Function at 0x4bf6b1
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x2c
mov eax, 0x511b97
call fcn.004f41ae
mov ebx, ecx
test ebx, ebx
je 0x4bf996
cmp byte [ebx + 0x30], 0
je 0x4bf996
mov edx, dword [ebp + 0xc]
xor edi, edi
mov esi, dword [ebp + 8]
push edx
push esi
mov dword [edx], edi
mov ecx, dword [ebx + 4]
mov eax, dword [ecx]
call dword [eax + 0x68]
test al, al
jne 0x4bf876
cmp dword [esi + 8], 0xfffffd31
jne 0x4bf821
mov ecx, dword [ebx + 4]
push esi
mov eax, dword [ecx]
call dword [eax + 0x30]
test al, al
je 0x4bf821
mov eax, dword [0x5a23ec]
cmp byte [eax + 0x1119b], 0
je 0x4bf996
mov eax, dword [esi + 0x14]
cmp eax, 1
jne 0x4bf78e
cmp dword [esi + 0xc], edi
je 0x4bf876
cmp dword [esi + 0x10], edi
je 0x4bf876
lea ecx, [ebp - 0x38]
call fcn.004d840a
mov ecx, dword [0x5a22a0]
lea eax, [ebp - 0x38]
push edi
push eax
mov dword [ebp - 4], edi
call fcn.0040ef51
xor ecx, ecx
test eax, eax
cmovns ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x4bf76d
push edi
call fcn.004de78b
mov ecx, eax
call fcn.0048877a
mov edi, eax
mov eax, dword [esi + 0xc]
test edi, edi
je 0x4bf781
push dword [esi + 0x10]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
jmp 0x4bf786
xor ecx, ecx
mov word [eax], cx
lea ecx, [ebp - 0x38]
jmp 0x4bf98c
cmp eax, 2
jne 0x4bf79d
push dword [esi + 0x10]
push str.Create_new_console
jmp 0x4bf816
cmp eax, 3
jne 0x4bf7b8
mov ecx, dword [ebx + 4]
push 3
mov eax, dword [ecx]
call dword [eax + 0x4c]
mov ecx, str.Alternative_mode_is_ON__console_freezed_
mov edx, str.Alternative_mode_is_off
jmp 0x4bf7d1
cmp eax, 4
jne 0x4bf7dc
mov ecx, dword [ebx + 4]
push 4
mov eax, dword [ecx]
call dword [eax + 0x4c]
mov ecx, str.BufferHeight_mode_is_ON__scrolling_enabled_
mov edx, str.BufferHeight_mode_is_off
push dword [esi + 0x10]
test al, al
cmove ecx, edx
push ecx
jmp 0x4bf816
cmp eax, 5
jne 0x4bf7eb
push dword [esi + 0x10]
push str.Minimize_window
jmp 0x4bf816
cmp eax, 6
jne 0x4bf7fa
push dword [esi + 0x10]
push str.Maximize_window
jmp 0x4bf816
cmp eax, 7
jne 0x4bf809
push dword [esi + 0x10]
push str.Close_ALL_consoles
jmp 0x4bf816
cmp eax, 8
jne 0x4bf876
push dword [esi + 0x10]
push str.Show_system_menu__RClick_for_Settings_
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
jmp 0x4bf876
cmp dword [esi + 8], 0xfffffd3a
jne 0x4bf87d
mov ecx, dword [ebx + 4]
push esi
mov eax, dword [ecx]
call dword [eax + 0x30]
test al, al
je 0x4bf87d
mov eax, dword [esi + 0xc]
sub eax, 1
je 0x4bf86a
sub eax, 1
jne 0x4bf871
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [0x5a22a0]
shr eax, 0xf
and al, 1
movzx eax, al
mov ecx, dword [ecx + 0x3e60]
push eax
push edi
push edi
call fcn.0045a4cf
jmp 0x4bf871
mov ecx, ebx
call fcn.004bf2b6
mov eax, dword [ebp + 0xc]
mov dword [eax], edi
mov al, 1
jmp 0x4bf998
cmp dword [esi + 8], 0xfffffdee
jne 0x4bf996
mov ecx, dword [ebx + 4]
push esi
mov eax, dword [ecx]
call dword [eax + 0x24]
test al, al
je 0x4bf996
xor eax, eax
mov dword [esi + 0xb0], edi
mov word [esi + 0x10], ax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp + 8], edi
mov dword [esi + 0xc], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [ebx + 4]
push 1
push 1
push dword [ebp - 0x14]
mov eax, dword [ecx]
push dword [ebp - 0x18]
call dword [eax + 0x40]
mov dword [ebp - 0x10], eax
test eax, eax
js 0x4bf876
mov ecx, dword [ebx + 4]
lea edi, [ebx + 0x856]
push 0x104
push edi
push eax
mov edx, dword [ecx]
call dword [edx + 0x48]
test al, al
je 0x4bf876
lea ecx, [ebp - 0x28]
call fcn.004d840a
lea eax, [ebp + 8]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
push dword [ebp - 0x10]
call fcn.004bf0a6
test al, al
je 0x4bf989
push 0x4d1
push str.t:_vcprojectmaximus5conemu_srcconemu_tabbar.cpp
lea ecx, [ebp + 0xc]
call fcn.004c41c2
mov ecx, dword [ebp - 0x24]
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 8]
mov byte [ebp - 4], 2
call fcn.004de78b
mov ecx, eax
call fcn.004885ac
test al, al
je 0x4bf981
mov eax, dword [ebp + 0xc]
cmp byte [eax + 0xc], 1
jne 0x4bf95e
push 0x2026
push edi
call fcn.004f5617
pop ecx
pop ecx
test eax, eax
je 0x4bf981
mov ecx, dword [ebp - 0x24]
lea eax, [ebp + 0xc]
push 0x104
push eax
call fcn.004de78b
mov ecx, eax
call fcn.004886c0
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [esi + 0xc], edi
lea ecx, [ebp + 0xc]
call fcn.004c42c8
lea ecx, [ebp - 0x28]
call fcn.004d84a5
jmp 0x4bf876
xor al, al
call fcn.004f4177
ret 8