Function at 0x48e11b
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x52a5bd
call fcn.00508474
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x48e137
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x48e47d
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x57dcdc
call fcn.004a59fe
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x48e16b
cmp dword [0x57dce0], eax
jne 0x48e16b
call fcn.00417572
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0048bb5b
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x48e1b4
mov eax, edi
sub eax, 8
je 0x48e3c9
dec eax
je 0x48e24d
sub eax, 0xa
je 0x48e1c0
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.004117c6
jmp 0x48e48b
push esi
call fcn.0040a296
mov edi, eax
pop ecx
test edi, edi
je 0x48e23e
push edi
push 0x535f68
call fcn.004177ab
pop ecx
pop ecx
test eax, eax
je 0x48e1eb
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x48e236
push edi
push 0x5359f8
call fcn.004177ab
pop ecx
pop ecx
test eax, eax
je 0x48e209
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x48e236
push edi
push 0x539ccc
call fcn.004177ab
pop ecx
pop ecx
test eax, eax
jne 0x48e22b
push edi
push 0x53993c
call fcn.004177ab
pop ecx
pop ecx
test eax, eax
je 0x48e23e
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x48e1b4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x48e1b4
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x48e372
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x48e372
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0045462a
cmp dword [esi + 0x2c4], edi
jne 0x48e30a
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047794b
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0047d0ba
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x48e2fc
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004719f5
push dword [eax]
push 0x57d61c
call fcn.004177ab
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x48e2f4
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x48e2a9
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00477973
jmp 0x48e331
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x546314
call fcn.004177ab
pop ecx
pop ecx
cmp eax, edi
je 0x48e331
push edi
mov ecx, eax
call fcn.004ab8c5
mov ecx, dword [esi + 0x78]
push 1
call fcn.0045462a
push dword [esi + 0x78]
push 0x538264
call fcn.004177ab
pop ecx
pop ecx
cmp eax, edi
je 0x48e35a
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x48e48b
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x48e48b
test ebx, ebx
je 0x48e48b
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x48e48b
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x48e48b
cmp dword [0x5860d0], 0
je 0x48e48b
push 8
mov ecx, esi
call fcn.0048dad5
mov edi, eax
test edi, edi
je 0x48e48b
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00418765
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004187a6
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00414e43
test eax, 0x400000
je 0x48e44e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48e48b
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0048d694
jmp 0x48e48b
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00454784
call fcn.0050854c
ret 0xc