Function at 0x49868c
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x4b
push 0
push 0
dec ecx
jne 0x498695
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
call fcn.00405cfc
lea eax, [ebp + 0x10]
call fcn.00405084
xor eax, eax
push ebp
push 0x4991c9
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 0
xor eax, eax
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x3c]
call fcn.00406350
push 0x8001
call sub.kernel32.dll_SetErrorMode
mov dword [ebp - 0x34], eax
xor eax, eax
push ebp
push 0x499132
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebp + 0x14]
call fcn.00405ad0
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x498727
inc ebx
xor esi, esi
mov eax, dword [ebp + 0x14]
mov edx, dword [eax + esi*4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
call fcn.0041d798
inc esi
dec ebx
jne 0x498712
xor eax, eax
push ebp
push 0x499121
push dword fs:[eax]
mov dword fs:[eax], esp
mov al, byte [ebp + 8]
sub al, 1
jb 0x498740
je 0x498753
jmp 0x498759
push 0x10
call sub.user32.dll_GetKeyState
movsx eax, ax
test ah, 0x80
setne byte [ebp - 0x52]
jmp 0x49875d
mov byte [ebp - 0x52], 0
jmp 0x49875d
mov byte [ebp - 0x52], 1
push 0x11
call sub.user32.dll_GetKeyState
movsx eax, ax
test ah, 0x80
setne byte [ebp - 0x53]
mov byte [ebp - 0xd], 0
cmp dword [ebp - 8], 0
jne 0x49878c
mov ecx, 0x2449
mov edx, 0x4991e8
mov eax, 0x499234
call fcn.004042e8
cmp dword [ebp - 8], 0
je 0x4990ff
mov eax, dword [0x56501c]
cmp dword [eax], 0
je 0x4990ff
lea eax, [ebp - 0x2c]
call fcn.00406350
lea eax, [ebp - 0x30]
call fcn.00406350
mov byte [ebp - 0xd], 0
cmp dword [ebp + 0xc], 0
je 0x4987d1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x20], eax
jmp 0x498807
lea edx, [ebp - 0x228]
mov eax, dword [0x565348]
mov eax, dword [eax]
call fcn.00465940
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x228]
mov eax, dword [0x565348]
mov eax, dword [eax]
call fcn.00465940
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x9c]
xor ecx, ecx
mov edx, 0x40
call fcn.00402db4
call sub.user32.dll_CreatePopupMenu
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x4990f5
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x28], 4
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe5], 0
je 0x498846
or dword [ebp - 0x28], 0x10
cmp byte [ebp - 0x52], 0
je 0x498853
or dword [ebp - 0x28], 0x100
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 2
je 0x498869
mov edx, 0x499288
mov eax, dword [ebp - 4]
call fcn.004993a0
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 4
je 0x49887f
mov edx, 0x4992a0
mov eax, dword [ebp - 4]
call fcn.004993a0
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 8
je 0x498895
mov edx, 0x4992d0
mov eax, dword [ebp - 4]
call fcn.004993a0
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 0x10
je 0x4988ab
mov edx, 0x4992e4
mov eax, dword [ebp - 4]
call fcn.004993a0
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 1
je 0x4988c1
mov edx, 0x4992ec
mov eax, dword [ebp - 4]
call fcn.004993a0
mov byte [ebp - 0x51], 0
mov dl, 1
mov eax, dword [0x43bfa0]
call fcn.0043c0a0
mov dword [ebp - 0x48], eax
xor eax, eax
push ebp
push 0x498bd1
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000000
mov eax, dword [ebp - 0x48]
call fcn.0043c140
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x498bb3
inc ebx
xor esi, esi
lea ecx, [ebp - 0x22c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x22c], 0
je 0x498bab
lea ecx, [ebp - 0x230]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x230]
mov eax, dword [ebp - 0x48]
call fcn.0043c2cc
test al, al
je 0x498abb
lea ecx, [ebp - 0x234]
xor edx, edx
mov eax, dword [ebp - 0x48]
call fcn.0043c8dc
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x4c]
call fcn.00404c50
mov eax, dword [ebp - 0x48]
call fcn.0043c110
mov eax, dword [ebp - 0x4c]
xor edx, edx
call fcn.00404df4
je 0x498a93
lea eax, [ebp - 0x238]
mov edx, dword [ebp - 0x4c]
call fcn.00404624
mov edx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x48]
call fcn.0043c2cc
test al, al
je 0x498a6b
mov edx, 0x499320
mov eax, dword [ebp - 0x48]
call fcn.0043cb64
test al, al
je 0x498a48
mov edx, 0x499320
mov eax, dword [ebp - 0x48]
call fcn.0043c2cc
test al, al
je 0x498a3b
lea ecx, [ebp - 0x23c]
xor edx, edx
mov eax, dword [ebp - 0x48]
call fcn.0043c8dc
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x50]
call fcn.00404c50
lea eax, [ebp - 0x244]
mov ecx, dword [ebp - 0x50]
mov edx, 0x49932c
call fcn.00404d48
mov edx, dword [ebp - 0x244]
lea eax, [ebp - 0x240]
call fcn.00404624
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x48]
call fcn.0043c2cc
test al, al
je 0x498a3b
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.004981fc
lea edx, [ebp - 0x38]
call fcn.004985e8
mov eax, dword [ebp - 0x48]
call fcn.0043c110
jmp 0x498af4
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.004981fc
lea edx, [ebp - 0x38]
call fcn.004985e8
mov eax, dword [ebp - 0x48]
call fcn.0043c110
jmp 0x498af4
push ebp
lea ecx, [ebp - 0x248]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x248]
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x48]
call fcn.0049861c
pop ecx
jmp 0x498af4
push ebp
lea ecx, [ebp - 0x24c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x24c]
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x48]
call fcn.0049861c
pop ecx
jmp 0x498af4
cmp byte [ebp - 0x51], 0
jne 0x498af4
mov edx, 0x499338
mov eax, dword [ebp - 0x48]
call fcn.0043c2cc
test al, al
je 0x498af4
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.004981fc
lea edx, [ebp - 0x38]
call fcn.004985e8
mov eax, dword [ebp - 0x48]
call fcn.0043c110
mov byte [ebp - 0x51], 1
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 0x40
je 0x498bab
lea ecx, [ebp - 0x250]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x48]
call fcn.0043c2cc
test al, al
je 0x498bab
lea ecx, [ebp - 0x254]
mov edx, 0x499348
mov eax, dword [ebp - 0x48]
call fcn.0043c8dc
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x4c]
call fcn.00404c50
mov eax, dword [ebp - 0x4c]
xor edx, edx
call fcn.00404df4
je 0x498ba3
lea eax, [ebp - 0x25c]
mov ecx, dword [ebp - 0x4c]
mov edx, 0x49935c
call fcn.00404d48
mov edx, dword [ebp - 0x25c]
lea eax, [ebp - 0x258]
call fcn.00404624
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x48]
call fcn.0043c2cc
test al, al
je 0x498ba3
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.004981fc
lea edx, [ebp - 0x38]
call fcn.004985e8
mov eax, dword [ebp - 0x48]
call fcn.0043c110
inc esi
dec ebx
jne 0x498908
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x498bd8
mov eax, dword [ebp - 0x48]
call fcn.0043c110
mov eax, dword [ebp - 0x48]
call fcn.0040353c
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x499128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebp - 0x34]
push eax
call sub.kernel32.dll_SetErrorMode
ret