51
mov ecx, esi
call fcn.0041e3c0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
push 0
je 0x41f2c4
mov eax, dword [esi + 0x1c]
push 0x8149
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov ecx, dword [esi + 0x1c]
push 0x800a
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
push 0
je 0x41f30a
mov edx, dword [esi + 0x1c]
push 0x814a
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov eax, dword [esi + 0x1c]
push 0x800b
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov ecx, dword [esi + 0x1c]
push 0
push 0x8009
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov edx, dword [esi + 0x1c]
push 0
push 0x800c
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test ebp, ebp
je 0x41f3b0
mov ecx, esi
call fcn.0041de30
mov esi, eax
test esi, esi
je case.0x41f277.51
mov eax, dword [esi + 0xc4]
push ecx
add eax, 0x34
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.005eadbf
mov ecx, dword [esi + 0xc4]
call fcn.00434e30
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov eax, dword [esi + 0x1c]
push 0
push 0x8087
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
test ebp, ebp
push 0
je 0x41f400
mov ecx, dword [esi + 0x1c]
push 0x80a4
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov edx, dword [esi + 0x1c]
push 0xe103
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov eax, dword [esi + 0x1c]
push 0
push 0xe107
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov ecx, dword [esi + 0x1c]
push 0
push 0xe102
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov edx, dword [esi + 0x1c]
push 0
push 0xe122
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov eax, dword [esi + 0x1c]
push 0
push 0xe124
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov ecx, dword [esi + 0x1c]
push 0
push 0x800d
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov edx, dword [esi + 0x1c]
push 0
push 0x8015
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
test ebp, ebp
je case.0x41f277.51
mov eax, dword [esi + 0x1c]
push 0
push 0x800d
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
test ebp, ebp
push 0
je 0x41f57c
mov ecx, dword [esi + 0x1c]
push 0x80a7
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov edx, dword [esi + 0x1c]
push 0x8013
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
test ebp, ebp
push 0
je 0x41f5ca
mov eax, dword [esi + 0x1c]
push 0x80ad
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov ecx, dword [esi + 0x1c]
push 0x8014
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je 0x41f610
mov edx, dword [esi + 0x1c]
push 0
push 0x800e
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov eax, dword [esi + 0x1c]
push 0
push 0x8016
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je 0x41f660
mov ecx, dword [esi + 0x1c]
push 0
push 0x800f
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov edx, dword [esi + 0x1c]
push 0
push 0x8017
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je 0x41f6b0
mov eax, dword [esi + 0x1c]
push 0
push 0x8010
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test edi, edi
je case.0x41f277.51
mov ecx, dword [esi + 0x1c]
push 0
push 0x8018
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f277.51
mov edx, dword [esi + 0x1c]
push 0
push 0x8011
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f277.51
mov eax, dword [esi + 0x1c]
push 0
push 0x8012
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f277.51
mov ecx, dword [esi + 0x1c]
push 0
push 0x80d1
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f277.51
mov edx, dword [esi + 0x1c]
push 0
push 0x80db
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
ret 4
test eax, eax
je case.0x41f277.51
mov eax, dword [esi + 0x1c]
push 0
push 0x8019
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 4