Function at 0x41d3a9
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x523959
call fcn.00505841
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x41d3c5
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x41d70b
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x579830
call fcn.0041661e
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x41d3f9
cmp dword [0x579834], eax
jne 0x41d3f9
call fcn.00470a7a
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00462099
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x41d442
mov eax, edi
sub eax, 8
je 0x41d657
dec eax
je 0x41d4db
sub eax, 0xa
je 0x41d44e
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.004136b5
jmp 0x41d719
push esi
call fcn.004c39d9
mov edi, eax
pop ecx
test edi, edi
je 0x41d4cc
push edi
push 0x53a1c0
call fcn.004300c1
pop ecx
pop ecx
test eax, eax
je 0x41d479
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x41d4c4
push edi
push 0x53a78c
call fcn.004300c1
pop ecx
pop ecx
test eax, eax
je 0x41d497
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x41d4c4
push edi
push 0x53b49c
call fcn.004300c1
pop ecx
pop ecx
test eax, eax
jne 0x41d4b9
push edi
push 0x53b10c
call fcn.004300c1
pop ecx
pop ecx
test eax, eax
je 0x41d4cc
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x41d442
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x41d442
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x41d600
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x41d600
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0040cced
cmp dword [esi + 0x2c4], edi
jne 0x41d598
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00435569
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004014bb
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x41d58a
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004989e8
push dword [eax]
push 0x57a588
call fcn.004300c1
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x41d582
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x41d537
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004af361
jmp 0x41d5bf
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x54481c
call fcn.004300c1
pop ecx
pop ecx
cmp eax, edi
je 0x41d5bf
push edi
mov ecx, eax
call fcn.0043163d
mov ecx, dword [esi + 0x78]
push 1
call fcn.0040cced
push dword [esi + 0x78]
push 0x53f3d0
call fcn.004300c1
pop ecx
pop ecx
cmp eax, edi
je 0x41d5e8
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x41d719
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x41d719
test ebx, ebx
je 0x41d719
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x41d719
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x41d719
cmp dword [0x580c78], 0
je 0x41d719
push 8
mov ecx, esi
call fcn.004b2431
mov edi, eax
test edi, edi
je 0x41d719
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.004419f9
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00473833
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.004cb3a8
test eax, 0x400000
je 0x41d6dc
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41d719
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00469668
jmp 0x41d719
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0043c474
call fcn.00505919
ret 0xc