Function at 0x48b985
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x524171
call fcn.00504594
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x48b9a1
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x48bce7
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x570cc0
call fcn.004a2b46
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x48b9d5
cmp dword [0x570cc4], eax
jne 0x48b9d5
call fcn.0040bb2e
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004893c5
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x48ba1e
mov eax, edi
sub eax, 8
je 0x48bc33
dec eax
je 0x48bab7
sub eax, 0xa
je 0x48ba2a
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.00411b11
jmp 0x48bcf5
push esi
call fcn.0041723d
mov edi, eax
pop ecx
test edi, edi
je 0x48baa8
push edi
push 0x52ea48
call fcn.0041c3e6
pop ecx
pop ecx
test eax, eax
je 0x48ba55
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x48baa0
push edi
push 0x52e4d8
call fcn.0041c3e6
pop ecx
pop ecx
test eax, eax
je 0x48ba73
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x48baa0
push edi
push 0x532274
call fcn.0041c3e6
pop ecx
pop ecx
test eax, eax
jne 0x48ba95
push edi
push 0x531ee4
call fcn.0041c3e6
pop ecx
pop ecx
test eax, eax
je 0x48baa8
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x48ba1e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x48ba1e
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x48bbdc
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x48bbdc
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00451dbb
cmp dword [esi + 0x2c4], edi
jne 0x48bb74
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00475118
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0047a8e0
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x48bb66
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00417256
push dword [eax]
push 0x570630
call fcn.0041c3e6
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x48bb5e
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x48bb13
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00475140
jmp 0x48bb9b
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x53d4d4
call fcn.0041c3e6
pop ecx
pop ecx
cmp eax, edi
je 0x48bb9b
push edi
mov ecx, eax
call fcn.004a8a31
mov ecx, dword [esi + 0x78]
push 1
call fcn.00451dbb
push dword [esi + 0x78]
push 0x530930
call fcn.0041c3e6
pop ecx
pop ecx
cmp eax, edi
je 0x48bbc4
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x48bcf5
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x48bcf5
test ebx, ebx
je 0x48bcf5
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x48bcf5
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x48bcf5
cmp dword [0x576ba0], 0
je 0x48bcf5
push 8
mov ecx, esi
call fcn.0048b33f
mov edi, eax
test edi, edi
je 0x48bcf5
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041b568
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041b5a9
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0040d8df
test eax, 0x400000
je 0x48bcb8
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48bcf5
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0048aefe
jmp 0x48bcf5
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00451f15
call fcn.0050466c
ret 0xc