Function at 0x4d0954
Capabilities:
Log keystrokes

Disassembly:
push ebx
push esi
push edi
push ebp
push ecx
mov eax, dword [0x4ee620]
mov eax, dword [eax + 0x350]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je 0x4d0c07
cmp byte [0x4ee915], 0
je 0x4d09a0
mov ebp, dword [0x4ee8d0]
mov eax, dword [0x4ee8d4]
add eax, 0x24a
mov dword [esp], eax
mov esi, dword [0x4ee8d0]
add esi, 0xe2
mov edi, eax
jmp 0x4d09c1
mov ebp, dword [0x4ee8d0]
mov eax, dword [0x4ee8d4]
add eax, 0x2ee
mov dword [esp], eax
mov esi, dword [0x4ee8d0]
add esi, 0x122
mov edi, eax
push 0
call sub.user32.dll_GetDC
mov ebx, eax
push edi
push esi
push ebx
call sub.gdi32.dll_GetPixel
mov esi, eax
push ebx
push 0
call sub.user32.dll_ReleaseDC
cmp esi, 0xe8b250
jle 0x4d0c07
cmp esi, 0xfbc520
jge 0x4d0c07
push 0
call sub.user32.dll_GetDC
mov ebx, eax
mov eax, dword [esp]
push eax
push ebp
push ebx
call sub.gdi32.dll_GetPixel
mov esi, eax
push ebx
push 0
call sub.user32.dll_ReleaseDC
test esi, esi
je 0x4d0c07
mov eax, dword [0x4ee8cc]
push eax
call sub.user32.dll_SetForegroundWindow
mov eax, 0x64
call fcn.004c1d7c
push 0
push 0
push 0
push 0x7b
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x7b
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x7b
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x7b
call sub.user32.dll_keybd_event
mov eax, 0x14
call fcn.004c1d7c
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x71
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x71
call sub.user32.dll_keybd_event
pop edx
pop ebp
pop edi
pop esi
pop ebx
ret