Function at 0x4cb474
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x573850
call fcn.00553622
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4cb490
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4cb7d6
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5e9094
call fcn.004bbd9d
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4cb4c4
cmp dword [0x5e9098], eax
jne 0x4cb4c4
call fcn.00453d3c
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004c8e66
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4cb50d
mov eax, edi
sub eax, 8
je 0x4cb722
dec eax
je 0x4cb5a6
sub eax, 0xa
je 0x4cb519
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.004574ad
jmp 0x4cb7e4
push esi
call fcn.00478faf
mov edi, eax
pop ecx
test edi, edi
je 0x4cb597
push edi
push 0x5926f0
call fcn.00462383
pop ecx
pop ecx
test eax, eax
je 0x4cb544
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4cb58f
push edi
push 0x592cbc
call fcn.00462383
pop ecx
pop ecx
test eax, eax
je 0x4cb562
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4cb58f
push edi
push 0x594fec
call fcn.00462383
pop ecx
pop ecx
test eax, eax
jne 0x4cb584
push edi
push 0x594c5c
call fcn.00462383
pop ecx
pop ecx
test eax, eax
je 0x4cb597
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4cb50d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4cb50d
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4cb6cb
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4cb6cb
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0048330d
cmp dword [esi + 0x2c4], edi
jne 0x4cb663
push 0xa
lea ecx, [ebp - 0x50]
call fcn.004e480c
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0050104d
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4cb655
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004f4b3c
push dword [eax]
push 0x5e925c
call fcn.00462383
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4cb64d
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4cb602
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004e4834
jmp 0x4cb68a
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x59d814
call fcn.00462383
pop ecx
pop ecx
cmp eax, edi
je 0x4cb68a
push edi
mov ecx, eax
call fcn.005059ef
mov ecx, dword [esi + 0x78]
push 1
call fcn.0048330d
push dword [esi + 0x78]
push 0x59a574
call fcn.00462383
pop ecx
pop ecx
cmp eax, edi
je 0x4cb6b3
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4cb7e4
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4cb7e4
test ebx, ebx
je 0x4cb7e4
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4cb7e4
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4cb7e4
cmp dword [0x5f0d68], 0
je 0x4cb7e4
push 8
mov ecx, esi
call fcn.004cae2e
mov edi, eax
test edi, edi
je 0x4cb7e4
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0045cd7d
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0045cdbe
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0045aa75
test eax, 0x400000
je 0x4cb7a7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4cb7e4
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004ca9ed
jmp 0x4cb7e4
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004b218e
call fcn.005536fa
ret 0xc