Function at 0x4e6aae
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x556f1a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
mov dword [ebp - 0x60], ecx
cmp dword [ebp + 8], 0
jge 0x4e6ad7
jmp 0x4e6c7e
call dword [sym.imp.DataMgr.dll_class_CDataMgr____cdecl_gf_GetDataMgr_void_]
mov dword [ebp - 0x14], eax
call dword [sym.imp.DataMgr.dll_class_CDataMgr____cdecl_gf_GetDataMgr_void_]
mov ecx, eax
call dword [sym.imp.DataMgr.dll_public:_int___thiscall_CDataMgr::GetPickCount_void_const]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x4e6b08
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x60]
call fcn.004e7287
jmp 0x4e6c7e
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov word [ebp - 0x24], ax
movsx ecx, word [ebp - 0x24]
and ecx, 0x8000
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x60]
cmp dword [edx + 0x6c], 0
je 0x4e6b3c
xor eax, eax
cmp dword [ebp - 0x1c], 0
sete al
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x44]
push ecx
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DataMgr.dll_public:_class_Box2d___thiscall_CDataMgr::GetPickArrayBox_void_]
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DataMgr.dll_public:_int___thiscall_CDataMgr::GetPickCount_void_const]
shl eax, 2
push eax
call sub.MFC42u.DLL_operatornew
add esp, 4
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DataMgr.dll_public:_int___thiscall_CDataMgr::GetPickCount_void_const]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DataMgr.dll_public:_int___thiscall_CDataMgr::CopyPickList_struct_tagPickItem___int_]
mov dword [ebp - 0x10], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0x5aa508
call sub.MFC42u.DLL_CString::CString_2
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 4], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0x5aa518
call sub.MFC42u.DLL_CString::CString_2
mov dword [ebp - 0x6c], eax
lea edx, [ebp - 0x54]
push edx
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.DataMgr.dll_class_CString___cdecl_gf_Str_class_CString__class_CString_]
add esp, 0xc
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x74], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x74]
call fcn.0040e8c0
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
call dword [edx + 0x68]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call sub.MFC42u.DLL_CString::CString
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DataMgr.dll_public:_void___thiscall_CDataMgr::BeginPick_void_]
mov dword [ebp - 0x18], 0
jmp 0x4e6c16
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x10]
jge 0x4e6c46
xor edx, edx
cmp dword [ebp - 0x1c], 0
sete dl
mov dword [ebp - 0x58], edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp + 8]
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4]
push ecx
call fcn.004e69d6
add esp, 0xc
jmp 0x4e6c0d
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DataMgr.dll_public:_void___thiscall_CDataMgr::EndPick_void_]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
call dword [eax + 0x6c]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov edx, dword [ebp - 0x5c]
push edx
call sub.MFC42u.DLL_operatordelete
add esp, 4
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.DataMgr.dll_class_CDrawDC____cdecl_gf_GetDrawDC_void_]
mov ecx, eax
call dword [sym.imp.DataMgr.dll_public:_void___thiscall_CDrawDC::InvalidateRect_class_Box2d_const__]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4