Function at 0x486b01
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x521695
call fcn.00500aae
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x486b1d
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x486e63
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x56fce4
call fcn.0049e76d
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x486b51
cmp dword [0x56fce8], eax
jne 0x486b51
call fcn.00410b22
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.00484520
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x486b9a
mov eax, edi
sub eax, 8
je 0x486daf
dec eax
je 0x486c33
sub eax, 0xa
je 0x486ba6
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0040c261
jmp 0x486e71
push esi
call fcn.0040316a
mov edi, eax
pop ecx
test edi, edi
je 0x486c24
push edi
push 0x52b5e0
call fcn.004114bb
pop ecx
pop ecx
test eax, eax
je 0x486bd1
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x486c1c
push edi
push 0x52b070
call fcn.004114bb
pop ecx
pop ecx
test eax, eax
je 0x486bef
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x486c1c
push edi
push 0x52f39c
call fcn.004114bb
pop ecx
pop ecx
test eax, eax
jne 0x486c11
push edi
push 0x52f00c
call fcn.004114bb
pop ecx
pop ecx
test eax, eax
je 0x486c24
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x486b9a
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x486b9a
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x486d58
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x486d58
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044cb6c
cmp dword [esi + 0x2c4], edi
jne 0x486cf0
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047014f
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00475a3f
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x486ce2
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0048dce8
push dword [eax]
push 0x56f5c8
call fcn.004114bb
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x486cda
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x486c8f
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00470177
jmp 0x486d17
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x53c304
call fcn.004114bb
pop ecx
pop ecx
cmp eax, edi
je 0x486d17
push edi
mov ecx, eax
call fcn.004a4654
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044cb6c
push dword [esi + 0x78]
push 0x52d8e4
call fcn.004114bb
pop ecx
pop ecx
cmp eax, edi
je 0x486d40
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x486e71
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x486e71
test ebx, ebx
je 0x486e71
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x486e71
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x486e71
cmp dword [0x575a50], 0
je 0x486e71
push 8
mov ecx, esi
call fcn.004864bb
mov edi, eax
test edi, edi
je 0x486e71
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00408665
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004086a6
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0040f900
test eax, 0x400000
je 0x486e34
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x486e71
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0048607a
jmp 0x486e71
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0044ccc6
call fcn.00500b86
ret 0xc