Function at 0x48cd1e
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x52782b
call fcn.00507d45
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x48cd3a
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x48d080
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5756a4
call fcn.004a5146
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x48cd6e
cmp dword [0x5756a8], eax
jne 0x48cd6e
call fcn.00416a1d
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0048a70e
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x48cdb7
mov eax, edi
sub eax, 8
je 0x48cfcc
dec eax
je 0x48ce50
sub eax, 0xa
je 0x48cdc3
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0041dcb2
jmp 0x48d08e
push esi
call fcn.00412bfd
mov edi, eax
pop ecx
test edi, edi
je 0x48ce41
push edi
push 0x535670
call fcn.004215b9
pop ecx
pop ecx
test eax, eax
je 0x48cdee
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x48ce39
push edi
push 0x535100
call fcn.004215b9
pop ecx
pop ecx
test eax, eax
je 0x48ce0c
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x48ce39
push edi
push 0x538054
call fcn.004215b9
pop ecx
pop ecx
test eax, eax
jne 0x48ce2e
push edi
push 0x537cc4
call fcn.004215b9
pop ecx
pop ecx
test eax, eax
je 0x48ce41
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x48cdb7
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x48cdb7
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x48cf75
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x48cf75
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0044ffdf
cmp dword [esi + 0x2c4], edi
jne 0x48cf0d
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00472e3c
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0047bca8
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x48ceff
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0041be2d
push dword [eax]
push 0x574f74
call fcn.004215b9
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x48cef7
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x48ceac
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00472e64
jmp 0x48cf34
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x543d84
call fcn.004215b9
pop ecx
pop ecx
cmp eax, edi
je 0x48cf34
push edi
mov ecx, eax
call fcn.004ab011
mov ecx, dword [esi + 0x78]
push 1
call fcn.0044ffdf
push dword [esi + 0x78]
push 0x53bee8
call fcn.004215b9
pop ecx
pop ecx
cmp eax, edi
je 0x48cf5d
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x48d08e
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x48d08e
test ebx, ebx
je 0x48d08e
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x48d08e
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x48d08e
cmp dword [0x57bf98], 0
je 0x48d08e
push 8
mov ecx, esi
call fcn.0048c6d6
mov edi, eax
test edi, edi
je 0x48d08e
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041a435
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041a476
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00421201
test eax, 0x400000
je 0x48d051
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48d08e
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0048c295
jmp 0x48d08e
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00450139
call fcn.00507e1d
ret 0xc