Function at 0x489d68
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x523fe9
call fcn.00503975
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x489d84
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x48a0ca
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x573dd4
call fcn.004a17bb
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x489db8
cmp dword [0x573dd8], eax
jne 0x489db8
call fcn.00404d94
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0048775a
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x489e01
mov eax, edi
sub eax, 8
je 0x48a016
dec eax
je 0x489e9a
sub eax, 0xa
je 0x489e0d
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040c608
jmp 0x48a0d8
push esi
call fcn.00406b31
mov edi, eax
pop ecx
test edi, edi
je 0x489e8b
push edi
push 0x52e830
call fcn.00414579
pop ecx
pop ecx
test eax, eax
je 0x489e38
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x489e83
push edi
push 0x52e2c0
call fcn.00414579
pop ecx
pop ecx
test eax, eax
je 0x489e56
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x489e83
push edi
push 0x532a54
call fcn.00414579
pop ecx
pop ecx
test eax, eax
jne 0x489e78
push edi
push 0x5326c4
call fcn.00414579
pop ecx
pop ecx
test eax, eax
je 0x489e8b
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x489e01
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x489e01
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x489fbf
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x489fbf
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044fec7
cmp dword [esi + 0x2c4], edi
jne 0x489f57
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047339b
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00478baf
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x489f49
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00490f9c
push dword [eax]
push 0x5736b8
call fcn.00414579
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x489f41
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x489ef6
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004733c3
jmp 0x489f7e
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x53f9ac
call fcn.00414579
pop ecx
pop ecx
cmp eax, edi
je 0x489f7e
push edi
mov ecx, eax
call fcn.004a7682
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044fec7
push dword [esi + 0x78]
push 0x531018
call fcn.00414579
pop ecx
pop ecx
cmp eax, edi
je 0x489fa7
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x48a0d8
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x48a0d8
test ebx, ebx
je 0x48a0d8
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x48a0d8
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x48a0d8
cmp dword [0x579af0], 0
je 0x48a0d8
push 8
mov ecx, esi
call fcn.00489722
mov edi, eax
test edi, edi
je 0x48a0d8
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00412b7e
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00412bbf
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00413a1b
test eax, 0x400000
je 0x48a09b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48a0d8
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004892e1
jmp 0x48a0d8
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00450021
call fcn.00503a4d
ret 0xc