Function at 0x40d5d0
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x38
push ebx
push ebp
mov bp, word [esp + 0x44]
push esi
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push edi
mov edi, eax
cmp edi, 0xffffffff
jne 0x40d6f3
cmp dword [0x4c9f08], 0
je 0x40d600
mov al, byte [0x4c73c7]
jmp 0x40d6ed
cmp dword [0x4c85d8], 0
je 0x40d613
mov al, byte [0x4c84a5]
jmp 0x40d6ed
push 0xa0
xor bl, bl
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d628
mov bl, 0x10
push 0xa1
call esi
mov edx, 0x8000
test dx, ax
je 0x40d63c
or bl, 0x20
push 0xa2
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d650
or bl, 1
push 0xa3
call esi
mov edx, 0x8000
test dx, ax
je 0x40d664
or bl, 2
push 0xa4
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d678
or bl, 4
push 0xa5
call esi
mov edx, 0x8000
test dx, ax
je 0x40d68c
or bl, 8
push 0x5b
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d69d
or bl, 0x40
push 0x5c
call esi
mov edx, 0x8000
test dx, ax
je 0x40d6ae
or bl, 0x80
cmp dword [0x4c85d8], 0
je 0x40d6eb
mov al, bl
not al
and al, byte [0x4c84a5]
je 0x40d6eb
mov cl, byte [0x4c84a7]
not al
and byte [0x4c84a5], al
and byte [0x4c84a6], al
and cl, al
mov al, cl
mov byte [0x4c84a7], cl
mov ecx, 0x4c84c8
call fcn.00411b50
mov al, bl
movzx edi, al
and edi, 0xffffffc0
cmp dword [0x4c9f08], 0
je 0x40d706
mov al, byte [0x4c73c7]
jmp 0x40d7f4
cmp dword [0x4c85d8], 0
je 0x40d719
mov al, byte [0x4c84a5]
jmp 0x40d7f4
push 0xa0
xor bl, bl
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d72e
mov bl, 0x10
push 0xa1
call esi
mov edx, 0x8000
test dx, ax
je 0x40d742
or bl, 0x20
push 0xa2
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d756
or bl, 1
push 0xa3
call esi
mov edx, 0x8000
test dx, ax
je 0x40d76a
or bl, 2
push 0xa4
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d77e
or bl, 4
push 0xa5
call esi
mov edx, 0x8000
test dx, ax
je 0x40d792
or bl, 8
push 0x5b
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d7a3
or bl, 0x40
push 0x5c
call esi
mov edx, 0x8000
test dx, ax
je 0x40d7b4
or bl, 0x80
cmp dword [0x4c85d8], 0
je 0x40d7f1
mov al, bl
not al
and al, byte [0x4c84a5]
je 0x40d7f1
mov cl, byte [0x4c84a7]
not al
and byte [0x4c84a5], al
and byte [0x4c84a6], al
and cl, al
mov al, cl
mov byte [0x4c84a7], cl
mov ecx, 0x4c84c8
call fcn.00411b50
movzx eax, bl
mov ebx, 1
push ebx
push 0
push 0
push eax
push edi
mov esi, 0xffc3d44d
call fcn.00411350
mov eax, dword [0x4c49ac]
add esp, 0x14
cmp dword [0x4c9f08], ebx
jne 0x40d98c
movzx ecx, byte [eax + 0xf6]
sub esi, ecx
mov ecx, dword [0x4c73d8]
cmp ecx, dword [0x4c73d4]
jne 0x40d850
call fcn.00410d50
mov ecx, dword [0x4c73d8]
test eax, eax
je 0x40d8cf
cmp dword [0x4c9f08], ebx
jne 0x40d889
mov eax, dword [0x4c73dc]
lea edx, [ecx*8]
sub edx, ecx
lea eax, [eax + edx*4]
xor edx, edx
or byte [0x4c73c6], bl
mov word [eax + 4], dx
movzx edx, bp
mov dword [eax], ebx
mov word [eax + 6], dx
mov dword [eax + 8], 4
mov dword [eax + 0x10], esi
mov dword [eax + 0xc], 0
jmp 0x40d8c7
mov eax, dword [0x4c73dc]
lea eax, [eax + ecx*8]
test bp, bp
jne 0x40d8a1
mov dword [eax], 0
mov dword [eax + 4], esi
jmp 0x40d8c7
mov dl, byte [0x4c73c7]
test dl, 3
jne 0x40d8b9
test dl, 0xc
je 0x40d8b9
mov dword [eax], 0x104
jmp 0x40d8bf
mov dword [eax], 0x100
mov byte [eax + 6], 0
mov word [eax + 4], bp
add ecx, ebx
mov dword [0x4c73d8], ecx
mov edx, dword [0x4c49ac]
movzx eax, byte [edx + 0xf6]
mov esi, 0xffc3d44d
sub esi, eax
cmp ecx, dword [0x4c73d4]
jne 0x40d8fe
call fcn.00410d50
test eax, eax
je 0x40d9f2
mov ecx, dword [0x4c73d8]
mov eax, dword [0x4c73dc]
cmp dword [0x4c9f08], ebx
jne 0x40d94d
or byte [0x4c73c6], bl
lea edx, [ecx*8]
sub edx, ecx
lea eax, [eax + edx*4]
xor edx, edx
pop edi
mov word [eax + 4], dx
movzx edx, bp
mov dword [eax + 0x10], esi
pop esi
add ecx, ebx
pop ebp
mov dword [eax], ebx
mov word [eax + 6], dx
mov dword [eax + 8], 6
mov dword [eax + 0xc], 0
mov dword [0x4c73d8], ecx
pop ebx
add esp, 0x38
ret
lea eax, [eax + ecx*8]
test bp, bp
jne 0x40d96e
pop edi
mov dword [eax + 4], esi
pop esi
add ecx, ebx
pop ebp
mov dword [eax], 0
mov dword [0x4c73d8], ecx
pop ebx
add esp, 0x38
ret
pop edi
pop esi
mov word [eax + 4], bp
add ecx, ebx
pop ebp
mov dword [eax], 0x101
mov byte [eax + 6], 0
mov dword [0x4c73d8], ecx
pop ebx
add esp, 0x38
ret
xor ecx, ecx
mov word [esp + 0x14], cx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], ebx
mov word [esp + 0x16], bp
mov dword [esp + 0x18], 4
movzx edx, byte [eax + 0xf6]
sub esi, edx
xor edx, edx
mov dword [esp + 0x38], ecx
mov word [esp + 0x30], dx
mov dword [esp + 0x20], esi
mov dword [esp + 0x2c], ebx
mov word [esp + 0x32], bp
mov dword [esp + 0x34], 6
movzx eax, byte [eax + 0xf6]
push 0x1c
lea edx, [esp + 0x14]
mov ecx, 0xffc3d44d
push edx
sub ecx, eax
push 2
mov dword [esp + 0x48], ecx
call dword [sym.imp.USER32.dll_SendInput]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret