Function at 0x48865c
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x5228ea
call fcn.0050262b
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x488678
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4889be
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x573da4
call fcn.004a01d9
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4886ac
cmp dword [0x573da8], eax
jne 0x4886ac
call fcn.00403be8
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0048607b
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4886f5
mov eax, edi
sub eax, 8
je 0x48890a
dec eax
je 0x48878e
sub eax, 0xa
je 0x488701
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040e93e
jmp 0x4889cc
push esi
call fcn.004059f6
mov edi, eax
pop ecx
test edi, edi
je 0x48877f
push edi
push 0x52e730
call fcn.0041348f
pop ecx
pop ecx
test eax, eax
je 0x48872c
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x488777
push edi
push 0x52e1c0
call fcn.0041348f
pop ecx
pop ecx
test eax, eax
je 0x48874a
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x488777
push edi
push 0x532954
call fcn.0041348f
pop ecx
pop ecx
test eax, eax
jne 0x48876c
push edi
push 0x5325c4
call fcn.0041348f
pop ecx
pop ecx
test eax, eax
je 0x48877f
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4886f5
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4886f5
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4888b3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4888b3
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044ec96
cmp dword [esi + 0x2c4], edi
jne 0x48884b
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00471eb0
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00477663
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x48883d
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0046bfc7
push dword [eax]
push 0x573688
call fcn.0041348f
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x488835
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4887ea
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00471ed8
jmp 0x488872
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x53f864
call fcn.0041348f
pop ecx
pop ecx
cmp eax, edi
je 0x488872
push edi
mov ecx, eax
call fcn.004a60c4
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044ec96
push dword [esi + 0x78]
push 0x530ef0
call fcn.0041348f
pop ecx
pop ecx
cmp eax, edi
je 0x48889b
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4889cc
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4889cc
test ebx, ebx
je 0x4889cc
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4889cc
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4889cc
cmp dword [0x579e28], 0
je 0x4889cc
push 8
mov ecx, esi
call fcn.00488016
mov edi, eax
test edi, edi
je 0x4889cc
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00412675
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004126b6
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0040b0c4
test eax, 0x400000
je 0x48898f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4889cc
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00487bd5
jmp 0x4889cc
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0044edf0
call fcn.00502703
ret 0xc