Function at 0x40cb90
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x38
push ebx
push ebp
mov bp, word [esp + 0x44]
push esi
push edi
mov edi, eax
mov eax, dword [0x4c3908]
mov ebx, 1
cmp eax, ebx
jne 0x40cd07
mov ecx, dword [0x4c0de0]
mov esi, 0xffc3d44f
cmp ecx, dword [0x4c0ddc]
jne 0x40cbde
call fcn.004104b0
mov ecx, dword [0x4c0de0]
test eax, eax
je 0x40cc5e
cmp dword [0x4c3908], ebx
jne 0x40cc18
mov edx, dword [0x4c0de4]
lea eax, [ecx*8]
sub eax, ecx
lea eax, [edx + eax*4]
xor edx, edx
or byte [0x4c0dce], bl
mov word [eax + 4], dx
movzx edx, bp
mov dword [eax], ebx
mov word [eax + 6], dx
mov dword [eax + 8], 4
mov dword [eax + 0x10], esi
mov dword [eax + 0xc], 0
jmp 0x40cc56
mov eax, dword [0x4c0de4]
lea eax, [eax + ecx*8]
test bp, bp
jne 0x40cc30
mov dword [eax], 0
mov dword [eax + 4], esi
jmp 0x40cc56
mov dl, byte [0x4c0dcf]
test dl, 3
jne 0x40cc48
test dl, 0xc
je 0x40cc48
mov dword [eax], 0x104
jmp 0x40cc4e
mov dword [eax], 0x100
mov byte [eax + 6], 0
mov word [eax + 4], bp
add ecx, ebx
mov dword [0x4c0de0], ecx
cmp ecx, dword [0x4c0ddc]
jne 0x40cc79
call fcn.004104b0
test eax, eax
je 0x40cf83
mov ecx, dword [0x4c0de0]
mov eax, dword [0x4c0de4]
cmp dword [0x4c3908], ebx
jne 0x40ccc8
or byte [0x4c0dce], bl
lea edx, [ecx*8]
sub edx, ecx
lea eax, [eax + edx*4]
xor edx, edx
pop edi
mov word [eax + 4], dx
movzx edx, bp
mov dword [eax + 0x10], esi
pop esi
add ecx, ebx
pop ebp
mov dword [eax], ebx
mov word [eax + 6], dx
mov dword [eax + 8], 6
mov dword [eax + 0xc], 0
mov dword [0x4c0de0], ecx
pop ebx
add esp, 0x38
ret
lea eax, [eax + ecx*8]
test bp, bp
jne 0x40cce9
pop edi
mov dword [eax + 4], esi
pop esi
add ecx, ebx
pop ebp
mov dword [eax], 0
mov dword [0x4c0de0], ecx
pop ebx
add esp, 0x38
ret
pop edi
pop esi
mov word [eax + 4], bp
add ecx, ebx
pop ebp
mov dword [eax], 0x101
mov byte [eax + 6], 0
mov dword [0x4c0de0], ecx
pop ebx
add esp, 0x38
ret
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp edi, 0xffffffff
jne 0x40ce1c
test eax, eax
je 0x40cd24
mov al, byte [0x4c0dcf]
jmp 0x40ce11
cmp dword [0x4c1fd8], 0
je 0x40cd37
mov al, byte [0x4c1ea5]
jmp 0x40ce11
push 0xa0
xor bl, bl
call esi
mov ecx, 0x8000
test cx, ax
je 0x40cd4c
mov bl, 0x10
push 0xa1
call esi
mov edx, 0x8000
test dx, ax
je 0x40cd60
or bl, 0x20
push 0xa2
call esi
mov ecx, 0x8000
test cx, ax
je 0x40cd74
or bl, 1
push 0xa3
call esi
mov edx, 0x8000
test dx, ax
je 0x40cd88
or bl, 2
push 0xa4
call esi
mov ecx, 0x8000
test cx, ax
je 0x40cd9c
or bl, 4
push 0xa5
call esi
mov edx, 0x8000
test dx, ax
je 0x40cdb0
or bl, 8
push 0x5b
call esi
mov ecx, 0x8000
test cx, ax
je 0x40cdc1
or bl, 0x40
push 0x5c
call esi
mov edx, 0x8000
test dx, ax
je 0x40cdd2
or bl, 0x80
cmp dword [0x4c1fd8], 0
je 0x40ce0f
mov al, bl
not al
and al, byte [0x4c1ea5]
je 0x40ce0f
mov cl, byte [0x4c1ea7]
not al
and byte [0x4c1ea5], al
and byte [0x4c1ea6], al
and cl, al
mov al, cl
mov byte [0x4c1ea7], cl
mov ecx, 0x4c1ec8
call fcn.00411240
mov al, bl
movzx edi, al
mov eax, dword [0x4c3908]
and edi, 0xffffffc0
test eax, eax
je 0x40ce2a
mov al, byte [0x4c0dcf]
jmp 0x40cf18
cmp dword [0x4c1fd8], 0
je 0x40ce3d
mov al, byte [0x4c1ea5]
jmp 0x40cf18
push 0xa0
xor bl, bl
call esi
mov ecx, 0x8000
test cx, ax
je 0x40ce52
mov bl, 0x10
push 0xa1
call esi
mov edx, 0x8000
test dx, ax
je 0x40ce66
or bl, 0x20
push 0xa2
call esi
mov ecx, 0x8000
test cx, ax
je 0x40ce7a
or bl, 1
push 0xa3
call esi
mov edx, 0x8000
test dx, ax
je 0x40ce8e
or bl, 2
push 0xa4
call esi
mov ecx, 0x8000
test cx, ax
je 0x40cea2
or bl, 4
push 0xa5
call esi
mov edx, 0x8000
test dx, ax
je 0x40ceb6
or bl, 8
push 0x5b
call esi
mov ecx, 0x8000
test cx, ax
je 0x40cec7
or bl, 0x40
push 0x5c
call esi
mov edx, 0x8000
test dx, ax
je 0x40ced8
or bl, 0x80
cmp dword [0x4c1fd8], 0
je 0x40cf15
mov al, bl
not al
and al, byte [0x4c1ea5]
je 0x40cf15
mov cl, byte [0x4c1ea7]
not al
and byte [0x4c1ea5], al
and byte [0x4c1ea6], al
and cl, al
mov al, cl
mov byte [0x4c1ea7], cl
mov ecx, 0x4c1ec8
call fcn.00411240
movzx eax, bl
push 1
xor ebx, ebx
push ebx
push ebx
push eax
mov esi, 0xffc3d44f
push edi
mov eax, esi
call fcn.00410a90
add esp, 0x14
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x2c], eax
push 0x1c
lea eax, [esp + 0x14]
push eax
xor ecx, ecx
xor edx, edx
push 2
mov word [esp + 0x20], cx
mov word [esp + 0x22], bp
mov dword [esp + 0x24], 4
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], esi
mov word [esp + 0x3c], dx
mov word [esp + 0x3e], bp
mov dword [esp + 0x40], 6
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], esi
call dword [sym.imp.USER32.dll_SendInput]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret