Function at 0x491407
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x52bf05
call fcn.0050ccf0
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x491423
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x491769
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x582d3c
call fcn.004a8fc9
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x491457
cmp dword [0x582d40], eax
jne 0x491457
call fcn.004158a6
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0048ee18
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4914a0
mov eax, edi
sub eax, 8
je 0x4916b5
dec eax
je 0x491539
sub eax, 0xa
je 0x4914ac
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0041069a
jmp 0x491777
push esi
call fcn.00415f24
mov edi, eax
pop ecx
test edi, edi
je 0x49152a
push edi
push 0x5387c8
call fcn.0041c96e
pop ecx
pop ecx
test eax, eax
je 0x4914d7
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x491522
push edi
push 0x538258
call fcn.0041c96e
pop ecx
pop ecx
test eax, eax
je 0x4914f5
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x491522
push edi
push 0x53c1a4
call fcn.0041c96e
pop ecx
pop ecx
test eax, eax
jne 0x491517
push edi
push 0x53be14
call fcn.0041c96e
pop ecx
pop ecx
test eax, eax
je 0x49152a
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4914a0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4914a0
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x49165e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x49165e
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00454b03
cmp dword [esi + 0x2c4], edi
jne 0x4915f6
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00477c22
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0048036a
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4915e8
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00415f3d
push dword [eax]
push 0x582620
call fcn.0041c96e
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4915e0
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x491595
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00477c4a
jmp 0x49161d
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x549804
call fcn.0041c96e
pop ecx
pop ecx
cmp eax, edi
je 0x49161d
push edi
mov ecx, eax
call fcn.004aeeac
mov ecx, dword [esi + 0x78]
push 1
call fcn.00454b03
push dword [esi + 0x78]
push 0x5418a8
call fcn.0041c96e
pop ecx
pop ecx
cmp eax, edi
je 0x491646
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x491777
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x491777
test ebx, ebx
je 0x491777
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x491777
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x491777
cmp dword [0x5892a8], 0
je 0x491777
push 8
mov ecx, esi
call fcn.00490dc1
mov edi, eax
test edi, edi
je 0x491777
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041bb32
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041bb73
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0041443d
test eax, 0x400000
je 0x49173a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x491777
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00490980
jmp 0x491777
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00454c62
call fcn.0050cdc8
ret 0xc