Function at 0x4147f8
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov edx, 0xb
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4147fe
mov eax, dword [esp + 0x44]
mov dword [0x46d924], eax
mov edx, dword [esp + 0x38]
lea ecx, [esp]
call fcn.00416000
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 4]
call fcn.00416000
mov edx, dword [esp + 0x40]
lea ecx, [esp + 8]
call fcn.00416000
mov ebx, dword [esp + 0x34]
and ebx, ebx
je 0x41484b
call fcn.004235ef
mov dword [esp + 0xc], eax
push 0xc80001
push dword [esp + 4]
push 0x142
push 0x16f
push 0
push 0
push 0x3e7
call fcn.004220dc
mov dword [esp + 0x10], eax
push dword [esp + 4]
push 0x18
push 0x109
push 3
push 0xa
push 0x3e3
call fcn.00420a58
mov eax, str.___Name_entfernt_ihn__
push eax
push 0x18
push 0x109
push 0x1a
push 0xa
push 0x3e4
call fcn.00420a58
push 1
mov eax, 0x46038e
push eax
push 0x21
push 0x50
push 0x34
push 0x116
push 0x3e5
call fcn.0041f7f2
mov eax, str.Abbrechen
push eax
push 0x21
push 0x50
push 0x60
push 0x116
push 0x3e6
call fcn.0041f8d7
push 0x44
push dword [esp + 0xc]
push 0x106
push 0x104
push 0x34
push 9
push 0x3e7
call fcn.00420434
push 0x3e7
call fcn.0041f91a
push eax
call sub.COMCTL32.DLL_InitializeFlatSB
push 1
push 2
push 0x100
push 0x3e7
call fcn.0041f91a
push eax
call sub.COMCTL32.DLL_FlatSB_SetScrollProp
push 1
push 1
push 0x3e7
call fcn.0041f91a
push eax
call sub.COMCTL32.DLL_FlatSB_ShowScrollBar
push 0
push 0
push 0xb1
push 0x3e7
call fcn.0041f91a
push eax
call sub.USER32.DLL_SendMessageW
mov ebx, dword [esp + 0x34]
and ebx, ebx
je 0x4149ae
push 0
push dword [esp + 0x38]
call sub.USER32.DLL_EnableWindow
push 3
push 0
push 0
push 0
push 0
push 0xffffffff
push 0x3e7
call fcn.00422452
push eax
call sub.USER32.DLL_SetWindowPos
push 0xd
call sub.USER32.DLL_GetAsyncKeyState
push 0x1b
call sub.USER32.DLL_GetAsyncKeyState
push 0x3e7
call fcn.00422452
push eax
call sub.USER32.DLL_SetForegroundWindow
push 0x3e7
call fcn.0041fdc0
push 0x20
call sub.USER32.DLL_MessageBeep
push 1
call sub.KERNEL32.dll_Sleep
call fcn.0042269e
mov dword [esp + 0x14], eax
call fcn.004235d1
mov dword [esp + 0x18], eax
call sub.USER32.DLL_GetForegroundWindow
mov dword [esp + 0x1c], eax
push 0xd
call sub.USER32.DLL_GetAsyncKeyState
mov dword [esp + 0x20], eax
push 0x1b
call sub.USER32.DLL_GetAsyncKeyState
mov dword [esp + 0x24], eax
mov ebx, dword [esp + 0x1c]
cmp ebx, dword [esp + 0x10]
jne 0x414ad9
mov ebx, dword [esp + 0x14]
cmp ebx, 0x332c
jne 0x414a99
mov ebx, dword [esp + 0x18]
cmp ebx, 0x3e5
je 0x414a85
mov ebx, dword [esp + 0x18]
cmp ebx, 0x3e6
je 0x414a85
jmp 0x414a8c
mov eax, 1
jmp 0x414a8e
xor eax, eax
and eax, eax
je 0x414a99
mov eax, 1
jmp 0x414a9b
xor eax, eax
and eax, eax
jne 0x414ac5
mov ebx, dword [esp + 0x20]
cmp ebx, 0xffff8001
je 0x414ac5
mov ebx, dword [esp + 0x24]
cmp ebx, 0xffff8001
je 0x414ac5
mov ebx, dword [esp + 0x14]
cmp ebx, 0x333c
je 0x414ac5
jmp 0x414acc
mov eax, 1
jmp 0x414ace
xor eax, eax
and eax, eax
je 0x414ad9
mov eax, 1
jmp 0x414adb
xor eax, eax
and eax, eax
je 0x414a14
mov ebx, dword [esp + 0x18]
cmp ebx, 0x3e5
je 0x414afd
mov ebx, dword [esp + 0x20]
cmp ebx, 0xffff8001
je 0x414afd
jmp 0x414b04
mov eax, 1
jmp 0x414b06
xor eax, eax
and eax, eax
je 0x414b2a
push dword [0x46d924]
push dword [0x46d924]
push 0x3e7
call fcn.004206fb
lea eax, [esp + 0x2c]
push eax
call fcn.0042baa0
push 0x3e7
call fcn.00421fd4
mov ebx, dword [esp + 0x34]
and ebx, ebx
je 0x414b5e
push 1
push dword [esp + 0x38]
call sub.USER32.DLL_EnableWindow
push dword [esp + 0x34]
call sub.USER32.DLL_SetForegroundWindow
call fcn.0042269e
and eax, eax
je 0x414b5e
jmp 0x414b53
mov edx, dword [esp + 0x28]
push dword [0x46d924]
push edx
call fcn.0042bb20
pop eax
add eax, dword [0x4699d0]
jmp 0x414b87
push dword [esp]
call fcn.0042bb80
push dword [esp + 4]
call fcn.0042bb80
push dword [esp + 8]
call fcn.0042bb80
push dword [esp + 0x28]
call fcn.0042bb80
add esp, 0x2c
pop ebx
ret 0x10