Function at 0x4a3700
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x14], 0
mov byte [ebp - 0xd], 1
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 4], 0
call fcn.004ea5d0
test eax, eax
jne 0x4a3746
call fcn.004ed360
test eax, eax
jne 0x4a3746
call fcn.004ec700
test eax, eax
jne 0x4a3746
mov dword [ebp - 0x58], 0
jmp 0x4a374d
mov dword [ebp - 0x58], 1
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4a3785
call fcn.005084b0
test eax, eax
je 0x4a377c
call fcn.005084b0
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0x1b8]
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0
jne 0x4a3785
mov dword [ebp - 0x5c], 0
jmp 0x4a378c
mov dword [ebp - 0x5c], 1
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xc], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xbbd
mov ecx, dword [0x6de314]
call fcn.005389f0
mov dword [ebp - 4], eax
cmp dword [0x68d29c], 0
jne 0x4a3802
cmp dword [ebp - 4], 0
jne 0x4a37be
cmp dword [ebp - 0xc], 0
je 0x4a3802
cmp dword [ebp + 8], 0x502
je 0x4a3802
cmp dword [ebp + 8], 0x501
je 0x4a3802
cmp dword [ebp + 8], 0x204
jne 0x4a37fb
mov ecx, dword [ebp + 0xc]
and ecx, 8
je 0x4a37fb
mov edx, dword [ebp + 0xc]
and edx, 4
jne 0x4a37fb
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
je 0x4a3802
xor eax, eax
jmp 0x4a3d60
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x60], 0x20a
ja 0x4a383e
cmp dword [ebp - 0x60], 0x20a
je 0x4a3c12
mov edx, dword [ebp - 0x60]
sub edx, 0x200
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 6
ja case.0x4a3837.2
mov eax, dword [ebp - 0x60]
jmp dword [eax*4 + 0x4a3d68]
cmp dword [ebp - 0x60], 0x2a1
je case.0x4a3837.0
cmp dword [ebp - 0x60], 0x501
je 0x4a3c94
cmp dword [ebp - 0x60], 0x502
je 0x4a3a75
jmp case.0x4a3837.2
cmp dword [0x6de314], 0
je 0x4a3891
cmp dword [ebp + 8], 0x201
jne 0x4a3891
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 0x6f
mov ecx, dword [0x6de314]
call fcn.0053b770
mov dword [ebp - 0x18], 0
mov eax, dword [ebp + 0xc]
and eax, 8
je 0x4a38a9
mov ecx, dword [ebp - 0x18]
or ecx, 2
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp + 0xc]
and edx, 4
je 0x4a38ba
mov eax, dword [ebp - 0x18]
or eax, 1
mov dword [ebp - 0x18], eax
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
je 0x4a38d6
mov edx, dword [ebp - 0x18]
or edx, 4
mov dword [ebp - 0x18], edx
mov eax, dword [0x696478]
add eax, 1
mov dword [0x696478], eax
mov dword [ebp - 0x20], 0x64
cmp dword [0x6de30c], 0
je 0x4a390c
lea ecx, [ebp - 0x20]
push ecx
push 0
mov edx, dword [0x6de30c]
mov eax, dword [edx]
mov ecx, dword [0x6de30c]
mov edx, dword [eax + 0x70]
call edx
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx eax, ax
sub eax, 0x190
imul eax, eax, 0x64
cdq
idiv dword [ebp - 0x20]
add eax, 0x190
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
movsx eax, cx
sub eax, 0x12c
imul eax, eax, 0x64
cdq
idiv dword [ebp - 0x20]
add eax, 0x12c
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
xor edx, edx
cmp dword [ebp + 8], 0x201
setne dl
add edx, 1
push edx
call fcn.0040b0d0
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4a3979
mov byte [ebp - 0xd], 0
call fcn.004aaa20
jmp case.0x4a3837.2
mov dword [ebp - 0x28], 0
mov eax, dword [ebp + 0xc]
and eax, 8
je 0x4a399b
mov ecx, dword [ebp - 0x28]
or ecx, 2
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp + 0xc]
and edx, 4
je 0x4a39ac
mov eax, dword [ebp - 0x28]
or eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [0x696478]
add ecx, 1
mov dword [0x696478], ecx
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x8000
je 0x4a39d7
mov eax, dword [ebp - 0x28]
or eax, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], 0x64
cmp dword [0x6de30c], 0
je 0x4a3a00
lea ecx, [ebp - 0x30]
push ecx
push 0
mov edx, dword [0x6de30c]
mov eax, dword [edx]
mov ecx, dword [0x6de30c]
mov edx, dword [eax + 0x70]
call edx
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx eax, ax
sub eax, 0x190
imul eax, eax, 0x64
cdq
idiv dword [ebp - 0x30]
add eax, 0x190
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
movsx eax, cx
sub eax, 0x12c
imul eax, eax, 0x64
cdq
idiv dword [ebp - 0x30]
add eax, 0x12c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x34]
push edx
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
xor edx, edx
cmp dword [ebp + 8], 0x203
setne dl
add edx, 0x100
push edx
call fcn.0040b0d0
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4a3a70
mov byte [ebp - 0xd], 0
jmp case.0x4a3837.2
mov eax, dword [ebp + 0xc]
cmp eax, dword [ebp - 0x54]
jne 0x4a3b06
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
movsx edx, cx
cmp edx, 1
jne 0x4a3ac1
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
test ecx, ecx
jl 0x4a3ac1
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movsx eax, dx
push eax
mov ecx, dword [ebp - 0x54]
add ecx, 0x100
push ecx
call fcn.004a3f80
add esp, 8
mov byte [ebp - 0xd], 0
mov edx, dword [ebp + 0x10]
shr edx, 0x10
movsx eax, dx
cmp eax, 2
jne 0x4a3b06
mov ecx, dword [ebp + 0x10]
and ecx, 0xffff
movsx edx, cx
test edx, edx
jl 0x4a3b06
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
push ecx
push 0x63abb8
mov edx, dword [ebp - 0x54]
add edx, 0x100
push edx
call fcn.004a4460
add esp, 0xc
mov byte [ebp - 0xd], 0
jmp case.0x4a3837.2
mov dword [ebp - 0x3c], 0x64
cmp dword [0x6de30c], 0
je 0x4a3b34
lea eax, [ebp - 0x3c]
push eax
push 0
mov ecx, dword [0x6de30c]
mov edx, dword [ecx]
mov ecx, dword [0x6de30c]
mov eax, dword [edx + 0x70]
call eax
mov ecx, dword [ebp + 0x10]
and ecx, 0xffff
movsx eax, cx
sub eax, 0x190
imul eax, eax, 0x64
cdq
idiv dword [ebp - 0x3c]
add eax, 0x190
mov dword [ebp - 0x38], eax
mov edx, dword [ebp + 0x10]
shr edx, 0x10
movsx eax, dx
sub eax, 0x12c
imul eax, eax, 0x64
cdq
idiv dword [ebp - 0x3c]
add eax, 0x12c
mov dword [ebp - 0x40], eax
mov eax, dword [0x696478]
add eax, 1
mov dword [0x696478], eax
mov ecx, dword [ebp + 0xc]
and ecx, 1
je 0x4a3bb5
mov edx, dword [0x696478]
sub edx, 1
mov dword [0x696478], edx
cmp dword [0x6de314], 0
je 0x4a3bb3
push 0
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
mov ecx, dword [0x6de314]
call fcn.00539880
jmp 0x4a3bf2
mov edx, dword [ebp + 0xc]
and edx, 2
je 0x4a3bd3
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
push 2
push 0
call fcn.0040b0d0
add esp, 0x10
jmp 0x4a3bf2
mov edx, dword [0x696478]
sub edx, 1
mov dword [0x696478], edx
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.0040b0a0
add esp, 8
mov edx, dword [ebp + 0xc]
and edx, 8
push edx
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
mov ecx, dword [ebp - 0x54]
call fcn.004a3e20
mov byte [ebp - 0xd], 0
jmp case.0x4a3837.2
cmp dword [0x6de314], 0
je 0x4a3c8f
mov edx, dword [ebp + 0xc]
shr edx, 0x10
movsx eax, dx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
neg eax
cdq
mov ecx, 0x78
idiv ecx
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jle 0x4a3c64
cmp dword [0x6de31c], 0
je 0x4a3c55
push str.Zoom___in___
call fcn.00414240
add esp, 4
jmp 0x4a3c62
push 0
mov ecx, dword [0x6de314]
call fcn.005399b0
jmp 0x4a3c8f
cmp dword [ebp - 0x48], 0
jge 0x4a3c8f
cmp dword [0x6de31c], 0
je 0x4a3c82
push str.Zoom___out___
call fcn.00414240
add esp, 4
jmp 0x4a3c8f
push 1
mov ecx, dword [0x6de314]
call fcn.005399b0
jmp case.0x4a3837.2
cmp dword [ebp + 0xc], 0
jne 0x4a3cc6
cmp dword [0x6de314], 0
je 0x4a3cc6
cmp dword [ebp + 0x10], 0
jle 0x4a3cc6
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 0x1e8]
push ecx
push 0x3a
mov ecx, dword [0x6de314]
call fcn.0053b770
jmp case.0x4a3837.2
cmp dword [ebp + 0xc], 1
jne 0x4a3cea
cmp dword [0x6de314], 0
je 0x4a3cea
push 0
mov edx, dword [ebp + 0x10]
push edx
push 0x50
mov ecx, dword [0x6de314]
call fcn.0053b770
jmp case.0x4a3837.2
cmp dword [ebp + 0xc], 2
jne 0x4a3d14
cmp dword [0x6de314], 0
je 0x4a3d14
cmp dword [ebp + 0x10], 0
je 0x4a3d14
push 0
mov eax, dword [ebp + 0x10]
push eax
push 0x56
mov ecx, dword [0x6de314]
call fcn.0053b770
jmp case.0x4a3837.2
cmp dword [ebp + 0xc], 3
jne case.0x4a3837.2
cmp dword [0x6de314], 0
je case.0x4a3837.2
push 0
mov ecx, dword [ebp + 0x10]
push ecx
push 0x57
mov ecx, dword [0x6de314]
call fcn.0053b770
movzx edx, byte [ebp - 0xd]
test edx, edx
je 0x4a3d5e
cmp dword [0x6de314], 0
je 0x4a3d5e
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [0x6de314]
call fcn.00538e50
xor eax, eax
mov esp, ebp
pop ebp
ret 0xc