Function at 0x419616
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
push edi
mov edx, 7
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x41961d
call fcn.00486110
mov edx, dword [esp + 0x28]
lea ecx, [esp]
call fcn.00441000
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 4]
call fcn.00441000
mov dword [esp + 8], 0x1a4
mov dword [esp + 0xc], 0xa0
push dword [0xb2cb18]
call fcn.0046aba9
mov ebx, eax
push dword [0xb2cb18]
call fcn.0046afb9
mov edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
mov edi, dword [esp + 8]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
mov dword [esp + 0x10], ebx
push dword [0xb2cb18]
call fcn.0046ac18
mov ebx, eax
push dword [0xb2cb18]
call fcn.0046b437
mov edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
mov edi, dword [esp + 0xc]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
mov dword [esp + 0x14], ebx
push edx
call fcn.00485f70
pop edx
push eax
push reloc.WS2_32.dll_connect
mov edx, dword [0xb2c9d8]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, dword [esp + 0xc]
push edx
call fcn.00485fb0
call fcn.004860a0
push dword [esp + 0x18]
push dword [esp + 0x18]
push dword [esp + 0x28]
push dword [esp + 0x28]
push 1
call fcn.004416b2
add dword [esp + 0x14], edx
call fcn.0046afc7
call fcn.004416d0
push dword [esp + 4]
push 0x50
push 0x17c
push 0xa
push 0xf
push 3
call fcn.00466ca2
push dword [0xb2c90c]
push 0x1e
push 0x14a
push 0x6e
push 0x2d
push 7
call fcn.00464291
call fcn.00429bef
call fcn.0046aeb8
mov dword [esp + 0x18], eax
cmp dword [esp + 0x18], 0
je 0x419863
call fcn.0046e3a4
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x419860
push dword [esp + 0x1c]
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x41985f
call fcn.0046e386
push eax
mov ebx, 7
cmp ebx, dword [esp]
jne 0x41985e
push dword [esp + 0xc]
mov edx, str.0xC004F074
pop ecx
call fcn.00441660
je 0x4197e3
mov eax, str.https:__msfree.su_index.php_threads_514_
push eax
call fcn.0045e24c
jmp 0x419859
push dword [esp + 0xc]
mov edx, str.0xC004F035
pop ecx
call fcn.00441660
je 0x419801
mov eax, str.https:__msfree.su_index.php_threads_515_
push eax
call fcn.0045e24c
jmp 0x419859
push dword [esp + 0xc]
mov edx, str.0xC004E015
pop ecx
call fcn.00441660
je 0x41981f
mov eax, 0x574190
push eax
call fcn.0045e24c
jmp 0x419859
push dword [esp + 0xc]
mov edx, str.0x80040154
pop ecx
call fcn.00441660
je 0x41983d
mov eax, str.https:__msfree.su_index.php_threads_517_
push eax
call fcn.0045e24c
jmp 0x419859
push dword [esp + 0xc]
mov edx, str.0xC004F038
pop ecx
call fcn.00441660
je 0x419859
mov eax, str.https:__msfree.su_index.php_threads_519_
push eax
call fcn.0045e24c
add esp, 0xc
jmp 0x4198ba
pop eax
pop eax
pop eax
jmp 0x41986d
push 1
call fcn.0046b445
push 0x1b
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x419891
call fcn.0046b463
mov ebx, eax
cmp ebx, 1
jne 0x419891
call fcn.00429bef
jmp 0x4198ba
push 0xd
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x4198b5
call fcn.0046b463
mov ebx, eax
cmp ebx, 1
jne 0x4198b5
call fcn.00429bef
jmp 0x4198ba
jmp 0x419777
push 1
call fcn.0046a837
xor eax, eax
push dword [esp]
call fcn.00486170
push dword [esp + 4]
call fcn.00486170
add esp, 0x1c
pop edi
pop ebx
ret 8