Function at 0x4b2db4
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x592ffc
call fcn.0055672a
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4b2dd0
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4b3116
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x604fe4
call fcn.004cec4f
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4b2e04
cmp dword [0x604fe8], eax
jne 0x4b2e04
call fcn.00409f64
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004b0755
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4b2e4d
mov eax, edi
sub eax, 8
je 0x4b3062
dec eax
je 0x4b2ee6
sub eax, 0xa
je 0x4b2e59
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.004143ca
jmp 0x4b3124
push esi
call fcn.0041b513
mov edi, eax
pop ecx
test edi, edi
je 0x4b2ed7
push edi
push 0x5a71e0
call fcn.00421ae9
pop ecx
pop ecx
test eax, eax
je 0x4b2e84
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4b2ecf
push edi
push 0x5a6c70
call fcn.00421ae9
pop ecx
pop ecx
test eax, eax
je 0x4b2ea2
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4b2ecf
push edi
push 0x5aa5dc
call fcn.00421ae9
pop ecx
pop ecx
test eax, eax
jne 0x4b2ec4
push edi
push 0x5aa24c
call fcn.00421ae9
pop ecx
pop ecx
test eax, eax
je 0x4b2ed7
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4b2e4d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4b2e4d
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4b300b
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4b300b
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00465fcd
cmp dword [esi + 0x2c4], edi
jne 0x4b2fa3
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0048aed0
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0049eec4
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4b2f95
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0041b530
push dword [eax]
push 0x6048a8
call fcn.00421ae9
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4b2f8d
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4b2f42
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0048aef8
jmp 0x4b2fca
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x5b7974
call fcn.00421ae9
pop ecx
pop ecx
cmp eax, edi
je 0x4b2fca
push edi
mov ecx, eax
call fcn.004d4de4
mov ecx, dword [esi + 0x78]
push 1
call fcn.00465fcd
push dword [esi + 0x78]
push 0x5ae318
call fcn.00421ae9
pop ecx
pop ecx
cmp eax, edi
je 0x4b2ff3
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4b3124
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4b3124
test ebx, ebx
je 0x4b3124
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4b3124
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4b3124
cmp dword [0x60b9c8], 0
je 0x4b3124
push 8
mov ecx, esi
call fcn.004b2756
mov edi, eax
test edi, edi
je 0x4b3124
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041e1ed
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041e22e
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00417f3d
test eax, 0x400000
je 0x4b30e7
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4b3124
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004b2315
jmp 0x4b3124
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0046615b
call fcn.00556802
ret 0xc