Function at 0x4a63b0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4d8e88
push eax
mov dword fs:[0], esp
sub esp, 0x24
push edi
mov edi, ecx
test edi, edi
jne 0x4a63e5
xor al, al
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp byte [edi + 0x24], 0
je 0x4a63d2
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebx], 0
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 0x58]
push ebx
push esi
call edx
test al, al
jne 0x4a6868
cmp dword [esi + 8], 0xfffffd31
jne 0x4a6695
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 0x24]
push esi
call edx
test al, al
je 0x4a6695
mov eax, dword [0x52fe30]
cmp byte [eax + 0x1141b], 0
je 0x4a687d
mov eax, dword [esi + 0x14]
cmp eax, 1
jne 0x4a6502
cmp dword [esi + 0xc], 0
je 0x4a6868
cmp dword [esi + 0x10], 0
je 0x4a6868
lea ecx, [ebp - 0x30]
call fcn.004bc8c0
push 0
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [0x52fe2c]
mov dword [ebp - 4], 0
call fcn.0040a790
test eax, eax
jl 0x4a64d6
lea ecx, [ebp - 0x30]
call fcn.004bc9d0
test eax, eax
je 0x4a64d6
push 0
mov ecx, eax
call fcn.004bcc80
mov ecx, eax
call fcn.0048ec50
test eax, eax
je 0x4a64d6
mov edx, dword [esi + 0x10]
push edx
push eax
mov eax, dword [esi + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004bc960
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esi + 0xc]
xor edx, edx
mov word [ecx], dx
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004bc960
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp eax, 2
jne 0x4a652f
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
push str.Create_new_console
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp eax, 3
jne 0x4a6571
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
test al, al
mov eax, str.Alternative_mode_is_ON__console_freezed_
jne 0x4a654d
mov eax, str.Alternative_mode_is_off
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0xc]
push ecx
push eax
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp eax, 4
jne 0x4a65b4
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
push 4
call edx
test al, al
mov eax, str.BufferHeight_mode_is_ON__scrolling_enabled_
jne 0x4a6590
mov eax, str.BufferHeight_mode_is_off
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0xc]
push ecx
push eax
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp eax, 5
jne 0x4a65e1
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
push str.Minimize_window
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp eax, 6
jne 0x4a660e
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
push edx
push str.Maximize_window
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp eax, 7
jne 0x4a663b
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0xc]
push ecx
push str.Close_ALL_consoles
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp eax, 8
jne 0x4a6668
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
push str.Show_copying_queue
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp eax, 9
jne 0x4a6680
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
push edx
push str.Show_system_menu__RClick_for_Settings_
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp dword [esi + 8], 0xfffffd3a
jne 0x4a6726
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
push esi
call eax
test al, al
je 0x4a6726
mov esi, dword [esi + 0xc]
sub esi, 1
je 0x4a6704
sub esi, 1
jne 0x4a670b
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
and ax, cx
mov edx, ecx
cmp ax, dx
mov edx, dword [0x52fe2c]
sete al
movzx ecx, al
push ecx
mov ecx, dword [edx + 0x409c]
push esi
push esi
call fcn.0044a820
mov dword [ebx], esi
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov ecx, edi
call fcn.004a5e70
pop esi
mov dword [ebx], 0
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp dword [esi + 8], 0xfffffdee
jne 0x4a687d
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 0x18]
push esi
call edx
test al, al
je 0x4a687d
xor eax, eax
lea edx, [ebp - 0x18]
xor ecx, ecx
push edx
mov dword [ebp + 8], eax
mov dword [esi + 0xb0], eax
mov word [esi + 0x10], cx
mov dword [esi + 0xc], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [ebp - 0x14]
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
push 1
push 1
push edx
mov edx, dword [ebp - 0x18]
push edx
call eax
mov ebx, eax
test ebx, ebx
jl 0x4a6868
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
lea eax, [edi + 0x84a]
push 0x104
push eax
mov dword [ebp - 0x10], eax
mov eax, dword [edx + 0x3c]
push ebx
call eax
test al, al
je 0x4a6868
mov ecx, dword [ebp - 0x10]
push 0x2026
push ecx
call fcn.004c9bca
add esp, 8
test eax, eax
je 0x4a6868
lea ecx, [ebp - 0x24]
call fcn.004bc8c0
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x24]
push eax
push ebx
mov ecx, edi
mov dword [ebp - 4], 1
call fcn.004a5900
test al, al
je 0x4a6859
push 0x461
push str.TabBar.cpp
lea ecx, [ebp + 0xc]
call fcn.004ab960
mov edx, dword [ebp + 8]
lea ecx, [ebp + 0xc]
push ecx
push edx
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.004bc9d0
mov ecx, eax
call fcn.004bcc80
mov ecx, eax
call fcn.004881d0
test al, al
je 0x4a684d
push 0x104
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x24]
call fcn.004bc9d0
mov ecx, eax
call fcn.004bcc80
mov ecx, eax
call fcn.0048aa60
mov edi, dword [ebp - 0x10]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [esi + 0xc], edi
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.004ab970
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
call fcn.004bc960
pop esi
pop ebx
mov al, 1
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
xor al, al
pop edi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8