Function at 0x4dd450
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e7325
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x69001c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
call fcn.00409c60
mov ecx, eax
test ecx, ecx
je 0x4dd860
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x78], eax
mov dword [ebp - 4], 1
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp + 8]
call fcn.0041a580
lea eax, [ebp - 0x40]
xorps xmm0, xmm0
push eax
push dword [ebp + 8]
movups xmmword [ebp - 0x40], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
movups xmm0, xmmword [ebp - 0x40]
mov esi, dword [sym.imp.USER32.dll_GetDC]
push dword [ebp + 8]
movups xmmword [ebp - 0x30], xmm0
call esi
push 0x5a
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ecx, 0xd
mov dword [ebp - 0x7c], ecx
cmp eax, 0x60
je 0x4dd512
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x638680]
divsd xmm0, qword [0x6386b0]
addsd xmm0, qword [0x638620]
cvttsd2si ecx, xmm0
mov dword [ebp - 0x7c], ecx
cmp byte [ebp + 0xc], 0
je 0x4dd527
mov eax, 0xfffffffc
sub eax, ecx
add dword [ebp - 0x38], eax
sub dword [ebp - 0x28], ecx
jmp 0x4dd530
lea eax, [ecx + 4]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4dd821
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ValidateRect]
push dword [ebp + 8]
call esi
lea ecx, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.0041a3f0
mov byte [ebp - 4], 2
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.USER32.dll_GetParent]
push esi
push dword [ebp - 0x70]
push 0x135
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [edi], 0
mov esi, dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x80], eax
je 0x4dd595
push dword [edi + 4]
push dword [ebp - 0x70]
call esi
lea eax, [ebp - 0x8c]
xorps xmm0, xmm0
push eax
push dword [ebp - 0x70]
movlpd qword [ebp - 0x8c], xmm0
call dword [sym.imp.GDI32.dll_GetBrushOrgEx]
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x7c]
push 0
push dword [ebp - 0x88]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SetBrushOrgEx]
push dword [ebp - 0x80]
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_FillRect]
push 0
push 0
push 0x31
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 8]
mov dword [ebp - 0x7c], 0
mov byte [ebp - 0x71], 0
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x4dd621
push 0x11
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push dword [ebp - 0x70]
call esi
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x71], 1
movzx esi, byte [ebp + 0x10]
movups xmm0, xmmword [ebp - 0x40]
mov ecx, dword [ebp - 0x78]
shl esi, 0x11
add esi, 0x10
movups xmmword [ebp - 0x20], xmm0
cmp dword [ecx - 4], 1
mov dword [ebp - 0x80], esi
jle 0x4dd64d
push dword [ecx - 0xc]
lea ecx, [ebp - 0x78]
call fcn.004095d0
mov ecx, dword [ebp - 0x78]
push 0
or esi, 0x400
lea eax, [ebp - 0x20]
push esi
push eax
push 0xffffffffffffffff
push ecx
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_DrawTextExW]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
sub eax, esi
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x34]
cdq
sub eax, edx
sar eax, 1
test eax, eax
jle 0x4dd68a
mov ecx, eax
sub ecx, dword [ebp - 0x1c]
add esi, ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], esi
cmp byte [ebp + 0xc], 0
je 0x4dd6ab
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
sub esi, edx
sub esi, dword [ebp - 0x40]
add esi, dword [ebp - 0x38]
mov eax, esi
sub eax, dword [ebp - 0x20]
add edx, eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x78]
cmp dword [eax - 4], 1
jle 0x4dd6c2
push dword [eax - 0xc]
lea ecx, [ebp - 0x78]
call fcn.004095d0
mov eax, dword [ebp - 0x78]
push 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x20]
push ecx
push 0xffffffffffffffff
push eax
push dword [ebp - 0x70]
call dword [sym.imp.USER32.dll_DrawTextExW]
cmp byte [ebp - 0x71], 0
je 0x4dd6e9
push dword [ebp - 0x7c]
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov cl, byte [edi + 8]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
test cl, cl
jne 0x4dd708
push 9
call esi
mov ecx, 0x8000
test cx, ax
seta cl
mov byte [edi + 8], cl
mov al, byte [edi + 9]
test al, al
jne 0x4dd753
push 0x26
call esi
mov ecx, 0x8000
test cx, ax
ja 0x4dd74b
push 0x28
call esi
mov ecx, 0x8000
test cx, ax
ja 0x4dd74b
push 0x25
call esi
mov ecx, 0x8000
test cx, ax
ja 0x4dd74b
push 0x27
call esi
mov ecx, 0x8000
test cx, ax
ja 0x4dd74b
xor al, al
jmp 0x4dd74d
mov al, 1
mov cl, byte [edi + 8]
mov byte [edi + 9], al
test cl, cl
jne 0x4dd75f
test al, al
je 0x4dd815
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, dword [ebp + 8]
jne 0x4dd815
movups xmm1, xmmword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
movaps xmm0, xmm1
psrldq xmm0, 0xc
movd edx, xmm0
movaps xmm0, xmm1
movups xmmword [ebp - 0x50], xmm1
mov esi, dword [ebp - 0x48]
psrldq xmm0, 4
movd eax, xmm0
mov dword [ebp - 0x14], edx
psrldq xmm1, 0xc
sub edx, eax
movd edi, xmm1
mov eax, ecx
sub eax, dword [ebp - 0x2c]
cmp edx, eax
cmovg edi, ecx
xor eax, eax
sub ecx, edi
mov dword [ebp - 0x7c], edi
mov edi, dword [ebp - 0x50]
test ecx, ecx
setg al
xor ecx, ecx
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x2c]
test eax, eax
mov eax, edi
setg cl
sub eax, dword [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x80], ecx
test eax, eax
mov eax, dword [ebp - 0x28]
setg dl
sub eax, esi
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x4c]
setg cl
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x4c], eax
sub edi, edx
mov eax, dword [ebp - 0x7c]
add esi, ecx
add eax, dword [ebp - 0x84]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x70]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x48], esi
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.0041a340
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x78]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4dd843
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0059046a
mov esp, ebp
pop ebp
ret 0xc
push 0x80004005
call fcn.00409920
int3