Function at 0x4cba38
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x5646c0
call fcn.00541110
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4cba54
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4cbd9a
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5c4e74
call fcn.004e2269
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4cba88
cmp dword [0x5c4e78], eax
jne 0x4cba88
call fcn.00443573
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004c944b
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4cbad1
mov eax, edi
sub eax, 8
je 0x4cbce6
dec eax
je 0x4cbb6a
sub eax, 0xa
je 0x4cbadd
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.00449c14
jmp 0x4cbda8
push esi
call fcn.0044f57a
mov edi, eax
pop ecx
test edi, edi
je 0x4cbb5b
push edi
push 0x576408
call fcn.00446047
pop ecx
pop ecx
test eax, eax
je 0x4cbb08
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4cbb53
push edi
push 0x575e9c
call fcn.00446047
pop ecx
pop ecx
test eax, eax
je 0x4cbb26
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4cbb53
push edi
push 0x57aa9c
call fcn.00446047
pop ecx
pop ecx
test eax, eax
jne 0x4cbb48
push edi
push 0x57a70c
call fcn.00446047
pop ecx
pop ecx
test eax, eax
je 0x4cbb5b
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4cbad1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4cbad1
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4cbc8f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4cbc8f
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.004934d3
cmp dword [esi + 0x2c4], edi
jne 0x4cbc27
push 0xa
lea ecx, [ebp - 0x50]
call fcn.004b5727
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004ba888
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4cbc19
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004af8e7
push dword [eax]
push 0x5c48e4
call fcn.00446047
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4cbc11
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4cbbc6
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004b574f
jmp 0x4cbc4e
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x586a9c
call fcn.00446047
pop ecx
pop ecx
cmp eax, edi
je 0x4cbc4e
push edi
mov ecx, eax
call fcn.004e8152
mov ecx, dword [esi + 0x78]
push 1
call fcn.004934d3
push dword [esi + 0x78]
push 0x578900
call fcn.00446047
pop ecx
pop ecx
cmp eax, edi
je 0x4cbc77
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4cbda8
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4cbda8
test ebx, ebx
je 0x4cbda8
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4cbda8
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4cbda8
cmp dword [0x5ce5e0], 0
je 0x4cbda8
push 8
mov ecx, esi
call fcn.004cb3f2
mov edi, eax
test edi, edi
je 0x4cbda8
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00444588
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004445c9
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0044d211
test eax, 0x400000
je 0x4cbd6b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4cbda8
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004cafb1
jmp 0x4cbda8
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00493640
call fcn.005411e8
ret 0xc