Function at 0x48969b
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x520f52
call fcn.005020ba
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4896b7
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4899fd
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x56eca8
call fcn.004a12d1
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4896eb
cmp dword [0x56ecac], eax
jne 0x4896eb
call fcn.00413828
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004870ae
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x489734
mov eax, edi
sub eax, 8
je 0x489949
dec eax
je 0x4897cd
sub eax, 0xa
je 0x489740
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.00406d76
jmp 0x489a0b
push esi
call fcn.0040d2a3
mov edi, eax
pop ecx
test edi, edi
je 0x4897be
push edi
push 0x52ca20
call fcn.0041430a
pop ecx
pop ecx
test eax, eax
je 0x48976b
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4897b6
push edi
push 0x52c4b4
call fcn.0041430a
pop ecx
pop ecx
test eax, eax
je 0x489789
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4897b6
push edi
push 0x52fc54
call fcn.0041430a
pop ecx
pop ecx
test eax, eax
jne 0x4897ab
push edi
push 0x52f8c4
call fcn.0041430a
pop ecx
pop ecx
test eax, eax
je 0x4897be
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x489734
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x489734
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4898f2
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4898f2
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044fb6f
cmp dword [esi + 0x2c4], edi
jne 0x48988a
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00472e5e
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004786ab
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x48987c
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040d2bc
push dword [eax]
push 0x56e590
call fcn.0041430a
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x489874
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x489829
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00472e86
jmp 0x4898b1
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x53afbc
call fcn.0041430a
pop ecx
pop ecx
cmp eax, edi
je 0x4898b1
push edi
mov ecx, eax
call fcn.004a7198
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044fb6f
push dword [esi + 0x78]
push 0x52e314
call fcn.0041430a
pop ecx
pop ecx
cmp eax, edi
je 0x4898da
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x489a0b
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x489a0b
test ebx, ebx
je 0x489a0b
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x489a0b
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x489a0b
cmp dword [0x574ad8], 0
je 0x489a0b
push 8
mov ecx, esi
call fcn.00489055
mov edi, eax
test edi, edi
je 0x489a0b
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00412247
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.00412288
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0040ab74
test eax, 0x400000
je 0x4899ce
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x489a0b
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00488c14
jmp 0x489a0b
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0044fcc9
call fcn.00502192
ret 0xc