Function at 0x489f4c
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x522e63
call fcn.0050304e
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x489f68
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x48a2ae
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x56fc70
call fcn.004a1cfb
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x489f9c
cmp dword [0x56fc74], eax
jne 0x489f9c
call fcn.004122f0
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0048798b
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x489fe5
mov eax, edi
sub eax, 8
je 0x48a1fa
dec eax
je 0x48a07e
sub eax, 0xa
je 0x489ff1
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.00407eb0
jmp 0x48a2bc
push esi
call fcn.0040e28a
mov edi, eax
pop ecx
test edi, edi
je 0x48a06f
push edi
push 0x52d838
call fcn.00414e7f
pop ecx
pop ecx
test eax, eax
je 0x48a01c
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x48a067
push edi
push 0x52d2cc
call fcn.00414e7f
pop ecx
pop ecx
test eax, eax
je 0x48a03a
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x48a067
push edi
push 0x530c2c
call fcn.00414e7f
pop ecx
pop ecx
test eax, eax
jne 0x48a05c
push edi
push 0x53089c
call fcn.00414e7f
pop ecx
pop ecx
test eax, eax
je 0x48a06f
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x489fe5
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x489fe5
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x48a1a3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x48a1a3
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00450594
cmp dword [esi + 0x2c4], edi
jne 0x48a13b
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00473692
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00478e89
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x48a12d
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040e2a3
push dword [eax]
push 0x56f558
call fcn.00414e7f
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x48a125
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x48a0da
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004736ba
jmp 0x48a162
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x53bf7c
call fcn.00414e7f
pop ecx
pop ecx
cmp eax, edi
je 0x48a162
push edi
mov ecx, eax
call fcn.004a7bc6
mov ecx, dword [esi + 0x78]
push 1
call fcn.00450594
push dword [esi + 0x78]
push 0x52f2e8
call fcn.00414e7f
pop ecx
pop ecx
cmp eax, edi
je 0x48a18b
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x48a2bc
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x48a2bc
test ebx, ebx
je 0x48a2bc
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x48a2bc
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x48a2bc
cmp dword [0x575ae8], 0
je 0x48a2bc
push 8
mov ecx, esi
call fcn.00489905
mov edi, eax
test edi, edi
je 0x48a2bc
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00414065
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004140a6
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0040bcae
test eax, 0x400000
je 0x48a27f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48a2bc
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004894c4
jmp 0x48a2bc
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004506ee
call fcn.00503126
ret 0xc