Function at 0x494ee5
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x546fee
call fcn.0051f1dc
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x494f01
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x495247
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5a40cc
call fcn.00485837
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x494f35
cmp dword [0x5a40d0], eax
jne 0x494f35
call fcn.0041f5a0
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004928d7
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x494f7e
mov eax, edi
sub eax, 8
je 0x495193
dec eax
je 0x495017
sub eax, 0xa
je 0x494f8a
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0042524e
jmp 0x495255
push esi
call fcn.0044231f
mov edi, eax
pop ecx
test edi, edi
je 0x495008
push edi
push 0x55d7c8
call fcn.0043bbf5
pop ecx
pop ecx
test eax, eax
je 0x494fb5
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x495000
push edi
push 0x55dd94
call fcn.0043bbf5
pop ecx
pop ecx
test eax, eax
je 0x494fd3
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x495000
push edi
push 0x5600dc
call fcn.0043bbf5
pop ecx
pop ecx
test eax, eax
jne 0x494ff5
push edi
push 0x55fd4c
call fcn.0043bbf5
pop ecx
pop ecx
test eax, eax
je 0x495008
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x494f7e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x494f7e
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x49513c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x49513c
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044c643
cmp dword [esi + 0x2c4], edi
jne 0x4950d4
push 0xa
lea ecx, [ebp - 0x50]
call fcn.004ad1f5
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004c9590
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4950c6
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004bd573
push dword [eax]
push 0x5a4294
call fcn.0043bbf5
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4950be
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x495073
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004ad21d
jmp 0x4950fb
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x568814
call fcn.0043bbf5
pop ecx
pop ecx
cmp eax, edi
je 0x4950fb
push edi
mov ecx, eax
call fcn.004cdf2a
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044c643
push dword [esi + 0x78]
push 0x56567c
call fcn.0043bbf5
pop ecx
pop ecx
cmp eax, edi
je 0x495124
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x495255
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x495255
test ebx, ebx
je 0x495255
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x495255
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x495255
cmp dword [0x5ac430], 0
je 0x495255
push 8
mov ecx, esi
call fcn.0049489f
mov edi, eax
test edi, edi
je 0x495255
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0042add9
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0042ae1a
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0042883f
test eax, 0x400000
je 0x495218
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x495255
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0049445e
jmp 0x495255
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047b93e
call fcn.0051f2b4
ret 0xc