Function at 0x49a020
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, dword [0x5cae2c]
sub esp, 0xc
push ebx
push esi
xor ebx, ebx
cmp eax, ebx
push edi
mov esi, edx
mov edi, ecx
je 0x49a320
call fcn.004f0b80
cmp eax, ebx
mov dword [esp + 0x14], eax
je 0x49a320
xor eax, eax
cmp edi, ebx
sete al
cmp esi, ebx
push ebp
mov ebp, eax
je 0x49a089
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
and eax, 0x8000
sub eax, 0x8000
neg eax
sbb eax, eax
inc eax
cmp eax, ebx
je 0x49a089
cmp dword [0x5cae30], ebx
je 0x49a083
cmp dword [0x5cb590], ebx
je 0x49a09d
mov dword [esp + 0x14], ebx
jmp 0x49a0a5
cmp dword [0x5cae30], ebx
je 0x49a09d
cmp dword [0x5cb590], ebx
mov dword [esp + 0x14], ebx
je 0x49a0a5
mov dword [esp + 0x14], 1
push 0xa
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov esi, eax
cmp esi, ebx
je 0x49a31f
cmp dword [esp + 0x14], ebx
mov ebx, dword [sym.imp.USER32.dll_DeferWindowPos]
je 0x49a10f
mov edi, dword [0x5f92e4]
test edi, edi
je 0x49a164
mov ecx, dword [edi + 0xbe8]
cmp ecx, dword [esp + 0x18]
jne 0x49a103
mov ecx, dword [edi]
call fcn.005613e0
test eax, eax
je 0x49a103
mov edx, dword [edi]
push 0x13
push 0
push 0
push 0
push 0
push ebp
push edx
push esi
call ebx
mov esi, eax
test esi, esi
je 0x49a31f
mov edi, dword [edi + 0xe08]
test edi, edi
jne 0x49a0d1
jmp 0x49a164
mov eax, dword [0x5f92f0]
push 5
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
test edi, edi
je 0x49a164
mov ecx, edi
call fcn.00561000
test eax, eax
je 0x49a155
mov ecx, dword [esp + 0x18]
cmp dword [eax + 0xbe8], ecx
jne 0x49a155
mov edx, dword [eax]
push 0x13
push 0
push 0
push 0
push 0
push ebp
push edx
push esi
call ebx
mov esi, eax
test esi, esi
je 0x49a31f
push 2
push edi
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
test edi, edi
jne 0x49a123
mov eax, dword [0x5f002c]
test eax, eax
mov dword [esp + 0x10], eax
je 0x49a24a
jmp 0x49a180
mov eax, dword [esp + 0x10]
jmp 0x49a180
cmp eax, dword [esp + 0x18]
je 0x49a238
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x49a1de
mov edi, dword [0x5f92e4]
test edi, edi
je 0x49a238
cmp dword [edi + 0xbe8], eax
jne 0x49a1d2
mov ecx, dword [edi]
call fcn.005613e0
test eax, eax
je 0x49a1ce
mov eax, dword [edi]
push 0x13
push 0
push 0
push 0
push 0
push ebp
push eax
push esi
call ebx
mov esi, eax
test esi, esi
je 0x49a31f
mov eax, dword [esp + 0x10]
mov edi, dword [edi + 0xe08]
test edi, edi
jne 0x49a1a0
jmp 0x49a238
mov ecx, dword [0x5f92f0]
push 5
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
test edi, edi
je 0x49a234
mov ecx, edi
call fcn.00561000
test eax, eax
je 0x49a225
mov edx, dword [esp + 0x10]
cmp dword [eax + 0xbe8], edx
jne 0x49a225
mov eax, dword [eax]
push 0x13
push 0
push 0
push 0
push 0
push ebp
push eax
push esi
call ebx
mov esi, eax
test esi, esi
je 0x49a31f
push 2
push edi
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
test edi, edi
jne 0x49a1f3
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x2500]
test eax, eax
mov dword [esp + 0x10], eax
jne 0x49a177
mov eax, dword [0x5f002c]
test eax, eax
mov dword [esp + 0x10], eax
je 0x49a314
jmp 0x49a260
mov eax, dword [esp + 0x14]
test eax, eax
je 0x49a2ae
mov edi, dword [0x5f92e4]
test edi, edi
je 0x49a2fe
mov eax, dword [edi + 0xa48]
test eax, eax
je 0x49a2a2
mov ecx, dword [edi]
call fcn.005613e0
test eax, eax
je 0x49a2a2
mov ecx, dword [edi]
push 0x13
push 0
push 0
push 0
push 0
push ebp
push ecx
push esi
call ebx
mov esi, eax
test esi, esi
je 0x49a31f
mov edi, dword [edi + 0xe08]
test edi, edi
jne 0x49a276
jmp 0x49a2fe
mov edx, dword [0x5f92f0]
push 5
push edx
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
test edi, edi
je 0x49a2fe
mov ecx, edi
call fcn.00561000
test eax, eax
je 0x49a2ef
mov ecx, dword [eax + 0xa48]
test ecx, ecx
je 0x49a2ef
mov eax, dword [eax]
push 0x13
push 0
push 0
push 0
push 0
push ebp
push eax
push esi
call ebx
mov esi, eax
test esi, esi
je 0x49a31f
push 2
push edi
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
test edi, edi
jne 0x49a2c3
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x2500]
test eax, eax
mov dword [esp + 0x10], eax
jne 0x49a260
test esi, esi
je 0x49a31f
push esi
call dword [sym.imp.USER32.dll_EndDeferWindowPos]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xc
ret