Function at 0x44a820
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d8673
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x460
mov al, byte [ebp + 0x10]
push ebx
push esi
mov ebx, ecx
push edi
mov byte [ebx + 0x14], al
call dword [sym.imp.USER32.dll_CreatePopupMenu]
xor edi, edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x38], edi
cmp dword [ebp + 8], edi
jne 0x44a88c
cmp dword [ebp + 0xc], edi
jne 0x44a88c
mov ecx, dword [0x52fe2c]
mov ecx, dword [ecx + 0x40a0]
call fcn.004a5b00
test al, al
je 0x44a88c
mov edx, dword [0x52fe30]
cmp byte [edx + 0x1133e], 1
jne 0x44a88c
mov dword [ebp + 0xc], 0x20
mov eax, dword [ebp + 0xc]
and al, 0x20
cmp al, 0x20
lea ecx, [ebp - 0x48]
sete byte [ebp - 0x11]
call fcn.004bc8c0
push edi
lea ecx, [ebp - 0x48]
push ecx
mov ecx, dword [0x52fe2c]
mov dword [ebp - 4], edi
call fcn.0040a790
test eax, eax
jl 0x44a8e5
lea ecx, [ebp - 0x48]
call fcn.004bc9d0
mov ecx, eax
call fcn.004bcc80
test eax, eax
je 0x44a8e5
push edi
lea ecx, [ebp - 0x48]
call fcn.004bc9d0
mov ecx, eax
call fcn.004bcc80
mov ecx, eax
call fcn.00488680
mov edi, eax
mov dword [ebp - 0x38], eax
mov edx, dword [0x52fe30]
mov eax, dword [edx + 0x1160]
xor ecx, ecx
cmp byte [ebp - 0x11], cl
lea esi, [ebx + 0x18]
setne cl
mov dword [ebp - 0x1c], eax
mov dword [ebx + 0x2c], 0
mov eax, dword [esi + 0x10]
dec ecx
mov dword [ebp + 0x10], ecx
test eax, eax
je 0x44a921
push eax
call fcn.0044c4f0
add esp, 4
mov dword [esi + 0x10], 0
xor eax, eax
push 0x9c
push eax
lea edx, [ebp - 0xe8]
mov dword [esi + 8], eax
mov dword [esi + 4], eax
inc dword [ebx + 0x2c]
push edx
call fcn.004c9b50
mov eax, dword [ebx + 0x2c]
push 0
push 0
push 0
push str.New_console_dialog...
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xd8]
push 0x40
push eax
mov dword [ebp - 0xe8], 6
call fcn.004495f0
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp + 0x10]
add esp, 0x24
lea ecx, [ebp - 0xd8]
push ecx
mov ecx, dword [ebp - 0x10]
push edx
push 0x400
push eax
push ecx
call dword [sym.imp.USER32.dll_InsertMenuW]
lea edx, [ebp - 0xe8]
push edx
mov ecx, esi
call fcn.004493c0
test edi, edi
je 0x44aa1c
cmp word [edi], 0
je 0x44aa1c
inc dword [ebx + 0x2c]
push 0x9c
lea eax, [ebp - 0xe8]
push 0
push eax
call fcn.004c9b50
mov eax, dword [ebx + 0x2c]
push 0
push 0
push 0
push edi
lea ecx, [ebp - 0xd8]
push 0x40
push ecx
mov dword [ebp - 0xe8], 5
mov dword [ebp - 0xe4], eax
call fcn.004495f0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp + 0x10]
add esp, 0x24
lea edx, [ebp - 0xd8]
push edx
mov edx, dword [ebp - 0x10]
push eax
push 0x400
push ecx
push edx
mov dword [ebp - 0xdc], edi
call dword [sym.imp.USER32.dll_InsertMenuW]
lea eax, [ebp - 0xe8]
push eax
mov ecx, esi
call fcn.004493c0
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp - 0x10]
push 0
push 0
push 0xc00
push ecx
push edi
call dword [sym.imp.USER32.dll_InsertMenuW]
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], eax
mov eax, dword [str.1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov dword [ebp - 0x24], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x44aa46
mov ecx, dword [0x52fe30]
sub eax, edx
sar eax, 1
push 0
mov dword [ebp - 0x3c], eax
call fcn.0044ecd0
mov edi, eax
test edi, edi
je 0x44ac91
nop
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x18]
mov edx, eax
inc eax
cmp edx, 0xa
mov dword [ebp - 0x20], eax
jl 0x44ab3f
push 0x9c
lea eax, [ebp - 0xe8]
push 0
push eax
call fcn.004c9b50
lea ecx, [ebp - 0xd8]
push str.More_tasks
push ecx
mov dword [ebp - 0xe8], 4
mov dword [ebp - 0xe4], 0xffffffff
call fcn.00402e90
add esp, 0x14
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0xd8]
push edx
push eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 0x10]
push 0x410
push eax
push ecx
call dword [sym.imp.USER32.dll_InsertMenuW]
test eax, eax
je 0x44ac91
cmp dword [esi], 0
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x24], edx
je 0x44ab38
mov eax, dword [esi + 8]
cmp eax, dword [esi + 4]
jg 0x44ab13
cmp eax, 0x100
jge 0x44ab0b
mov eax, 0x100
push eax
mov ecx, esi
call fcn.00445bd0
mov eax, dword [esi + 4]
mov edx, dword [esi]
lea ecx, [eax + 1]
imul eax, eax, 0x9c
add eax, dword [esi + 0x10]
mov dword [esi + 4], ecx
push edx
lea ecx, [ebp - 0xe8]
push ecx
push eax
call fcn.004c9f70
add esp, 0xc
mov dword [ebp - 0x20], 1
inc dword [ebx + 0x2c]
push 0x9c
lea edx, [ebp - 0xe8]
push 0
push edx
call fcn.004c9b50
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x3c]
add esp, 0xc
cmp dword [ebp - 0x20], eax
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0xe0], edi
jg 0x44ab9f
mov ecx, dword [str.1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov edx, dword [ebp - 0x20]
movzx eax, word [ecx + edx*2 - 2]
push eax
lea ecx, [ebp - 0xd8]
push str._c:
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x44aba8
xor edx, edx
mov word [ebp - 0xd8], dx
push 0
lea eax, [ebp - 0x46c]
push eax
lea ecx, [edi + 0x18]
call fcn.00441810
cmp byte [ebx + 0x14], 0
mov edi, dword [edi + 4]
sete cl
cmp dword [ebp - 0xe8], 1
push eax
mov byte [ebp - 0x4c], cl
mov edx, dword [ebp - 0x4c]
push edx
sete al
movzx ecx, al
push ecx
push edi
lea edx, [ebp - 0xd8]
push 0x40
push edx
call fcn.004495f0
add esp, 0x18
cmp byte [ebx + 0x14], 0
je 0x44ac11
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0xd8]
push ecx
push eax
push 0x410
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x24]
push edx
push eax
jmp 0x44ac2c
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0xd8]
push ecx
mov ecx, dword [ebp - 0x24]
push edx
push 0x400
push eax
push ecx
call dword [sym.imp.USER32.dll_InsertMenuW]
cmp dword [esi], 0
je 0x44ac78
mov eax, dword [esi + 8]
cmp eax, dword [esi + 4]
jg 0x44ac53
cmp eax, 0x100
jge 0x44ac4b
mov eax, 0x100
push eax
mov ecx, esi
call fcn.00445bd0
mov eax, dword [esi + 4]
mov ecx, dword [esi]
lea edx, [eax + 1]
imul eax, eax, 0x9c
add eax, dword [esi + 0x10]
mov dword [esi + 4], edx
push ecx
lea edx, [ebp - 0xe8]
push edx
push eax
call fcn.004c9f70
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov ecx, dword [0x52fe30]
push eax
call fcn.0044ecd0
mov edi, eax
test edi, edi
jne 0x44aa70
inc dword [ebx + 0x2c]
mov edi, dword [ebx + 0x2c]
push 0x9c
lea ecx, [ebp - 0xe8]
push 0
push ecx
call fcn.004c9b50
push 0
push 0
push 0
push str.Setup_tasks...
lea edx, [ebp - 0xd8]
push 0x40
push edx
mov dword [ebp - 0xe8], 7
mov dword [ebp - 0xe4], edi
call fcn.004495f0
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp + 0x10]
add esp, 0x24
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0x10]
push ecx
push 0x400
push edx
push eax
call dword [sym.imp.USER32.dll_InsertMenuW]
lea ecx, [ebp - 0xe8]
push ecx
mov ecx, esi
call fcn.004493c0
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x44aeb5
cmp word [edi], 0
je 0x44aeb5
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x10]
push 0
push 0xffffffffffffffff
push 0xc00
push edx
push eax
call dword [sym.imp.USER32.dll_InsertMenuW]
cmp word [edi], 0
mov dword [ebp - 0x18], 0
je 0x44ae4f
jmp 0x44ad47
mov edi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov ecx, eax
inc eax
cmp ecx, 0x10
mov dword [ebp - 0x18], eax
jge 0x44ae4f
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x44ad70
push edi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x44ae21
inc dword [ebx + 0x2c]
mov edi, dword [ebx + 0x2c]
push 0x9c
lea edx, [ebp - 0xe8]
push 0
push edx
call fcn.004c9b50
push 0
push 0
mov dword [ebp - 0xe4], edi
mov edi, dword [ebp - 0x1c]
push 0
push edi
lea eax, [ebp - 0xd8]
push 0x40
push eax
mov dword [ebp - 0xe8], 5
call fcn.004495f0
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp + 0x10]
add esp, 0x24
lea ecx, [ebp - 0xd8]
push ecx
mov ecx, dword [ebp - 0x10]
push edx
push 0x400
push eax
push ecx
mov dword [ebp - 0xdc], edi
call dword [sym.imp.USER32.dll_InsertMenuW]
cmp dword [esi], 0
je 0x44ae21
mov eax, dword [esi + 8]
cmp eax, dword [esi + 4]
jg 0x44adfc
cmp eax, 0x100
jge 0x44adf4
mov eax, 0x100
push eax
mov ecx, esi
call fcn.00445bd0
mov eax, dword [esi + 4]
mov ecx, dword [esi]
lea edx, [eax + 1]
imul eax, eax, 0x9c
add eax, dword [esi + 0x10]
mov dword [esi + 4], edx
push ecx
lea edx, [ebp - 0xe8]
push edx
push eax
call fcn.004c9f70
add esp, 0xc
mov edi, dword [ebp - 0x1c]
mov eax, edi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x44ae30
sub eax, edx
sar eax, 1
lea eax, [edi + eax*2 + 2]
mov dword [ebp - 0x1c], eax
cmp word [eax], cx
jne 0x44ad44
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
push 0x9c
lea eax, [ebp - 0xe8]
push 0
push eax
call fcn.004c9b50
push 0
push 0
push 0
push str.Clear_history...
lea ecx, [ebp - 0xd8]
push 0x40
push ecx
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0xe4], esi
call fcn.004495f0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp + 0x10]
add esp, 0x24
lea edx, [ebp - 0xd8]
push edx
mov edx, dword [ebp - 0x10]
push eax
push 0x400
push ecx
push edx
call dword [sym.imp.USER32.dll_InsertMenuW]
xor eax, eax
xor edi, edi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], edi
lea esi, [edi + 8]
cmp eax, edi
je 0x44aee5
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edx
cmp eax, edi
je 0x44af4e
mov esi, eax
jmp 0x44af4e
mov eax, dword [0x52fe2c]
cmp dword [eax + 0x40a0], edi
je 0x44af1d
mov ecx, dword [eax + 0x40a0]
call fcn.004a5b00
test al, al
je 0x44af1d
mov ecx, dword [0x52fe2c]
mov ecx, dword [ecx + 0x40a0]
lea eax, [ebp - 0x34]
push eax
push 2
call fcn.004a60e0
lea edi, [ebp - 0x34]
jmp 0x44af4e
mov eax, dword [0x52fe14]
lea edx, [ebp - 0x34]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [0x52fe14]
push 2
lea ecx, [ebp - 0x34]
push ecx
push 0
push edx
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
push edi
mov dword [ebx + 0x30], 0
mov byte [ebx + 1], 0
mov byte [ebx], 1
mov edx, dword [0x52fe14]
push edx
mov edx, dword [ebp - 0x10]
push eax
push ecx
or esi, 0x100
push esi
push edx
push 3
mov ecx, ebx
call fcn.00448420
cmp eax, 1
mov byte [ebx + 1], 0
mov byte [ebx], 0
jge 0x44af96
cmp dword [ebx + 0x30], 0
je 0x44b1c3
mov esi, dword [ebx + 0x30]
test esi, esi
jne 0x44afcf
cmp dword [ebx + 0x1c], esi
mov dword [ebp - 0xe8], esi
jle 0x44b1c3
mov edx, dword [ebx + 0x28]
lea ecx, [edx + 4]
cmp dword [ecx], eax
je 0x44afc7
inc esi
add ecx, 0x9c
cmp esi, dword [ebx + 0x1c]
jl 0x44afb2
jmp 0x44b1c3
imul esi, esi, 0x9c
add esi, edx
mov ecx, 0x27
lea edi, [ebp - 0xe8]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0xe8]
cmp eax, 6
jne 0x44b007
mov ecx, dword [0x52fe34]
push 0
push 1
call fcn.0046aa90
mov ecx, dword [0x52fe2c]
push eax
call fcn.0040fca0
jmp 0x44b1c3
cmp eax, 7
jne 0x44b01e
push 0x9d
call fcn.0045af50
add esp, 4
jmp 0x44b1c3
cmp eax, 8
jne 0x44b035
mov ecx, dword [0x52fe34]
push 0
call fcn.0045c520
jmp 0x44b1c3
cmp eax, 5
je 0x44b04d
cmp eax, 3
je 0x44b04d
cmp eax, 2
je 0x44b04d
cmp eax, 1
jne 0x44b1c3
lea ecx, [ebp - 0x36c]
call fcn.00479450
mov eax, dword [ebp - 0xe8]
mov byte [ebp - 4], 1
cmp eax, 2
je 0x44b0f4
cmp eax, 1
je 0x44b0f4
cmp eax, 3
jne 0x44b0e4
mov edx, dword [ebp - 0xdc]
mov esi, dword [ebp - 0xe0]
push 0
push 0
push 0
lea eax, [ebp + 0xf]
push eax
lea ecx, [ebp + 0x13]
push ecx
mov ecx, dword [0x52fe2c]
push edx
mov byte [ebp + 0xf], 0
mov byte [ebp + 0x13], 0
call fcn.00409bc0
push eax
call fcn.0044c570
mov dword [ebp - 0x358], eax
add esp, 8
xor eax, eax
cmp byte [ebp + 0x13], al
push 0
setne al
lea ecx, [ebp - 0x354]
push ecx
mov ecx, esi
inc eax
mov dword [ebp - 0x340], eax
call fcn.00408b50
push 0
lea ecx, [ebp - 0x36c]
call fcn.004798f0
jmp 0x44b10e
cmp eax, 5
jne 0x44b10e
mov edx, dword [ebp - 0xdc]
push 0
push edx
jmp 0x44b100
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 4]
push 0
push ecx
call fcn.0044c570
mov dword [ebp - 0x358], eax
add esp, 8
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov edx, 0x8000
and ax, dx
mov ecx, edx
cmp ax, cx
jne 0x44b159
mov ecx, dword [0x52fe2c]
lea edx, [ebp - 0x36c]
push edx
call fcn.0040a200
cmp eax, 0x5f4
je 0x44b152
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0
call fcn.004797e0
jmp 0x44b220
call fcn.004b8f50
jmp 0x44b17b
mov eax, dword [ebp - 0xe8]
cmp eax, 5
je 0x44b169
cmp eax, 1
jne 0x44b17b
mov eax, dword [ebp - 0x358]
mov ecx, dword [0x52fe30]
push eax
call fcn.004534b0
mov ecx, dword [0x52fe34]
call fcn.004604a0
test al, al
je 0x44b1a2
push 0
push 1
lea ecx, [ebp - 0x36c]
push ecx
mov ecx, dword [0x52fe2c]
call fcn.0040f160
jmp 0x44b1b4
mov ecx, dword [0x52fe2c]
lea edx, [ebp - 0x36c]
push edx
call fcn.0040eee0
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0
call fcn.004797e0
xor edi, edi
cmp dword [ebx + 0x1c], edi
jle 0x44b216
xor esi, esi
lea esp, [esp]
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + esi + 0x90]
test eax, eax
je 0x44b1e5
push eax
call dword [sym.imp.USER32.dll_DestroyMenu]
mov ecx, dword [ebx + 0x28]
mov eax, dword [ecx + esi + 0x94]
test eax, eax
je 0x44b20a
push eax
call fcn.0044c4f0
mov edx, dword [ebx + 0x28]
add esp, 4
mov dword [edx + esi + 0x94], 0
inc edi
add esi, 0x9c
cmp edi, dword [ebx + 0x1c]
jl 0x44b1d0
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_DestroyMenu]
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0xffffffff
call fcn.004bc960
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc