Function at 0x44ea20
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, ecx
mov ecx, dword [ebp + 8]
push edi
lea eax, [ecx - 0x501]
cmp eax, 0x64
ja case.0x44ea41.1282
movzx eax, byte [eax + 0x44ed38]
jmp dword [eax*4 + 0x44ed20]
mov eax, dword [0x5509e8]
cmp eax, 3
je 0x44eacb
cmp eax, 2
jne 0x44ea6c
push 0
push dword [ebp + 0xc]
mov ecx, esi
call fcn.0044e150
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
cmp eax, 5
jne 0x44ea84
push dword [ebp + 0xc]
mov ecx, esi
call fcn.0044e560
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
cmp eax, 6
jne 0x44ed01
push dword [ebp + 0xc]
mov ecx, esi
call fcn.0044e600
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x44eacb
cmp dword [0x5509e8], 0
jne 0x44eacb
push 1
push dword [ebp + 0xc]
mov ecx, esi
call fcn.0044e060
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
push 1
push dword [ebp + 0xc]
mov ecx, esi
call fcn.0044e150
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
push dword [ebp + 0x10]
mov ecx, esi
push dword [ebp + 0xc]
call fcn.0044e350
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
mov edi, dword [ebp + 0xc]
lea eax, [esi + 0x12b4]
cmp edi, eax
jne 0x44eb1f
cmp dword [0x5509e8], 6
je 0x44eb1f
push 0
call fcn.0044dc50
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
lea eax, [esi + 0x1a68]
cmp edi, eax
jne 0x44eb3f
push str.Open___status___
call fcn.004250a0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
lea eax, [esi + 0x6ac]
cmp edi, eax
jne 0x44eb79
call fcn.00471bf0
test eax, eax
je 0x44ed01
lea eax, [esi + 0x1dc]
push eax
push 0
push esi
push dword [esi + 0x1d8]
push 0
call fcn.004496a0
add esp, 0x14
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
lea eax, [esi + 0x2178]
cmp edi, eax
jne 0x44ebc1
lea ecx, [esi + 0x2f98]
call fcn.0040f170
test eax, eax
jne 0x44ebc1
cmp dword [0x5509e8], eax
jne 0x44ebc1
push 0x10
push 4
push eax
push 1
push esi
lea eax, [esi + 0x36a9]
push eax
push 0x51f5b1
push 1
call fcn.00449ef0
add esp, 0x20
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
lea eax, [esi + 0x2888]
lea ebx, [esi + 0x2f98]
cmp edi, eax
jne 0x44ec2c
mov ecx, ebx
call fcn.0040f170
test eax, eax
jne 0x44ec2c
mov eax, dword [0x5509e8]
test eax, eax
jne 0x44ec04
push 6
mov ecx, 0x5509c8
call fcn.00428e20
push 1
call fcn.0044e530
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
cmp eax, 6
jne 0x44ed01
push 0
mov ecx, 0x5509c8
call fcn.00428e20
push 0
call fcn.0044e530
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
cmp edi, ebx
jne 0x44ed01
cmp dword [0x5509e8], 0
jne 0x44ed01
mov ecx, dword [0x54d3d0]
test ecx, ecx
je 0x44ed01
cmp byte [esi + 0x36a9], 0
lea edx, [esi + 0x36a9]
je 0x44ec81
mov eax, dword [ecx]
push 0
push edx
push 0x35
call dword [eax + 4]
test eax, eax
jne 0x44ed01
mov ecx, ebx
push eax
call fcn.0040eb90
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
push 0x10
push 4
push 0
push 1
push esi
push edx
push 0x51f5b1
push 1
call fcn.00449ef0
add esp, 0x20
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x44ecbd
push dword [ebp + 0x10]
mov ecx, esi
call fcn.0044e320
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
cmp eax, 1
jne 0x44ed01
mov ecx, dword [ebp + 0x10]
lea edi, [esi + 0x36a9]
mov edx, edi
sub edx, ecx
nop
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x44ecd0
cmp byte [edi], al
je 0x44ed01
mov ecx, dword [0x54d3d0]
push 0
push edi
push 0x35
mov eax, dword [ecx]
call dword [eax + 4]
test eax, eax
jne 0x44ed01
lea ecx, [esi + 0x2f98]
push eax
call fcn.0040eb90
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret 0xc
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ecx
mov ecx, esi
call fcn.0041cda0
pop edi
pop esi
pop ebx
pop ebp
ret 0xc