Function at 0x4d8e66
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x569314
call fcn.005426ed
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4d8e82
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4d91c8
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5d2c4c
call fcn.004dbfcd
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4d8eb6
cmp dword [0x5d2c50], eax
jne 0x4d8eb6
call fcn.00427b64
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004d6879
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4d8eff
mov eax, edi
sub eax, 8
je 0x4d9114
dec eax
je 0x4d8f98
sub eax, 0xa
je 0x4d8f0b
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0042c661
jmp 0x4d91d6
push esi
call fcn.004426a0
mov edi, eax
pop ecx
test edi, edi
je 0x4d8f89
push edi
push 0x586dc8
call fcn.00494869
pop ecx
pop ecx
test eax, eax
je 0x4d8f36
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4d8f81
push edi
push 0x57a264
call fcn.00494869
pop ecx
pop ecx
test eax, eax
je 0x4d8f54
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4d8f81
push edi
push 0x586a3c
call fcn.00494869
pop ecx
pop ecx
test eax, eax
jne 0x4d8f76
push edi
push 0x5866ac
call fcn.00494869
pop ecx
pop ecx
test eax, eax
je 0x4d8f89
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4d8eff
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4d8eff
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4d90bd
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4d90bd
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00483ded
cmp dword [esi + 0x2c4], edi
jne 0x4d9055
push 0xa
lea ecx, [ebp - 0x50]
call fcn.004bb09f
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004c7853
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4d9047
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0042a503
push dword [eax]
push 0x5d2b9c
call fcn.00494869
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4d903f
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4d8ff4
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004bb0c7
jmp 0x4d907c
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x58eb9c
call fcn.00494869
pop ecx
pop ecx
cmp eax, edi
je 0x4d907c
push edi
mov ecx, eax
call fcn.004e1f18
mov ecx, dword [esi + 0x78]
push 1
call fcn.00483ded
push dword [esi + 0x78]
push 0x581e60
call fcn.00494869
pop ecx
pop ecx
cmp eax, edi
je 0x4d90a5
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4d91d6
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4d91d6
test ebx, ebx
je 0x4d91d6
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4d91d6
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4d91d6
cmp dword [0x5d9fc0], 0
je 0x4d91d6
push 8
mov ecx, esi
call fcn.004d8820
mov edi, eax
test edi, edi
je 0x4d91d6
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0048f604
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0048f645
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0042fd9b
test eax, 0x400000
je 0x4d9199
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4d91d6
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004d83df
jmp 0x4d91d6
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00483f39
call fcn.005427c5
ret 0xc