Function at 0x49d6a0
Capabilities:
Hide graphical window
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x569851
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x661850]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x70], ecx
push str.Tue_Jul_28_15:38:22_2015
push 0x19d3
push str.CInterface::OnKeyDown
push str.GameProcessInterface.cpp
lea ecx, [ebp - 0xd]
call fcn.004024e0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x70]
add edx, 0x4c
push edx
mov ecx, dword [ebp - 0x70]
add ecx, 0xa0f14
call fcn.004e3db0
movzx eax, al
test eax, eax
je 0x49d72a
mov byte [ebp - 0x69], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x69]
jmp 0x49de69
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x74], ecx
mov edx, dword [ebp - 0x74]
sub edx, 0xd
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 0x6d
ja case.0x49d74d.1
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + 0x49dee4]
jmp dword [ecx*4 + 0x49de7c]
mov ecx, dword [ebp - 0x70]
add ecx, 0x1acc
call fcn.00516820
movzx edx, al
test edx, edx
je 0x49d80f
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x4330], 0x27
jne 0x49d80f
push 0
push 0
mov ecx, dword [ebp - 0x70]
add ecx, 0x5a
push ecx
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x9c]
push eax
push 0x3e8
mov ecx, 0x7c46b0
call fcn.00505ca0
mov ecx, dword [ebp - 0x70]
mov byte [ecx + 0x4d], 1
mov ecx, dword [ebp - 0x70]
add ecx, 0x1acc
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x1acc]
mov edx, dword [eax + 0xc]
call edx
mov dword [0x6f3228], 0
push 0x78
mov ecx, 0x7c0e48
call fcn.005121c0
mov byte [0x7c0e68], 0
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x70]
mov dword [eax + 0x770], 0xffffffff
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x14], ax
movzx ecx, byte [0x7ac42c]
test ecx, ecx
jne 0x49d86d
movzx edx, byte [0x7a81b0]
test edx, edx
je 0x49d842
movzx eax, byte [0x7a81b0]
cmp eax, 0x1d
jne 0x49d86d
movzx ecx, byte [0x7aaf68]
test ecx, ecx
je 0x49d85e
push 0x5777ac
mov ecx, 0x7c46b0
call fcn.005072e0
jmp 0x49d86d
push 0x5777a4
mov ecx, 0x7c46b0
call fcn.005072e0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x18], ax
push 0x57e580
mov ecx, 0x7c46b0
call fcn.005072e0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x1c], ax
lea ecx, [ebp - 0x28]
call fcn.0043b330
push 0
push 0
push 0
push 0
push 0x401
lea edx, [ebp - 0x28]
push edx
call fcn.00509d80
push 0
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x7c46b0
call fcn.005063f0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x2c], ax
push 0xc
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x30], ax
call fcn.0040ada0
sub eax, dword [0x66aa9c]
cmp eax, 0x1388
jbe 0x49d92e
mov ecx, dword [ebp - 0x70]
add ecx, 0xa52f0
call fcn.0043c1c0
push 0
mov ecx, 0x7c46b0
call fcn.005073d0
call fcn.0040ada0
mov dword [0x66aa9c], eax
push 0x13
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x34], ax
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x38], ax
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x3c], ax
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x16
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x40], ax
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x6658cc]
mov dword [ebp - 0x78], ecx
cmp dword [ebp - 0x78], 0
je 0x49dac1
cmp dword [ebp - 0x78], 1
je 0x49da09
jmp 0x49dacb
mov ecx, dword [ebp - 0x70]
add ecx, 0x9e544
call fcn.0043b9f0
movzx edx, al
test edx, edx
je 0x49da92
mov eax, dword [ebp - 0x70]
mov byte [eax + 0x790], 2
push 8
mov ecx, dword [ebp - 0x70]
call fcn.00496cc0
push 0
mov ecx, dword [ebp - 0x70]
add ecx, 0x9e544
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x9e544]
mov edx, dword [eax + 0xc]
call edx
movzx eax, word [0x6658dc]
sub eax, 0x23
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0xb9108]
add edx, 0x212
push edx
movzx eax, word [0x6658dc]
sub eax, 0x6e
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0xb9108]
add edx, 0xbe
push edx
mov eax, dword [ebp - 0x70]
add eax, 0x704
push eax
call dword [sym.imp.USER32.dll_SetRect]
jmp 0x49dabf
mov ecx, dword [ebp - 0x70]
mov byte [ecx + 0x790], 1
push 8
mov ecx, dword [ebp - 0x70]
call fcn.00496c40
push 1
mov ecx, dword [ebp - 0x70]
add ecx, 0x9e544
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x9e544]
mov edx, dword [eax + 0xc]
call edx
jmp 0x49dacb
push 8
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
mov ecx, 0x6acf18
call fcn.0041d5f0
jmp case.0x49d74d.1
mov ecx, dword [ebp - 0x70]
add ecx, 0x87b78
call fcn.004c13a0
jmp case.0x49d74d.1
mov eax, dword [ebp - 0x70]
movzx ecx, byte [eax + 0x87c41]
neg ecx
sbb ecx, ecx
add ecx, 1
mov edx, dword [ebp - 0x70]
mov byte [edx + 0x87c41], cl
jmp case.0x49d74d.1
movzx eax, byte [0x663c28]
test eax, eax
sete cl
mov byte [0x663c28], cl
push 3
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x44], eax
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x48], eax
movzx edx, byte [0x663c28]
test edx, edx
je 0x49db60
push 0
push 0
push 0x57e6a8
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp 0x49db7b
push 0
push 0
push 0x57e694
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x48]
push eax
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x4c], ax
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 6
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x50], ax
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 0x70]
add ecx, 0x97048
call fcn.0043b9f0
movzx ecx, al
test ecx, ecx
je 0x49dbee
push 5
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp 0x49dbfd
push 0x40c
mov ecx, 0x7c46b0
call fcn.00508500
jmp case.0x49d74d.1
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0xb
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0xe
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
mov ecx, dword [ebp - 0x70]
add ecx, 0x87b78
call fcn.0043b9f0
movzx edx, al
test edx, edx
je 0x49dc88
push 0
mov ecx, 0x7c0e48
call fcn.0043b450
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x70]
movzx ecx, byte [eax + 0x87c40]
neg ecx
sbb ecx, ecx
add ecx, 1
mov edx, dword [ebp - 0x70]
mov byte [edx + 0x87c40], cl
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x54], ax
mov al, byte [0x66aa50]
add al, 1
mov byte [0x66aa50], al
movzx eax, byte [0x66aa50]
cdq
mov ecx, 5
idiv ecx
mov byte [0x66aa50], dl
push 2
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x5c], eax
push 7
call fcn.004764c0
add esp, 4
mov dword [ebp - 0x58], eax
movzx edx, byte [0x66aa50]
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 4
ja case.default.0x49dceb
mov eax, dword [ebp - 0x7c]
jmp dword [eax*4 + 0x49df54]
push 0
push 0
push 0x57c040
mov ecx, dword [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x5c]
push edx
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp case.default.0x49dceb
push 0
push 0
push 0x57c034
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x5c]
push ecx
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp case.default.0x49dceb
push 0
push 0
push 0x57c024
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp case.default.0x49dceb
push 0
push 0
push 0x57c014
mov ecx, dword [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x5c]
push edx
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp case.default.0x49dceb
push 0
push 0
push 0x57c008
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x5c]
push ecx
mov ecx, 0x6eeef8
call fcn.0048ce80
jmp case.0x49d74d.1
mov byte [0x7d519b], 0
push 0x57970c
mov ecx, 0x7c46b0
call fcn.005072e0
jmp case.0x49d74d.1
movzx edx, byte [0x7ad724]
test edx, edx
je 0x49ddb6
push 0x1a
mov ecx, dword [ebp - 0x70]
call fcn.00496ec0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x60], ax
push 0x57e68c
mov ecx, 0x7c46b0
call fcn.005072e0
jmp case.0x49d74d.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x70]
movzx ecx, byte [eax + 0x1ac8]
neg ecx
sbb ecx, ecx
add ecx, 1
mov edx, dword [ebp - 0x70]
mov byte [edx + 0x1ac8], cl
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x68], ax
movzx eax, word [ebp - 0x68]
shr eax, 8
and eax, 0xff
movzx ecx, al
test ecx, ecx
je 0x49de2c
push 0x57e680
mov ecx, 0x7c46b0
call fcn.005072e0
jmp case.0x49d74d.1
movzx edx, byte [0x66adac]
test edx, edx
jne case.0x49d74d.1
mov eax, dword [ebp - 0x70]
movzx ecx, byte [eax + 0xb910c]
neg ecx
sbb ecx, ecx
add ecx, 1
mov edx, dword [ebp - 0x70]
mov byte [edx + 0xb910c], cl
mov byte [ebp - 0x6a], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov al, byte [ebp - 0x6a]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 8