Function at 0x493eee
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x57707e
call fcn.005101b0
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x493f0a
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x494250
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5e4d5c
call fcn.004ab616
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x493f3e
cmp dword [0x5e4d60], eax
jne 0x493f3e
call fcn.00418981
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0049190d
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x493f87
mov eax, edi
sub eax, 8
je 0x49419c
dec eax
je 0x494020
sub eax, 0xa
je 0x493f93
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0041197e
jmp 0x49425e
push esi
call fcn.0041c54c
mov edi, eax
pop ecx
test edi, edi
je 0x494011
push edi
push 0x586ba8
call fcn.0041f80d
pop ecx
pop ecx
test eax, eax
je 0x493fbe
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x494009
push edi
push 0x58663c
call fcn.0041f80d
pop ecx
pop ecx
test eax, eax
je 0x493fdc
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x494009
push edi
push 0x58ab34
call fcn.0041f80d
pop ecx
pop ecx
test eax, eax
jne 0x493ffe
push edi
push 0x58a7a4
call fcn.0041f80d
pop ecx
pop ecx
test eax, eax
je 0x494011
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x493f87
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x493f87
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x494145
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x494145
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0045a4d8
cmp dword [esi + 0x2c4], edi
jne 0x4940dd
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047d561
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00482e84
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4940cf
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0041c565
push dword [eax]
push 0x5e469c
call fcn.0041f80d
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4940c7
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x49407c
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0047d589
jmp 0x494104
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x59716c
call fcn.0041f80d
pop ecx
pop ecx
cmp eax, edi
je 0x494104
push edi
mov ecx, eax
call fcn.004b14e1
mov ecx, dword [esi + 0x78]
push 1
call fcn.0045a4d8
push dword [esi + 0x78]
push 0x58916c
call fcn.0041f80d
pop ecx
pop ecx
cmp eax, edi
je 0x49412d
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x49425e
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x49425e
test ebx, ebx
je 0x49425e
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x49425e
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x49425e
cmp dword [0x5ec1b0], 0
je 0x49425e
push 8
mov ecx, esi
call fcn.004938a8
mov edi, eax
test edi, edi
je 0x49425e
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00416f9b
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00416fdc
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00414fe0
test eax, 0x400000
je 0x494221
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x49425e
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00493467
jmp 0x49425e
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0045a632
call fcn.00510288
ret 0xc