Function at 0x491382
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x52ae40
call fcn.005094ab
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x49139e
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4916e4
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x579e78
call fcn.004a8778
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4913d2
cmp dword [0x579e7c], eax
jne 0x4913d2
call fcn.0040babf
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0048ed95
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x49141b
mov eax, edi
sub eax, 8
je 0x491630
dec eax
je 0x4914b4
sub eax, 0xa
je 0x491427
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040f9b7
jmp 0x4916f2
push esi
call fcn.0041763b
mov edi, eax
pop ecx
test edi, edi
je 0x4914a5
push edi
push 0x5390b0
call fcn.0041cd8c
pop ecx
pop ecx
test eax, eax
je 0x491452
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x49149d
push edi
push 0x538b40
call fcn.0041cd8c
pop ecx
pop ecx
test eax, eax
je 0x491470
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x49149d
push edi
push 0x53c354
call fcn.0041cd8c
pop ecx
pop ecx
test eax, eax
jne 0x491492
push edi
push 0x53bfc4
call fcn.0041cd8c
pop ecx
pop ecx
test eax, eax
je 0x4914a5
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x49141b
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x49141b
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4915d9
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4915d9
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00454dfd
cmp dword [esi + 0x2c4], edi
jne 0x491571
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00477714
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00480335
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x491563
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0047188b
push dword [eax]
push 0x5797d0
call fcn.0041cd8c
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x49155b
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x491510
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0047773c
jmp 0x491598
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x547464
call fcn.0041cd8c
pop ecx
pop ecx
cmp eax, edi
je 0x491598
push edi
mov ecx, eax
call fcn.004ae642
mov ecx, dword [esi + 0x78]
push 1
call fcn.00454dfd
push dword [esi + 0x78]
push 0x540000
call fcn.0041cd8c
pop ecx
pop ecx
cmp eax, edi
je 0x4915c1
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4916f2
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4916f2
test ebx, ebx
je 0x4916f2
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4916f2
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4916f2
cmp dword [0x581eb8], 0
je 0x4916f2
push 8
mov ecx, esi
call fcn.00490d3c
mov edi, eax
test edi, edi
je 0x4916f2
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041b54b
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041b58c
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00413aef
test eax, 0x400000
je 0x4916b5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4916f2
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004908fb
jmp 0x4916f2
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00454f6f
call fcn.00509583
ret 0xc