Function at 0x495241
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x52a551
call fcn.0050a150
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x49525d
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4955a3
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x57adc8
call fcn.004aa2dd
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x495291
cmp dword [0x57adcc], eax
jne 0x495291
call fcn.00415856
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00492c54
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4952da
mov eax, edi
sub eax, 8
je 0x4954ef
dec eax
je 0x495373
sub eax, 0xa
je 0x4952e6
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040c752
jmp 0x4955b1
push esi
call fcn.0041c123
mov edi, eax
pop ecx
test edi, edi
je 0x495364
push edi
push 0x538cd0
call fcn.00417f38
pop ecx
pop ecx
test eax, eax
je 0x495311
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x49535c
push edi
push 0x538760
call fcn.00417f38
pop ecx
pop ecx
test eax, eax
je 0x49532f
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x49535c
push edi
push 0x53c074
call fcn.00417f38
pop ecx
pop ecx
test eax, eax
jne 0x495351
push edi
push 0x53bce4
call fcn.00417f38
pop ecx
pop ecx
test eax, eax
je 0x495364
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4952da
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4952da
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x495498
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x495498
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0045cc29
cmp dword [esi + 0x2c4], edi
jne 0x495430
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047e9ed
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004841b2
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x495422
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0041c13c
push dword [eax]
push 0x57a758
call fcn.00417f38
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x49541a
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4953cf
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0047ea15
jmp 0x495457
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x545f4c
call fcn.00417f38
pop ecx
pop ecx
cmp eax, edi
je 0x495457
push edi
mov ecx, eax
call fcn.004b01ab
mov ecx, dword [esi + 0x78]
push 1
call fcn.0045cc29
push dword [esi + 0x78]
push 0x5364bc
call fcn.00417f38
pop ecx
pop ecx
cmp eax, edi
je 0x495480
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4955b1
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4955b1
test ebx, ebx
je 0x4955b1
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4955b1
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4955b1
cmp dword [0x5823e8], 0
je 0x4955b1
push 8
mov ecx, esi
call fcn.00494bfb
mov edi, eax
test edi, edi
je 0x4955b1
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00412247
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00412288
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00410497
test eax, 0x400000
je 0x495574
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4955b1
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004947ba
jmp 0x4955b1
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0045cd83
call fcn.0050a228
ret 0xc