Function at 0x40d830
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x3c
cmp dword [0x4abc1c], 0
push ebx
push ebp
push esi
je 0x40d84a
mov bl, byte [0x4aa1c4]
jmp 0x40d93c
cmp dword [0x4ab3d0], 0
je 0x40d85e
mov bl, byte [0x4ab29d]
jmp 0x40d93c
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0xa0
xor bl, bl
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d879
mov bl, 0x10
push 0xa1
call esi
mov edx, 0x8000
test dx, ax
je 0x40d88d
or bl, 0x20
push 0xa2
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d8a1
or bl, 1
push 0xa3
call esi
mov edx, 0x8000
test dx, ax
je 0x40d8b5
or bl, 2
push 0xa4
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d8c9
or bl, 4
push 0xa5
call esi
mov edx, 0x8000
test dx, ax
je 0x40d8dd
or bl, 8
push 0x5b
call esi
mov ecx, 0x8000
test cx, ax
je 0x40d8ee
or bl, 0x40
push 0x5c
call esi
mov edx, 0x8000
test dx, ax
je 0x40d8ff
or bl, 0x80
cmp dword [0x4ab3d0], 0
je 0x40d93c
mov al, bl
not al
and al, byte [0x4ab29d]
je 0x40d93c
mov cl, byte [0x4ab29f]
not al
and byte [0x4ab29d], al
and byte [0x4ab29e], al
and cl, al
mov al, cl
mov byte [0x4ab29f], cl
mov ecx, 0x4ab2c0
call fcn.00411c90
mov eax, dword [esp + 0x4c]
mov ebp, 1
push ebp
xor esi, esi
push esi
push esi
push ebx
push eax
mov eax, 0xffc3d44f
call fcn.00411520
add esp, 0x14
cmp dword [0x4abc1c], ebp
jne 0x40dade
mov ecx, dword [0x4a7978]
movzx edx, byte [ecx + 0xd6]
mov ecx, dword [0x4aa1d0]
mov esi, 0xffc3d44d
sub esi, edx
cmp ecx, dword [0x4aa1cc]
jne 0x40d9a2
call fcn.00410f60
mov ecx, dword [0x4aa1d0]
test eax, eax
je 0x40da23
cmp dword [0x4abc1c], ebp
jne 0x40d9dd
mov edx, dword [0x4aa1d4]
lea eax, [ecx*8]
sub eax, ecx
lea eax, [edx + eax*4]
xor edx, edx
or byte [0x4aa1bb], 1
mov word [eax + 4], dx
movzx edx, di
mov dword [eax], ebp
mov word [eax + 6], dx
mov dword [eax + 8], 4
mov dword [eax + 0x10], esi
mov dword [eax + 0xc], 0
jmp 0x40da1b
mov eax, dword [0x4aa1d4]
lea eax, [eax + ecx*8]
test di, di
jne 0x40d9f5
mov dword [eax], 0
mov dword [eax + 4], esi
jmp 0x40da1b
mov dl, byte [0x4aa1c4]
test dl, 3
jne 0x40da0d
test dl, 0xc
je 0x40da0d
mov dword [eax], 0x104
jmp 0x40da13
mov dword [eax], 0x100
mov byte [eax + 6], 0
mov word [eax + 4], di
add ecx, ebp
mov dword [0x4aa1d0], ecx
mov edx, dword [0x4a7978]
movzx eax, byte [edx + 0xd6]
mov esi, 0xffc3d44d
sub esi, eax
cmp ecx, dword [0x4aa1cc]
jne 0x40da52
call fcn.00410f60
test eax, eax
je 0x40db4e
mov ecx, dword [0x4aa1d0]
mov eax, dword [0x4aa1d4]
cmp dword [0x4abc1c], ebp
jne 0x40daa1
or byte [0x4aa1bb], 1
lea edx, [ecx*8]
sub edx, ecx
lea eax, [eax + edx*4]
xor edx, edx
mov word [eax + 4], dx
movzx edx, di
add ecx, ebp
mov dword [eax], ebp
mov word [eax + 6], dx
mov dword [eax + 8], 6
mov dword [eax + 0x10], esi
mov dword [eax + 0xc], 0
mov dword [0x4aa1d0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
lea eax, [eax + ecx*8]
test di, di
jne 0x40dac1
add ecx, ebp
mov dword [eax], 0
mov dword [eax + 4], esi
mov dword [0x4aa1d0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
add ecx, ebp
mov dword [eax], 0x101
mov byte [eax + 6], 0
mov word [eax + 4], di
mov dword [0x4aa1d0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
mov eax, dword [0x4a7978]
xor ecx, ecx
mov word [esp + 0x14], cx
mov dword [esp + 0x10], ebp
mov word [esp + 0x16], di
mov dword [esp + 0x18], 4
mov dword [esp + 0x1c], esi
movzx edx, byte [eax + 0xd6]
mov ecx, 0xffc3d44d
sub ecx, edx
xor edx, edx
mov dword [esp + 0x20], ecx
mov word [esp + 0x30], dx
mov dword [esp + 0x2c], ebp
mov word [esp + 0x32], di
mov dword [esp + 0x34], 6
mov dword [esp + 0x38], esi
movzx eax, byte [eax + 0xd6]
push 0x1c
lea edx, [esp + 0x14]
mov ecx, 0xffc3d44d
push edx
sub ecx, eax
push 2
mov dword [esp + 0x48], ecx
call dword [sym.imp.USER32.dll_SendInput]
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret