Function at 0x403792
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov eax, 0x20dc
mov ebp, esp
call fcn.00418120
push ebx
push esi
push edi
mov esi, ecx
push 0x11
mov ebx, 0x8000
mov dword [esi + 0x40ec], 0x120
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
and ax, bx
push 0x10
cmp ax, 1
sbb edi, edi
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
and ax, bx
inc edi
cmp ax, 1
push 2
sbb eax, eax
inc eax
mov dword [ebp - 0xe0], eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
and ax, bx
cmp ax, 1
sbb eax, eax
inc eax
test edi, edi
je 0x403817
cmp dword [ebp - 0xe0], 0
je 0x40380f
cmp eax, 1
sbb eax, eax
and eax, 0x10
add eax, 0x40
mov dword [esi + 0x40ec], eax
jmp 0x40382c
test edi, edi
jne 0x403b9b
cmp dword [ebp - 0xe0], 0
jne 0x403b9b
test eax, eax
jne 0x403b9b
cmp dword [esi + 0x822c], 0
je 0x403850
push 0
mov eax, dword [esi]
push 0x41d264
mov ecx, esi
push str.Busy...try_again
call dword [eax + 0x90]
jmp 0x403b9b
mov dword [esi + 0x8130], 0x107
push 0x3ec
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x403876
or dword [esi + 0x40ec], 0x100200
push 0x3ed
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x40388f
or byte [esi + 0x40ed], 0x80
mov eax, dword [esi + 0x40d0]
test eax, eax
je 0x4038a6
cmp dword [eax + 0x1c], 0
je 0x4038a6
or byte [esi + 0x40ee], 0x20
xor ebx, ebx
mov ecx, esi
push ebx
mov eax, dword [esi]
push ebx
push 0x1032
push 0x415
call dword [eax + 0xa8]
cmp eax, ebx
mov edi, eax
mov dword [esi + 0x40e8], eax
jg 0x4038d5
mov dword [esi + 0x8130], ebx
jmp 0x403b9b
mov eax, edi
imul eax, eax, 0x14
add eax, 4
push eax
call fcn.00417e80
add esp, 4
mov ebx, eax
test ebx, ebx
je 0x40391a
lea eax, [ebx + 4]
mov dword [ebx], edi
dec edi
mov dword [ebp - 0xe0], eax
js 0x40390f
mov ecx, dword [ebp - 0xe0]
call fcn.00403ba4
add dword [ebp - 0xe0], 0x14
dec edi
jns 0x4038fa
add ebx, 4
mov dword [esi + 0x40e4], ebx
jmp 0x403924
mov dword [esi + 0x40e4], 0
xor eax, eax
cmp dword [esi + 0x40e4], eax
jne 0x403939
mov dword [esi + 0x8130], eax
jmp 0x403b9d
push 0x4000
lea eax, [esi + 0xcc]
push eax
mov ecx, esi
push 0x3e9
mov ebx, dword [esi]
call dword [ebx + 0x84]
mov ecx, dword [esi + 0x40]
call fcn.004050f3
mov eax, dword [esi + 0x40e8]
cmp eax, 1
jle 0x40396e
or byte [esi + 0x40ed], 8
xor ecx, ecx
cmp eax, 0xa
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], ecx
jg 0x40399a
mov eax, dword [esi + 0x3c]
cmp dword [eax + 0x298], ecx
jne 0x40398e
cmp dword [eax + 0x2a8], ecx
je 0x40399a
mov dword [ebp - 0xe0], 0x400000
jmp 0x4039a4
mov dword [ebp - 0xe0], 0
xor edi, edi
cmp dword [esi + 0x40e0], edi
jle 0x403a90
mov dword [ebp - 0x14], edi
mov dword [ebp - 0xc], edi
mov eax, dword [ebp - 0x10]
cmp dword [esi + 0x40e8], eax
jle 0x403a90
push 2
mov ecx, esi
push edi
mov eax, dword [esi]
push 0x102c
push 0x415
call dword [eax + 0xa8]
test al, 2
je 0x403a7f
mov ecx, dword [esi + 0x40dc]
mov eax, dword [ebp - 0xc]
inc dword [ebp - 0x10]
mov ebx, dword [ecx + eax]
mov ecx, dword [esi + 0x40e4]
mov eax, dword [ebx + 0xd0]
add ecx, dword [ebp - 0x14]
and eax, 0x400000
mov dword [ebp - 4], ecx
or dword [ebp - 8], eax
add dword [ebp - 0x14], 0x14
lea ecx, [ebp - 0xdc]
push ecx
push ebx
push dword [esi + 0x3c]
call fcn.0040b788
add esp, 0xc
lea eax, [ebp - 0xdc]
mov ecx, dword [esi + 0x40]
push eax
call fcn.004050f8
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xe0]
mov dword [ecx], ebx
inc dword [ebx + 0xdc]
test dword [ebx + 0xd0], eax
mov eax, 2
je 0x403a5d
cmp dword [ebx + 0xe0], 1
sbb eax, eax
inc eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 4], eax
sub eax, 2
cmp eax, 1
mov eax, 0
adc eax, 0xffffffff
and eax, 0x400000
or eax, dword [esi + 0x40ec]
mov dword [ecx + 8], eax
add dword [ebp - 0xc], 4
inc edi
cmp dword [esi + 0x40e0], edi
jg 0x4039b8
mov byte [esi + 0x1ecc], 0
mov eax, dword [ebp - 0xe0]
test dword [ebp - 8], eax
je 0x403aa9
or byte [esi + 0x40ee], 0x40
lea eax, [esi + 0xcc]
mov ecx, dword [esi + 0x40]
push dword [esi + 0x40d0]
push dword [esi + 0x40ec]
push eax
call fcn.00405131
mov eax, dword [esi + 0x40d0]
test eax, eax
je 0x403b38
cmp dword [eax + 0x1c], 0
je 0x403b38
push 0x2000
lea ecx, [ebp - 0x20dc]
push ecx
lea edi, [esi + 0x40f0]
push eax
call fcn.0041237d
add esp, 0xc
lea ecx, [ebp - 0x20dc]
push ecx
call fcn.00417f20
add esp, 4
inc eax
push eax
call fcn.00417e80
add esp, 4
mov dword [edi], eax
lea eax, [ebp - 0x20dc]
push eax
push dword [edi]
call fcn.00417c20
add esp, 8
mov ecx, dword [esi + 0x40cc]
push dword [esi + 0x40e8]
push dword [esi + 0x40e4]
push dword [esi + 0x40d0]
call fcn.0041076a
mov ecx, esi
call fcn.00404041
mov ecx, 0x102
push 0
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x8130], ecx
push dword [eax + 0x364]
push ecx
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
jne 0x403b77
push esi
push 0
push 0x47b
call fcn.0041792c
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
push esi
push 0
push 0x47c
call fcn.0041792c
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
mov ecx, esi
call fcn.0040f23d
mov eax, 1
jmp 0x403b9d
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret