Function at 0x4ab5bb
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x550fb0
call fcn.005237ce
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4ab5d7
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4ab91d
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5abd98
call fcn.004c2b7d
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4ab60b
cmp dword [0x5abd9c], eax
jne 0x4ab60b
call fcn.004241ad
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004a8fda
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4ab654
mov eax, edi
sub eax, 8
je 0x4ab869
dec eax
je 0x4ab6ed
sub eax, 0xa
je 0x4ab660
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0042a34b
jmp 0x4ab92b
push esi
call fcn.004256bf
mov edi, eax
pop ecx
test edi, edi
je 0x4ab6de
push edi
push 0x55fb58
call fcn.00435d13
pop ecx
pop ecx
test eax, eax
je 0x4ab68b
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4ab6d6
push edi
push 0x55f5ec
call fcn.00435d13
pop ecx
pop ecx
test eax, eax
je 0x4ab6a9
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4ab6d6
push edi
push 0x56369c
call fcn.00435d13
pop ecx
pop ecx
test eax, eax
jne 0x4ab6cb
push edi
push 0x56330c
call fcn.00435d13
pop ecx
pop ecx
test eax, eax
je 0x4ab6de
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4ab654
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4ab654
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4ab812
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4ab812
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0047220a
cmp dword [esi + 0x2c4], edi
jne 0x4ab7aa
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00494cd9
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0049a5bc
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4ab79c
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0048edcf
push dword [eax]
push 0x5ab6dc
call fcn.00435d13
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4ab794
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4ab749
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00494d01
jmp 0x4ab7d1
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x56e0ec
call fcn.00435d13
pop ecx
pop ecx
cmp eax, edi
je 0x4ab7d1
push edi
mov ecx, eax
call fcn.004c8a64
mov ecx, dword [esi + 0x78]
push 1
call fcn.0047220a
push dword [esi + 0x78]
push 0x561dc0
call fcn.00435d13
pop ecx
pop ecx
cmp eax, edi
je 0x4ab7fa
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4ab92b
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4ab92b
test ebx, ebx
je 0x4ab92b
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4ab92b
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4ab92b
cmp dword [0x5b73a0], 0
je 0x4ab92b
push 8
mov ecx, esi
call fcn.004aaf75
mov edi, eax
test edi, edi
je 0x4ab92b
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00433988
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004339c9
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00430eb6
test eax, 0x400000
je 0x4ab8ee
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4ab92b
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004aab34
jmp 0x4ab92b
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00472364
call fcn.005238a6
ret 0xc