Function at 0x4892b7
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x524990
call fcn.00501f97
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4892d3
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x489619
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x574dcc
call fcn.004a09e1
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x489307
cmp dword [0x574dd0], eax
jne 0x489307
call fcn.00410d44
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00486cf7
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x489350
mov eax, edi
sub eax, 8
je 0x489565
dec eax
je 0x4893e9
sub eax, 0xa
je 0x48935c
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040b493
jmp 0x489627
push esi
call fcn.004038c3
mov edi, eax
pop ecx
test edi, edi
je 0x4893da
push edi
push 0x52fe78
call fcn.00413795
pop ecx
pop ecx
test eax, eax
je 0x489387
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4893d2
push edi
push 0x52f908
call fcn.00413795
pop ecx
pop ecx
test eax, eax
je 0x4893a5
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4893d2
push edi
push 0x534504
call fcn.00413795
pop ecx
pop ecx
test eax, eax
jne 0x4893c7
push edi
push 0x534174
call fcn.00413795
pop ecx
pop ecx
test eax, eax
je 0x4893da
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x489350
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x489350
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x48950e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x48950e
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044f404
cmp dword [esi + 0x2c4], edi
jne 0x4894a6
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00472903
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00478269
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x489498
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0046ca84
push dword [eax]
push 0x57470c
call fcn.00413795
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x489490
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x489445
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0047292b
jmp 0x4894cd
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x540b94
call fcn.00413795
pop ecx
pop ecx
cmp eax, edi
je 0x4894cd
push edi
mov ecx, eax
call fcn.004a68cc
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044f404
push dword [esi + 0x78]
push 0x532b04
call fcn.00413795
pop ecx
pop ecx
cmp eax, edi
je 0x4894f6
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x489627
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x489627
test ebx, ebx
je 0x489627
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x489627
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x489627
cmp dword [0x57aa70], 0
je 0x489627
push 8
mov ecx, esi
call fcn.00488c71
mov edi, eax
test edi, edi
je 0x489627
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041292e
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041296f
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0040eae7
test eax, 0x400000
je 0x4895ea
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x489627
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00488830
jmp 0x489627
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0044f571
call fcn.0050206f
ret 0xc