Function at 0x413310
Capabilities:
Log keystrokes via application hook

Disassembly:
push ecx
push ebx
mov ebx, dword [0x45ccd4]
mov eax, 0x98dd629f
imul ebx
push ebp
mov ebp, dword [0x45cccc]
add edx, ebx
sar edx, 0xf
mov eax, ebp
imul eax, eax, 0xd3c7
mov ecx, eax
push esi
push edi
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x61494a93
imul ebx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x61494a93
imul ebp
mov eax, ecx
sar edx, 0xf
add eax, edx
mov esi, dword [0x45cce8]
mov ecx, edx
imul esi, esi, 0xdaea
mov edx, dword [0x45ccdc]
imul edx, edx, 0xd082
shr ecx, 0x1f
add ecx, eax
add ecx, edx
mov eax, 0x5cb3b92f
imul ebp
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, dword [section.dfsaewr4]
add ecx, edi
add ecx, esi
test eax, eax
mov dword [str._r_____r____], ecx
jne 0x41343b
mov eax, dword [0x5707f0]
test eax, eax
jne 0x41343b
mov ecx, dword [0x45ccd0]
mov eax, 0x5134ce4f
imul ecx
sar edx, 0xd
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x45ccc8]
imul edx, edx, 0x64e1
add esi, edx
mov eax, 0x9aba81d9
imul ecx
add edx, ecx
sar edx, 0xf
add esi, edx
mov edi, edx
mov edx, dword [0x45cce4]
mov eax, 0x4e93cfed
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce0]
imul edx, edx, 0x2a2d
shr edi, 0x1f
add edi, esi
sub edi, eax
add edi, edx
mov eax, 0x1fd2221d
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
pop edi
pop esi
pop ebp
mov dword [0x45ccc8], eax
mov eax, 1
pop ebx
pop ecx
ret
mov eax, dword [0x45cce4]
mov edx, dword [0x45cce0]
imul eax, eax, 0x64e1
imul edx, edx, 0xd3c7
add eax, edx
mov dword [esp + 0x10], eax
mov eax, 0x4e93cfed
imul ebx
mov eax, dword [esp + 0x10]
sar edx, 0xe
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x8891a35
imul ebp
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, esi
sub eax, ecx
lea ecx, [eax + edi + 0x86a3]
mov dword [0x45cccc], ecx
mov ecx, dword [0x45ccd8]
mov eax, 0x5134ce4f
imul ecx
imul ecx, ecx, 0x150d2
sar edx, 0xd
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x61494a93
imul dword [0x45ccdc]
add edi, ecx
mov ecx, dword [0x45ccc8]
sar edx, 0xf
imul ecx, ecx, 0xd082
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x45ccd0]
mov eax, 0x79b0bfed
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce4]
sub edi, eax
sub edi, edx
mov edx, dword [section.dfsaewr4]
lea ecx, [edi + esi - 0x64e1]
push edx
mov dword [0x45ccd0], ecx
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov esi, dword [0x45cce0]
mov edi, eax
test edi, edi
je 0x41358f
mov ecx, dword [str._r_____r____]
mov eax, dword [0x45ccd8]
mov ebx, dword [0x45ccdc]
lea ebp, [eax + ecx]
imul ecx, ecx, 0xd65c
mov eax, 0x98dd629f
imul ebp, ebp, 0xd082
imul ebx
add edx, ebx
sar edx, 0xf
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
add eax, ecx
mov ecx, ebx
imul ecx, ecx, 0xd3c7
add eax, ecx
mov ebp, eax
mov eax, 0x8891a35
imul ebx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
xor eax, eax
lea ebx, [esi + ebp - 0x64e1]
mov dword [0x45ccd4], ebx
mov dword [section.dfsaewr4], eax
mov dword [0x5707f0], eax
jmp 0x413595
mov ebx, dword [0x45ccd4]
mov ecx, dword [0x45cce8]
mov eax, 0x95af2ed3
imul ecx
add edx, ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccc8]
imul edx, edx, 0xd65c
mov ebp, ecx
imul ebp, ebp, 0x64e1
sub eax, ebp
add eax, edx
mov ebp, eax
mov eax, 0x98dd629f
imul ebx
add edx, ebx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x9aba81d9
imul ecx
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x8891a35
imul esi
imul esi, esi, 0x3bfc
sar edx, 9
sub ebp, ecx
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
add eax, esi
mov dword [0x45ccd8], eax
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret