Function at 0x4c81e5
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x53537c
call fcn.00513742
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4c8201
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4c8547
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x58773c
call fcn.00492481
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4c8235
cmp dword [0x587740], eax
jne 0x4c8235
call fcn.0040f83b
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004c5c04
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4c827e
mov eax, edi
sub eax, 8
je 0x4c8493
dec eax
je 0x4c8317
sub eax, 0xa
je 0x4c828a
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.004146a2
jmp 0x4c8555
push esi
call fcn.00408978
mov edi, eax
pop ecx
test edi, edi
je 0x4c8308
push edi
push 0x54720c
call fcn.004420c7
pop ecx
pop ecx
test eax, eax
je 0x4c82b5
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4c8300
push edi
push 0x53f528
call fcn.004420c7
pop ecx
pop ecx
test eax, eax
je 0x4c82d3
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4c8300
push edi
push 0x54da30
call fcn.004420c7
pop ecx
pop ecx
test eax, eax
jne 0x4c82f5
push edi
push 0x5514f4
call fcn.004420c7
pop ecx
pop ecx
test eax, eax
je 0x4c8308
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4c827e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4c827e
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4c843c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4c843c
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.004340ba
cmp dword [esi + 0x2c4], edi
jne 0x4c83d4
push 0xa
lea ecx, [ebp - 0x50]
call fcn.00488cbd
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004a0d7f
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4c83c6
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00443a7a
push dword [eax]
push 0x5882e4
call fcn.004420c7
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4c83be
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4c8373
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00488ce5
jmp 0x4c83fb
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x553bb4
call fcn.004420c7
pop ecx
pop ecx
cmp eax, edi
je 0x4c83fb
push edi
mov ecx, eax
call fcn.004cef3b
mov ecx, dword [esi + 0x78]
push 1
call fcn.004340ba
push dword [esi + 0x78]
push 0x53df00
call fcn.004420c7
pop ecx
pop ecx
cmp eax, edi
je 0x4c8424
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4c8555
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4c8555
test ebx, ebx
je 0x4c8555
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4c8555
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4c8555
cmp dword [0x58dcf8], 0
je 0x4c8555
push 8
mov ecx, esi
call fcn.004c7b9f
mov edi, eax
test edi, edi
je 0x4c8555
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041e91b
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041e95c
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0040d4e1
test eax, 0x400000
je 0x4c8518
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4c8555
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004c775e
jmp 0x4c8555
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004952f8
call fcn.0051381a
ret 0xc