Function at 0x41d0b0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5634a7
mov eax, dword fs:[0]
push eax
sub esp, 0x254
mov eax, dword [0x661850]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x25c], ecx
push str.Wed_Sep_30_22:04:02_2015
push 0x1083
push str.CGameProcess::OnSysChar
push str.GameProcessGameProc.cpp
lea ecx, [ebp - 0xd]
call fcn.004024e0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x260]
sub ecx, 0x41
mov dword [ebp - 0x260], ecx
cmp dword [ebp - 0x260], 0x37
ja case.0x41d136.1
mov edx, dword [ebp - 0x260]
movzx eax, byte [edx + 0x41d5b0]
jmp dword [eax*4 + 0x41d58c]
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x14], ax
mov ecx, dword [ebp - 0x25c]
mov dword [ecx + 0x46310], 0xc
push 0x5773dc
push 0x575830
lea edx, [ebp - 0x124]
push edx
call fcn.005456a9
add esp, 0xc
push 0x1a4
push 2
lea eax, [ebp - 0x124]
push eax
mov ecx, dword [ebp - 0x25c]
add ecx, 0x43aac
call fcn.00513b70
jmp case.0x41d136.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x128], ax
movzx ecx, word [ebp - 0x128]
shr ecx, 8
and ecx, 0xff
movzx edx, cl
test edx, edx
je 0x41d1d1
push 0x574a9b
push 0
push 0
push 0
push 0x5773d4
call fcn.00432600
jmp case.0x41d136.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x12c], ax
movzx eax, word [ebp - 0x12c]
shr eax, 8
and eax, 0xff
movzx ecx, al
test ecx, ecx
je 0x41d20a
push 0x5773c8
mov ecx, 0x7c46b0
call fcn.005072e0
jmp case.0x41d136.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x130], ax
mov edx, dword [ebp - 0x25c]
cmp dword [edx + 0x10f304], 0
je 0x41d340
movzx eax, word [ebp - 0x130]
shr eax, 8
and eax, 0xff
movzx ecx, al
test ecx, ecx
je 0x41d340
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 0x10f304]
movzx ecx, byte [eax + 0x12c]
test ecx, ecx
je 0x41d27e
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 0x10f304]
movzx ecx, byte [eax + 0x12c]
cmp ecx, 1
jne 0x41d340
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 0x10f304]
mov ecx, dword [ebp - 0x25c]
mov edx, dword [eax + 4]
cmp edx, dword [ecx + 0xfb10c]
je 0x41d329
mov eax, dword [ebp - 0x25c]
movzx ecx, byte [eax + 0xff734]
test ecx, ecx
je 0x41d30d
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 0x10f304]
add eax, 8
push eax
mov ecx, dword [ebp - 0x25c]
add ecx, 0xdfd24
call fcn.00477c90
test eax, eax
je 0x41d2f1
mov ecx, dword [ebp - 0x25c]
mov edx, dword [ecx + 0x10f304]
add edx, 8
push edx
mov ecx, 0x7c46b0
call fcn.00508460
jmp 0x41d30b
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax + 0x10f304]
add ecx, 8
push ecx
mov ecx, 0x7c46b0
call fcn.005083c0
jmp 0x41d327
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 0x10f304]
add eax, 8
push eax
mov ecx, 0x7c46b0
call fcn.00508260
jmp 0x41d340
mov ecx, dword [ebp - 0x25c]
add ecx, 0xfb110
push ecx
mov ecx, 0x7c46b0
call fcn.00508460
jmp case.0x41d136.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x134], ax
movzx edx, word [ebp - 0x134]
shr edx, 8
and edx, 0xff
movzx eax, dl
test eax, eax
je 0x41d3ef
xor ecx, ecx
cmp dword [0x7d6234], 0
sete cl
push ecx
call dword [0x69d4a4]
push 6
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x138], eax
push 0
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x13c], eax
cmp dword [0x7d6234], 0
je 0x41d3ce
push 0
push 0
push 0x5773ac
mov edx, dword [ebp - 0x138]
push edx
mov eax, dword [ebp - 0x13c]
push eax
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp 0x41d3ef
push 0
push 0
push 0x57738c
mov ecx, dword [ebp - 0x138]
push ecx
mov edx, dword [ebp - 0x13c]
push edx
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp case.0x41d136.1
push 0x14d
mov ecx, 0x69e668
call fcn.00526200
mov eax, dword [ebp - 0x25c]
movzx ecx, byte [eax + 0xfe115]
test ecx, ecx
jne 0x41d46a
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x140], ax
movzx edx, word [ebp - 0x140]
shr edx, 8
and edx, 0xff
movzx eax, dl
test eax, eax
je 0x41d46a
movzx ecx, byte [0x7d83cc]
test ecx, ecx
jne 0x41d46a
mov dword [0x7d83d4], 0
call fcn.0040ada0
mov dword [0x7d83d0], eax
mov ecx, 0x7d27e8
call fcn.00441e40
mov byte [0x7d83cc], 1
jmp case.0x41d136.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x144], ax
movzx edx, word [ebp - 0x144]
shr edx, 8
and edx, 0xff
movzx eax, dl
test eax, eax
je 0x41d4b5
push 0x67e
push 0
push 0x6eef44
call fcn.005454d0
add esp, 0xc
push 0x51
mov ecx, 0x7c46b0
call fcn.00505680
jmp case.0x41d136.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x148], ax
movzx ecx, word [ebp - 0x148]
shr ecx, 8
and ecx, 0xff
movzx edx, cl
test edx, edx
je 0x41d509
movzx eax, byte [0x7d62b5]
test eax, eax
je 0x41d509
mov ecx, dword [ebp - 0x25c]
movzx edx, byte [ecx + 0x100b3c]
test edx, edx
je 0x41d509
mov ecx, dword [ebp - 0x25c]
call fcn.00434910
jmp case.0x41d136.1
mov eax, dword [ebp - 0x25c]
mov dword [eax + 0x46310], 0xd
push 0x577374
push 0x575830
lea ecx, [ebp - 0x254]
push ecx
call fcn.005456a9
add esp, 0xc
push 0x1a4
push 2
lea edx, [ebp - 0x254]
push edx
mov ecx, dword [ebp - 0x25c]
add ecx, 0x43aac
call fcn.00513b70
mov dword [ebp - 0x258], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0054514c
mov esp, ebp
pop ebp
ret 8