Function at 0x4ea270
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
cmp byte [edi + 0x3c], 0
jne 0x4ea29a
cmp byte [edi + 8], 0
jne 0x4ea296
mov eax, dword [edi]
cmp eax, 2
je 0x4ea296
cmp eax, 5
jne 0x4ea29a
xor al, al
jmp 0x4ea29c
mov al, 1
mov byte [esi + 0x90], al
mov eax, dword [edi + 4]
test eax, eax
jne 0x4ea2cf
push 0x10
call fcn.00550175
add esp, 4
mov dword [ebp + 8], eax
mov dword [eax + 4], 0
mov dword [eax], vtable.view::DefaultWidgetDelegate.0
mov dword [eax + 8], esi
cmp dword [edi], 3
setne cl
mov byte [eax + 0xc], cl
mov dword [esi + 0x30], eax
mov eax, dword [edi + 0x10]
mov dword [esi + 0x5c], eax
mov ecx, dword [edi + 0x38]
test ecx, ecx
je 0x4ea2e6
mov eax, dword [ecx]
call dword [eax + 0xc]
jmp 0x4ea2ed
mov ecx, esi
call fcn.00509a80
cmp dword [esi + 0x34], 0
mov dword [esi + 0x14], eax
jne 0x4ea317
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xac]
mov ecx, dword [esi + 0x34]
mov ebx, eax
cmp ebx, ecx
je 0x4ea317
test ecx, ecx
je 0x4ea314
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [esi + 0x34], ebx
push 4
call fcn.00550175
mov ebx, eax
add esp, 4
mov dword [ebp + 8], ebx
mov dword [ebx], vtable.view::DefaultThemeProvider.0
mov ecx, dword [esi + 0x40]
cmp ebx, ecx
je 0x4ea340
test ecx, ecx
je 0x4ea33d
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [esi + 0x40], ebx
cmp dword [edi], 4
jne 0x4ea37c
mov ebx, dword [sym.imp.USER32.dll_GetKeyState]
push 1
call ebx
test al, al
js 0x4ea377
push 2
call ebx
test al, al
js 0x4ea377
push 4
call ebx
test al, al
js 0x4ea377
push 5
call ebx
test al, al
js 0x4ea377
push 6
call ebx
test al, al
js 0x4ea377
xor al, al
jmp 0x4ea379
mov al, 1
mov byte [esi + 8], al
mov ecx, dword [esi + 0x14]
push edi
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [edi], 0
jne 0x4ea49d
push 0xa4
call fcn.00550175
add esp, 4
mov dword [ebp + 8], eax
mov ecx, eax
call fcn.0050f540
mov dword [esi + 0x38], eax
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0xa0]
mov ecx, dword [esi + 0x38]
push eax
call fcn.0050f630
mov ecx, dword [esi + 0x30]
push esi
mov eax, dword [ecx]
call dword [eax + 0x80]
mov ecx, dword [esi + 0x38]
mov dword [ecx + 0x84], eax
mov ecx, esi
push dword [esi + 0x38]
call fcn.004ea7e0
cmp dword [edi + 0x30], 0
jne 0x4ea471
cmp dword [edi + 0x34], 0
jne 0x4ea471
cmp dword [esi + 0x38], 0
lea ebx, [edi + 0x28]
je 0x4ea471
lea eax, [esi + 0x6c]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
movups xmmword [ebp - 0x1c], xmm0
call fcn.004ebb30
test al, al
je 0x4ea432
cmp dword [esi + 0x6c], 3
jne 0x4ea421
movups xmm0, xmmword [ebp - 0x1c]
movups xmmword [esi + 0x70], xmm0
jmp 0x4ea471
mov ecx, dword [esi + 0x14]
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ecx]
call dword [eax + 0x90]
jmp 0x4ea471
cmp dword [ebx + 8], 0
je 0x4ea442
cmp dword [ebx + 0xc], 0
je 0x4ea442
xor al, al
jmp 0x4ea444
mov al, 1
mov ecx, dword [esi + 0x14]
mov edx, dword [ecx]
mov dword [ebp + 8], edx
test al, al
je 0x4ea468
mov ecx, dword [esi + 0x38]
lea edx, [ebp - 0xc]
push edx
mov eax, dword [ecx]
call dword [eax + 0x20]
mov ecx, dword [esi + 0x14]
push eax
mov eax, dword [ebp + 8]
call dword [eax + 0x64]
jmp 0x4ea471
push 0
push ebx
call dword [edx + 0x98]
mov eax, dword [edi + 0x18]
cmp eax, 3
jne 0x4ea486
mov ecx, dword [esi + 0x14]
mov eax, dword [ecx]
call dword [eax + 0xd8]
jmp 0x4ea496
cmp eax, 2
jne 0x4ea496
mov ecx, dword [esi + 0x14]
mov eax, dword [ecx]
call dword [eax + 0xdc]
mov ecx, esi
call fcn.004eaac0
pop edi
mov byte [esi + 0x91], 1
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4