Function at 0x40be90
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x462c20
mov eax, dword fs:[0]
push eax
sub esp, 0x40
push ebx
push esi
push edi
mov eax, dword [0x47c748]
xor eax, esp
push eax
lea eax, [esp + 0x50]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [0x482764]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov edi, esp
push eax
call fcn.0040a710
add eax, 0x10
add esp, 4
mov dword [edi], eax
call fcn.0040dfc0
test eax, eax
mov dword [esi + 0xe0], eax
jne 0x40bf45
mov edi, dword [sym.imp.USER32.dll_KillTimer]
mov dword [esi + 0x78], eax
mov eax, dword [esi + 0x8c]
push eax
mov eax, dword [esi + 0x20]
push eax
call edi
mov eax, dword [esi + 0x90]
mov ecx, dword [esi + 0x20]
push eax
push ecx
call edi
push esi
call fcn.0040cef0
mov eax, dword [esi + 0x88]
mov edx, dword [esi + 0x20]
mov edi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0xc8
push eax
push edx
call edi
mov eax, dword [esi + 0x20]
push 0
push 0x50
push 0x50
push eax
call edi
mov ecx, dword [esi + 0x20]
push 0
push 0x78
push 0x78
push ecx
call edi
cmp dword [esi + 0xf4], 0x40000
jae 0x40bf75
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x46e1c8
call fcn.0040aca0
mov edx, dword [esi + 0xe0]
push edx
push esi
call fcn.0040ea50
mov dword [esi + 0xf4], eax
call fcn.004013b0
mov eax, dword [esi + 0xdc]
or ebx, 0xffffffff
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov ecx, dword [str.abcbefghikm__pqrstuvwxyzno___]
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push ecx
call edi
test ax, ax
jns 0x40bfee
mov ecx, esi
call fcn.0040c850
test eax, eax
je 0x40c3f1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 1
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], 0
push str.12345
mov byte [ecx + 4], 0
call fcn.00403fd0
call fcn.0040ecc0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x47e3f0]
push edx
call edi
test ax, ax
jns 0x40c036
mov ecx, esi
call fcn.0040c850
test eax, eax
je 0x40c3f1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x46b1ac
call fcn.00403380
call fcn.0040ecc0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x47e3f4]
push eax
call edi
test ax, ax
jns 0x40c07d
mov ecx, esi
call fcn.0040c850
test eax, eax
je 0x40c3f1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x46b1b0
call fcn.00403380
call fcn.0040ecc0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x47e3f8]
push ecx
call edi
test ax, ax
jns 0x40c0c5
mov ecx, esi
call fcn.0040c850
test eax, eax
je 0x40c3f1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x46b1b4
call fcn.00403380
call fcn.0040ecc0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x47e3fc]
push edx
call edi
test ax, ax
jns 0x40c110
push 0
push 0
push 1
push 1
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x46b1b8
mov edi, SysReAllocString
call fcn.00403380
push esi
mov ecx, edi
call fcn.0040cfe0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x47e400]
push eax
call edi
test ax, ax
jns 0x40c15a
push 0
push 0
push 1
push 1
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x46b1e0
mov edi, SysReAllocString
call fcn.00403380
push esi
mov ecx, edi
call fcn.0040cfe0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x47e418]
push ecx
call edi
test ax, ax
jns 0x40c1a5
push 0
push 0
push 1
push 1
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x46b214
mov edi, SysReAllocString
call fcn.00403380
push esi
mov ecx, edi
call fcn.0040cfe0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x47e410]
push edx
call edi
test ax, ax
jns 0x40c1e6
mov eax, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebx, dword [esi + 0xf8]
push eax
push ecx
mov ecx, 2
mov eax, esi
call fcn.0040fab0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x47e414]
push edx
call edi
test ax, ax
jns 0x40c227
mov eax, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebx, dword [esi + 0xf8]
push eax
push ecx
mov ecx, 3
mov eax, esi
call fcn.0040fab0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x47e454]
push edx
call edi
test ax, ax
jns 0x40c27c
mov ecx, esi
call fcn.0040c850
test eax, eax
je 0x40c3f1
call fcn.004013b0
mov eax, dword [esi + 0x100]
mov ecx, dword [esi + 0xfc]
mov ebx, dword [esi + 0xf8]
push eax
push ecx
mov ecx, 1
mov eax, esi
call fcn.0040fab0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x47e424]
push edx
call edi
test ax, ax
jns 0x40c304
push str.MTP1
lea ecx, [esp + 0x18]
call fcn.00403380
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0xe4]
mov dword [esp + 0x5c], 0
call fcn.00403520
mov dword [eax + 8], 2
lea ecx, [esp + 0x14]
mov dword [esp + 0x58], ebx
call fcn.004033c0
push 0x40000
push 0
push 1
push 1
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push str.MTP1
mov edi, SysReAllocString
call fcn.00403380
push esi
mov ecx, edi
call fcn.0040cfe0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x47e428]
push ecx
call edi
test ax, ax
jns 0x40c344
push str.MTP1
lea ecx, [esp + 0x18]
call fcn.00403380
lea edx, [esp + 0x14]
push edx
lea ecx, [esi + 0xe4]
mov dword [esp + 0x5c], 1
call fcn.00403520
mov dword [eax + 8], 4
jmp 0x40c2b7
mov eax, dword [0x47e42c]
push eax
call edi
test ax, ax
jns 0x40c383
push str.MTP1
lea ecx, [esp + 0x18]
call fcn.00403380
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0xe4]
mov dword [esp + 0x5c], 2
call fcn.00403520
mov dword [eax + 8], 8
jmp 0x40c2b7
mov edx, dword [0x47e430]
push edx
call edi
test ax, ax
jns 0x40c3c7
push str.MTP1
lea ecx, [esp + 0x34]
call fcn.00403380
lea eax, [esp + 0x30]
push eax
lea ecx, [esi + 0xe4]
mov dword [esp + 0x5c], 3
call fcn.00403520
mov dword [eax + 8], 0x10
lea ecx, [esp + 0x30]
jmp 0x40c2bb
mov ecx, dword [0x47e420]
push ecx
call edi
test ax, ax
jns 0x40c3db
push esi
call fcn.0040cd70
push esi
mov ecx, 1
call fcn.004095c0
push esi
mov ecx, 2
call fcn.004095c0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret