Function at 0x4ba3e0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x5f0524]
xor eax, esp
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [ebx], 0
cmp edi, 0x87
ja 0x4ba53a
je 0x4ba51b
lea eax, [edi - 2]
cmp eax, 0x83
ja case.0x4ba433.3
movzx eax, byte [eax + 0x4ba8f8]
jmp dword [eax*4 + 0x4ba8e0]
mov dword [esi + 0xd4], 0
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.0051a19b
mov esp, ebp
pop ebp
ret 0x10
call fcn.004ba1d0
mov dword [ebx], 0
jmp 0x4ba8ca
cmp byte [esi + 0x180], 0
je 0x4ba4b8
cmp byte [esi + 0x148], 0
je 0x4ba4b8
mov ecx, dword [esi + 0x140]
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
call eax
test al, al
jne 0x4ba49e
mov ecx, dword [esi + 0x144]
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
call eax
test al, al
je 0x4ba4b8
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x4ba4b8
push 4
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns case.0x4ba433.3
push dword [ebp + 0x14]
push dword [esp + 0x1c]
push edi
push dword [esi + 0xd4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [ebx], eax
cmp eax, 1
jne 0x4ba8ca
mov dword [ebx], 0xffffffff
jmp 0x4ba8ca
cmp byte [esi + 0x180], 0
je 0x4ba4f7
call fcn.004fd921
push 0x7f89
jmp 0x4ba501
call fcn.004fd921
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebx], 1
jmp 0x4ba8ca
push dword [ebp + 0x14]
push eax
push 0x87
push dword [esi + 0xd4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
or eax, 4
mov dword [ebx], eax
jmp 0x4ba8ca
cmp edi, 0x20a
ja 0x4ba89e
je 0x4ba722
sub edi, 0x200
je 0x4ba6b1
sub edi, 1
je 0x4ba62d
sub edi, 1
jne case.0x4ba433.3
mov eax, dword [ebp + 0x14]
xorps xmm0, xmm0
movsx ebx, ax
shr eax, 0x10
movsx edi, ax
lea eax, [esp + 0x24]
push eax
push dword [esi + 0x30]
movups xmmword [esp + 0x2c], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x28]
add ebx, dword [esp + 0x24]
add eax, edi
cmp byte [esi + 0x148], 0
mov dword [esp + 0x10], eax
je 0x4ba611
cmp dword [esi + 0x184], ebx
jne 0x4ba611
cmp dword [esi + 0x188], eax
jne 0x4ba611
mov ecx, dword [esi + 0xc4]
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [esi + 0xc4]
cdq
sub eax, edx
mov edi, eax
mov edx, dword [ecx]
sar edi, 1
sub edi, ebx
call dword [edx + 0x18]
mov ecx, dword [esi + 0xc4]
lea ebx, [edi + eax]
mov edx, dword [ecx]
call dword [edx + 0x3c]
mov ecx, dword [esi + 0xc4]
cdq
sub eax, edx
mov edi, eax
mov edx, dword [ecx]
sar edi, 1
sub edi, dword [esp + 0x10]
call dword [edx + 0x1c]
add eax, edi
cmp byte [esi + 0x148], 0
je 0x4ba611
mov edx, dword [esi]
neg eax
push eax
neg ebx
mov ecx, esi
push ebx
call dword [edx + 0x134]
mov byte [esi + 0x182], 0
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [esp + 0x1c]
mov dword [eax], 0
jmp 0x4ba8ca
push dword [esi + 0x30]
call dword [sym.imp.USER32.dll_SetCapture]
push eax
call fcn.004f4693
lea eax, [esp + 0x1c]
mov byte [esi + 0x182], 1
push eax
mov dword [esi + 0x184], 0
mov dword [esi + 0x188], 0
mov dword [esi + 0x18c], 0
mov dword [esi + 0x190], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov dword [esi + 0x184], ecx
mov dword [esi + 0x188], eax
mov dword [esi + 0x18c], ecx
mov dword [esi + 0x190], eax
mov dword [ebx], 0
jmp 0x4ba8ca
cmp byte [esi + 0x182], 0
je 0x4ba8ca
mov eax, dword [ebp + 0x14]
xorps xmm0, xmm0
movsx ebx, ax
shr eax, 0x10
movsx edi, ax
lea eax, [esp + 0x24]
push eax
push dword [esi + 0x30]
movups xmmword [esp + 0x2c], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
add ebx, dword [esp + 0x24]
add edi, dword [esp + 0x28]
sub ebx, dword [esi + 0x18c]
sub edi, dword [esi + 0x190]
cmp byte [esi + 0x148], 0
je 0x4ba711
mov edx, dword [esi]
mov eax, edi
neg eax
mov ecx, esi
push eax
mov eax, ebx
neg eax
push eax
call dword [edx + 0x134]
add dword [esi + 0x18c], ebx
add dword [esi + 0x190], edi
jmp 0x4ba8ca
mov edi, dword [ebp + 0x14]
movzx ecx, di
mov dword [ebx], 1
mov eax, dword [esi]
shr edi, 0x10
push edi
mov dword [esp + 0x14], ecx
mov eax, dword [eax + 0x20]
push ecx
mov ecx, esi
call eax
test al, al
je case.0x4ba433.20
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0
push eax
push 0
push 0x68
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
cmp dword [esp + 0x18], 0
mov eax, dword [esp + 0x14]
jg 0x4ba76e
neg eax
mov ecx, dword [esi + 0xc4]
mov dword [esi + 0x17c], eax
mov eax, dword [ecx]
call dword [eax + 0xe8]
test eax, eax
je 0x4ba7e9
mov ecx, dword [esi + 0x140]
push edi
push dword [esp + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x4ba7cb
mov ecx, dword [esi + 0x140]
mov eax, dword [esi + 0x17c]
mov edx, eax
mov edi, dword [ecx]
shl edx, 4
sub edx, eax
neg edx
push edx
call dword [edi + 0x150]
mov dword [ebx], 0
mov dword [ebx], 0
jmp 0x4ba8ca
mov ecx, dword [esi + 0x144]
push edi
push dword [esp + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x4ba7e9
mov ecx, dword [esi + 0x144]
jmp 0x4ba7a2
cmp dword [ebx], 0
je 0x4ba896
mov eax, dword [esi + 0x14c]
lea ecx, [esi + 0x14c]
call dword [eax + 0x30]
test eax, eax
je 0x4ba84d
mov eax, dword [esi + 0x14c]
lea ecx, [esi + 0x14c]
xor edi, edi
call dword [eax + 0x30]
test eax, eax
je 0x4ba896
nop word [eax + eax]
mov eax, dword [esi + 0x168]
push 2
push esi
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 0x14c]
lea ecx, [esi + 0x14c]
inc edi
call dword [eax + 0x30]
cmp edi, eax
jb 0x4ba820
mov dword [ebx], 0
jmp 0x4ba8ca
mov ecx, dword [esi + 0xc4]
mov eax, dword [ecx]
call dword [eax + 0xe8]
test eax, eax
je 0x4ba896
mov ecx, dword [esi + 0x140]
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
call eax
test al, al
mov eax, dword [esi + 0x17c]
mov edx, eax
je 0x4ba880
mov ecx, dword [esi + 0x140]
jmp 0x4ba886
mov ecx, dword [esi + 0x144]
mov edi, dword [ecx]
shl edx, 4
sub edx, eax
neg edx
push edx
call dword [edi + 0x150]
mov dword [ebx], 0
jmp 0x4ba8ca
cmp edi, 0x40f
je 0x4ba8c1
cmp edi, 0x8002
jne case.0x4ba433.3
mov eax, dword [eax]
mov ecx, dword [esp + 0x18]
push esi
call dword [eax + 0xc4]
jmp 0x4ba8ca
mov eax, dword [esi + 0x10]
lea ecx, [esi + 0x10]
call dword [eax + 0x60]
mov ecx, dword [esp + 0x34]
mov al, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0051a19b
mov esp, ebp
pop ebp
ret 0x10