Function at 0x49416d
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x535c9c
call fcn.0050e70c
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x494189
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4944cf
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x589fa4
call fcn.004ab7f6
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4941bd
cmp dword [0x589fa8], eax
jne 0x4941bd
call fcn.0040e77f
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00491b5f
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x494206
mov eax, edi
sub eax, 8
je 0x49441b
dec eax
je 0x49429f
sub eax, 0xa
je 0x494212
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.004125b5
jmp 0x4944dd
push esi
call fcn.00419588
mov edi, eax
pop ecx
test edi, edi
je 0x494290
push edi
push 0x542df0
call fcn.0041f99d
pop ecx
pop ecx
test eax, eax
je 0x49423d
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x494288
push edi
push 0x542884
call fcn.0041f99d
pop ecx
pop ecx
test eax, eax
je 0x49425b
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x494288
push edi
push 0x546ddc
call fcn.0041f99d
pop ecx
pop ecx
test eax, eax
jne 0x49427d
push edi
push 0x546a4c
call fcn.0041f99d
pop ecx
pop ecx
test eax, eax
je 0x494290
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x494206
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x494206
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4943c4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4943c4
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0045a631
cmp dword [esi + 0x2c4], edi
jne 0x49435c
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047d7d8
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004830a7
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x49434e
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0041054d
push dword [eax]
push 0x5898e4
call fcn.0041f99d
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x494346
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4942fb
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0047d800
jmp 0x494383
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x5533fc
call fcn.0041f99d
pop ecx
pop ecx
cmp eax, edi
je 0x494383
push edi
mov ecx, eax
call fcn.004b16c9
mov ecx, dword [esi + 0x78]
push 1
call fcn.0045a631
push dword [esi + 0x78]
push 0x545414
call fcn.0041f99d
pop ecx
pop ecx
cmp eax, edi
je 0x4943ac
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4944dd
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4944dd
test ebx, ebx
je 0x4944dd
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4944dd
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4944dd
cmp dword [0x5901d0], 0
je 0x4944dd
push 8
mov ecx, esi
call fcn.00493b27
mov edi, eax
test edi, edi
je 0x4944dd
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041dace
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041db0f
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00415bbc
test eax, 0x400000
je 0x4944a0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4944dd
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004936e6
jmp 0x4944dd
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0045a78b
call fcn.0050e7e4
ret 0xc