Function at 0x403930
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x178
mov eax, dword [0x422040]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov ebx, ecx
mov dword [ebp - 0x174], eax
push edi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x170], ebx
push eax
push dword [ebx]
call fcn.0040ff20
push 0xa8
lea eax, [ebp - 0xb4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x14
lea esi, [ebp - 0xec]
xor edi, edi
push 0
push edi
lea eax, [ebp - 0x144]
push eax
push dword [ebx + 4]
call fcn.00410c50
inc edi
lea esi, [esi + 0x38]
add esp, 0x10
movups xmm0, xmmword [eax]
movups xmmword [esi - 0x38], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esi - 0x28], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esi - 0x18], xmm0
movq xmm0, qword [eax + 0x30]
movq qword [esi - 8], xmm0
cmp edi, 4
jl 0x403983
lea edx, [ebp - 0xdc]
mov dword [ebp - 0x150], 4
lea edi, [ebx + 0x38]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x148], edi
mov esi, dword [edi + 0x18]
mov ebx, dword [edi - 0x30]
mov dword [edi - 0x30], 0
test esi, esi
je 0x403a4a
cmp dword [esi], 0
je 0x403a4a
mov edx, dword [esi + 4]
cmp edx, 1
je 0x403a2b
cmp edx, 2
je 0x403a2b
cmp edx, 4
je 0x403a2b
cmp edx, 0xfe
ja 0x403a3c
mov ecx, edx
mov eax, 1
and ecx, 0x1f
sar edx, 5
shl eax, cl
test dword [ebp + edx*4 - 0x10c], eax
je 0x403a3c
jmp 0x403a37
push edx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x403a3c
mov eax, dword [esi]
or dword [edi - 0x30], eax
add esi, 8
cmp dword [esi], 0
jne 0x4039f7
mov edx, dword [ebp - 0x14c]
mov ecx, dword [edi + 0x1c]
test ecx, ecx
je 0x403acb
cmp byte [edx - 0x10], 0
je 0x403acb
cmp dword [ecx], 0
je 0x403ab8
nop dword [eax]
mov esi, dword [ecx + 4]
cmp esi, 4
jl 0x403a89
movq xmm0, qword [edx]
mov ax, word [edx + 8]
movq qword [ebp - 0x15c], xmm0
mov word [ebp - 0x154], ax
cmp byte [ebp + esi - 0x160], 0
jmp 0x403aa9
movq xmm0, qword [edx + 0xa]
mov ax, word [edx + 0x12]
movq qword [ebp - 0x15c], xmm0
mov word [ebp - 0x154], ax
cmp byte [ebp + esi - 0x15c], 0
je 0x403ab0
mov eax, dword [ecx]
or dword [edi - 0x30], eax
add ecx, 8
cmp dword [ecx], 0
jne 0x403a60
movups xmm2, xmmword [edx + 0x10]
mov eax, dword [edx + 0x20]
mov dword [edi + 0x10], eax
mov eax, dword [edx + 0x24]
movups xmmword [edi], xmm2
mov dword [edi + 0x14], eax
mov eax, dword [edi - 0x30]
mov ecx, ebx
mov dword [ebp - 0x168], eax
not ecx
and ecx, eax
not eax
mov dword [edi - 0x2c], ecx
and eax, ebx
mov dword [edi - 0x28], eax
mov eax, dword [edi - 8]
mov ebx, dword [edi - 0xc]
mov edx, dword [edi - 0x14]
mov esi, dword [edi - 0x10]
mov dword [edi - 4], eax
mov dword [edi - 8], ebx
mov dword [edi - 0x10], edx
mov dword [edi - 0xc], esi
mov dword [ebp - 0x164], eax
mov eax, dword [edi - 0x1c]
mov dword [ebp - 0x160], ebx
mov ebx, dword [ebp - 0x148]
mov dword [ebp - 0x16c], ecx
mov ecx, dword [edi - 0x18]
mov dword [edi - 0x18], eax
mov dword [edi - 0x14], ecx
mov edi, dword [edi - 0x20]
mov dword [ebx - 0x1c], edi
and edi, eax
and edi, ecx
mov ecx, ebx
and edi, edx
mov edx, dword [ebp - 0x14c]
and edi, esi
add edx, 0x38
and edi, dword [ebp - 0x160]
and edi, dword [ebp - 0x164]
and edi, dword [ebp - 0x168]
mov eax, edi
mov dword [ebp - 0x14c], edx
or edi, dword [ebp - 0x16c]
not eax
and eax, dword [ebp - 0x168]
mov dword [ecx - 0x24], edi
mov edi, ebx
add edi, 0x50
mov dword [ecx - 0x20], eax
sub dword [ebp - 0x150], 1
mov dword [ebp - 0x148], edi
jne 0x4039e1
mov esi, dword [ebp - 0x170]
add esi, 0x148
push esi
call dword [sym.imp.USER32.dll_GetCursorPos]
push esi
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040ac8b
mov esp, ebp
pop ebp
ret 4