Function at 0x4e1ea1
Capabilities:
Log keystrokes via polling

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 4], ecx
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x20a
jne 0x4e1e2d
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004eb990
test eax, eax
je 0x4e1e2d
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.004068e0
test eax, eax
je 0x4e1e2d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.004046a0
mov eax, 1
jmp 0x4e20f7
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0x100
jne case.0x4e1fa1.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
test edx, edx
jl case.0x4e1e9a.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
test eax, eax
jl case.0x4e1e9a.1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004eb990
test eax, eax
je case.0x4e1e9a.1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0xd
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x1b
ja case.0x4e1e9a.1
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x4e210c]
jmp dword [eax*4 + 0x4e2100]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.004068e0
test eax, eax
jne case.0x4e1e9a.0
jmp case.0x4e1e9a.1
mov ecx, dword [ebp - 4]
call fcn.00418130
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.004068e0
test eax, eax
je 0x4e1f03
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.004046a0
jmp 0x4e1f71
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.00404620
test eax, eax
je 0x4e1f71
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x74]
add eax, 0xb8
push eax
mov ecx, dword [ebp - 4]
call fcn.0040afe0
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.004045f0
push eax
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x74]
mov ecx, dword [eax + 0x20]
and ecx, 0xffff
movzx edx, cx
push edx
push 0x111
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.00404620
mov ecx, eax
call fcn.004046f0
mov eax, 1
jmp 0x4e20f7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 9
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x1f
ja case.0x4e1fa1.1
mov ecx, dword [ebp - 0xc]
movzx edx, byte [ecx + 0x4e2138]
jmp dword [edx*4 + 0x4e2128]
mov ecx, dword [ebp - 4]
call fcn.00405570
test eax, eax
je 0x4e1ff2
push 0x5ba
push str.f:dd_vctools_vc7libs_ship_atlmfc_srcmfc_afxtoolbarcomboboxbutton.cpp
mov ecx, dword [ebp - 4]
call fcn.00405570
push eax
call fcn.00439c90
push 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 4]
call fcn.00405570
mov ecx, eax
call fcn.00405330
mov ecx, eax
call fcn.00418130
mov eax, 1
jmp 0x4e20f7
jmp case.0x4e1fa1.1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004eb990
test eax, eax
je 0x4e201a
push 0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.00406700
mov ecx, dword [ebp - 4]
call fcn.0040e100
test eax, eax
je 0x4e203f
mov ecx, dword [ebp - 4]
call fcn.0040e100
mov ecx, eax
call fcn.00418130
mov eax, 1
jmp 0x4e20f7
jmp case.0x4e1fa1.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
test eax, eax
jl case.0x4e1fa1.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
test ecx, ecx
jl case.0x4e1fa1.1
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004eb990
test eax, eax
je case.0x4e1fa1.1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.004068e0
test eax, eax
jne 0x4e20e4
push 1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.00406700
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.00405570
test eax, eax
je 0x4e20e4
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
add ecx, 0x90
call fcn.00611d90
push eax
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004eb990
mov ecx, eax
call fcn.00405570
mov ecx, eax
call fcn.00404e50
mov eax, 1
jmp 0x4e20f7
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 4]
call fcn.0040ae60
mov esp, ebp
pop ebp
ret 4