Function at 0x58a3b0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xc8]
mov esi, dword [edi + 4]
mov ebx, ecx
cmp esi, 0x200
je 0x58a3fa
cmp esi, 0xa0
je 0x58a3fa
cmp esi, 0x2a3
je 0x58a3fa
cmp esi, 0x202
je 0x58a3fa
cmp esi, 0x205
je 0x58a3fa
cmp esi, 0x208
jne 0x58aa0c
mov ebp, dword [sym.imp.USER32.dll_GetKeyState]
push 1
call ebp
test ax, ax
jl 0x58aa0c
push 2
call ebp
test ax, ax
jl 0x58aa0c
push 4
call ebp
test ax, ax
jl 0x58aa0c
cmp dword [esp + 0xcc], 0
mov edi, dword [esp + 0xc4]
mov ebp, 0x401
jne 0x58a473
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
push ecx
call sub.mfc90u.dll_CWnd::FromHandle
test eax, eax
je 0x58a46b
mov esi, dword [sym.imp.USER32.dll_GetParent]
test dword [eax + 0x3c], ebp
jne 0x58a46b
mov edx, dword [eax + 0x20]
push edx
call esi
push eax
call sub.mfc90u.dll_CWnd::FromHandle
test eax, eax
jne 0x58a456
cmp eax, edi
jne 0x58aad7
test edi, edi
jne 0x58a47b
xor eax, eax
jmp 0x58a47e
mov eax, dword [edi + 0x20]
push eax
call fcn.0055c790
mov esi, eax
mov eax, dword [ebx + 0x60]
add esp, 4
mov dword [esp + 0x44], esi
test eax, eax
je 0x58a4c9
cmp dword [eax + 0x20], 0
je 0x58a4c9
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x58a4c9
test esi, esi
jne 0x58a4c9
mov ecx, dword [ebx + 0x60]
mov edx, dword [ecx + 0x20]
push esi
push esi
push ebp
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret 0xc
mov ecx, edi
call sub.mfc90u.dll_CWnd::GetParentOwner
mov ecx, dword [ebx + 0x60]
mov esi, eax
test ecx, ecx
je 0x58a4ec
call fcn.0051a770
cmp eax, esi
je 0x58a4ec
mov ecx, dword [ebx + 0x60]
mov eax, dword [ecx]
mov edx, dword [eax + 0x68]
call edx
mov eax, dword [ebx + 0x60]
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x58a507
cmp dword [eax + 0x20], 0
jne 0x58a668
test eax, eax
jne 0x58a514
mov eax, dword [ebx]
mov edx, dword [eax + 0x58]
push esi
mov ecx, ebx
call edx
mov dword [ebx + 0x60], eax
mov eax, dword [ebx + 0x60]
test eax, eax
je 0x58aad7
cmp dword [eax + 0x20], 0
jne 0x58a584
push eax
call fcn.005874e0
push eax
call sub.mfc90u.dll_AfxDynamicDownCast
mov ecx, dword [ebx + 0x60]
add esp, 8
test eax, eax
je 0x58a54a
mov eax, dword [ebx + 0x40]
or eax, 3
push eax
push esi
call fcn.00587c60
jmp 0x58a584
push ecx
call sub.mfc90u.dll_CToolTipCtrl::GetThisClass
push eax
call sub.mfc90u.dll_AfxDynamicDownCast
add esp, 8
test eax, eax
je 0x58aad7
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x60]
mov edx, dword [ecx]
mov edx, dword [edx + 0x144]
dec eax
neg eax
sbb eax, eax
and eax, 0xffffffc0
add eax, 0x40
or eax, dword [ebx + 0x40]
or eax, 3
push eax
push esi
call edx
mov ecx, dword [ebx + 0x60]
test ecx, ecx
je 0x58aad7
cmp dword [ecx + 0x20], 0
je 0x58aad7
push 1
lea eax, [ebx + 0x98]
push eax
call fcn.0044f1e0
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ebx + 0x60]
mov eax, dword [edx + 0x20]
push ecx
push 0
push 0x418
push eax
call ebp
mov edx, dword [ebx + 0x60]
mov eax, dword [edx + 0x20]
lea ecx, [ebx + 0x44]
push ecx
push 0
push 0x41a
push eax
call ebp
mov eax, dword [ebx + 0x90]
or esi, 0xffffffff
cmp eax, esi
je 0x58a5ed
mov ecx, dword [ebx + 0x60]
mov edx, dword [ecx + 0x20]
push 0
push eax
push 0x413
push edx
call ebp
mov eax, dword [ebx + 0x94]
cmp eax, esi
je 0x58a608
push 0
push eax
mov eax, dword [ebx + 0x60]
mov ecx, dword [eax + 0x20]
push 0x414
push ecx
call ebp
cmp dword [ebx + 0x58], esi
je 0x58a622
movzx edx, word [ebx + 0x58]
mov eax, dword [ebx + 0x60]
mov ecx, dword [eax + 0x20]
push edx
push 1
push 0x403
push ecx
call ebp
cmp dword [ebx + 0x54], esi
je 0x58a63c
movzx edx, word [ebx + 0x54]
mov eax, dword [ebx + 0x60]
mov ecx, dword [eax + 0x20]
push edx
push 3
push 0x403
push ecx
call ebp
cmp dword [ebx + 0x5c], esi
je 0x58a656
movzx edx, word [ebx + 0x5c]
mov eax, dword [ebx + 0x60]
mov ecx, dword [eax + 0x20]
push edx
push 2
push 0x403
push ecx
call ebp
mov edx, dword [ebx + 0x60]
mov eax, dword [edx + 0x20]
push 0
push 0
push 0x401
push eax
call ebp
mov ebp, dword [ebx + 0x60]
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], ecx
mov ecx, dword [edi + 0x20]
push eax
push ecx
mov dword [esp + 0x28], edx
call dword [sym.imp.USER32.dll_ScreenToClient]
push 0x2c
lea edx, [esp + 0x4c]
push 0
push edx
call sub.MSVCR90.dll_memset
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x58a6d6
cmp dword [ebx + 0x24], 0
mov dword [esp + 0x48], 0x28
je 0x58a6de
mov dword [esp + 0x48], 0x2c
mov ecx, dword [esp + 0x20]
mov edx, dword [ebx]
mov edx, dword [edx + 0x5c]
lea eax, [esp + 0x24]
mov dword [esp + 0x70], eax
lea eax, [esp + 0x48]
push eax
mov eax, dword [esp + 0x20]
push ecx
push eax
push edi
mov ecx, ebx
call edx
cmp dword [ebx + 0x20], 0
mov dword [esp + 0x10], eax
je 0x58a761
mov esi, dword [esp + 0x24]
test esi, esi
je 0x58a761
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x58a761
mov eax, esi
jmp 0x58a720
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x58a746
test dx, dx
je 0x58a742
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x58a746
add eax, 4
add ecx, 4
test dx, dx
jne 0x58a720
xor eax, eax
jmp 0x58a74b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x58a761
push esi
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
mov dword [esp + 0x24], 0
test byte [ebx + 0x40], 2
jne 0x58a781
mov eax, dword [esp + 0x6c]
push eax
call fcn.0055c020
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 4]
push edx
call fcn.0055c020
add esp, 8
mov eax, dword [ebx + 0x70]
cmp eax, dword [esp + 0x54]
jne 0x58a7f0
mov ecx, dword [ebx + 0x6c]
cmp ecx, dword [esp + 0x50]
jne 0x58a7f0
mov esi, dword [sym.imp.USER32.dll_CopyRect]
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x88]
xor edi, edi
push eax
mov dword [esp + 0x1c], edi
call esi
lea ecx, [ebx + 0x74]
push ecx
lea edx, [esp + 0x78]
push edx
call esi
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x78]
push ecx
call dword [sym.imp.USER32.dll_EqualRect]
test eax, eax
je 0x58a7f9
cmp dword [esp + 0x10], 0xffffffff
je 0x58a9bd
mov edx, dword [esp + 0xc8]
push edx
push ebp
mov ecx, ebx
call fcn.00589b80
jmp 0x58a9bd
mov edi, 1
mov dword [esp + 0x14], edi
cmp dword [ebx + 0x64], 0x28
lea eax, [ebx + 0x64]
mov dword [esp + 0x18], eax
jb 0x58a81b
test edi, edi
jne 0x58a81b
push eax
mov eax, dword [ebp + 0x20]
push edi
push 0x433
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [esp + 0x10], 0xffffffff
je 0x58a967
mov eax, dword [ebp + 0x20]
lea edx, [esp + 0x94]
push edx
mov ecx, 0xb
lea esi, [esp + 0x4c]
lea edi, [esp + 0x98]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x50]
push 0
push 0x432
and ecx, 0x3fffffff
push eax
mov dword [esp + 0xa8], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebx + 0x30]
cmp eax, 3
je 0x58a8e6
cmp eax, 6
je 0x58a8e6
cmp eax, 7
je 0x58a8e6
cmp dword [ebx + 0x34], 0x50050
jae 0x58a881
test eax, eax
je 0x58a8e6
cmp dword [ebx + 0x20], 0
je 0x58a8cf
cmp dword [esp + 0x24], 0
je 0x58a8cf
mov eax, dword [esp + 0x28]
test eax, eax
je 0x58a8cf
mov ecx, dword [ebx + 0x38]
push eax
push ecx
push 0x421
mov ecx, ebp
call fcn.00406440
mov ecx, dword [ebp + 0x20]
mov edx, dword [esp + 0x24]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x94]
push eax
push 0
push 0x439
push ecx
mov dword [esp + 0xc8], edx
call esi
jmp 0x58a8ec
mov edx, dword [ebp + 0x20]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x421
push edx
call esi
jmp 0x58a8ec
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebx + 0x24], 0
je 0x58a92c
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x58a91d
mov edx, dword [ebx + 0x2c]
mov eax, dword [ebx + 0x28]
add edx, dword [esp + 0x10]
push eax
push edx
call fcn.0054e7c0
test eax, eax
je 0x58a91d
push eax
mov eax, dword [ebp + 0x20]
push 0
push 0x2a49
push eax
jmp 0x58a92a
mov ecx, dword [ebp + 0x20]
push 0
push 0
push 0x2a49
push ecx
call esi
test dword [esp + 0x4c], 0x40000000
jne 0x58a93d
cmp dword [esp + 0x44], 0
je 0x58a980
mov edx, dword [ebp + 0x20]
push 0
push 1
push 0x401
push edx
call esi
mov eax, dword [ebp + 0x20]
push 0x213
push 0
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x58a980
mov ecx, dword [ebp + 0x20]
push 0
push 0
push 0x401
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [esp + 0xc8]
push edx
push ebp
mov ecx, ebx
call fcn.00589b80
mov eax, dword [esp + 0x18]
cmp dword [eax], 0x28
jb 0x58a9ae
cmp dword [esp + 0x14], 0
je 0x58a9ae
push eax
mov eax, dword [ebp + 0x20]
push 0
push 0x433
push eax
call esi
mov edi, dword [esp + 0x18]
mov ecx, 0xb
lea esi, [esp + 0x48]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x6c]
cmp eax, 0xffffffff
je 0x58a9d7
cmp dword [esp + 0x68], 0
jne 0x58a9d7
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
mov eax, dword [esp + 0x24]
test eax, eax
je 0x58a9e9
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
mov eax, dword [esp + 0x28]
test eax, eax
je 0x58aad7
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret 0xc
cmp dword [esp + 0xcc], 0
jne 0x58aa55
mov ecx, dword [edi]
push ecx
call sub.mfc90u.dll_CWnd::FromHandle
mov ebp, dword [esp + 0xc4]
test eax, eax
je 0x58aa4d
mov edi, dword [sym.imp.USER32.dll_GetParent]
nop
cmp eax, ebp
je 0x58aa55
test dword [eax + 0x3c], 0x401
jne 0x58aa4d
mov edx, dword [eax + 0x20]
push edx
call edi
push eax
call sub.mfc90u.dll_CWnd::FromHandle
test eax, eax
jne 0x58aa30
cmp eax, ebp
jne 0x58aad7
cmp esi, 0x100
jb 0x58aa65
cmp esi, 0x108
jbe 0x58aad0
lea eax, [esi - 0x104]
cmp eax, 3
jbe 0x58aad0
cmp esi, 0x201
je 0x58aad0
cmp esi, 0x203
je 0x58aad0
cmp esi, 0x204
je 0x58aad0
cmp esi, 0x206
je 0x58aad0
cmp esi, 0x207
je 0x58aad0
cmp esi, 0x209
je 0x58aad0
cmp esi, 0xa1
je 0x58aad0
cmp esi, 0xa3
je 0x58aad0
cmp esi, 0xa4
je 0x58aad0
cmp esi, 0xa6
je 0x58aad0
cmp esi, 0xa7
je 0x58aad0
cmp esi, 0xa9
jne 0x58aad7
mov ecx, ebx
call fcn.00589c30
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret 0xc