Function at 0x1040fed
Capabilities:
Log keystrokes via polling

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0x1d
mov esi, ecx
call fcn.0104881c
mov edi, eax
mov ax, word [ebp + 8]
xor ebx, ebx
mov dword [edi + 4], ebx
mov word [edi + 0xc], ax
cmp dword [esi + 0x44], ebx
jbe 0x1041030
mov eax, dword [esi + 0x50]
mov ecx, dword [eax + ebx*4]
mov eax, dword [ecx]
push edi
call dword [eax]
cmp byte [edi + 0xe], 0
jne 0x10410c3
inc ebx
cmp ebx, dword [esi + 0x44]
jb 0x1041015
mov ecx, edi
call fcn.010486cd
mov di, word [ebp + 8]
cmp di, 9
jne 0x104121c
cmp dword [esi + 8], 0
jbe 0x104139b
mov ebx, dword [esi + 0x10]
lea eax, [ebp - 0xc]
push eax
xor edi, edi
push ebx
mov ecx, esi
mov byte [esi + 0xd4], 1
mov dword [ebp - 4], edi
mov dword [ebp - 0xc], edi
call fcn.010487e8
test al, al
je 0x10410ca
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x47], 1
jne 0x10410ca
push 0x16
call fcn.0104881c
mov edi, eax
or dword [edi + 0xc], 0xffffffff
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [ebp - 0xc]
push edi
shr eax, 0xf
and al, 1
mov byte [edi + 0x10], al
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [edi + 0xc]
cmp eax, 0xffffffff
je 0x10410bc
lea ecx, [ebp - 4]
push ecx
push eax
mov ecx, esi
call fcn.010487e8
test al, al
jne 0x10410bc
and dword [ebp - 4], 0
mov ecx, edi
jmp 0x10411f6
mov ecx, edi
jmp 0x1041396
cmp ebx, 0xffffffff
jne 0x104110b
cmp dword [esi + 0x74], edi
je 0x10410fe
push 0x16
call fcn.0104881c
mov edi, eax
or dword [edi + 0xc], ebx
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
and dword [edi + 4], 0
push edi
shr eax, 0xf
and al, 1
mov byte [edi + 0x10], al
mov ecx, dword [esi + 0x74]
mov eax, dword [ecx]
call dword [eax]
jmp 0x10410a0
mov ebx, dword [esi + 0x94]
cmp ebx, 0xffffffff
jne 0x104110b
xor ebx, ebx
mov eax, dword [esi]
mov eax, dword [eax]
inc eax
push 0x10
mov dword [ebp - 8], eax
call fcn.0104881c
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
mov dword [ebp - 0xc], eax
call edi
mov ecx, 0x8000
test cx, ax
jne 0x104113a
call fcn.0105ae22
test al, al
je 0x1041151
push 0x10
call edi
mov ecx, 0x8000
test cx, ax
je 0x10411a2
call fcn.0105ae22
test al, al
je 0x10411a2
and dword [ebp - 0x10], 0
cmp dword [ebp - 8], 0
jbe 0x10411f3
lea edi, [ebx + 1]
lea eax, [ebp - 0x14]
push eax
xor edx, edx
mov eax, edi
div dword [ebp - 8]
mov ecx, esi
push edx
call fcn.010487e8
cmp al, 1
jne 0x1041194
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x14]
mov byte [eax + 0xc], 0
mov edx, dword [ebx]
push eax
mov ecx, ebx
call dword [edx + 8]
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0xc], 0
jne 0x10411f0
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
inc edi
cmp eax, dword [ebp - 8]
jb 0x1041162
jmp 0x10411f3
mov eax, dword [ebp - 8]
lea edi, [eax - 1]
cmp edi, eax
jae 0x10411f3
lea eax, [edi + ebx]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
xor edx, edx
div dword [ebp - 8]
mov ecx, esi
push edx
call fcn.010487e8
cmp al, 1
jne 0x10411e5
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x14]
mov byte [eax + 0xc], 0
mov edx, dword [ebx]
push eax
mov ecx, ebx
call dword [edx + 8]
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0xc], 0
jne 0x10411f0
dec edi
dec dword [ebp - 0x10]
cmp edi, dword [ebp - 8]
jb 0x10411b2
jmp 0x10411f3
mov dword [ebp - 4], ebx
mov ecx, dword [ebp - 0xc]
call fcn.010486cd
mov eax, dword [ebp - 4]
test eax, eax
je 0x104139b
cmp byte [eax + 0x44], 0
je 0x104139b
push eax
mov ecx, esi
call fcn.01040c41
mov di, word [ebp + 8]
cmp di, 0x28
jne 0x1041264
push 0
mov ecx, esi
mov byte [esi + 0xd4], 1
call fcn.0104085c
cmp eax, 0xffffffff
je 0x104139b
lea ecx, [ebp + 8]
push ecx
push eax
mov ecx, esi
call fcn.010487e8
test al, al
je 0x104139b
mov eax, dword [ebp + 8]
cmp byte [eax + 0x44], 0
je 0x104139b
push eax
mov ecx, esi
call fcn.01040c41
cmp di, 0x26
jne 0x10412ac
push 1
mov ecx, esi
mov byte [esi + 0xd4], 1
call fcn.0104085c
cmp eax, 0xffffffff
je 0x104139b
lea ecx, [ebp + 8]
push ecx
push eax
mov ecx, esi
call fcn.010487e8
test al, al
je 0x104139b
mov eax, dword [ebp + 8]
cmp byte [eax + 0x44], 0
je 0x104139b
push eax
mov ecx, esi
call fcn.01040c41
cmp di, 0x25
jne 0x10412f4
push 2
mov ecx, esi
mov byte [esi + 0xd4], 1
call fcn.0104085c
cmp eax, 0xffffffff
je 0x104139b
lea ecx, [ebp + 8]
push ecx
push eax
mov ecx, esi
call fcn.010487e8
test al, al
je 0x104139b
mov eax, dword [ebp + 8]
cmp byte [eax + 0x44], 0
je 0x104139b
push eax
mov ecx, esi
call fcn.01040c41
cmp di, 0x27
jne 0x1041334
push 3
mov ecx, esi
mov byte [esi + 0xd4], 1
call fcn.0104085c
cmp eax, 0xffffffff
je 0x104139b
lea ecx, [ebp + 8]
push ecx
push eax
mov ecx, esi
call fcn.010487e8
test al, al
je 0x104139b
mov eax, dword [ebp + 8]
cmp byte [eax + 0x44], 0
je 0x104139b
push eax
mov ecx, esi
call fcn.01040c41
cmp di, 0x20
je 0x1041340
cmp di, 0xd
jne 0x104139b
cmp dword [esi + 0x88], 0xffffffff
mov byte [esi + 0xd4], 1
jne 0x104139b
cmp dword [esi + 0x10], 0xffffffff
je 0x104139b
push 0x13
call fcn.0104881c
mov ebx, eax
lea eax, [ebp + 8]
push eax
push dword [esi + 0x10]
mov ecx, esi
call fcn.010487e8
test al, al
jne 0x1041377
or dword [esi + 0x10], 0xffffffff
jmp 0x1041394
mov edi, dword [ebp + 8]
cmp byte [edi + 0x44], 0
je 0x1041388
mov eax, dword [edi]
push ebx
mov ecx, edi
call dword [eax + 8]
mov eax, dword [edi + 0xa0]
mov dword [esi + 0x88], eax
mov ecx, ebx
call fcn.010486cd
pop edi
pop esi
pop ebx
leave
ret 4