Function at 0x40c0d0
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 8
mov eax, str.down
push ebx
push ebp
mov ebp, dword [esp + 0x18]
push esi
test ebp, ebp
push edi
jne 0x40c0e9
mov eax, 0x41b780
mov esi, dword [esp + 0x1c]
push eax
push esi
push str.D:ORL_vsswinvnc_vncKeymap.cpp_:_keysym___x___s__n
push 9
push 0x41d498
call fcn.004018c0
add esp, 0x14
mov eax, 0x415788
cmp dword [eax], esi
je 0x40c3c8
add eax, 4
cmp eax, 0x415794
jl 0x40c108
xor ecx, ecx
mov eax, 0x41579c
cmp dword [eax], esi
je 0x40c212
add eax, 8
inc ecx
cmp eax, 0x415a84
jl 0x40c121
push esi
call dword [sym.imp.USER32.dll_VkKeyScanA]
mov dword [esp + 0x10], eax
mov ebx, eax
and eax, 0xff
shr ebx, 8
cmp eax, 0xffffffff
je 0x40c3c8
mov ebp, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x14
call ebp
test ah, 0x80
je 0x40c164
xor bl, 1
mov byte [esp + 0x1c], bl
call fcn.004117d0
test eax, eax
je 0x40c2bc
push 0xa0
call ebp
mov si, ax
push 0xa1
shr esi, 0xf
and esi, 1
call ebp
shr eax, 0xf
and eax, 1
push 0
push 0xa1
mov dword [esp + 0x1c], eax
call fcn.0040c030
push 0
push 0xa0
call fcn.0040c030
mov ebx, dword [esp + 0x2c]
and ebx, 0xff
mov edx, ebx
and edx, 1
push edx
push 0x10
call fcn.0040c030
add esp, 0x18
push 0xa2
call ebp
mov di, ax
shr edi, 0xf
and edi, 1
jne 0x40c1ed
mov eax, ebx
and eax, 2
push eax
push 0xa2
call fcn.0040c030
add esp, 8
push 0xa4
call ebp
shr eax, 0xf
and eax, 1
mov dword [esp + 0x1c], eax
jne 0x40c320
and ebx, 4
push ebx
push 0xa4
jmp 0x40c318
mov ebx, dword [ecx*8 + 0x415798]
call fcn.004117d0
test eax, eax
je 0x40c269
push str.D:ORL_vsswinvnc_vncKeymap.cpp_:_IsWinNT_in_keymap_n
push 9
push 0x41d498
call fcn.004018c0
add esp, 0xc
test ebp, ebp
je 0x40c269
cmp ebx, 0x2e
jne 0x40c269
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x11
call edi
mov si, ax
push 0x12
shr esi, 0xf
and esi, 1
call edi
shr eax, 0xf
and eax, 1
test esi, esi
je 0x40c269
test eax, eax
je 0x40c269
call fcn.00411af0
call fcn.004117c0
test eax, eax
je case.0x40c284.20
lea eax, [ebx - 0x11]
cmp eax, 0x94
ja case.0x40c284.20
xor ecx, ecx
mov cl, byte [eax + 0x40c3e4]
jmp dword [ecx*4 + 0x40c3d4]
mov ebx, 0x10
jmp case.0x40c284.20
mov ebx, 0x11
jmp case.0x40c284.20
mov ebx, 0x12
neg ebp
sbb ebp, ebp
and ebp, 0xfffffffe
add ebp, 2
push ebp
push ebx
call fcn.0040c000
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 8
push 0x10
call ebp
mov ebx, dword [esp + 0x1c]
mov si, ax
and ebx, 0xff
mov ecx, ebx
and ecx, 1
shr esi, 0xf
push ecx
push 0x10
and esi, 1
call fcn.0040c030
add esp, 8
push 0x11
call ebp
mov di, ax
shr edi, 0xf
and edi, 1
jne 0x40c302
mov edx, ebx
and edx, 2
push edx
push 0x11
call fcn.0040c030
add esp, 8
push 0x12
call ebp
shr eax, 0xf
and eax, 1
mov dword [esp + 0x1c], eax
jne 0x40c320
and ebx, 4
push ebx
push 0x12
call fcn.0040c030
add esp, 8
push 0x10
call ebp
test ah, 0x80
mov eax, str.down
jne 0x40c333
mov eax, 0x41b780
push eax
push str.D:ORL_vsswinvnc_vncKeymap.cpp_:_shift_state___s__n
push 9
push 0x41d498
call fcn.004018c0
mov eax, dword [esp + 0x30]
neg eax
sbb eax, eax
and al, 0xfe
add eax, 2
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.0040c000
add esp, 0x18
call fcn.004117d0
test eax, eax
push esi
je 0x40c3aa
push 0xa0
call fcn.0040c030
mov ecx, dword [esp + 0x1c]
push ecx
push 0xa1
call fcn.0040c030
push edi
push 0xa2
call fcn.0040c030
mov edx, dword [esp + 0x34]
push edx
push 0xa4
call fcn.0040c030
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 8
push 0x10
call fcn.0040c030
push edi
push 0x11
call fcn.0040c030
mov eax, dword [esp + 0x2c]
push eax
push 0x12
call fcn.0040c030
add esp, 0x18
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 8