Function at 0x471ac8
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x512bae
call fcn.004f2460
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x471ae4
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x471e2a
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x55a9f0
call fcn.0045fba7
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x471b18
cmp dword [0x55a9f4], eax
jne 0x471b18
call fcn.0040bbc9
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0046f4e7
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x471b61
mov eax, edi
sub eax, 8
je 0x471d76
dec eax
je 0x471bfa
sub eax, 0xa
je 0x471b6d
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.004059a9
jmp 0x471e38
push esi
call fcn.00424486
mov edi, eax
pop ecx
test edi, edi
je 0x471beb
push edi
push 0x51e7e0
call fcn.0040eebf
pop ecx
pop ecx
test eax, eax
je 0x471b98
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x471be3
push edi
push 0x51edac
call fcn.0040eebf
pop ecx
pop ecx
test eax, eax
je 0x471bb6
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x471be3
push edi
push 0x51e454
call fcn.0040eebf
pop ecx
pop ecx
test eax, eax
jne 0x471bd8
push edi
push 0x51e0c4
call fcn.0040eebf
pop ecx
pop ecx
test eax, eax
je 0x471beb
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x471b61
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x471b61
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x471d1f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x471d1f
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.0042044e
cmp dword [esi + 0x2c4], edi
jne 0x471cb7
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0047c377
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.00468d0d
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x471ca9
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004894a2
push dword [eax]
push 0x55ae6c
call fcn.0040eebf
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x471ca1
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x471c56
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.0047c39f
jmp 0x471cde
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x5324bc
call fcn.0040eebf
pop ecx
pop ecx
cmp eax, edi
je 0x471cde
push edi
mov ecx, eax
call fcn.004c4481
mov ecx, dword [esi + 0x78]
push 1
call fcn.0042044e
push dword [esi + 0x78]
push 0x51acb0
call fcn.0040eebf
pop ecx
pop ecx
cmp eax, edi
je 0x471d07
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x471e38
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x471e38
test ebx, ebx
je 0x471e38
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x471e38
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x471e38
cmp dword [0x561bd0], 0
je 0x471e38
push 8
mov ecx, esi
call fcn.00471482
mov edi, eax
test edi, edi
je 0x471e38
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0040c51a
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0040c55b
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.00409282
test eax, 0x400000
je 0x471dfb
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x471e38
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.00471041
jmp 0x471e38
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0047ce13
call fcn.004f2538
ret 0xc