Function at 0x48ab99
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x525a3a
call fcn.005048b5
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x48abb5
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x48aefb
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x576e9c
call fcn.004a28f9
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x48abe9
cmp dword [0x576ea0], eax
jne 0x48abe9
call fcn.00408fb8
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004885b8
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x48ac32
mov eax, edi
sub eax, 8
je 0x48ae47
dec eax
je 0x48accb
sub eax, 0xa
je 0x48ac3e
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040d5b5
jmp 0x48af09
push esi
call fcn.00403dc3
mov edi, eax
pop ecx
test edi, edi
je 0x48acbc
push edi
push 0x531f28
call fcn.00415a29
pop ecx
pop ecx
test eax, eax
je 0x48ac69
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x48acb4
push edi
push 0x5319b8
call fcn.00415a29
pop ecx
pop ecx
test eax, eax
je 0x48ac87
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x48acb4
push edi
push 0x535e04
call fcn.00415a29
pop ecx
pop ecx
test eax, eax
jne 0x48aca9
push edi
push 0x535a74
call fcn.00415a29
pop ecx
pop ecx
test eax, eax
je 0x48acbc
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x48ac32
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x48ac32
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x48adf0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x48adf0
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00450cc4
cmp dword [esi + 0x2c4], edi
jne 0x48ad88
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047422e
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00479ae1
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x48ad7a
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040b5f5
push dword [eax]
push 0x576780
call fcn.00415a29
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x48ad72
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x48ad27
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00474256
jmp 0x48adaf
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x542dbc
call fcn.00415a29
pop ecx
pop ecx
cmp eax, edi
je 0x48adaf
push edi
mov ecx, eax
call fcn.004a87e0
mov ecx, dword [esi + 0x78]
push 1
call fcn.00450cc4
push dword [esi + 0x78]
push 0x534348
call fcn.00415a29
pop ecx
pop ecx
cmp eax, edi
je 0x48add8
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x48af09
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x48af09
test ebx, ebx
je 0x48af09
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x48af09
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x48af09
cmp dword [0x57cc10], 0
je 0x48af09
push 8
mov ecx, esi
call fcn.0048a553
mov edi, eax
test edi, edi
je 0x48af09
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0040998f
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004099d0
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.004126be
test eax, 0x400000
je 0x48aecc
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48af09
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0048a112
jmp 0x48af09
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00450e1e
call fcn.0050498d
ret 0xc