Function at 0x44d70b
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x5364fb
call fcn.00517fdf
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x44d727
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x44da6d
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x59289c
call fcn.0045fb1c
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x44d75b
cmp dword [0x5928a0], eax
jne 0x44d75b
call fcn.004184c6
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0044b08c
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x44d7a4
mov eax, edi
sub eax, 8
je 0x44d9b9
dec eax
je 0x44d83d
sub eax, 0xa
je 0x44d7b0
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0041d09b
jmp 0x44da7b
push esi
call fcn.00422aad
mov edi, eax
pop ecx
test edi, edi
je 0x44d82e
push edi
push 0x54e3a8
call fcn.00432cbc
pop ecx
pop ecx
test eax, eax
je 0x44d7db
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x44d826
push edi
push 0x54ecd0
call fcn.00432cbc
pop ecx
pop ecx
test eax, eax
je 0x44d7f9
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x44d826
push edi
push 0x550744
call fcn.00432cbc
pop ecx
pop ecx
test eax, eax
jne 0x44d81b
push edi
push 0x5503b4
call fcn.00432cbc
pop ecx
pop ecx
test eax, eax
je 0x44d82e
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x44d7a4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x44d7a4
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x44d962
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x44d962
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00414970
cmp dword [esi + 0x2c4], edi
jne 0x44d8fa
push 0xa
lea ecx, [ebp - 0x50]
call fcn.004a2fc3
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004b3ac3
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x44d8ec
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00433dca
push dword [eax]
push 0x5925b8
call fcn.00432cbc
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x44d8e4
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x44d899
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004a2feb
jmp 0x44d921
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x558544
call fcn.00432cbc
pop ecx
pop ecx
cmp eax, edi
je 0x44d921
push edi
mov ecx, eax
call fcn.004b6f86
mov ecx, dword [esi + 0x78]
push 1
call fcn.00414970
push dword [esi + 0x78]
push 0x549c20
call fcn.00432cbc
pop ecx
pop ecx
cmp eax, edi
je 0x44d94a
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x44da7b
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x44da7b
test ebx, ebx
je 0x44da7b
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x44da7b
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x44da7b
cmp dword [0x59af70], 0
je 0x44da7b
push 8
mov ecx, esi
call fcn.0044d0c5
mov edi, eax
test edi, edi
je 0x44da7b
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00427cc1
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00427d02
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.004197c4
test eax, 0x400000
je 0x44da3e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44da7b
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0044cc84
jmp 0x44da7b
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00451a6c
call fcn.005180b7
ret 0xc