Function at 0x49a401
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x53b8b5
call fcn.005159a8
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x49a41d
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x49a763
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x597f0c
call fcn.004b20ba
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x49a451
cmp dword [0x597f10], eax
jne 0x49a451
call fcn.00413e2a
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00497e20
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x49a49a
mov eax, edi
sub eax, 8
je 0x49a6af
dec eax
je 0x49a533
sub eax, 0xa
je 0x49a4a6
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0041db27
jmp 0x49a771
push esi
call fcn.00415993
mov edi, eax
pop ecx
test edi, edi
je 0x49a524
push edi
push 0x548bf0
call fcn.004248b2
pop ecx
pop ecx
test eax, eax
je 0x49a4d1
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x49a51c
push edi
push 0x548684
call fcn.004248b2
pop ecx
pop ecx
test eax, eax
je 0x49a4ef
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x49a51c
push edi
push 0x54cfa4
call fcn.004248b2
pop ecx
pop ecx
test eax, eax
jne 0x49a511
push edi
push 0x54cc14
call fcn.004248b2
pop ecx
pop ecx
test eax, eax
je 0x49a524
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x49a49a
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x49a49a
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x49a658
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x49a658
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00461381
cmp dword [esi + 0x2c4], edi
jne 0x49a5f0
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00483b43
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00489365
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x49a5e2
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004159ac
push dword [eax]
push 0x5977f4
call fcn.004248b2
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x49a5da
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x49a58f
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00483b6b
jmp 0x49a617
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x559e9c
call fcn.004248b2
pop ecx
pop ecx
cmp eax, edi
je 0x49a617
push edi
mov ecx, eax
call fcn.004b7f9f
mov ecx, dword [esi + 0x78]
push 1
call fcn.00461381
push dword [esi + 0x78]
push 0x54b4e8
call fcn.004248b2
pop ecx
pop ecx
cmp eax, edi
je 0x49a640
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x49a771
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x49a771
test ebx, ebx
je 0x49a771
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x49a771
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x49a771
cmp dword [0x59e168], 0
je 0x49a771
push 8
mov ecx, esi
call fcn.00499dbb
mov edi, eax
test edi, edi
je 0x49a771
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00421893
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004218d4
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0041a2b7
test eax, 0x400000
je 0x49a734
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x49a771
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0049997a
jmp 0x49a771
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004614ee
call fcn.00515a80
ret 0xc