Function at 0x419f2b
Capabilities:
Log keystrokes via polling

Disassembly:
mov ecx, dword [0x4a4d3c]
cmp ecx, 0xfffffffe
jne 0x419f39
xor eax, eax
ret
mov eax, dword [0x4a4d44]
mov edx, dword [0x4a4d40]
push ebx
xor ebx, ebx
push esi
or esi, 0xffffffff
inc ebx
cmp eax, 0x106
push edi
jg 0x419fbc
cmp eax, 0xfe
jl 0x419fbc
cmp edx, 0xc
jg 0x419fbc
cmp edx, 3
jl 0x419fbc
xor edi, edi
cmp ecx, esi
jne 0x419f93
push edi
push 0x9c80
push 0x111
push dword [0x4ac344]
call dword [sym.imp.USER32.dll_SendMessageA]
push edi
push esi
push esi
push esi
call fcn.0044f53d
mov dword [0x4a4d2c], edi
jmp 0x419faa
test byte [0x4a4d38], bl
je 0x419fad
push ebx
push esi
push esi
push esi
mov dword [0x4a4d2c], ebx
call fcn.0044f53d
add esp, 0x10
cmp dword [0x4a4d3c], edi
je 0x419fd8
mov eax, ebx
jmp 0x41a1c1
xor edi, edi
cmp dword [0x4a4d2c], edi
je 0x419fd8
push edi
push esi
push esi
push esi
mov dword [0x4a4d2c], edi
call fcn.0044f53d
add esp, 0x10
mov eax, dword [0x4a4d44]
cmp eax, 0xfd
push ebp
mov ebp, dword [sym.imp.USER32.dll_GetAsyncKeyState]
jg 0x41a065
cmp eax, 0xf4
jl 0x41a065
mov eax, dword [0x4a4d40]
cmp eax, 0xc
jg 0x41a065
cmp eax, 3
jl 0x41a065
cmp dword [0x4a4d3c], esi
jne 0x41a03c
push 0x10
call ebp
and ax, 0x8000
neg ax
push 6
push dword [0x4ac344]
sbb eax, eax
neg eax
mov dword [0x4a4d48], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push esi
push esi
push edi
push esi
call fcn.0044f53d
mov dword [0x4a4d24], edi
jmp 0x41a053
test byte [0x4a4d38], bl
je 0x41a056
push esi
push esi
push ebx
push esi
mov dword [0x4a4d24], ebx
call fcn.0044f53d
add esp, 0x10
cmp dword [0x4a4d3c], edi
je 0x41a07f
mov eax, ebx
jmp 0x41a1c0
cmp dword [0x4a4d24], edi
je 0x41a07f
push esi
push esi
push edi
push esi
mov dword [0x4a4d24], edi
call fcn.0044f53d
add esp, 0x10
mov eax, dword [0x4a4d44]
cmp eax, 0x110
jg 0x41a115
cmp eax, 0x108
jl 0x41a115
mov eax, dword [0x4a4d40]
cmp eax, 0xc
jg 0x41a115
cmp eax, 3
jl 0x41a115
cmp dword [0x4a4d3c], esi
jne 0x41a0ee
push esi
push edi
push esi
push esi
mov dword [0x4a4d28], edi
call fcn.0044f53d
add esp, 0x10
push 0x10
call ebp
test ah, ah
jns 0x41a0e0
push edi
push 0x9d42
push 0x111
push dword [0x4ac344]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x41a108
mov ecx, dword [0x4ac3ec]
push ebx
call fcn.0045ca0c
jmp 0x41a108
test byte [0x4a4d38], bl
je 0x41a108
push esi
push ebx
push esi
push esi
mov dword [0x4a4d28], ebx
call fcn.0044f53d
add esp, 0x10
cmp dword [0x4a4d3c], edi
je 0x41a12f
jmp 0x41a05e
cmp dword [0x4a4d28], edi
je 0x41a12f
push esi
push edi
push esi
push esi
mov dword [0x4a4d28], edi
call fcn.0044f53d
add esp, 0x10
mov eax, dword [0x4a4d44]
cmp eax, 0x11
jg 0x41a193
cmp eax, 5
jl 0x41a193
mov eax, dword [0x4a4d40]
cmp eax, 0xd
jg 0x41a193
cmp eax, 3
jl 0x41a193
test byte [0x4a4d38], bl
je 0x41a186
cmp dword [0x4a4d20], edi
jne 0x41a186
push edi
push 0x9b
push 0x29a
push dword [0x4ac344]
call dword [sym.imp.USER32.dll_SetTimer]
push esi
push esi
push esi
push ebx
mov dword [0x4a4d20], ebx
call fcn.0044f53d
add esp, 0x10
cmp dword [0x4a4d3c], edi
je 0x41a1be
jmp 0x41a05e
cmp dword [0x4a4d20], edi
je 0x41a1be
push 0x29a
push dword [0x4ac344]
call dword [sym.imp.USER32.dll_KillTimer]
push esi
push esi
push esi
push edi
mov dword [0x4a4d20], edi
call fcn.0044f53d
add esp, 0x10
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
ret