Function at 0x4aa500
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
push edi
call fcn.004832e0
mov edi, dword [0x56456c]
xor esi, esi
mov eax, dword [0x564568]
sub edi, eax
sar edi, 2
test edi, edi
jle 0x4aa551
nop word [eax + eax]
mov ecx, dword [eax + esi*4]
cmp dword [ecx + 0xf4], 0
jle 0x4aa54c
cmp dword [ecx + 0x78], 0
jle 0x4aa54c
call fcn.00475560
mov eax, dword [0x564568]
inc esi
cmp esi, edi
jl 0x4aa530
mov eax, dword [0x5603ac]
xor esi, esi
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
test ecx, ecx
jle 0x4aa5fc
mov ebx, dword [0x5645c8]
mov eax, dword [0x557104]
nop dword [eax]
mov edi, dword [edx + esi*4]
mov dword [esp + 0xc], edi
mov ecx, dword [edi]
lea edx, [ecx - 1]
cmp edx, dword [eax + 4]
jae 0x4aa8bb
mov ecx, dword [eax + 8]
mov edx, dword [ecx + edx*4]
cmp byte [edx + 0x14], 7
jne 0x4aa5f1
cmp byte [edx + 0x15], 0
je 0x4aa5c4
mov edi, dword [edx + 0x16]
test edi, edi
je 0x4aa5f1
mov ecx, dword [0x5645cc]
sub ecx, ebx
cmp ecx, edi
jbe 0x4aa5f1
cmp byte [ebx + edi], 0
je 0x4aa5f1
mov edi, dword [esp + 0xc]
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov eax, dword [eax]
cmp dword [eax + 4], 0
jg 0x4aa5e1
push dword [edx + 8]
xor edx, edx
call fcn.00454cb0
mov ecx, dword [edi + 4]
add esp, 4
call fcn.004a9ec0
mov ebx, dword [0x5645c8]
mov eax, dword [0x557104]
mov edx, dword [esp + 0x14]
inc esi
cmp esi, dword [esp + 0x10]
jl 0x4aa580
call fcn.00480520
call fcn.00458f20
mov eax, dword [0x563e50]
sub eax, 0
je 0x4aa624
sub eax, 2
jne 0x4aa7b4
mov ecx, dword [0x563e04]
jmp 0x4aa7af
cmp byte [0x563ec5], 0
je 0x4aa64f
mov eax, dword [0x563e54]
dec eax
mov dword [0x563e54], eax
test eax, eax
jle 0x4aa8c7
mov eax, dword [0x563e04]
inc dword [eax + 0x60]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [0x563ec6], 0
je 0x4aa670
mov eax, dword [0x563e54]
dec eax
mov dword [0x563e54], eax
test eax, eax
jle 0x4aa8cc
jmp 0x4aa8b4
call fcn.004adaa0
cmp dword [0x56032f], 0
jg 0x4aa7cd
cmp byte [0x560333], 0
jne 0x4aa7b4
mov eax, dword [0x564358]
cmp dword [eax + 8], 0
jle 0x4aa6b0
cmp dword [0x5643ac], 0
jne 0x4aa6b0
cmp dword [0x5643a8], 8
je 0x4aa7b4
cmp byte [0x563ecd], 0
jne 0x4aa7b4
mov eax, dword [0x563e1c]
mov dword [esp + 0x10], eax
cmp byte [eax + 0x51], 0
jne 0x4aa72f
mov edx, dword [0x55f180]
xor ebx, ebx
xor esi, esi
mov ecx, dword [edx + 4]
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x4aa71e
lea edi, [eax + 0x75]
cmp dword [edx + 4], esi
jb 0x4aa8db
mov eax, dword [edx + 8]
mov ecx, dword [eax + esi*4]
cmp byte [ecx + 0xbc], 0
je 0x4aa713
cmp dword [ecx + 0x10], 0
je 0x4aa713
mov dword [edi], esi
call fcn.0045f6f0
mov edx, dword [0x55f180]
inc ebx
add edi, 4
inc esi
cmp esi, dword [esp + 0x14]
jl 0x4aa6e4
mov eax, dword [esp + 0x10]
push eax
mov dword [eax + 0x40], ebx
call fcn.004c56d0
mov eax, dword [0x563e1c]
add esp, 4
mov ecx, eax
call fcn.004c5e70
mov ecx, dword [0x563e0c]
call fcn.004a84d0
mov ecx, dword [0x563e04]
call fcn.004a70a0
mov ecx, dword [0x563e08]
call fcn.004c5e70
mov esi, dword [0x563e10]
mov ecx, esi
call fcn.004c5e70
mov eax, dword [esi + 8]
cmp dword [eax + 8], 0
jle 0x4aa780
cmp dword [esi + 0x5c], 0
jne 0x4aa780
cmp dword [esi + 0x58], 8
jne 0x4aa780
mov ecx, esi
call fcn.0042f640
mov esi, dword [0x563e14]
mov ecx, esi
call fcn.004c5e70
mov eax, dword [esi + 8]
cmp dword [eax + 8], 0
jle 0x4aa7a9
cmp dword [esi + 0x5c], 0
jne 0x4aa7a9
cmp dword [esi + 0x58], 8
jne 0x4aa7a9
mov ecx, esi
call fcn.004680f0
mov ecx, dword [0x563e18]
call fcn.004a70a0
cmp dword [0x56032f], 0
jg 0x4aa7cd
mov ecx, dword [0x563e20]
call fcn.004c5e70
call fcn.004c70d0
cmp byte [0x556b23], 0
jne 0x4aa7ff
cmp byte [0x556c51], 0
jne 0x4aa7ff
cmp byte [0x563ecb], 0
je 0x4aa7ff
cmp byte [0x560650], 0
jne 0x4aa7ff
cmp byte [0x55f184], 0
jne 0x4aa7ff
call fcn.00455f60
mov ecx, dword [0x563e60]
call fcn.0046cd10
mov ecx, dword [0x563e64]
call fcn.0046cd10
cmp byte [0x56061a], 0
jne 0x4aa827
cmp byte [0x560639], 0
je 0x4aa878
call fcn.00472830
cmp byte [0x56061a], 0
je 0x4aa852
mov eax, 0x88888889
imul dword [0x560614]
add edx, dword [0x560614]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
je 0x4aa8d1
cmp byte [0x560639], 0
je 0x4aa878
mov eax, 0x88888889
imul dword [0x560633]
add edx, dword [0x560633]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4aa8d1
cmp byte [0x556b21], 0
je 0x4aa8b4
push 0x78
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x4aa8b4
test byte [0x5646b8], 0x20
jne 0x4aa8b4
cmp byte [0x556bc3], 0
jne 0x4aa8b4
push 1
push 1
push 0x8001
push dword [0x563870]
call dword [sym.imp.USER32.dll_SendMessageA]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, ecx
mov ecx, str.Common_Event
call fcn.004a1c00
call fcn.004ae2a0
call fcn.004adf90
mov ecx, 3
call fcn.004ab180
mov ecx, str.st_gEnemy_idx
call fcn.00469b60
int3