Function at 0x490bac
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x4b
push 0
push 0
dec ecx
jne 0x490bb5
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
call fcn.00405e88
lea eax, [ebp + 0x10]
call fcn.004052ec
xor eax, eax
push ebp
push 0x4916e9
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 0
xor eax, eax
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x3c]
call fcn.004064dc
push 0x8001
call sub.kernel32.dll_SetErrorMode
mov dword [ebp - 0x34], eax
xor eax, eax
push ebp
push 0x491652
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebp + 0x14]
call fcn.00405c5c
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x490c47
inc ebx
xor esi, esi
mov eax, dword [ebp + 0x14]
mov edx, dword [eax + esi*4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
call fcn.0041c168
inc esi
dec ebx
jne 0x490c32
xor eax, eax
push ebp
push 0x491641
push dword fs:[eax]
mov dword fs:[eax], esp
mov al, byte [ebp + 8]
sub al, 1
jb 0x490c60
je 0x490c73
jmp 0x490c79
push 0x10
call sub.user32.dll_GetKeyState
movsx eax, ax
test ah, 0x80
setne byte [ebp - 0x52]
jmp 0x490c7d
mov byte [ebp - 0x52], 0
jmp 0x490c7d
mov byte [ebp - 0x52], 1
push 0x11
call sub.user32.dll_GetKeyState
movsx eax, ax
test ah, 0x80
setne byte [ebp - 0x53]
mov byte [ebp - 0xd], 0
cmp dword [ebp - 8], 0
jne 0x490cac
mov ecx, 0x2449
mov edx, 0x491708
mov eax, 0x491754
call fcn.00404654
cmp dword [ebp - 8], 0
je 0x49161f
mov eax, dword [0x51b658]
cmp dword [eax], 0
je 0x49161f
lea eax, [ebp - 0x2c]
call fcn.004064dc
lea eax, [ebp - 0x30]
call fcn.004064dc
mov byte [ebp - 0xd], 0
cmp dword [ebp + 0xc], 0
je 0x490cf1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x20], eax
jmp 0x490d27
lea edx, [ebp - 0x228]
mov eax, dword [0x51b954]
mov eax, dword [eax]
call fcn.0046460c
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x228]
mov eax, dword [0x51b954]
mov eax, dword [eax]
call fcn.0046460c
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x9c]
xor ecx, ecx
mov edx, 0x40
call fcn.00403170
call sub.user32.dll_CreatePopupMenu
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x491615
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x28], 4
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe5], 0
je 0x490d66
or dword [ebp - 0x28], 0x10
cmp byte [ebp - 0x52], 0
je 0x490d73
or dword [ebp - 0x28], 0x100
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 2
je 0x490d89
mov edx, 0x4917a8
mov eax, dword [ebp - 4]
call fcn.004918c0
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 4
je 0x490d9f
mov edx, 0x4917c0
mov eax, dword [ebp - 4]
call fcn.004918c0
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 8
je 0x490db5
mov edx, 0x4917f0
mov eax, dword [ebp - 4]
call fcn.004918c0
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 0x10
je 0x490dcb
mov edx, 0x491804
mov eax, dword [ebp - 4]
call fcn.004918c0
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 1
je 0x490de1
mov edx, 0x49180c
mov eax, dword [ebp - 4]
call fcn.004918c0
mov byte [ebp - 0x51], 0
mov dl, 1
mov eax, dword [0x438048]
call fcn.00438148
mov dword [ebp - 0x48], eax
xor eax, eax
push ebp
push 0x4910f1
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000000
mov eax, dword [ebp - 0x48]
call fcn.004381e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x4910d3
inc ebx
xor esi, esi
lea ecx, [ebp - 0x22c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x22c], 0
je 0x4910cb
lea ecx, [ebp - 0x230]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x230]
mov eax, dword [ebp - 0x48]
call fcn.00438370
test al, al
je 0x490fdb
lea ecx, [ebp - 0x234]
xor edx, edx
mov eax, dword [ebp - 0x48]
call fcn.00438808
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x4c]
call fcn.00404fc0
mov eax, dword [ebp - 0x48]
call fcn.004381b8
mov eax, dword [ebp - 0x4c]
xor edx, edx
call fcn.004050f8
je 0x490fb3
lea eax, [ebp - 0x238]
mov edx, dword [ebp - 0x4c]
call fcn.00404990
mov edx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x48]
call fcn.00438370
test al, al
je 0x490f8b
mov edx, 0x491840
mov eax, dword [ebp - 0x48]
call fcn.00438ad8
test al, al
je 0x490f68
mov edx, 0x491840
mov eax, dword [ebp - 0x48]
call fcn.00438370
test al, al
je 0x490f5b
lea ecx, [ebp - 0x23c]
xor edx, edx
mov eax, dword [ebp - 0x48]
call fcn.00438808
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x50]
call fcn.00404fc0
lea eax, [ebp - 0x244]
mov ecx, dword [ebp - 0x50]
mov edx, 0x49184c
call fcn.0040504c
mov edx, dword [ebp - 0x244]
lea eax, [ebp - 0x240]
call fcn.00404990
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x48]
call fcn.00438370
test al, al
je 0x490f5b
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0049071c
lea edx, [ebp - 0x38]
call fcn.00490b08
mov eax, dword [ebp - 0x48]
call fcn.004381b8
jmp 0x491014
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0049071c
lea edx, [ebp - 0x38]
call fcn.00490b08
mov eax, dword [ebp - 0x48]
call fcn.004381b8
jmp 0x491014
push ebp
lea ecx, [ebp - 0x248]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x248]
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x48]
call fcn.00490b3c
pop ecx
jmp 0x491014
push ebp
lea ecx, [ebp - 0x24c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x24c]
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x48]
call fcn.00490b3c
pop ecx
jmp 0x491014
cmp byte [ebp - 0x51], 0
jne 0x491014
mov edx, 0x491858
mov eax, dword [ebp - 0x48]
call fcn.00438370
test al, al
je 0x491014
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0049071c
lea edx, [ebp - 0x38]
call fcn.00490b08
mov eax, dword [ebp - 0x48]
call fcn.004381b8
mov byte [ebp - 0x51], 1
mov eax, dword [ebp - 4]
test byte [eax + 0x46], 0x40
je 0x4910cb
lea ecx, [ebp - 0x250]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x48]
call fcn.00438370
test al, al
je 0x4910cb
lea ecx, [ebp - 0x254]
mov edx, 0x491868
mov eax, dword [ebp - 0x48]
call fcn.00438808
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x4c]
call fcn.00404fc0
mov eax, dword [ebp - 0x4c]
xor edx, edx
call fcn.004050f8
je 0x4910c3
lea eax, [ebp - 0x25c]
mov ecx, dword [ebp - 0x4c]
mov edx, 0x49187c
call fcn.0040504c
mov edx, dword [ebp - 0x25c]
lea eax, [ebp - 0x258]
call fcn.00404990
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x48]
call fcn.00438370
test al, al
je 0x4910c3
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0049071c
lea edx, [ebp - 0x38]
call fcn.00490b08
mov eax, dword [ebp - 0x48]
call fcn.004381b8
inc esi
dec ebx
jne 0x490e28
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4910f8
mov eax, dword [ebp - 0x48]
call fcn.004381b8
mov eax, dword [ebp - 0x48]
call fcn.004038a8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x491648
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebp - 0x34]
push eax
call sub.kernel32.dll_SetErrorMode
ret