Function at 0x4e6759
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x56a7dc
call fcn.00543c7c
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4e6775
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4e6abb
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5cf9b8
call fcn.004dda76
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4e67a9
cmp dword [0x5cf9bc], eax
jne 0x4e67a9
call fcn.00447de9
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004e416c
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4e67f2
mov eax, edi
sub eax, 8
je 0x4e6a07
dec eax
je 0x4e688b
sub eax, 0xa
je 0x4e67fe
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0044bfab
jmp 0x4e6ac9
push esi
call fcn.00467966
mov edi, eax
pop ecx
test edi, edi
je 0x4e687c
push edi
push 0x57d0e0
call fcn.004547c5
pop ecx
pop ecx
test eax, eax
je 0x4e6829
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4e6874
push edi
push 0x57d6ac
call fcn.004547c5
pop ecx
pop ecx
test eax, eax
je 0x4e6847
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4e6874
push edi
push 0x57cd54
call fcn.004547c5
pop ecx
pop ecx
test eax, eax
jne 0x4e6869
push edi
push 0x57c9c4
call fcn.004547c5
pop ecx
pop ecx
test eax, eax
je 0x4e687c
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4e67f2
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4e67f2
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4e69b0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4e69b0
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00471c85
cmp dword [esi + 0x2c4], edi
jne 0x4e6948
push 0xa
lea ecx, [ebp - 0x50]
call fcn.004ab530
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004e2553
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4e693a
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004c6e4a
push dword [eax]
push 0x5cfbcc
call fcn.004547c5
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4e6932
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4e68e7
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004ab558
jmp 0x4e696f
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x591634
call fcn.004547c5
pop ecx
pop ecx
cmp eax, edi
je 0x4e696f
push edi
mov ecx, eax
call fcn.005151a6
mov ecx, dword [esi + 0x78]
push 1
call fcn.00471c85
push dword [esi + 0x78]
push 0x58516c
call fcn.004547c5
pop ecx
pop ecx
cmp eax, edi
je 0x4e6998
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4e6ac9
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4e6ac9
test ebx, ebx
je 0x4e6ac9
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4e6ac9
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4e6ac9
cmp dword [0x5d7730], 0
je 0x4e6ac9
push 8
mov ecx, esi
call fcn.004e6113
mov edi, eax
test edi, edi
je 0x4e6ac9
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00451d48
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00451d89
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0044f4ca
test eax, 0x400000
je 0x4e6a8c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4e6ac9
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004e5cd2
jmp 0x4e6ac9
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004ac046
call fcn.00543d54
ret 0xc