Function at 0x41dcf3
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
push edi
mov edx, 7
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x41dcfa
call fcn.00487690
mov edx, dword [esp + 0x28]
lea ecx, [esp]
call fcn.00442000
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 4]
call fcn.00442000
mov dword [esp + 8], 0x1a4
mov dword [esp + 0xc], 0xa0
push dword [0xa62a24]
call fcn.0046b7d7
mov ebx, eax
push dword [0xa62a24]
call fcn.0046bbe7
mov edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
mov edi, dword [esp + 8]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
mov dword [esp + 0x10], ebx
push dword [0xa62a24]
call fcn.0046b846
mov ebx, eax
push dword [0xa62a24]
call fcn.0046c065
mov edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
mov edi, dword [esp + 0xc]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
mov dword [esp + 0x14], ebx
push edx
call fcn.004874f0
pop edx
push eax
push reloc.WS2_32.dll_connect
mov edx, dword [0xa628f0]
push edx
call fcn.004874f0
pop edx
push eax
push edx
call fcn.00487530
mov edx, dword [esp + 0xc]
push edx
call fcn.00487530
call fcn.00487620
push dword [esp + 0x18]
push dword [esp + 0x18]
push dword [esp + 0x28]
push dword [esp + 0x28]
push 1
call fcn.004426b2
add dword [esp + 0x14], edx
call fcn.0046bbf5
call fcn.004426d0
push dword [esp + 4]
push 0x50
push 0x17c
push 0xa
push 0xf
push 3
call fcn.00467a1b
push dword [0xa6282c]
push 0x1e
push 0x14a
push 0x6e
push 0x2d
push 7
call fcn.0046504d
call fcn.0042c354
call fcn.0046bae6
mov dword [esp + 0x18], eax
cmp dword [esp + 0x18], 0
je 0x41df40
call fcn.0046f044
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x41df3d
push dword [esp + 0x1c]
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x41df3c
call fcn.0046f026
push eax
mov ebx, 7
cmp ebx, dword [esp]
jne 0x41df3b
push dword [esp + 0xc]
mov edx, str.0xC004F074
pop ecx
call fcn.00442660
je 0x41dec0
mov eax, str.https:__msfree.su_viewtopic.php_p55p55
push eax
call fcn.0045f235
jmp 0x41df36
push dword [esp + 0xc]
mov edx, str.0xC004F035
pop ecx
call fcn.00442660
je 0x41dede
mov eax, str.https:__msfree.su_viewtopic.php_p56p56
push eax
call fcn.0045f235
jmp 0x41df36
push dword [esp + 0xc]
mov edx, str.0xC004E015
pop ecx
call fcn.00442660
je 0x41defc
mov eax, str.https:__msfree.su_viewtopic.php_p57p57
push eax
call fcn.0045f235
jmp 0x41df36
push dword [esp + 0xc]
mov edx, str.0x80040154
pop ecx
call fcn.00442660
je 0x41df1a
mov eax, str.https:__msfree.su_viewtopic.php_p58p58
push eax
call fcn.0045f235
jmp 0x41df36
push dword [esp + 0xc]
mov edx, str.0xC004F038
pop ecx
call fcn.00442660
je 0x41df36
mov eax, str.https:__msfree.su_viewtopic.php_p65p65
push eax
call fcn.0045f235
add esp, 0xc
jmp 0x41df97
pop eax
pop eax
pop eax
jmp 0x41df4a
push 1
call fcn.0046c073
push 0x1b
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x41df6e
call fcn.0046c091
mov ebx, eax
cmp ebx, 1
jne 0x41df6e
call fcn.0042c354
jmp 0x41df97
push 0xd
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x41df92
call fcn.0046c091
mov ebx, eax
cmp ebx, 1
jne 0x41df92
call fcn.0042c354
jmp 0x41df97
jmp 0x41de54
push 1
call fcn.0046b487
xor eax, eax
push dword [esp]
call fcn.004876f0
push dword [esp + 4]
call fcn.004876f0
add esp, 0x1c
pop edi
pop ebx
ret 8