Function at 0x4199d2
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov dword [ebp - 0xc], 0
call fcn.004aba60
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 0xc8
mov dword [ebp - 0x14], 0x96
mov eax, dword [0xb40414]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
call fcn.00491a9a
sub esp, 4
mov dword [ebp - 0x24], eax
mov eax, dword [0xb40414]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call fcn.004915dc
sub esp, 4
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov edx, eax
shr edx, 0x1f
add eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [ebp - 0x24]
add edx, eax
mov eax, dword [ebp - 0x10]
mov ecx, eax
shr ecx, 0x1f
add eax, ecx
sar eax, 1
neg eax
add eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [0xb40414]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [esp], eax
call fcn.00491b09
sub esp, 4
mov dword [ebp - 0x34], eax
mov eax, dword [0xb40414]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
call fcn.00491cc1
sub esp, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov edx, eax
shr edx, 0x1f
add eax, edx
sar eax, 1
mov edx, eax
mov eax, dword [ebp - 0x34]
add edx, eax
mov eax, dword [ebp - 0x14]
mov ecx, eax
shr ecx, 0x1f
add eax, ecx
sar eax, 1
neg eax
add eax, edx
mov dword [ebp - 0x1c], eax
mov eax, dword [0xb40150]
mov dword [ebp - 0x40], eax
mov dword [esp + 0x18], reloc.WS2_32.dll_connect
mov eax, dword [ebp - 0x40]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], eax
mov dword [esp], 0
call fcn.004915ea
sub esp, 0x1c
mov dword [ebp - 0x44], eax
mov dword [esp], 0xa
call fcn.004a225c
sub esp, 4
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x1a
mov dword [esp + 0xc], 0xaa
mov dword [esp + 8], 0xf
mov dword [esp + 4], 0xf
mov dword [esp], 6
call fcn.0048c568
sub esp, 0x18
mov dword [ebp - 0x4c], eax
mov dword [esp], 8
call fcn.004a225c
sub esp, 4
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x1a
mov dword [esp + 0xc], 0xaa
mov dword [esp + 8], 0x2d
mov dword [esp + 4], 0xf
mov dword [esp], 4
call fcn.0048c568
sub esp, 0x18
mov dword [ebp - 0x54], eax
mov dword [esp], 9
call fcn.004a225c
sub esp, 4
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x1a
mov dword [esp + 0xc], 0xaa
mov dword [esp + 8], 0x4b
mov dword [esp + 4], 0xf
mov dword [esp], 5
call fcn.0048c568
sub esp, 0x18
mov dword [ebp - 0x5c], eax
mov eax, dword [0xb403f8]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xaa
mov dword [esp + 8], 0x78
mov dword [esp + 4], 0xf
mov dword [esp], 7
call fcn.0048ad78
sub esp, 0x18
mov dword [ebp - 0x64], eax
call fcn.00439c40
mov dword [ebp - 0x68], eax
call fcn.00491b17
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp + 8], eax
cmp dword [ebp + 8], 0
je 0x419cef
call fcn.00494ce6
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jne 0x419ce9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x332c
jne 0x419cec
call fcn.00494cf5
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 6
jne 0x419c9d
mov dword [esp], str.https:__msfree.su_donaties_donations.html
call fcn.00485c19
sub esp, 4
mov dword [ebp - 0x8c], eax
jmp 0x419d92
cmp dword [ebp - 0x80], 4
jne 0x419cbd
mov dword [esp], str.https:__msfree.su_donaties_donations.html
call fcn.00485c19
sub esp, 4
mov dword [ebp - 0x88], eax
jmp 0x419d92
cmp dword [ebp - 0x80], 5
jne 0x419cdd
mov dword [esp], str.https:__msfree.su_donaties_donations.html
call fcn.00485c19
sub esp, 4
mov dword [ebp - 0x84], eax
jmp 0x419d92
cmp dword [ebp - 0x80], 7
je 0x419d91
jmp 0x419ced
nop
jmp 0x419d05
nop
jmp 0x419d05
nop
mov dword [esp], 0
call fcn.00491ccf
sub esp, 4
mov dword [ebp - 0x90], eax
mov dword [esp], 0x1b
call sub.USER32.dll_GetKeyState
sub esp, 4
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jle 0x419d44
call fcn.00491ced
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x419d47
call fcn.00439c40
mov dword [ebp - 0x9c], eax
jmp 0x419d92
nop
jmp 0x419d48
nop
mov dword [esp], 0xd
call sub.USER32.dll_GetKeyState
sub esp, 4
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jle 0x419d87
call fcn.00491ced
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jne 0x419d8a
call fcn.00439c40
mov dword [ebp - 0xa8], eax
jmp 0x419d92
nop
jmp 0x419d8b
nop
nop
jmp 0x419c30
nop
mov dword [esp], 0
call fcn.00491d2f
sub esp, 4
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 0xc]
leave
ret 4