Function at 0x488528
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x52219e
call fcn.005021c1
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x488544
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x48888a
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x56eb00
call fcn.0049fc42
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x488578
cmp dword [0x56eb04], eax
jne 0x488578
call fcn.004094df
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00485f1a
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4885c1
mov eax, edi
sub eax, 8
je 0x4887d6
dec eax
je 0x48865a
sub eax, 0xa
je 0x4885cd
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040c8d5
jmp 0x488898
push esi
call fcn.00403e20
mov edi, eax
pop ecx
test edi, edi
je 0x48864b
push edi
push 0x52c9a0
call fcn.00412e49
pop ecx
pop ecx
test eax, eax
je 0x4885f8
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x488643
push edi
push 0x52c434
call fcn.00412e49
pop ecx
pop ecx
test eax, eax
je 0x488616
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x488643
push edi
push 0x53022c
call fcn.00412e49
pop ecx
pop ecx
test eax, eax
jne 0x488638
push edi
push 0x52fe9c
call fcn.00412e49
pop ecx
pop ecx
test eax, eax
je 0x48864b
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4885c1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4885c1
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x48877f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x48877f
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044e498
cmp dword [esi + 0x2c4], edi
jne 0x488717
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00471a4c
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00477226
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x488709
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004051ff
push dword [eax]
push 0x56e444
call fcn.00412e49
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x488701
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4886b6
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00471a74
jmp 0x48873e
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x53ace4
call fcn.00412e49
pop ecx
pop ecx
cmp eax, edi
je 0x48873e
push edi
mov ecx, eax
call fcn.004a5b0c
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044e498
push dword [esi + 0x78]
push 0x52e8a4
call fcn.00412e49
pop ecx
pop ecx
cmp eax, edi
je 0x488767
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x488898
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x488898
test ebx, ebx
je 0x488898
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x488898
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x488898
cmp dword [0x5747b0], 0
je 0x488898
push 8
mov ecx, esi
call fcn.00487ee2
mov edi, eax
test edi, edi
je 0x488898
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00411fc0
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00412001
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0040fe5c
test eax, 0x400000
je 0x48885b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x488898
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00487aa1
jmp 0x488898
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0044e605
call fcn.00502299
ret 0xc