Function at 0x4b9341
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x570f61
call fcn.00524444
sub esp, 0x10c
push ebx
push esi
mov esi, ecx
xor ebx, ebx
xor eax, eax
push edi
cmp dword [esi + 0x20c], ebx
mov ecx, dword [esi + 0x2ac]
setne al
inc eax
or edi, 0xffffffff
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x2a8]
mov edx, eax
and edx, ecx
cmp edx, edi
je 0x4b9389
push ebx
push ecx
push eax
push ebx
mov ecx, esi
call fcn.004c0909
cmp dword [esi + 0x1f4], ebx
je 0x4b9516
push ebx
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x18], ebx
call fcn.004e9f6b
mov edi, 0x629e18
lea ecx, [ebp - 0x98]
push edi
mov dword [ebp - 4], ebx
call fcn.0053ec88
cmp dword [ebp + 8], ebx
jne 0x4b93d1
lea ecx, [ebp - 0xf4]
call fcn.005453a7
cmp eax, 1
jne 0x4b94f5
lea eax, [ebp - 0x98]
mov ecx, edi
push eax
call fcn.0053ec88
lea eax, [ebp - 0x20]
mov ecx, esi
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004b7b3c
cmp dword [ebp + 8], ebx
je 0x4b93fe
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x14], eax
jmp 0x4b9416
lea eax, [ebp - 0x18]
push ebx
push eax
push dword [0x629e18]
call fcn.00527738
add esp, 0xc
mov dword [ebp - 0x14], eax
xor edi, edi
cmp edi, ebx
jg 0x4b9426
jl 0x4b9421
cmp dword [ebp - 0x14], ebx
jae 0x4b9426
mov dword [ebp - 0x14], ebx
xor edi, edi
mov ecx, dword [0x62ae3c]
cmp dword [ecx + 0x193c], ebx
je 0x4b9440
push dword [ebp + 0x18]
push dword [ebp - 0x14]
push ebx
call fcn.004840de
cmp dword [esi + 0x1f4], ebx
je 0x4b94e0
mov ecx, esi
mov dword [ebp + 0x14], ebx
call fcn.004b7d99
sub eax, 1
sbb edx, ebx
cmp edi, edx
jl 0x4b947c
jg 0x4b9466
cmp dword [ebp - 0x14], eax
jbe 0x4b947c
mov ecx, esi
call fcn.004b7d99
push 1
mov edi, edx
pop ecx
sub eax, ecx
mov dword [ebp + 0x14], ecx
mov dword [ebp - 0x14], eax
sbb edi, ebx
mov eax, dword [ebp - 0x14]
push ebx
sub eax, 0x20
mov ecx, esi
sbb edi, ebx
push edi
push eax
call fcn.004aeba6
push 2
push ebx
push 0xb6
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [ebp + 0x14], ebx
je 0x4b94b3
mov eax, dword [esi + 0xf8]
sub eax, dword [esi + 0xf0]
dec eax
jmp 0x4b94bc
mov eax, dword [ebp - 0x14]
sub eax, dword [esi + 0xf0]
mov dword [ebp + 0x18], eax
mov dword [ebp + 8], eax
lea eax, [ebp + 0x18]
mov ecx, esi
push eax
lea eax, [ebp + 8]
push eax
call fcn.004b5c0f
push dword [ebp + 0x18]
push dword [ebp + 8]
push ebx
push dword [esi + 0x1c]
call fcn.00463ca0
or dword [esi + 0x110], 0xffffffff
or dword [esi + 0x114], 0xffffffff
mov ecx, esi
call fcn.004ab21f
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 1
call fcn.0053eb4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
jmp 0x4b9987
mov ecx, esi
call fcn.004ae8d2
push ebx
lea ecx, [ebp - 0x94]
call fcn.004e9f09
mov eax, dword [0x5c8528]
cmp dword [ebp + 8], ebx
mov dword [ebp - 4], 2
mov dword [ebp - 0x38], eax
jne 0x4b9551
lea ecx, [ebp - 0x94]
call fcn.005453a7
cmp eax, 1
jne 0x4b9977
mov eax, dword [ebp - 0x38]
cmp dword [ebp + 8], ebx
cdq
mov dword [0x5c8528], eax
mov dword [0x5c852c], edx
je 0x4b9573
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x38], eax
jmp 0x4b9587
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, 0x80
je 0x4b9587
mov dword [ebp + 0x18], 1
mov ecx, dword [0x62ae3c]
cmp dword [ecx + 0x193c], ebx
je 0x4b95a3
push dword [ebp + 0x18]
push dword [ebp - 0x38]
push dword [ebp - 0x34]
call fcn.004840de
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
push dword [esi + 0x1c]
call fcn.00463bb0
cmp dword [esi + 0x20c], ebx
je 0x4b95cb
mov eax, dword [ebp - 0x1c]
add eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
add eax, eax
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
mov ecx, esi
push dword [ebp - 0x1c]
call fcn.004c175d
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1c]
mov dword [ebp + 0x10], edx
je 0x4b95ff
mov ecx, dword [esi + 0x148]
mov eax, dword [esi + 0x14c]
mov edx, ecx
and edx, eax
cmp edx, edi
je 0x4b95ff
mov dword [ebp - 0x30], ecx
jmp 0x4b9608
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x10]
cmp dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], eax
jne 0x4b9745
mov ecx, esi
call fcn.004ba36a
mov al, byte [0x6250a0]
cmp dword [esi + 0x20c], ebx
push 1
mov byte [ebp + 8], al
pop ecx
mov byte [ebp + 9], bl
mov dword [ebp + 0x14], ecx
je 0x4b9647
mov dword [ebp + 0x14], 2
mov byte [ebp + 8], al
mov byte [ebp + 9], bl
mov byte [ebp + 0xa], bl
mov byte [ebp + 0xb], bl
mov eax, dword [esi + 0x3c]
push ebx
push edi
push ebx
push ebx
push ebx
push edi
push edi
push ebx
push ebx
push dword [eax + 0x18c]
add eax, 0x208
push dword [ebp - 0x38]
push ebx
push ebx
push ecx
lea ecx, [ebp + 0x14]
push ecx
lea ecx, [ebp + 8]
push ecx
push edi
push edi
push ebx
push ebx
push eax
call fcn.004d43dc
mov ecx, eax
add esp, 0x54
and ecx, edx
mov dword [ebp - 0x28], eax
cmp ecx, edi
mov dword [ebp - 0x24], edx
jne 0x4b96e9
lea eax, [ebp - 0x118]
push 0xa
push eax
push dword [ebp - 0x38]
call fcn.00525629
add esp, 0xc
lea ecx, [ebp - 0x18]
push eax
call fcn.0053ebbd
push eax
lea eax, [ebp + 0x18]
push str.Page_break
push eax
mov byte [ebp - 4], 3
call fcn.0053ee58
mov eax, dword [eax]
push 0x30
push 0x5c88a8
push eax
mov ecx, esi
mov byte [ebp - 4], 4
call fcn.0054239a
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 3
call fcn.0053eb4f
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0053eb4f
jmp 0x4b997e
push edx
push eax
mov ecx, esi
call fcn.004aeb94
mov edi, dword [ebp - 0x28]
sub edi, dword [esi + 0xf0]
mov eax, edi
cdq
idiv dword [ebp - 0x18]
push eax
push eax
push ebx
push dword [esi + 0x1c]
call fcn.00463ca0
cmp dword [ebp + 0x18], ebx
je 0x4b9731
mov eax, edi
push 1
cdq
add eax, dword [esi + 0xf0]
mov ecx, esi
adc edx, dword [esi + 0xf4]
push edx
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
call fcn.004c12a4
push 1
mov ecx, esi
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call fcn.004b9ac9
jmp 0x4b9961
lea eax, [ebp - 0x20]
mov ecx, esi
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004b7b3c
mov eax, dword [ebp - 0x38]
cdq
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x12c]
inc eax
mov dword [ebp - 0x10], edx
cdq
cmp dword [ebp - 0x10], edx
jl 0x4b9790
jg 0x4b9772
cmp dword [ebp - 0x14], eax
jb 0x4b9790
push dword [esi + 0x1c]
call fcn.00469792
cdq
cmp dword [ebp - 0x10], edx
pop ecx
jl 0x4b9815
jg 0x4b9790
cmp dword [ebp - 0x14], eax
jb 0x4b9815
cmp dword [esi + 0x20c], ebx
push 1
pop ecx
mov edx, 0x5c8498
mov dword [ebp + 0x10], ecx
je 0x4b97c0
mov eax, dword [esi + 0x3c]
mov dword [ebp + 0x10], 2
mov edx, 0x5c84a8
cmp dword [eax + 0x164], 2
jne 0x4b97c0
mov edx, 0x5c84ac
mov eax, dword [esi + 0x3c]
push ebx
push edi
push ebx
push ebx
push ebx
push edi
push edi
push ebx
push ebx
push dword [eax + 0x18c]
add eax, 0x208
push dword [ebp - 0x14]
push ebx
push ebx
push ecx
lea ecx, [ebp + 0x10]
push ecx
push edx
push edi
push edi
push ebx
push ebx
push eax
call fcn.004d43dc
mov edi, eax
and eax, edx
add esp, 0x54
cmp eax, 0xffffffff
mov dword [ebp - 0x24], edx
jne 0x4b980a
push bind
push eax
mov ecx, esi
call fcn.004aeb94
jmp 0x4b9820
push edx
push edi
mov ecx, esi
call fcn.004aeb94
jmp 0x4b9818
mov edi, dword [ebp - 0x28]
and edi, dword [ebp - 0x24]
cmp edi, 0xffffffff
jne 0x4b9850
mov eax, dword [esi + 0x174]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
push ebx
push 0xb6
mov dword [ebp + 8], eax
push dword [esi + 0x1c]
call edi
mov eax, dword [ebp + 8]
push ebx
dec eax
push eax
push 0xbb
push dword [esi + 0x1c]
call edi
jmp 0x4b992b
cmp dword [0x628a40], ebx
je 0x4b9890
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push 0xffffffffffffffff
push 0xc9
push dword [esi + 0x1c]
call edi
mov ecx, dword [ebp - 0x14]
sub ecx, dword [esi + 0x12c]
sub ecx, eax
dec ecx
push ecx
push ebx
push 0xb6
push dword [esi + 0x1c]
call edi
mov eax, dword [ebp - 0x14]
push ebx
sub eax, dword [esi + 0x12c]
dec eax
jmp 0x4b98ca
push dword [ebp - 0x14]
push dword [esi + 0x1c]
call fcn.004697dc
pop ecx
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
pop ecx
mov dword [ebp + 8], eax
push ebx
push 0xffffffffffffffff
push 0xc9
push dword [esi + 0x1c]
call edi
mov ecx, dword [ebp + 8]
sub ecx, eax
dec ecx
push ecx
push ebx
push 0xb6
push dword [esi + 0x1c]
call edi
mov eax, dword [ebp + 8]
push ebx
dec eax
push eax
push 0xbb
push dword [esi + 0x1c]
call edi
mov dword [ebp + 8], eax
imul eax, dword [ebp - 0x18]
cdq
add eax, dword [esi + 0xf0]
push ebx
push dword [ebp + 8]
adc edx, dword [esi + 0xf4]
mov dword [ebp - 0x28], eax
push 0xbb
push dword [esi + 0x1c]
mov dword [ebp - 0x24], edx
call edi
push ebx
mov ecx, esi
push dword [ebp + 8]
cdq
push edx
push eax
push ebx
call fcn.004bc5f0
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
sub ecx, dword [esi + 0xf0]
mov edi, dword [ebp - 0x24]
cdq
sbb edi, dword [esi + 0xf4]
push edx
push eax
push edi
push ecx
call fcn.005291e0
mov edi, eax
push edi
push edi
push ebx
push dword [esi + 0x1c]
call fcn.00463ca0
cmp dword [ebp + 0x18], ebx
je 0x4b9966
mov eax, edi
push 1
imul eax, dword [ebp - 0x18]
cdq
add eax, dword [esi + 0xf0]
mov ecx, esi
adc edx, dword [esi + 0xf4]
push edx
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
call fcn.004c12a4
cmp dword [ebp + 0x18], ebx
jne 0x4b9974
or dword [esi + 0x110], 0xffffffff
or dword [esi + 0x114], 0xffffffff
or edi, 0xffffffff
mov ecx, esi
call fcn.004ab21f
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x94]
call fcn.00544fa4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x14