Function at 0x408e30
Capabilities:
Log keystrokes via polling
Open clipboard
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x416095
mov eax, dword fs:[0]
push eax
sub esp, 0xfe8
mov eax, dword [0x41f040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov si, ax
sar si, 0xf
cmp dword [0x41fae8], 0
jne 0x4091f7
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0
push 0
call ebx
push eax
push dword [0x41faec]
push edi
push 1
push 1
push 0
push 0
push 0x50000000
push str.32be5ed2_5c86_480f_a914_0ff8885a1b3f
push 0x417630
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x41faec], eax
test eax, eax
je 0x408f2c
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0xfe4]
push ecx
push 0x417790
push 0x401
push eax
mov dword [ebp - 0xfe4], 0
call ebx
push 0x84
call fcn.0040947b
add esp, 4
mov dword [ebp - 0xff4], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x408f19
push dword [ebp - 0xfe4]
mov ecx, eax
call fcn.00405aa0
mov dword [ebp - 4], 0xffffffff
mov dword [0x41fae8], eax
jmp 0x408fb6
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x41fae8], eax
jmp 0x408fb6
push 0x84
call fcn.0040947b
add esp, 4
mov dword [ebp - 0xff4], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x408f55
push 0
mov ecx, eax
call fcn.00405aa0
jmp 0x408f57
xor eax, eax
push 0
push 0
mov dword [ebp - 4], 0xffffffff
mov dword [0x41fae8], eax
call ebx
push eax
push dword [0x41faec]
push edi
push 1
push 1
push 0
push 0
push 0x50000000
push str.32BE5ED2_5C86_480F_A914_0FF8885A1B3F
push 0x417688
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, dword [0x41fae8]
mov dword [0x41faec], eax
mov eax, dword [ecx]
call dword [eax + 8]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0
push 0x40c
push dword [0x41faec]
call ebx
push 0
push 1
push 0x402
push dword [0x41faec]
call ebx
mov ecx, dword [0x41fae8]
push 0x402
push edi
call fcn.00403960
push 0x7d0
lea eax, [ebp - 0x7e0]
push 0
push eax
call fcn.0040a700
push 0x7d0
lea eax, [ebp - 0xfb0]
push 0
push eax
call fcn.0040a700
mov ecx, dword [0x41fae8]
add esp, 0x18
mov eax, dword [ecx]
push 1
push 1
push str.test
call dword [eax + 0xc]
lea eax, [ebp - 0xfc8]
push eax
call fcn.00408d60
add esp, 4
test si, si
je 0x409110
cmp dword [ebp - 0xfb4], 7
lea eax, [ebp - 0xfc8]
mov ecx, dword [0x41fae8]
cmova eax, dword [ebp - 0xfc8]
push 0x41769c
push str.hello
push eax
push 0
push 2
lea eax, [ebp - 0xfe0]
mov dword [ebp - 4], 2
push eax
call fcn.00405e60
cmp dword [ebp - 0xfcc], 7
lea esi, [ebp - 0xfe0]
push 0
cmova esi, dword [ebp - 0xfe0]
call dword [sym.imp.USER32.dll_OpenClipboard]
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x409090
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 0xc8]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
mov dword [ebp - 0xfe4], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
sub eax, esi
nop
movzx ecx, word [esi]
lea esi, [esi + 2]
mov word [eax + esi - 2], cx
test cx, cx
jne 0x4090c0
mov esi, dword [ebp - 0xfe4]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
push 0xd
call dword [sym.imp.USER32.dll_SetClipboardData]
push 0
push str.Server
push str.String_copied
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea ecx, [ebp - 0xfe0]
call fcn.00407b50
jmp 0x4091e1
cmp dword [ebp - 0xfb4], 7
lea ecx, [ebp - 0xfc8]
lea edx, [ebp - 0x7e0]
mov dword [ebp - 4], 3
cmova ecx, dword [ebp - 0xfc8]
sub edx, ecx
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx + ecx - 2], ax
test ax, ax
jne 0x409133
lea eax, [ebp - 0x7e0]
mov dword [ebp - 0xff0], str.Ticket
mov dword [ebp - 0xfe8], eax
lea eax, [ebp - 0xff0]
push eax
push 0x408bd0
push edi
push str.AT_DIALOG_EN
push 0
mov dword [ebp - 0xfec], str.Enter_Ticket:
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, dword [sym.imp.USER32.dll_DialogBoxParamW]
push eax
call esi
lea eax, [ebp - 0xfb0]
mov dword [ebp - 0xff0], str.Password
mov dword [ebp - 0xfe8], eax
lea eax, [ebp - 0xff0]
push eax
push 0x408bd0
push edi
push str.AT_DIALOG_EN
push 0
mov dword [ebp - 0xfec], str.Enter_Password:
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call esi
mov ecx, dword [0x41fae8]
lea eax, [ebp - 0xfb0]
push eax
push str.A_Client
lea eax, [ebp - 0x7e0]
push eax
call fcn.00405d10
lea ecx, [ebp - 0xfc8]
call fcn.00407b50
push 0
push 0
push 5
push edi
call ebx
jmp 0x40922c
push dword [0x41faec]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov esi, dword [0x41fae8]
test esi, esi
je 0x409222
mov ecx, esi
call fcn.00405be0
push 0x84
push esi
call fcn.004094ab
add esp, 8
mov dword [0x41fae8], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004094b9
mov esp, ebp
pop ebp
ret