Function at 0x434409
Capabilities:
Accept command line arguments
Log keystrokes via polling
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
mov dword [ebp - 0x10], 0xb3ae3556
mov bl, dl
mov dword [ebp - 0x18], 0xfffffffa
push esi
mov dword [ebp - 0x24], 4
mov esi, ecx
mov dword [ebp - 0x10], 0xffffffed
cmp dword [ebp - 0x10], 0xa
push 0
pop edx
jg 0x4345ae
push edi
push 2
pop edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x14], edx
je 0x4344af
push edi
lea ecx, [ebp - 0x38]
call fcn.004016e3
mov dword [ebp - 0x1c], 0
jmp 0x434476
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov dword [eax + ecx*4], 0x56251324
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x434466
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xc], 0x26d2e858
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
test eax, eax
mov eax, dword [ebp - 0xc]
setns dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x38]
call fcn.004017b5
jmp 0x434577
mov dword [ebp - 8], 0xfffffffd
xor ecx, ecx
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x28], 0xd0d7
mov dword [ebp - 0x2c], 6
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
cmp eax, 1
setl cl
sub ecx, dword [ebp - 8]
cmp ecx, 0xfffffffd
jne 0x4344e4
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x43450a
cmp dword [ebp - 0x20], edx
jne 0x43450a
mov ecx, edx
jmp 0x43450d
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x14]
sub ecx, eax
cmp ecx, dword [ebp - 8]
jle 0x43451a
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 8]
inc ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
sub ecx, eax
je 0x434530
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
add eax, 0x6d3db623
mov dword [ebp - 0x2c], eax
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x434579
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
xor edx, edx
mov dword [ebp - 0x1c], edx
jmp 0x43459a
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x434597
push edx
push 0xd76
push edx
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
xor edx, edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 8
jg 0x43457e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xa
jle 0x434442
pop edi
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x4345c0
push edx
call dword [sym.imp.USER32.dll_GetKeyboardState]
xor edx, edx
test bl, bl
je 0x4345d3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
jmp 0x4345e0
cmp byte [esi], 0
je 0x4345e0
push edx
push edx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret