Function at 0x41a1a0
Capabilities:
Log keystrokes via polling

Disassembly:
mov ecx, dword [0x45157c]
sub esp, 8
mov eax, dword [ecx + 0x178]
push esi
test eax, eax
push edi
je 0x41a1bd
pop edi
xor eax, eax
pop esi
add esp, 8
ret
mov al, byte [ecx + 0x28]
mov edi, 2
test al, 2
je 0x41a27b
mov eax, dword [ecx + 0x4d8]
test eax, eax
jg 0x41a2de
call fcn.00404ec0
mov edx, dword [0x45157c]
mov ecx, eax
sub ecx, dword [edx + 0xc0]
jne 0x41a23d
mov ax, word [edx + 0x30]
test ax, ax
jne 0x41a203
movsx eax, word [edx + 0x32]
pop edi
pop esi
add esp, 8
ret
cmp ax, 1
je 0x41a220
cmp ax, di
je 0x41a220
cmp ax, 0xfffe
je 0x41a220
cmp ax, 3
je 0x41a220
cmp ax, 0x64
jne 0x41a233
push 0xfffefffd
call fcn.00441980
mov edx, dword [0x45157c]
add esp, 4
movsx eax, word [edx + 0x30]
pop edi
pop esi
add esp, 8
ret
mov dword [edx + 0xc0], eax
mov edx, dword [0x45157c]
mov eax, dword [edx + 0x4dc]
add ecx, eax
mov eax, dword [edx + 0xd0]
mov esi, ecx
sub ecx, eax
cmp ecx, 3
jle 0x41a268
mov ecx, 3
lea esi, [eax + 3]
mov dword [edx + 0x4dc], esi
mov eax, dword [0x45157c]
mov dword [eax + 0x4d8], ecx
jmp 0x41a2d8
call fcn.00404ec0
mov ecx, dword [0x45157c]
cmp eax, dword [ecx + 0xc0]
jne 0x41a2c3
mov edx, dword [0x451574]
mov esi, dword [edx + 0x1a8]
test esi, esi
jne 0x41a2c3
mov ax, word [ecx + 0x30]
test ax, ax
jne 0x41a2b1
movsx eax, word [ecx + 0x32]
pop edi
pop esi
add esp, 8
ret
cmp ax, 1
je 0x41a7e7
cmp ax, di
jmp 0x41a7d3
mov dword [ecx + 0xc0], eax
mov eax, dword [0x45157c]
mov dword [eax + 0x4d8], 1
mov ecx, dword [0x45157c]
mov eax, dword [ecx + 0xa4]
mov edx, dword [ecx + 0xa0]
mov dword [ecx + 0xa0], eax
mov ecx, dword [0x45157c]
push ebx
mov dword [ecx + 0xa4], edx
mov edx, dword [0x45157c]
mov dword [edx + 0x98], eax
mov ecx, dword [0x45157c]
mov edx, dword [ecx + 0x94]
shl edx, 0xa
add edx, eax
mov dword [ecx + 0x9c], edx
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0x45157c]
mov dword [esp + 0x10], 0
mov edx, dword [ecx + 0xd8]
sub eax, edx
mov edx, dword [ecx + 0xd4]
mov dword [ecx + 0xd4], eax
mov ecx, dword [0x45157c]
sub eax, edx
mov dword [ecx + 0xdc], eax
mov ecx, dword [0x45157c]
mov ebx, dword [ecx + 0x50c]
add ebx, eax
mov dword [ecx + 0x50c], ebx
mov ecx, dword [0x45157c]
mov esi, dword [ecx + 0xd0]
inc esi
mov dword [ecx + 0xd0], esi
mov ecx, dword [0x45157c]
mov edx, dword [ecx + 0x1c]
mov edx, dword [edx + 0x96c]
mov dword [esp + 0xc], edx
mov edx, dword [ecx + 0xdc]
fild qword [esp + 0xc]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
fild qword [esp + 0xc]
fmulp st(1)
fmul qword [0x44b868]
fstp qword [ecx + 0x440]
mov ecx, dword [0x45157c]
mov edx, dword [ecx + 0x1160]
mov dword [ecx + edx*4 + 0x1138], eax
mov eax, dword [0x45157c]
mov edx, dword [eax + 0x1160]
inc edx
mov dword [eax + 0x1160], edx
mov eax, dword [0x45157c]
cmp dword [eax + 0x1160], 0xa
jl 0x41a3fa
mov dword [eax + 0x1160], 0
mov eax, dword [0x45157c]
mov ecx, dword [eax + 0x2c]
mov dword [eax + 0x108], ecx
mov eax, dword [0x45157c]
movsx ecx, word [eax + 0x434]
dec ecx
je 0x41a422
dec ecx
jne 0x41a432
mov ecx, dword [eax + 0x438]
call fcn.004066b0
jmp 0x41a42d
mov ecx, dword [eax + 0x438]
call fcn.00406420
mov eax, dword [0x45157c]
mov cx, word [eax + 0x434]
cmp cx, di
jne 0x41a454
mov ecx, dword [eax + 0x438]
call fcn.00406800
mov edx, dword [0x45157c]
mov dword [edx + 0x2c], eax
jmp 0x41a45f
cmp cx, 1
je 0x41a464
call fcn.0041cb20
mov eax, dword [0x45157c]
mov cl, byte [eax + 0x27]
test cl, cl
je 0x41a5ac
cmp word [eax + 0x434], di
jne 0x41a488
mov ecx, dword [eax + 0x438]
call fcn.00406820
mov eax, dword [0x45157c]
add eax, 0x150
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [0x45157c]
mov ecx, dword [eax + 0x510]
mov ebx, dword [eax + 0x150]
sub ebx, ecx
mov dword [eax + 0x150], ebx
mov eax, dword [0x45157c]
mov edx, dword [eax + 0x514]
mov esi, dword [eax + 0x154]
sub esi, edx
mov dword [eax + 0x154], esi
mov eax, dword [0x45157c]
mov ecx, dword [eax + 0x150]
test ecx, ecx
jne 0x41a4df
mov ecx, dword [eax + 0x154]
test ecx, ecx
je 0x41a4f8
mov ecx, dword [eax + 0x514]
mov edx, dword [eax + 0x510]
push ecx
push edx
call dword [sym.imp.USER32.dll_SetCursorPos]
mov eax, dword [0x45157c]
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
mov byte [eax + 0x118], 0
mov eax, dword [0x45157c]
push 1
cmp word [eax + 0x434], di
jne 0x41a522
mov ecx, dword [eax + 0x438]
call fcn.00406810
jmp 0x41a524
call esi
test ax, ax
jge 0x41a535
mov eax, dword [0x45157c]
or byte [eax + 0x118], 0x10
mov eax, dword [0x45157c]
push edi
cmp word [eax + 0x434], di
jne 0x41a551
mov ecx, dword [eax + 0x438]
call fcn.00406810
jmp 0x41a553
call esi
test ax, ax
jge 0x41a564
mov eax, dword [0x45157c]
or byte [eax + 0x118], 0x20
mov ecx, dword [0x45157c]
xor esi, esi
mov bl, byte [ecx + 0x26]
mov dl, byte [ecx + 0x27]
test bl, bl
lea eax, [ecx + 0x2c]
jbe 0x41a5b7
test dl, 1
je 0x41a59d
mov bl, byte [eax]
and bl, 0xcf
mov byte [eax], bl
mov edi, dword [0x45157c]
mov cl, bl
mov bl, byte [edi + 0x118]
or bl, cl
mov byte [eax], bl
mov ecx, dword [0x45157c]
xor ebx, ebx
inc eax
mov bl, byte [ecx + 0x26]
shr dl, 1
inc esi
cmp esi, ebx
jl 0x41a579
jmp 0x41a5b7
call fcn.0041a810
mov ecx, dword [0x45157c]
mov edx, dword [ecx + 0x114]
mov edi, dword [ecx + 0x110]
mov esi, dword [ecx + 0x2c]
and edx, edi
and edx, esi
mov dword [ecx + 0x2c], edx
mov eax, dword [0x45157c]
xor edx, dword [eax + 0x108]
mov dword [eax + 0x10c], edx
mov eax, dword [0x45157c]
je 0x41a693
mov ecx, dword [eax + 0x2c]
and ecx, edx
test ecx, 0xf0f0f0f0
je 0x41a674
mov cl, byte [eax + 0x26]
xor edi, edi
test cl, cl
jbe 0x41a693
mov word [eax + 0xe8], di
mov eax, dword [0x45157c]
mov bl, byte [eax + edi + 0x10c]
mov byte [esp + 0xc], bl
mov esi, dword [esp + 0xc]
test bl, 0xf0
je 0x41a645
mov edx, esi
push 0xfffcfff9
and edx, 0xff
push 0
mov dword [eax + 0xec], edx
call fcn.004419f0
mov eax, dword [0x45157c]
add esp, 8
test bl, 0xf
je 0x41a668
and esi, 0xff
push 0xfffcfff9
mov dword [eax + 0xec], esi
call fcn.00441980
mov eax, dword [0x45157c]
add esp, 4
xor ecx, ecx
inc edi
mov cl, byte [eax + 0x26]
cmp edi, ecx
jl 0x41a603
jmp 0x41a693
mov edx, dword [eax + 0x78]
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x41a693
mov eax, dword [eax + 0x7c]
push 0
add eax, ecx
push eax
call fcn.00441de0
mov eax, dword [0x45157c]
add esp, 8
mov ecx, dword [eax + 0x3c]
test ecx, ecx
je 0x41a700
mov esi, dword [eax + 0x1278]
mov edi, ecx
xor ebx, ebx
mov word [eax + 0x4bc], bx
mov eax, dword [esi]
cmp eax, ebx
jne 0x41a6bb
mov eax, dword [esi + 8]
add esi, 8
cmp eax, ebx
je 0x41a6b1
mov eax, dword [esi]
mov ecx, dword [eax + 0x2c]
mov dword [eax + 0x2c], ebx
mov dword [eax + 0x28], ecx
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x41a6e0
mov edx, dword [0x45157c]
push eax
mov dword [edx + 0x4b8], esi
call dword [esi + 4]
add esp, 4
mov eax, dword [0x45157c]
add esi, 8
movsx ecx, word [eax + 0x4bc]
add edi, ecx
mov word [eax + 0x4bc], bx
mov eax, dword [0x45157c]
dec edi
jne 0x41a6a4
inc word [eax + 0x1a4]
call fcn.00441c20
mov ecx, dword [0x45157c]
xor esi, esi
pop ebx
mov eax, dword [ecx + 0x84]
cmp eax, esi
je 0x41a735
test byte [ecx + 0x28], 0x10
jne 0x41a735
push esi
push eax
call fcn.00441de0
mov ecx, dword [0x45157c]
add esp, 8
cmp dword [ecx + 0x130], esi
je 0x41a742
call fcn.00441900
call fcn.0041b540
call fcn.0041c1f0
mov edx, dword [0x45157c]
mov word [edx + 0x160], 0xffff
mov eax, dword [0x45157c]
mov dword [eax + 0x198], esi
mov eax, dword [0x45157c]
mov edx, dword [eax + 0x4e0]
inc edx
mov dword [eax + 0x4e0], edx
mov ecx, dword [0x45157c]
mov word [ecx + 0x484], si
mov eax, dword [0x45157c]
mov ecx, dword [eax + 0x4d8]
dec ecx
mov dword [eax + 0x4d8], ecx
mov ecx, dword [0x45157c]
cmp dword [ecx + 0x4d8], esi
jle 0x41a7ab
cmp word [ecx + 0x30], si
je 0x41a7b6
call fcn.0041b680
mov ecx, dword [0x45157c]
mov ax, word [ecx + 0x30]
cmp ax, si
jne 0x41a7c9
movsx eax, word [ecx + 0x32]
pop edi
pop esi
add esp, 8
ret
cmp ax, 1
je 0x41a7e7
cmp ax, 2
je 0x41a7e7
cmp ax, 0xfffe
je 0x41a7e7
cmp ax, 3
je 0x41a7e7
cmp ax, 0x64
jne 0x41a7fa
push 0xfffefffd
call fcn.00441980
mov ecx, dword [0x45157c]
add esp, 4
movsx eax, word [ecx + 0x30]
pop edi
pop esi
add esp, 8
ret