Function at 0x59c963
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov dword [ebp - 0xc], 0xcccccccc
mov dword [ebp - 8], 0xcccccccc
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], ecx
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x20a
jne 0x59c8da
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x80]
call fcn.00407dc0
test eax, eax
je 0x59c8da
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.004211a0
test eax, eax
je 0x59c8da
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.00423020
mov eax, 1
jmp 0x59cbff
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0x100
jne case.0x59ca7b.1
mov esi, esp
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
cmp esi, esp
call fcn.00710bc0
movsx edx, ax
test edx, edx
jl case.0x59c95c.1
mov esi, esp
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
cmp esi, esp
call fcn.00710bc0
cwde
test eax, eax
jl case.0x59c95c.1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x80]
call fcn.00407dc0
test eax, eax
je case.0x59c95c.1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0xd
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x1b
ja case.0x59c95c.1
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x59cc1c]
jmp dword [eax*4 + 0x59cc10]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.004211a0
test eax, eax
jne case.0x59c95c.0
jmp case.0x59c95c.1
mov ecx, dword [ebp - 4]
call fcn.004266b0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.004211a0
test eax, eax
je 0x59c9ce
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.00423020
jmp 0x59ca4b
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.00421860
test eax, eax
je 0x59ca4b
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x80]
add eax, 0xb8
push eax
mov ecx, dword [ebp - 4]
call fcn.00412540
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.004201f0
push eax
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x80]
mov ecx, dword [eax + 0x20]
and ecx, 0xffff
movzx edx, cx
push edx
push 0x111
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.00421860
mov ecx, eax
call fcn.00422cf0
mov eax, 1
jmp 0x59cbff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 9
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x1f
ja case.0x59ca7b.1
mov ecx, dword [ebp - 0xc]
movzx edx, byte [ecx + 0x59cc48]
jmp dword [edx*4 + 0x59cc38]
mov ecx, dword [ebp - 4]
call fcn.004218b0
test eax, eax
je 0x59cacc
push 0x5c4
push str.d:_agent_work3_s_src_vctools_vc7libs_ship_atlmfc_srcmfc_afxtoolbarcomboboxbutton.cpp
mov ecx, dword [ebp - 4]
call fcn.004218b0
push eax
call fcn.0044ed60
push 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 4]
call fcn.004218b0
mov ecx, eax
call fcn.00421770
mov ecx, eax
call fcn.004266b0
mov eax, 1
jmp 0x59cbff
jmp case.0x59ca7b.1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x80]
call fcn.00407dc0
test eax, eax
je 0x59cafa
push 0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.00423d50
mov ecx, dword [ebp - 4]
call fcn.00412230
test eax, eax
je 0x59cb1f
mov ecx, dword [ebp - 4]
call fcn.00412230
mov ecx, eax
call fcn.004266b0
mov eax, 1
jmp 0x59cbff
jmp case.0x59ca7b.1
mov esi, esp
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
cmp esi, esp
call fcn.00710bc0
cwde
test eax, eax
jl case.0x59ca7b.1
mov esi, esp
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
cmp esi, esp
call fcn.00710bc0
movsx ecx, ax
test ecx, ecx
jl case.0x59ca7b.1
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x80]
call fcn.00407dc0
test eax, eax
je case.0x59ca7b.1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.004211a0
test eax, eax
jne 0x59cbec
push 1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.00423d50
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.004218b0
test eax, eax
je 0x59cbec
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x80]
add ecx, 0x90
call fcn.00408500
push eax
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x80]
call fcn.00407dc0
mov ecx, eax
call fcn.004218b0
mov ecx, eax
call fcn.00422330
mov eax, 1
jmp 0x59cbff
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 4]
call fcn.00417d90
pop esi
add esp, 0xc
cmp ebp, esp
call fcn.00710bc0
mov esp, ebp
pop ebp
ret 4