Function at 0x43b470
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x198
mov eax, dword [0x49a080]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x4b65ec], 0
push esi
push edi
jne 0x43b4af
cmp dword [0x4b65f4], 0
je 0x43b4af
call fcn.00421aa0
mov esi, dword [0x4b5f50]
lea eax, [ebp - 0x140]
push eax
push dword [0x4b65fc]
mov dword [ebp - 0x10c], esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x140]
movd xmm1, eax
mov eax, dword [ebp - 0x134]
sub eax, dword [ebp - 0x13c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
lea eax, [ebp - 0x128]
cvtdq2ps xmm0, xmm0
push eax
movss dword [esi + 0x10], xmm1
movss dword [esi + 0x14], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [ebp - 0x128]
mov ecx, edi
sub ecx, dword [0x4b6600]
mov esi, dword [ebp - 0x124]
mov edx, esi
sbb edx, dword [0x4b6604]
call fcn.00479ab0
mov edx, dword [0x4b660c]
mov ecx, dword [0x4b6608]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x110], xmm0
call fcn.00479ab0
movss xmm1, dword [ebp - 0x110]
cvtsd2ss xmm0, xmm0
mov eax, dword [ebp - 0x10c]
push 0x11
divss xmm1, xmm0
movss dword [eax + 0x18], xmm1
mov dword [0x4b6604], esi
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
mov dword [0x4b6600], edi
call esi
mov edi, dword [ebp - 0x10c]
shr eax, 0xf
and al, 1
push 0x10
mov byte [edi + 0xfc], al
call esi
shr eax, 0xf
and al, 1
push 0x12
mov byte [edi + 0xfd], al
call esi
mov ecx, dword [0x4b5f50]
shr eax, 0xf
and al, 1
mov byte [edi + 0xff], 0
mov byte [edi + 0xfe], al
cmp byte [ecx + 0x37b], 0
lea esi, [ecx + 0xe4]
je 0x43b602
cvttss2si eax, dword [esi]
mov dword [ebp - 0x120], eax
cvttss2si eax, dword [ecx + 0xe8]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x120]
push eax
push dword [0x4b65fc]
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
call dword [sym.imp.USER32.dll_SetCursorPos]
mov dword [esi], 0xff7fffff
mov dword [esi + 4], 0xff7fffff
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, dword [0x4b65fc]
jne 0x43b664
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x43b664
lea eax, [ebp - 0x118]
push eax
push dword [0x4b65fc]
call dword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x43b664
movd xmm0, dword [ebp - 0x118]
movd xmm1, dword [ebp - 0x114]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [esi], xmm0
movss dword [esi + 4], xmm1
cmp byte [edi + 0xbc], 0
je 0x43b672
or eax, 0xffffffff
jmp 0x43b67d
mov eax, dword [0x4b5f50]
mov eax, dword [eax + 0x1c58]
cmp dword [0x4af644], eax
je 0x43b68f
mov dword [0x4af644], eax
call fcn.00421ca0
call fcn.00405ca0
cmp byte [0x49a10c], 0
je 0x43b6bd
cmp byte [0x49a10d], 0
je 0x43b6db
push 0x11
push dword [0x4b6090]
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov byte [0x49a10d], 0
jmp 0x43b6db
cmp byte [0x49a10d], 0
jne 0x43b6db
push 0
push dword [0x4b6090]
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov byte [0x49a10d], 1
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x2d
call edi
test al, 1
je 0x43b6ff
cmp byte [0x49a10e], 0
push 1
sete byte [0x49a10e]
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x49a10e], 0
je 0x43b70d
call fcn.00436d80
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0x110]
push 0
push 4
push eax
mov eax, dword [0x4b6150]
add eax, 0xf46f14
push eax
push dword [0x4b60a4]
call esi
push 0
push 4
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [ebp - 0x110]
add eax, 0xfe8
push eax
push dword [0x4b60a4]
call esi
mov esi, dword [ebp - 0x10c]
lea eax, [ebp - 0x110]
push 0
push 4
push eax
lea eax, [esi + 0xe38]
push eax
push dword [0x4b60a4]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [ebp - 0x110]
lea eax, [ebp - 0x134]
push 0
push 4
push eax
lea eax, [esi + 0xe3c]
movss dword [ebp - 0x114], xmm0
push eax
push dword [0x4b60a4]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [ebp - 0x134]
lea eax, [ebp - 0x110]
push 0
push 4
push eax
lea eax, [esi + 0xe40]
movss dword [ebp - 0x124], xmm0
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
push dword [0x4b60a4]
call esi
push 0xff
lea eax, [ebp - 0x108]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [ebp - 0x110]
sub esp, 0xc
mov dword [ebp - 0x150], 0xe89e32b7
mov dword [ebp - 0x14c], 0x205cc5b0
mov dword [ebp - 0x148], 0x3c871669
mov dword [ebp - 0x144], 0xed21ee27
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x140], 0x9c15fbd2
mov dword [ebp - 0x13c], 0x457e6c34
mov dword [ebp - 0x138], 0x93da7eee
mov dword [ebp - 0x134], 0x760714fa
movaps xmm2, xmmword [ebp - 0x140]
mov dword [ebp - 0x170], 0xcda00fef
mov dword [ebp - 0x16c], 0x466feb80
mov dword [ebp - 0x168], 0x1de3604
mov dword [ebp - 0x164], 0xc311cb19
mov dword [ebp - 0x160], 0xbc789de1
mov dword [ebp - 0x15c], 0x6040516e
mov dword [ebp - 0x158], 0xf5e950de
mov dword [ebp - 0x154], 0x76071497
movaps xmmword [ebp - 0x190], xmm1
xorps xmm1, xmmword [ebp - 0x170]
movaps xmmword [ebp - 0x180], xmm2
xorps xmm2, xmmword [ebp - 0x160]
movaps xmmword [ebp - 0x190], xmm1
movaps xmmword [ebp - 0x180], xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp + 0x10], xmm0
lea eax, [ebp - 0x190]
movss xmm0, dword [ebp - 0x124]
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [ebp - 0x114]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00413750
lea eax, [ebp - 0x108]
mov edx, 0x14
push eax
push 0x4af168
mov ecx, 0x258
call fcn.0042e860
movss xmm2, dword [0x48c20c]
add esp, 0x28
cmp byte [0x4b60dd], 0
xorps xmm3, xmm3
je 0x43bb36
mov ecx, dword [0x4af2a8]
movsd xmm1, qword [0x48c2d0]
mov eax, dword [0x4b65a4]
cdq
movd xmm0, ecx
sub eax, edx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
sar eax, 1
mov dword [ebp - 0x114], eax
mov dword [0x4b6098], eax
mov eax, dword [0x4b6154]
cdq
addsd xmm0, qword [ecx*8 + 0x48c5c0]
sub eax, edx
mov edx, dword [0x4b5f50]
sar eax, 1
add edx, 0x1be4
mov dword [ebp - 0x124], eax
mov dword [0x4b5f54], eax
divsd xmm0, xmm1
mov eax, dword [0x4af2ac]
mov dword [ebp - 0x134], edx
cvtpd2ps xmm4, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x48c5c0]
mov eax, dword [0x4af2b0]
divsd xmm0, xmm1
cvtpd2ps xmm5, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x48c5c0]
mov eax, dword [0x4af2b4]
divsd xmm0, xmm1
cvtpd2ps xmm6, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
comiss xmm3, xmm4
addsd xmm0, qword [eax*8 + 0x48c5c0]
divsd xmm0, xmm1
cvtpd2ps xmm7, xmm0
jbe 0x43ba0e
xorps xmm0, xmm0
jmp 0x43ba15
movaps xmm0, xmm2
minss xmm0, xmm4
comiss xmm3, xmm5
movss xmm4, dword [0x48c408]
movss xmm1, dword [0x48c1e8]
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si ecx, xmm0
jbe 0x43ba3b
xorps xmm0, xmm0
jmp 0x43ba42
movaps xmm0, xmm2
minss xmm0, xmm5
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm6
jbe 0x43ba5d
xorps xmm0, xmm0
jmp 0x43ba64
movaps xmm0, xmm2
minss xmm0, xmm6
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm7
jbe 0x43ba7f
xorps xmm2, xmm2
jmp 0x43ba83
minss xmm2, xmm7
movd xmm0, dword [ebp - 0x114]
mulss xmm2, xmm4
cvtdq2ps xmm0, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x120], xmm0
movd xmm0, dword [ebp - 0x124]
cvtdq2ps xmm0, xmm0
cvttss2si esi, xmm2
movss dword [ebp - 0x11c], xmm0
shl esi, 0x18
or esi, ecx
test esi, 0xff000000
je 0x43bb30
movd xmm2, dword [0x4af518]
lea eax, [ebp - 0x120]
cvtdq2ps xmm2, xmm2
push 0xff
push ecx
mov dword [esp], 0x40c84601
mov ecx, edx
push eax
subss xmm2, xmm1
call fcn.0041d120
mov ecx, dword [ebp - 0x134]
push ecx
mov dword [esp], 0x3f800000
push 1
push esi
push dword [ecx + 0x54]
lea esi, [ecx + 0x54]
push dword [ecx + 0x5c]
call fcn.0041bff0
mov ecx, dword [esi + 4]
test ecx, ecx
jns 0x43bb2a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.00413230
mov dword [esi], 0
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
call fcn.00434bd0
cmp byte [0x4b60b7], 0
je 0x43bb5e
push 0x56
call edi
test ax, ax
je 0x43bb5e
call fcn.0042ef90
mov dword [ebp - 0x10c], 0x90909090
jmp 0x43bb6d
call fcn.0042ef90
mov dword [ebp - 0x10c], 0xe1580ff3
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea ecx, [ebp - 0x10c]
push 0
push 4
push ecx
add eax, 0x17121
push eax
push dword [0x4b60a4]
call edi
call fcn.004335f0
push 0
push 4
lea eax, [ebp - 0x114]
push eax
mov eax, dword [0x4b6150]
add eax, 0xc33034
push eax
push dword [0x4b60a4]
call esi
push 0
push 4
lea eax, [ebp - 0x124]
push eax
mov eax, dword [ebp - 0x114]
add eax, 0x14
push eax
push dword [0x4b60a4]
call esi
push 0
push 4
lea eax, [ebp - 0x114]
push eax
mov eax, dword [ebp - 0x124]
add eax, 0x3c
push eax
push dword [0x4b60a4]
call esi
push 0
push 4
lea eax, [ebp - 0x124]
push eax
push dword [ebp - 0x114]
push dword [0x4b60a4]
call esi
mov esi, dword [ebp - 0x124]
lea eax, [ebp - 0x120]
push 0
push 8
push eax
lea eax, [esi + 0x1a8]
push eax
push dword [0x4b60a4]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 8
lea ecx, [ebp - 0x118]
lea eax, [esi + 0x1b0]
push ecx
push eax
push dword [0x4b60a4]
mov dword [ebp - 0x10c], eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [ebp - 0x118]
lea eax, [ebp - 0x138]
push 0
push 8
push eax
lea eax, [esi + 0x1b8]
movsd qword [ebp - 0x120], xmm0
push eax
push dword [0x4b60a4]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x4b612e], 0
movss xmm0, dword [0x4b60c4]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [ebp - 0x120]
movsd qword [ebp - 0x118], xmm0
je 0x43bcdc
push 0x47
call esi
test ax, ax
je 0x43bcdc
movsd xmm0, qword [ebp - 0x120]
lea eax, [ebp - 0x120]
addsd xmm0, qword [0x48c2d8]
push 0
push 8
push eax
push dword [ebp - 0x10c]
movsd qword [ebp - 0x120], xmm0
push dword [0x4b60a4]
call edi
cmp byte [0x4b60c0], 0
je 0x43bd17
push 0x48
call esi
test ax, ax
je 0x43bd17
movsd xmm0, qword [ebp - 0x118]
lea eax, [ebp - 0x120]
push 0
push 8
push eax
push dword [ebp - 0x10c]
movsd qword [ebp - 0x120], xmm0
push dword [0x4b60a4]
call edi
call fcn.00434a20
cmp byte [0x4b6061], 0
push 0
push 1
je 0x43bd38
mov byte [ebp - 0x129], 1
lea eax, [ebp - 0x129]
jmp 0x43bd45
mov byte [ebp - 0x12a], 0
lea eax, [ebp - 0x12a]
push eax
mov eax, dword [0x4b6150]
add eax, 0x43dc2a
push eax
push dword [0x4b60a4]
call edi
cmp byte [0x4b6119], 0
push 0
push 1
je 0x43bd75
mov byte [ebp - 0x12b], 1
lea eax, [ebp - 0x12b]
jmp 0x43bd82
mov byte [ebp - 0x12c], 0
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [0x4b6150]
add eax, 0x440162
push eax
push dword [0x4b60a4]
call edi
cmp byte [0x4b60b6], 0
push 0
push 4
je 0x43bdb5
mov dword [ebp - 0x114], 0x46c73800
lea eax, [ebp - 0x114]
jmp 0x43bdc5
mov dword [ebp - 0x124], 0x437f0000
lea eax, [ebp - 0x124]
push eax
mov eax, dword [0x4b6150]
add eax, 0xa1904c
push eax
push dword [0x4b60a4]
call edi
cmp byte [0x4b60ad], 0
je 0x43be0a
push 0
push 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0x42960000
push eax
mov eax, dword [0x4b6150]
add eax, 0xdfb0
push eax
push dword [0x4b60a4]
call edi
cmp byte [0x4b612c], 0
je 0x43be3b
push 0
push 4
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0x3f99999a
push eax
mov eax, dword [0x4b613c]
add eax, 0xdf00
push eax
push dword [0x4b60a4]
call edi
cmp byte [0x4b611b], 0
push 0
push 4
je 0x43be60
movss xmm0, dword [0x49a354]
lea eax, [ebp - 0x10c]
movss dword [ebp - 0x10c], xmm0
jmp 0x43be70
mov dword [ebp - 0x11c], 0x3fe66666
lea eax, [ebp - 0x11c]
push eax
mov eax, dword [0x4b613c]
add eax, 0xdfd4
push eax
push dword [0x4b60a4]
call edi
cmp byte [0x4b60df], 0
je 0x43bebe
push 0x20
call esi
test ax, ax
je 0x43bebe
push 0
push 4
lea eax, [ebp - 0x114]
mov dword [ebp - 0x114], 0x41880000
push eax
mov eax, dword [0x4b613c]
add eax, 0xe980
push eax
push dword [0x4b60a4]
call edi
push 0
push 4
lea eax, [ebp - 0x124]
mov dword [ebp - 0x124], 0xc22a0000
push eax
mov eax, dword [0x4b613c]
add eax, 0xdcd0
cmp byte [0x4b6118], 0
push eax
push dword [0x4b60a4]
jne 0x43bef7
mov dword [ebp - 0x124], 0
call edi
call fcn.00433c10
call fcn.00406e00
mov eax, dword [0x4b6130]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4b6130]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4b6130]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4b6130]
push 0
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push 0
push 1
push 0
push 0
push eax
call dword [ecx + 0xac]
mov eax, dword [0x4b6130]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x43bf99
call fcn.00407230
mov ecx, dword [0x4b5f50]
xor eax, eax
add ecx, 0x1ba4
cmp byte [ecx], al
cmove ecx, eax
call fcn.00421250
mov eax, dword [0x4b6130]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x4b6130]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x43c056
mov eax, dword [0x4b6130]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x43c056
cmp dword [0x4b65f4], 0
je 0x43c038
mov ecx, dword [0x4b65f8]
test ecx, ecx
je 0x43bff1
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4b65f8], 0
mov ecx, dword [0x4b65f0]
test ecx, ecx
je 0x43c00b
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4b65f0], 0
mov ecx, dword [0x4b65ec]
mov esi, dword [0x4b5f50]
test ecx, ecx
je 0x43c021
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4b65ec], 0
mov eax, dword [esi + 0x94]
mov dword [eax + 8], 0
mov eax, dword [0x4b6130]
push 0x4b60e0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
cmp dword [0x4b65f4], 0
je 0x43c056
call fcn.00421aa0
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.00478b79
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret