Function at 0x44ab70
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x498dd8
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x4b900c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [edi + 0x1b0]
test esi, esi
je 0x44ae07
mov eax, dword [edi + 0x248]
lea ecx, [eax - 1]
cmp ecx, 3
jbe 0x44ad83
cmp eax, 7
je 0x44ad88
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ebx, dword [edi + 0x1b0]
push dword [ebp + 0xc]
movsx esi, ax
push dword [ebp + 8]
mov ecx, dword [ebx + 0x50]
shr esi, 0x10
mov dword [ebp - 0x18], ebx
call fcn.00462f00
mov edx, eax
mov dword [ebp - 0x3c], edx
test edx, edx
je 0x44acdb
test esi, esi
jne 0x44ac69
mov ecx, dword [ebx + 0x68]
lea esi, [ebx + 0x64]
mov eax, dword [esi]
cmp eax, ecx
je 0x44ac13
cmp dword [eax], edx
je 0x44ac35
add eax, 4
cmp eax, ecx
jne 0x44ac08
mov eax, dword [esi]
mov dword [esi + 4], eax
cmp dword [esi + 8], eax
je 0x44ac4b
push dword [ebp + 0xc]
mov dword [eax], edx
mov ecx, ebx
push dword [ebp + 8]
add dword [esi + 4], 4
call fcn.00460f20
jmp 0x44acea
cmp eax, ecx
je 0x44ac13
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.00460f20
jmp 0x44acea
lea ecx, [ebp - 0x3c]
push ecx
push eax
mov ecx, esi
call fcn.0041e140
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.00460f20
jmp 0x44acea
mov esi, dword [ebp - 0x18]
mov ebx, dword [ebx + 0x68]
add esi, 0x64
mov ecx, dword [esi]
cmp ebx, ecx
je 0x44ac83
cmp dword [ecx], edx
je 0x44ac93
add ecx, 4
cmp ecx, ebx
jne 0x44ac78
mov eax, dword [esi + 4]
cmp dword [esi + 8], eax
je 0x44acbd
mov dword [eax], edx
add dword [esi + 4], 4
jmp 0x44acc9
cmp ebx, ecx
je 0x44ac83
lea eax, [ecx + 4]
sub ebx, eax
push ebx
push eax
push ecx
call fcn.0047fbd0
mov ebx, dword [ebp - 0x18]
add esp, 0xc
mov ecx, ebx
push dword [ebp + 0xc]
add dword [ebx + 0x68], 0xfffffffc
push dword [ebp + 8]
call fcn.00460f20
jmp 0x44acea
lea ecx, [ebp - 0x3c]
push ecx
push eax
mov ecx, esi
call fcn.0041e140
push dword [ebp + 0xc]
mov ebx, dword [ebp - 0x18]
mov ecx, ebx
push dword [ebp + 8]
call fcn.00460f20
jmp 0x44acea
mov eax, dword [ebx + 0x64]
lea esi, [ebx + 0x64]
mov dword [esi + 4], eax
mov eax, dword [ebx + 0x78]
mov dword [ebx + 0x7c], eax
mov ecx, dword [esi + 4]
xor eax, eax
sub ecx, dword [esi]
sar ecx, 2
cmp eax, ecx
sbb eax, eax
neg eax
mov dword [edi + 0x2b8], eax
test ecx, ecx
jne 0x44ad33
cmp dword [ebp + 0x10], ecx
jne 0x44ad33
mov eax, dword [ebp + 8]
mov dword [edi + 0x2cc], eax
mov dword [edi + 0x2c4], eax
mov eax, dword [ebp + 0xc]
mov dword [edi + 0x2bc], 1
mov dword [edi + 0x2d0], eax
mov dword [edi + 0x2c8], eax
jmp 0x44ad3d
mov dword [edi + 0x2c0], 1
mov ecx, edi
call fcn.0044b680
mov ecx, dword [edi + 0x1b0]
lea esi, [ecx + 0x64]
push esi
call fcn.00460ff0
mov eax, dword [esi + 4]
mov ecx, dword [esi]
sub eax, ecx
sar eax, 2
test eax, eax
je 0x44ad65
mov eax, dword [ecx]
jmp 0x44ad67
xor eax, eax
mov dword [ebp - 0x20], eax
mov ecx, edi
lea eax, [ebp - 0x38]
mov dword [ebp - 0x2c], 0
push eax
push 0xfffffc79
call fcn.0044b920
jmp 0x44adf3
cmp eax, 7
jne 0x44ade4
cmp dword [ebp + 0x10], 0
jne 0x44ade4
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.00407210
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 4], 0
mov ecx, dword [esi + 0x50]
push ebx
call fcn.004630b0
lea ecx, [ebp - 0x1c]
test eax, eax
je 0x44add0
mov dword [esi + 0x88], ebx
call fcn.0040ec00
push 0x1c
push dword [ebp - 0x1c]
call fcn.0047ea92
add esp, 8
jmp 0x44ade9
cmp ecx, 3
ja 0x44adf3
mov dword [edi + 0x2c0], 1
mov ecx, edi
call fcn.0044aa40
push 0
push 0
push dword [edi + 0x44]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0047e577
mov esp, ebp
pop ebp
ret 0xc