Function at 0x41dc80
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x24
cmp dword [0x5aa830], 0
push ebx
mov ebx, dword [esp + 0x2c]
push esi
push edi
mov esi, ecx
jne 0x41dcb8
movzx edi, bx
push edi
call fcn.0049ba30
add esp, 4
test eax, eax
je 0x41dcb8
push edi
push esi
call fcn.0049bb30
add esp, 8
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
movzx ecx, bx
mov eax, ecx
cmp eax, 0xfa2
jg 0x41dcf9
cmp eax, 0xfa1
jge 0x41dce6
cmp eax, 0x455
jne case.0x41dd21.4004
mov ecx, esi
call fcn.0041dbf0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov eax, dword [esi + 0x10]
pop edi
pop esi
pop ebx
add esp, 0x24
mov dword [esp + 4], eax
jmp dword [sym.imp.USER32.dll_DestroyWindow]
cmp eax, 0x10ee
jg case.0x41dd21.4004
je 0x41dfa0
sub eax, 0xfa3
cmp eax, 0xc9
ja case.0x41dd21.4004
movzx edx, byte [eax + 0x41e070]
jmp dword [edx*4 + 0x41dffc]
push 0
push 0
call fcn.004a3a60
add esp, 8
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
cmp dword [0x5aa834], 0
jne 0x41dff0
cmp dword [0x5aa838], 0
jne 0x41dff0
call fcn.0049fa40
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00417a20
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00417ae0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.004182b0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418320
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418390
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418410
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418490
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418510
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418540
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418570
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.004185a0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.004185d0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418600
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00418630
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov eax, dword [esi + 0x10]
push eax
call fcn.0047af60
add esp, 4
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
push 1
mov ecx, esi
mov dword [esi + 0x236], 1
call fcn.00417bd0
pop edi
mov dword [esi + 0x236], 0
pop esi
pop ebx
add esp, 0x24
ret 4
push 2
jmp 0x41de5c
push 3
jmp 0x41de5c
mov ecx, esi
call fcn.0041d4e0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.0041ac60
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.0041ad10
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00417d80
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00417dc0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0xc], 0x4d
call fcn.0049be30
cmp eax, 1
jne 0x41df14
mov dword [esp + 0xc], 0x4c
lea ecx, [esp + 0xc]
push ecx
call fcn.0049b6e0
add esp, 4
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
push 1
push 0
call fcn.004ceee0
add esp, 8
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
cmp dword [esi + 0x1a0], 0
jne 0x41dff0
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0xa1
call edi
push 0xa0
call edi
push 0x12
call edi
and ax, 0x8000
push 0x11
movzx ebx, ax
call edi
and ax, 0x8000
test bx, bx
movzx eax, ax
je 0x41df90
test ax, ax
je 0x41df90
mov ecx, esi
call fcn.004196e0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00417e00
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
mov ecx, esi
call fcn.00417b30
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
lea edx, [ebx - 0x10cc]
cmp dx, 0x1e
ja 0x41dfd4
add ecx, 0xffffef34
push ecx
call fcn.004984b0
add esp, 4
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
add ebx, 0xfffff028
cmp bx, 0x13
ja 0x41dff0
add ecx, 0xfffff028
push ecx
push esi
call fcn.0049de40
add esp, 8
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4