Function at 0x487456
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x5211ee
call fcn.005017b0
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x487472
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4877b8
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x570ce4
call fcn.0049ef42
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4874a6
cmp dword [0x570ce8], eax
jne 0x4874a6
call fcn.004067a2
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00484e48
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4874ef
mov eax, edi
sub eax, 8
je 0x487704
dec eax
je 0x487588
sub eax, 0xa
je 0x4874fb
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040dee3
jmp 0x4877c6
push esi
call fcn.00403e61
mov edi, eax
pop ecx
test edi, edi
je 0x487579
push edi
push 0x52c5c0
call fcn.0041201a
pop ecx
pop ecx
test eax, eax
je 0x487526
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x487571
push edi
push 0x52c050
call fcn.0041201a
pop ecx
pop ecx
test eax, eax
je 0x487544
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x487571
push edi
push 0x53035c
call fcn.0041201a
pop ecx
pop ecx
test eax, eax
jne 0x487566
push edi
push 0x52ffcc
call fcn.0041201a
pop ecx
pop ecx
test eax, eax
je 0x487579
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4874ef
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4874ef
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4876ad
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4876ad
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044d6ed
cmp dword [esi + 0x2c4], edi
jne 0x487645
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047099a
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00476356
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x487637
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0046aa20
push dword [eax]
push 0x5705c8
call fcn.0041201a
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x48762f
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4875e4
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004709c2
jmp 0x48766c
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x53d284
call fcn.0041201a
pop ecx
pop ecx
cmp eax, edi
je 0x48766c
push edi
mov ecx, eax
call fcn.004a4e25
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044d6ed
push dword [esi + 0x78]
push 0x52e8a0
call fcn.0041201a
pop ecx
pop ecx
cmp eax, edi
je 0x487695
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4877c6
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4877c6
test ebx, ebx
je 0x4877c6
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4877c6
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4877c6
cmp dword [0x576a30], 0
je 0x4877c6
push 8
mov ecx, esi
call fcn.00486e10
mov edi, eax
test edi, edi
je 0x4877c6
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0040a2d1
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0040a312
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.004114d4
test eax, 0x400000
je 0x487789
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4877c6
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004869cf
jmp 0x4877c6
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0044d84c
call fcn.00501888
ret 0xc