Function at 0x4c9ac5
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x56250d
call fcn.00542baf
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x4c9ae1
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x4c9e27
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x5c7e2c
call fcn.004e1057
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4c9b15
cmp dword [0x5c7e30], eax
jne 0x4c9b15
call fcn.00442ff0
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.004c7505
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x4c9b5e
mov eax, edi
sub eax, 8
je 0x4c9d73
dec eax
je 0x4c9bf7
sub eax, 0xa
je 0x4c9b6a
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.0044816b
jmp 0x4c9e35
push esi
call fcn.004515c5
mov edi, eax
pop ecx
test edi, edi
je 0x4c9be8
push edi
push 0x5743b0
call fcn.00455d15
pop ecx
pop ecx
test eax, eax
je 0x4c9b95
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x4c9be0
push edi
push 0x573e40
call fcn.00455d15
pop ecx
pop ecx
test eax, eax
je 0x4c9bb3
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x4c9be0
push edi
push 0x578364
call fcn.00455d15
pop ecx
pop ecx
test eax, eax
jne 0x4c9bd5
push edi
push 0x577fd4
call fcn.00455d15
pop ecx
pop ecx
test eax, eax
je 0x4c9be8
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x4c9b5e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x4c9b5e
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4c9d1c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x4c9d1c
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00440430
cmp dword [esi + 0x2c4], edi
jne 0x4c9cb4
push 0xa
lea ecx, [ebp - 0x50]
call fcn.004b3045
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.004b8a58
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x4c9ca6
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004ad14b
push dword [eax]
push 0x5c7768
call fcn.00455d15
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x4c9c9e
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x4c9c53
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.004b306d
jmp 0x4c9cdb
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x58471c
call fcn.00455d15
pop ecx
pop ecx
cmp eax, edi
je 0x4c9cdb
push edi
mov ecx, eax
call fcn.004e6f3a
mov ecx, dword [esi + 0x78]
push 1
call fcn.00440430
push dword [esi + 0x78]
push 0x576998
call fcn.00455d15
pop ecx
pop ecx
cmp eax, edi
je 0x4c9d04
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x4c9e35
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4c9e35
test ebx, ebx
je 0x4c9e35
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x4c9e35
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x4c9e35
cmp dword [0x5ce730], 0
je 0x4c9e35
push 8
mov ecx, esi
call fcn.004c947f
mov edi, eax
test edi, edi
je 0x4c9e35
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00444398
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004443d9
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.0044b781
test eax, 0x400000
je 0x4c9df8
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4c9e35
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.004c903e
jmp 0x4c9e35
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00490ba9
call fcn.00542c87
ret 0xc