Function at 0x4a99d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5c5f60
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push ebp
push esi
mov esi, dword [esp + 0x44]
push edi
mov edi, ecx
push 0x631c6c
mov ecx, esi
call fcn.0058aa67
test eax, eax
jne 0x4a9b3e
mov eax, dword [esi]
mov ebp, 3
cmp dword [eax - 8], ebp
jle 0x4a9b3e
lea ecx, [esp + 0x48]
push ebp
push ecx
mov ecx, esi
call fcn.0058a898
push eax
mov ecx, esi
mov dword [esp + 0x44], 0
call fcn.00593814
or ebx, 0xffffffff
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [edi + 0x1fc]
mov dword [esp + 0x10], 0x10
test eax, eax
je 0x4a9dde
mov eax, dword [esi]
push 0
push 0x62d718
push 0x62eac0
lea edx, [esp + 0x54]
push eax
push edx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 1
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x630204
push str.N9TO
push eax
lea eax, [esp + 0x58]
push eax
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 2
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x62d714
push 0x630208
lea ecx, [esp + 0x54]
push eax
push ecx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], ebp
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x62d714
push 0x63020c
lea edx, [esp + 0x54]
push eax
push edx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 4
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
jmp 0x4a9dde
push str.R5NN
mov ecx, esi
call fcn.0058aa67
test eax, eax
jne 0x4a9c8b
mov eax, dword [esi]
cmp dword [eax - 8], 4
jle 0x4a9c8b
lea ecx, [esp + 0x48]
push 4
push ecx
mov ecx, esi
call fcn.0058a898
push eax
mov ecx, esi
mov dword [esp + 0x44], 5
call fcn.00593814
or ebx, 0xffffffff
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [edi + 0x1fc]
mov dword [esp + 0x10], 0x10
test eax, eax
je 0x4a9dde
mov eax, dword [esi]
push 0
push 0x62d718
push 0x62eac0
lea edx, [esp + 0x54]
push eax
push edx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 6
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x630204
push str.N9TO
push eax
lea eax, [esp + 0x58]
push eax
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 7
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x62d714
push 0x630208
lea ecx, [esp + 0x54]
push eax
push ecx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 8
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x62d714
push 0x63020c
lea edx, [esp + 0x54]
push eax
push edx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 9
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
jmp 0x4a9dde
push esi
mov ecx, edi
call fcn.004a7c50
or ebx, 0xffffffff
cmp eax, 0x3e8
mov dword [esp + 0x10], eax
jle 0x4a9cd8
lea eax, [esp + 0x48]
push 3
push eax
mov ecx, esi
call fcn.0058a898
push eax
mov ecx, esi
mov dword [esp + 0x44], 0xa
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
push esi
mov ecx, edi
call fcn.004a7c50
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4a9dde
mov eax, dword [edi + 0x1fc]
test eax, eax
je 0x4a9dde
mov eax, dword [esi]
push 0
push 0x62d718
push 0x62eac0
lea ecx, [esp + 0x54]
push eax
push ecx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 0xb
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x630204
push str.N9TO
lea edx, [esp + 0x54]
push eax
push edx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 0xc
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x62d714
push 0x630208
push eax
lea eax, [esp + 0x58]
push eax
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 0xd
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov eax, dword [esi]
push 0
push 0x62d714
push 0x63020c
lea ecx, [esp + 0x54]
push eax
push ecx
call fcn.004eb820
add esp, 0x14
push eax
mov ecx, esi
mov dword [esp + 0x44], 0xe
call fcn.00593814
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
push esi
mov ecx, edi
call fcn.004a7c50
mov dword [esp + 0x10], eax
mov al, byte [esp + 0x10]
xor ebp, ebp
test al, 0x40
je 0x4a9e90
push esi
lea ecx, [esp + 0x4c]
call fcn.00593450
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], 0xf
call fcn.00593bfd
mov edx, dword [0x63fd4c]
xor esi, esi
mov eax, dword [edx + 0x8efc]
test eax, eax
mov dword [esp + 0x10], eax
jle 0x4a9e49
mov eax, dword [0x63fd4c]
mov edx, dword [esp + 0x48]
push edx
mov ecx, dword [eax + 0x8ef8]
lea eax, [ecx + esi*4]
mov eax, dword [ecx + esi*4]
push eax
call fcn.00573b74
add esp, 8
test eax, eax
je 0x4a9e49
mov eax, dword [esp + 0x10]
inc esi
cmp esi, eax
jl 0x4a9e1d
mov eax, dword [0x63fd4c]
cmp esi, dword [eax + 0x8f10]
jge 0x4a9e7e
mov ecx, 0x6644a0
call fcn.004cd710
mov ecx, dword [0x63fd4c]
push 1
mov edx, dword [ecx + 0x8ef8]
mov ecx, edi
mov esi, dword [edx + esi*4]
push esi
call fcn.004a70a0
mov ebp, 4
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
jmp 0x4aa2af
mov ecx, dword [0x63fd4c]
lea eax, [esp + 0x14]
push eax
call fcn.00461b20
mov eax, dword [eax]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00574f06
add esp, 8
lea ecx, [esp + 0x14]
test eax, eax
sete byte [esp + 0x48]
call fcn.005936db
mov al, byte [esp + 0x48]
test al, al
jne 0x4aa2af
mov ecx, dword [esp + 0x10]
mov edx, dword [0x63fd4c]
cmp ecx, 0x3e8
jle 0x4a9f26
mov eax, dword [edx + 0x8f44]
cmp dword [eax - 8], 0
je 0x4a9f26
add ecx, 0xfffffc18
push ecx
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
call fcn.0058a898
mov eax, dword [eax]
push 0
push eax
mov ecx, edi
mov dword [esp + 0x48], 0x10
call fcn.004a70a0
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov ebp, 4
jmp 0x4aa2af
mov eax, dword [edx + 0x8ecc]
test eax, eax
je 0x4aa018
test cl, 0x10
je 0x4aa018
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, 0x80
jne 0x4a9f5b
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, 0x80
je 0x4aa00e
push 0x630298
mov ecx, esi
call fcn.0058aa67
test eax, eax
jne 0x4a9fac
mov edx, dword [esi]
cmp dword [edx - 8], 3
jle 0x4a9fac
lea eax, [esp + 0x48]
push 3
push eax
mov ecx, esi
call fcn.0058a898
mov eax, dword [eax]
push 0
push eax
mov ecx, edi
mov dword [esp + 0x48], 0x11
call fcn.004a70a0
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov ebp, 4
jmp 0x4aa2af
test byte [esp + 0x10], 0x20
je 0x4a9ff8
mov ecx, dword [0x63fd4c]
add ecx, 0x8fb8
call fcn.00593666
lea edx, [esp + 0x48]
push 4
push edx
mov ecx, esi
call fcn.0058a9cd
mov eax, dword [eax]
push 1
push eax
mov ecx, edi
mov dword [esp + 0x48], 0x12
call fcn.004a76a0
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
jmp 0x4aa2aa
mov eax, dword [esi]
push 1
push eax
mov ecx, edi
call fcn.004a70a0
mov ebp, 4
jmp 0x4aa2af
mov edx, dword [0x63fd4c]
mov ecx, dword [esp + 0x10]
test cl, 2
je 0x4aa061
mov ebx, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call ebx
test ah, 0x80
jne 0x4aa04b
push 0x12
call ebx
test ah, 0x80
jne 0x4aa04b
mov ecx, dword [esi]
push ecx
push 2
mov ecx, edi
call fcn.004a7080
mov ebp, 2
jmp 0x4aa2af
mov edx, dword [esi]
mov ecx, edi
push edx
push 5
call fcn.004a7080
mov ebp, 3
jmp 0x4aa2af
test cl, 0x10
je 0x4aa130
mov eax, dword [edx + 0x8ecc]
test eax, eax
je 0x4aa130
push 0x630298
mov ecx, esi
call fcn.0058aa67
test eax, eax
jne 0x4aa0c9
mov eax, dword [esi]
cmp dword [eax - 8], 3
jle 0x4aa0c9
lea ecx, [esp + 0x48]
push 3
push ecx
mov ecx, esi
call fcn.0058a898
mov eax, dword [eax]
push 1
push eax
mov ecx, edi
mov dword [esp + 0x48], 0x13
call fcn.004a70a0
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov ebp, 4
jmp 0x4aa2af
test byte [esp + 0x10], 0x20
je 0x4aa11a
mov edx, dword [0x63fd4c]
lea ecx, [edx + 0x8fb8]
call fcn.00593666
lea eax, [esp + 0x48]
push 4
push eax
mov ecx, esi
call fcn.0058a9cd
mov eax, dword [eax]
push 1
push eax
mov ecx, edi
mov dword [esp + 0x48], 0x14
call fcn.004a76a0
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov ebp, 4
jmp 0x4aa2af
mov ecx, dword [esi]
push 1
push ecx
mov ecx, edi
call fcn.004a70a0
mov ebp, 4
jmp 0x4aa2af
test cl, 8
je 0x4aa1c9
mov ebp, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call ebp
test ah, 0x80
jne 0x4aa164
push 0x12
call ebp
test ah, 0x80
jne 0x4aa164
mov eax, dword [esi]
mov ecx, edi
push eax
push 0xa
call fcn.004a7080
mov ebp, 7
jmp 0x4aa175
mov eax, dword [esi]
mov ecx, edi
push eax
push 3
call fcn.004a7080
mov ebp, 6
mov esi, dword [esi]
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x44], 0x15
mov dword [esp + 0x1c], 0x5e1b90
call fcn.00514380
mov al, byte [esp + 0x30]
mov dword [esp + 0x40], 0x16
cmp al, 3
jge 0x4aa1c0
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
push eax
push ecx
mov ecx, dword [0x63fd4c]
push edx
call fcn.00460c90
mov dword [esp + 0x40], ebx
jmp 0x4aa2af
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, 0x80
je 0x4aa1de
mov eax, dword [esi]
push eax
jmp 0x4aa2a1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, 0x80
je 0x4aa201
mov ecx, dword [esi]
push ecx
push 3
mov ecx, edi
call fcn.004a7080
mov ebp, 6
jmp 0x4aa2af
mov al, byte [esp + 0x10]
test al, 1
je 0x4aa278
push 0x630298
mov ecx, esi
call fcn.0058aa67
test eax, eax
jne 0x4aa265
mov edx, dword [esi]
cmp dword [edx - 8], 3
jle 0x4aa265
push 0x630298
push 2
mov ecx, edi
call fcn.004a7080
lea eax, [esp + 0x10]
push 4
push eax
mov ecx, esi
call fcn.0058a898
mov eax, dword [eax]
push 1
push eax
mov ecx, edi
mov dword [esp + 0x48], 0x17
call fcn.004a70a0
lea ecx, [esp + 0x10]
mov dword [esp + 0x40], ebx
call fcn.005936db
mov ebp, 4
jmp 0x4aa2af
mov ecx, dword [esi]
push ecx
push 0
mov ecx, edi
call fcn.004a7080
mov ebp, 1
jmp 0x4aa2af
test al, 4
je 0x4aa28f
mov edx, dword [esi]
mov ecx, edi
push edx
push 1
call fcn.004a7080
mov ebp, 5
jmp 0x4aa2af
mov eax, dword [0x63fd4c]
mov ecx, dword [eax + 0x8ecc]
test ecx, ecx
jne 0x4aa2af
mov ecx, dword [esi]
push ecx
push 4
mov ecx, edi
call fcn.004a7080
mov ebp, 8
mov edx, dword [str.OnClickAny]
mov ecx, dword [0x63fd4c]
push edx
call fcn.004781b0
test ebp, ebp
je 0x4aa2d8
mov eax, dword [ebp*4 + 0x631b10]
mov ecx, dword [0x63fd4c]
push eax
call fcn.004781b0
mov ecx, dword [esp + 0x38]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x34
ret 4