Function at 0x4999a1
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x533574
call fcn.00513eeb
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4999bd
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x499d03
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x582e78
call fcn.004b0ef2
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4999f1
cmp dword [0x582e7c], eax
jne 0x4999f1
call fcn.00414104
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00497393
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x499a3a
mov eax, edi
sub eax, 8
je 0x499c4f
dec eax
je 0x499ad3
sub eax, 0xa
je 0x499a46
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.00418b99
jmp 0x499d11
push esi
call fcn.0041eddb
mov edi, eax
pop ecx
test edi, edi
je 0x499ac4
push edi
push 0x541c28
call fcn.004253fa
pop ecx
pop ecx
test eax, eax
je 0x499a71
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x499abc
push edi
push 0x5416bc
call fcn.004253fa
pop ecx
pop ecx
test eax, eax
je 0x499a8f
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x499abc
push edi
push 0x544eb4
call fcn.004253fa
pop ecx
pop ecx
test eax, eax
jne 0x499ab1
push edi
push 0x544b24
call fcn.004253fa
pop ecx
pop ecx
test eax, eax
je 0x499ac4
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x499a3a
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x499a3a
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x499bf8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x499bf8
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0045d379
cmp dword [esi + 0x2c4], edi
jne 0x499b90
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047fd5b
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00488948
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x499b82
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0041edf4
push dword [eax]
push 0x5827b8
call fcn.004253fa
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x499b7a
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x499b2f
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0047fd83
jmp 0x499bb7
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x54ffe4
call fcn.004253fa
pop ecx
pop ecx
cmp eax, edi
je 0x499bb7
push edi
mov ecx, eax
call fcn.004b6dd9
mov ecx, dword [esi + 0x78]
push 1
call fcn.0045d379
push dword [esi + 0x78]
push 0x548b60
call fcn.004253fa
pop ecx
pop ecx
cmp eax, edi
je 0x499be0
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x499d11
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x499d11
test ebx, ebx
je 0x499d11
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x499d11
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x499d11
cmp dword [0x58aeb8], 0
je 0x499d11
push 8
mov ecx, esi
call fcn.0049935b
mov edi, eax
test edi, edi
je 0x499d11
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00423bb9
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00423bfa
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0041c842
test eax, 0x400000
je 0x499cd4
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x499d11
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00498f1a
jmp 0x499d11
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0045d4e6
call fcn.00513fc3
ret 0xc