Function at 0x4d91f0
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, dword [0x55e170]
push esi
mov esi, ecx
push edi
mov edi, dword [esi + 4]
cmp eax, edi
jne case.0x4d9324.14
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
cmp ecx, 2
mov eax, dword [eax + 8]
jne 0x4d92d8
add eax, 0xffffffbf
cmp eax, 0x16
ja case.0x4d9324.14
xor ecx, ecx
mov cl, byte [eax + 0x4d95c8]
jmp dword [ecx*4 + 0x4d95a8]
mov ecx, esi
call fcn.004ed2e0
pop edi
mov eax, 1
pop esi
ret 0xc
mov ecx, esi
call fcn.004ef9e0
pop edi
mov eax, 1
pop esi
ret 0xc
push 0xb25a
mov ecx, esi
call fcn.004e5310
pop edi
mov eax, 1
pop esi
ret 0xc
push 0
push 0xa773
push 0x111
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
mov eax, 1
pop esi
ret 0xc
push 0xb25b
mov ecx, esi
call fcn.004e5310
pop edi
mov eax, 1
pop esi
ret 0xc
push 0
push 0xa772
push 0x111
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
mov eax, 1
pop esi
ret 0xc
push 0
push 0x8069
push 0x111
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
mov eax, 1
pop esi
ret 0xc
cmp ecx, 3
jne 0x4d9307
cmp eax, 0x41
jne case.0x4d9324.14
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov ecx, esi
call fcn.004ed2a0
pop edi
mov eax, 1
pop esi
ret 0xc
cmp ecx, 4
jne 0x4d93ce
lea ecx, [eax - 8]
cmp ecx, 0x6a
ja case.0x4d9324.14
xor edx, edx
mov dl, byte [ecx + 0x4d95fc]
jmp dword [edx*4 + 0x4d95e0]
mov ecx, esi
call fcn.004def10
pop edi
mov eax, 1
pop esi
ret 0xc
mov ecx, esi
call fcn.004def50
pop edi
mov eax, 1
pop esi
ret 0xc
mov ecx, esi
call fcn.004def30
pop edi
mov eax, 1
pop esi
ret 0xc
mov ecx, esi
call fcn.004ed300
pop edi
mov eax, 1
pop esi
ret 0xc
mov esi, dword [esi + 0xf0]
test esi, esi
je case.0x4d9324.14
push str.properties
push edi
lea ecx, [esi + 0x1d0]
call fcn.00510d00
pop edi
pop esi
ret 0xc
push eax
call fcn.00480640
add esp, 4
test eax, eax
jne 0x4d9597
mov eax, dword [0x54e8b4]
test eax, eax
je 0x4d9597
lea ecx, [esi + 0x4a8]
call fcn.00423e90
test eax, eax
je 0x4d9597
pop edi
mov eax, 1
pop esi
ret 0xc
test ecx, ecx
jne case.0x4d9324.14
cmp eax, 0x74
jne 0x4d941a
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov eax, dword [0x55e190]
test eax, eax
je 0x4d9409
mov eax, dword [esi + 0x420]
test eax, eax
je 0x4d9409
lea ecx, [esi + 0x2b8]
call fcn.00516780
mov ecx, esi
call fcn.004e4870
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0x72
jne 0x4d9425
push eax
jmp 0x4d9561
cmp eax, 0x2a
jne 0x4d942d
push eax
jmp 0x4d9433
cmp eax, 0x79
jne 0x4d9453
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov ecx, esi
call fcn.004edfc0
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0x73
jne 0x4d9495
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov eax, dword [0x54e8b4]
test eax, eax
je case.0x4d9324.14
cmp dword [esp + 0x14], 1
jne case.0x4d9324.14
lea ecx, [esi + 0x4a8]
call fcn.00423e20
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0x76
jne 0x4d94bf
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
push 1
push 0x6f
mov ecx, esi
call fcn.004e5390
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0x77
jne 0x4d94e9
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
push 1
push 0x70
mov ecx, esi
call fcn.004e5390
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0xa6
jne 0x4d9511
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov ecx, esi
call fcn.004def10
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0xa7
jne 0x4d9535
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov ecx, esi
call fcn.004def50
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0xa8
jne 0x4d9559
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov ecx, esi
call fcn.004e4870
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0xaa
jne 0x4d957d
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov ecx, esi
call fcn.004ed310
pop edi
mov eax, 1
pop esi
ret 0xc
cmp eax, 0xac
jne case.0x4d9324.14
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ah, 0x80
je case.0x4d9324.14
mov ecx, esi
call fcn.004def70
pop edi
mov eax, 1
pop esi
ret 0xc
pop edi
xor eax, eax
pop esi
ret 0xc