Function at 0x40ad40
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4bf0f8
push eax
mov dword fs:[0], esp
sub esp, 0x174
push ebx
push esi
push edi
mov edi, ecx
mov eax, 0x2000
xor esi, esi
test word [edi + 0x42c0], ax
je 0x40ad8e
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
and ax, cx
mov edx, ecx
mov byte [ebp - 0xd], 1
cmp ax, dx
je 0x40ad92
mov byte [ebp - 0xd], 0
lea ecx, [ebp - 0x14]
call fcn.004a4720
lea eax, [ebp - 0x14]
push esi
push eax
mov dword [ebp - 4], esi
call fcn.0049f8f0
add esp, 8
test eax, eax
jl 0x40adc6
lea ecx, [ebp - 0x14]
call fcn.004a4800
mov ecx, eax
call fcn.004a4a70
mov ebx, eax
mov dword [ebp - 0x2c], ebx
cmp ebx, esi
jne 0x40add7
mov ecx, 0xc3ff
and word [edi + 0x42c0], cx
jmp 0x40b0f6
mov ecx, ebx
call fcn.00478350
mov dword [ebp - 0x30], eax
movzx eax, word [edi + 0x42c0]
push 0
push 1
lea edx, [ebp - 0x80]
push edx
and eax, 0x1400
push eax
mov ecx, ebx
call fcn.00478e10
test eax, eax
je 0x40b0f6
xor ebx, ebx
mov edx, 0x400
mov ecx, 1
mov word [ebp - 0x28], cx
mov dword [ebp - 0x18], 0x128
mov word [ebp - 0x1e], bx
test word [edi + 0x42c0], dx
je 0x40aee9
mov ax, word [ebp + 8]
mov ecx, dword [ebp - 0x30]
movsx esi, ax
lea edx, [ecx - 0xd]
cmp esi, edx
jl 0x40ae53
movsx eax, word [edi + 0x42ca]
add ecx, 0xfffffff4
cmp ecx, eax
jle 0x40ae4f
mov ax, cx
mov word [ebp + 8], ax
mov cx, word [ebp + 0xa]
mov word [edi + 0x42cc], cx
movzx ecx, word [edi + 0x42ca]
cmp ax, cx
jge 0x40aea9
movsx edx, ax
movsx esi, cx
mov ebx, 0x25
sub esi, edx
mov word [edi + 0x42ca], ax
mov word [ebp - 0x1e], bx
xor eax, eax
jmp 0x40ae90
movzx ecx, word [eax + str.CtrlLeft]
mov word [ebp + eax - 0x70], cx
add eax, 2
test cx, cx
jne 0x40ae90
jmp 0x40af97
jle 0x40b0f6
movsx esi, ax
movsx ecx, cx
mov ebx, 0x27
sub esi, ecx
mov word [edi + 0x42ca], ax
mov word [ebp - 0x1e], bx
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + str.CtrlRight]
mov word [ebp + eax - 0x70], cx
add eax, 2
test cx, cx
jne 0x40aed0
jmp 0x40af97
movzx ecx, word [edi + 0x42cc]
mov ax, word [ebp + 0xa]
cmp ax, cx
mov dx, word [ebp + 8]
mov word [edi + 0x42ca], dx
jge 0x40af43
movsx esi, cx
movsx ecx, ax
sub esi, ecx
cmp byte [ebp - 0xd], 0
mov ebx, 0x26
mov word [ebp - 0x1e], bx
mov word [edi + 0x42cc], ax
mov ecx, str.CtrlShiftUp
jne 0x40af2c
mov ecx, str.CtrlUp
lea edx, [ebp - 0x70]
nop
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x40af30
jmp 0x40af81
jle 0x40af81
movsx edx, cx
movsx esi, ax
mov ebx, 0x28
sub esi, edx
cmp byte [ebp - 0xd], 0
mov word [ebp - 0x1e], bx
mov word [edi + 0x42cc], ax
mov ecx, str.CtrlShiftDown
jne 0x40af6d
mov ecx, str.CtrlDown
lea edx, [ebp - 0x70]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x40af70
cmp byte [ebp - 0xd], 0
je 0x40af8e
mov dword [ebp - 0x18], 0x138
test bx, bx
je 0x40b0f6
mov eax, dword [0x50b3a0]
cmp byte [eax + 0x11283], 2
jne 0x40b0a7
mov ebx, dword [ebp - 0x2c]
push 1
mov ecx, ebx
call fcn.00478e80
test al, al
je 0x40b0f6
mov ecx, dword [ebp + 8]
mov dword [edi + 0x42ca], ecx
mov edx, 0x40
mov ecx, ebx
mov word [ebp - 0x180], dx
call fcn.0047c2b0
test al, al
je 0x40b03f
cmp esi, 1
jle 0x40b011
lea eax, [ebp - 0x70]
push eax
push esi
lea ecx, [ebp - 0x17e]
push str.for_RCounter__i_1__1_do_Keys___s___end
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
lea eax, [ebp - 0x180]
push eax
mov ecx, ebx
call fcn.0047c2f0
jmp 0x40b0f6
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x17e]
push str.Keys___s__
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0
lea eax, [ebp - 0x180]
push eax
mov ecx, ebx
call fcn.0047c2f0
jmp 0x40b0f6
cmp esi, 1
jle 0x40b073
lea ecx, [ebp - 0x70]
push ecx
push esi
lea edx, [ebp - 0x17e]
push str._Rep___i___s__End
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
lea eax, [ebp - 0x180]
push eax
mov ecx, ebx
call fcn.0047c2f0
jmp 0x40b0f6
xor eax, eax
jmp 0x40b080
movzx ecx, word [ebp + eax - 0x70]
mov word [ebp + eax - 0x17e], cx
add eax, 2
test cx, cx
jne 0x40b080
push 0
lea eax, [ebp - 0x180]
push eax
mov ecx, ebx
call fcn.0047c2f0
jmp 0x40b0f6
movzx ecx, bx
push 0
push ecx
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
mov word [ebp - 0x20], si
mov esi, dword [ebp - 0x2c]
push 0
lea edx, [ebp - 0x28]
push edx
mov ecx, esi
mov word [ebp - 0x1c], ax
mov dword [ebp - 0x24], 1
call fcn.0047cc40
push 0
lea ecx, [ebp - 0x28]
mov eax, 1
push ecx
mov ecx, esi
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], ax
mov dword [ebp - 0x18], 0x120
call fcn.0047cc40
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
call fcn.004a4770
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4