Function at 0x416570
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44eae0
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x4634b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x11
call edi
shr eax, 0xf
push 0x12
test al, 1
je 0x416736
call edi
shr eax, 0xf
test al, 1
jne 0x416967
mov ebx, dword [esi + 0xc0]
cmp ebx, 0xff
jge 0x416629
push ebx
call edi
shr eax, 0xf
and al, 1
je 0x416623
cmp byte [ebx + 0x468c90], 0
jne 0x416623
mov ecx, esi
mov byte [ebx + 0x468c90], 1
call fcn.00415aa0
test al, al
je 0x416629
push 0x45ae1c
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 0
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.00416990
lea ecx, [ebp - 0x28]
call fcn.004015e0
jmp 0x416967
mov byte [ebx + 0x468c90], al
mov ebx, dword [esi + 0xc4]
cmp ebx, 0xff
jge 0x416678
push ebx
call edi
shr eax, 0xf
and al, 1
je 0x416672
cmp byte [ebx + 0x468c90], 0
jne 0x416672
mov ecx, esi
mov byte [ebx + 0x468c90], 1
call fcn.00415e20
test al, al
je 0x416678
push 0x45afe4
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 1
jmp 0x416608
mov byte [ebx + 0x468c90], al
push dword [esi + 0xc8]
call fcn.00417310
test al, al
je 0x4166ab
mov ecx, esi
call fcn.004162a0
test al, al
je 0x4166ab
push 0x45b12c
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 2
jmp 0x416608
push dword [esi + 0xcc]
call fcn.00417310
test al, al
je 0x4166d3
push str.456.
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 3
jmp 0x416608
push dword [esi + 0xd0]
call fcn.00417310
test al, al
je 0x4166fb
push 0x45b160
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 4
jmp 0x416608
push dword [esi + 0xbc]
call fcn.00417310
test al, al
je 0x416967
mov ecx, esi
call fcn.00415aa0
test al, al
je 0x416967
push 0x45aef8
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 5
jmp 0x416608
call edi
shr eax, 0xf
test al, 1
je 0x41693c
mov ebx, dword [esi + 0xc0]
cmp ebx, 0xff
jge 0x4167ca
push ebx
call edi
shr eax, 0xf
and al, 1
je 0x4167c4
cmp byte [ebx + 0x468c90], 0
jne 0x4167c4
mov ecx, esi
mov byte [ebx + 0x468c90], 1
call fcn.00415e20
test al, al
je 0x4167ca
push str.MTP1
lea ecx, [ebp - 0x28]
call fcn.0040bb70
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 6
push eax
mov ecx, esi
call fcn.004184a0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x1c], 2
call fcn.004015e0
push str.MTP1
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 7
jmp 0x416608
mov byte [ebx + 0x468c90], al
mov ebx, dword [esi + 0xc4]
cmp ebx, 0xff
jge 0x416851
push ebx
call edi
shr eax, 0xf
and al, 1
je 0x41684b
cmp byte [ebx + 0x468c90], 0
jne 0x41684b
mov ecx, esi
mov byte [ebx + 0x468c90], 1
call fcn.00415e20
test al, al
je 0x416851
push str.MTP1
lea ecx, [ebp - 0x28]
call fcn.0040bb70
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 8
push eax
mov ecx, esi
call fcn.004184a0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x1c], 4
call fcn.004015e0
push str.MTP1
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 9
jmp 0x416608
mov byte [ebx + 0x468c90], al
push dword [esi + 0xc8]
call fcn.00417310
test al, al
je 0x4168b9
mov ecx, esi
call fcn.00415e20
test al, al
je 0x4168b9
push str.MTP1
lea ecx, [ebp - 0x28]
call fcn.0040bb70
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xa
push eax
mov ecx, esi
call fcn.004184a0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x1c], 8
call fcn.004015e0
push str.MTP1
lea ecx, [ebp - 0x28]
call fcn.0040bb70
mov dword [ebp - 4], 0xb
jmp 0x416608
push dword [esi + 0xcc]
call fcn.00417310
test al, al
je 0x416967
mov ecx, esi
call fcn.00415e20
test al, al
je 0x416967
push str.MTP1
lea ecx, [ebp - 0x28]
call fcn.0040bb70
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xc
push eax
mov ecx, esi
call fcn.004184a0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x1c], 0x10
call fcn.004015e0
push str.MTP1
lea ecx, [ebp - 0x40]
call fcn.0040bb70
sub esp, 0x18
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.00416990
lea ecx, [ebp - 0x40]
call fcn.004015e0
jmp 0x416967
push 0x24
call edi
shr eax, 0xf
and al, 1
je 0x416962
cmp byte [0x468cb4], 0
jne 0x416962
push 0
mov ecx, esi
mov byte [0x468cb4], 1
call fcn.00417610
jmp 0x416967
mov byte [0x468cb4], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00434307
mov esp, ebp
pop ebp
ret