Function at 0x4d7980
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x1c
cmp dword [0x59bcd0], 0
push esi
jne 0x4d79db
mov esi, dword [sym.imp.USER32.dll_LoadAcceleratorsW]
push str.MENUACC
push dword [0x56df20]
call esi
push str.LISTACC
push dword [0x56df20]
mov dword [0x59bcd0], eax
call esi
push str.FILEACC
push dword [0x56df20]
mov dword [0x59bcd4], eax
call esi
push str.VIEWACC
push dword [0x56df20]
mov dword [0x59bcd8], eax
call esi
mov dword [0x59bcdc], eax
push 0
push 0
push 0
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x4d79f9
xor al, al
pop esi
add esp, 0x1c
ret 8
mov eax, dword [esp + 8]
cmp eax, dword [0x539a3c]
jne 0x4d7a2b
cmp dword [esp + 0xc], 0
mov esi, dword [esp + 0x10]
setne al
movzx eax, al
push eax
push esi
call fcn.004cf7f0
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov al, 1
pop esi
add esp, 0x1c
ret 8
push ebp
push edi
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, eax
test esi, esi
je 0x4d7ceb
cmp dword [0x538908], 0
mov edi, dword [sym.imp.USER32.dll_TranslateAcceleratorW]
je 0x4d7a7c
cmp dword [0x59bcdc], 0
je 0x4d7a7c
push esi
call dword [sym.imp.USER32.dll_GetParent]
mov ecx, dword [0x538908]
cmp eax, ecx
jne 0x4d7a7c
lea eax, [esp + 0xc]
push eax
push dword [0x59bcdc]
push ecx
call edi
test eax, eax
jne 0x4d7d01
push dword [0x59bcd8]
lea eax, [esp + 0x10]
push eax
call fcn.004c4eb0
test al, al
jne 0x4d7d01
mov eax, dword [0x53890c]
mov ebp, dword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
je 0x4d7ab3
lea ecx, [esp + 0xc]
push ecx
push eax
call ebp
test eax, eax
jne 0x4d7d01
mov eax, dword [0x538910]
test eax, eax
je 0x4d7acc
lea ecx, [esp + 0xc]
push ecx
push eax
call ebp
test eax, eax
jne 0x4d7d01
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movzx ecx, ax
shr ecx, 0xf
and cl, 1
cmp dword [esp + 0x10], 0x100
jne 0x4d7b0a
cmp dword [esp + 0x14], 9
jne 0x4d7b0a
xor eax, eax
test cl, cl
sete al
lea eax, [eax*2 - 1]
push eax
call fcn.004d7d10
test al, al
jne 0x4d7d01
call fcn.004d2b10
test eax, eax
mov eax, dword [esp + 0x10]
je 0x4d7b42
cmp eax, 0x100
jne 0x4d7b42
cmp dword [esp + 0x14], 0x70
jne 0x4d7b5d
push 0
push str.HELPArcComment
push dword [0x538900]
call fcn.004c4360
pop edi
pop ebp
mov al, 1
pop esi
add esp, 0x1c
ret 8
cmp eax, 0x205
jne 0x4d7c05
mov eax, dword [esp + 0xc]
cmp eax, dword [0x55f624]
je 0x4d7c17
mov eax, dword [0x55d500]
cmp esi, eax
je 0x4d7c62
cmp esi, dword [0x543e7c]
je 0x4d7c62
mov ecx, dword [0x538908]
test ecx, ecx
je 0x4d7b9a
mov eax, dword [0x59bcdc]
test eax, eax
je 0x4d7b9f
lea edx, [esp + 0xc]
push edx
push eax
push ecx
call edi
test eax, eax
jne 0x4d7d01
mov eax, dword [0x59bcdc]
mov ecx, dword [0x53890c]
test ecx, ecx
je 0x4d7bc9
mov edx, dword [0x59bcd8]
test edx, edx
je 0x4d7bc9
lea eax, [esp + 0xc]
push eax
push edx
push ecx
call edi
test eax, eax
jne 0x4d7d01
mov eax, dword [0x59bcdc]
mov ecx, dword [0x538914]
test ecx, ecx
je 0x4d7cb8
lea edx, [esp + 0xc]
push edx
push eax
push ecx
call edi
test eax, eax
jne 0x4d7d01
lea eax, [esp + 0xc]
push eax
push 0
push 0x8009
push dword [0x538914]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4d7cb8
cmp eax, 0xa5
jne 0x4d7c2c
cmp dword [esp + 0x14], 5
jne 0x4d7b5d
mov ecx, 0x55f624
call fcn.004abc90
pop edi
pop ebp
mov al, 1
pop esi
add esp, 0x1c
ret 8
cmp eax, 0x203
jne 0x4d7b5d
mov eax, dword [esp + 0xc]
cmp eax, dword [0x55f624]
jne 0x4d7b5d
push dword [0x538900]
mov ecx, 0x55f624
call fcn.004a9e10
pop edi
pop ebp
mov al, 1
pop esi
add esp, 0x1c
ret 8
mov ecx, dword [0x59bcd4]
test ecx, ecx
je 0x4d7c82
cmp esi, eax
jne 0x4d7c82
lea eax, [esp + 0xc]
push eax
push ecx
push dword [0x538900]
call edi
test eax, eax
jne 0x4d7d01
mov eax, dword [0x59bcd0]
test eax, eax
je 0x4d7c9d
lea ecx, [esp + 0xc]
push ecx
push eax
push dword [0x538900]
call edi
test eax, eax
jne 0x4d7d01
mov eax, dword [0x59bcd8]
test eax, eax
je 0x4d7cb8
lea ecx, [esp + 0xc]
push ecx
push eax
push dword [0x538900]
call edi
test eax, eax
jne 0x4d7d01
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4d7ccc
lea ecx, [esp + 0xc]
push ecx
push eax
call ebp
test eax, eax
jne 0x4d7d01
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4d7ceb
lea ecx, [esp + 0xc]
push ecx
push 0
push 0x475
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x4d7d01
lea eax, [esp + 0xc]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0xc]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
pop edi
pop ebp
mov al, 1
pop esi
add esp, 0x1c
ret 8