Function at 0x495169
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x52b56d
call fcn.0050a290
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x495185
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4954cb
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x57bdc8
call fcn.004aa296
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4951b9
cmp dword [0x57bdcc], eax
jne 0x4951b9
call fcn.0041581f
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00492b5b
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x495202
mov eax, edi
sub eax, 8
je 0x495417
dec eax
je 0x49529b
sub eax, 0xa
je 0x49520e
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040c745
jmp 0x4954d9
push esi
call fcn.0041bf76
mov edi, eax
pop ecx
test edi, edi
je 0x49528c
push edi
push 0x539cb8
call fcn.00417d65
pop ecx
pop ecx
test eax, eax
je 0x495239
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x495284
push edi
push 0x539748
call fcn.00417d65
pop ecx
pop ecx
test eax, eax
je 0x495257
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x495284
push edi
push 0x53d05c
call fcn.00417d65
pop ecx
pop ecx
test eax, eax
jne 0x495279
push edi
push 0x53cccc
call fcn.00417d65
pop ecx
pop ecx
test eax, eax
je 0x49528c
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x495202
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x495202
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4953c0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4953c0
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0045c954
cmp dword [esi + 0x2c4], edi
jne 0x495358
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047e703
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00483f54
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x49534a
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00499cce
push dword [eax]
push 0x57b758
call fcn.00417d65
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x495342
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4952f7
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0047e72b
jmp 0x49537f
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x546f44
call fcn.00417d65
pop ecx
pop ecx
cmp eax, edi
je 0x49537f
push edi
mov ecx, eax
call fcn.004b017d
mov ecx, dword [esi + 0x78]
push 1
call fcn.0045c954
push dword [esi + 0x78]
push 0x5374a4
call fcn.00417d65
pop ecx
pop ecx
cmp eax, edi
je 0x4953a8
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4954d9
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4954d9
test ebx, ebx
je 0x4954d9
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4954d9
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4954d9
cmp dword [0x583408], 0
je 0x4954d9
push 8
mov ecx, esi
call fcn.00494b23
mov edi, eax
test edi, edi
je 0x4954d9
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041221b
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041225c
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0041048b
test eax, 0x400000
je 0x49549c
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4954d9
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004946e2
jmp 0x4954d9
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0045caae
call fcn.0050a368
ret 0xc