Function at 0x5789c1
Capabilities:
Log keystrokes via polling

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 4], ecx
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x20a
jne 0x57894d
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004c93f0
test eax, eax
je 0x57894d
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00428b60
test eax, eax
je 0x57894d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.004269c0
mov eax, 1
jmp 0x578c17
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0x100
jne case.0x578ac1.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
test edx, edx
jl case.0x5789ba.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
test eax, eax
jl case.0x5789ba.1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004c93f0
test eax, eax
je case.0x5789ba.1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0xd
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x1b
ja case.0x5789ba.1
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x578c2c]
jmp dword [eax*4 + 0x578c20]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00428b60
test eax, eax
jne case.0x5789ba.0
jmp case.0x5789ba.1
mov ecx, dword [ebp - 4]
call fcn.0043a0b0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00428b60
test eax, eax
je 0x578a23
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.004269c0
jmp 0x578a91
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00426940
test eax, eax
je 0x578a91
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x74]
add eax, 0xb8
push eax
mov ecx, dword [ebp - 4]
call fcn.0042ee70
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00426910
push eax
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x74]
mov ecx, dword [eax + 0x20]
and ecx, 0xffff
movzx edx, cx
push edx
push 0x111
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00426940
mov ecx, eax
call fcn.00426a10
mov eax, 1
jmp 0x578c17
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 9
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x1f
ja case.0x578ac1.1
mov ecx, dword [ebp - 0xc]
movzx edx, byte [ecx + 0x578c58]
jmp dword [edx*4 + 0x578c48]
mov ecx, dword [ebp - 4]
call fcn.004277f0
test eax, eax
je 0x578b12
push 0x5ba
push str.f:dd_vctools_vc7libs_ship_atlmfc_srcmfc_afxtoolbarcomboboxbutton.cpp
mov ecx, dword [ebp - 4]
call fcn.004277f0
push eax
call fcn.0043a3a0
push 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 4]
call fcn.004277f0
mov ecx, eax
call fcn.004275b0
mov ecx, eax
call fcn.0043a0b0
mov eax, 1
jmp 0x578c17
jmp case.0x578ac1.1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004c93f0
test eax, eax
je 0x578b3a
push 0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00428980
mov ecx, dword [ebp - 4]
call fcn.00431e50
test eax, eax
je 0x578b5f
mov ecx, dword [ebp - 4]
call fcn.00431e50
mov ecx, eax
call fcn.0043a0b0
mov eax, 1
jmp 0x578c17
jmp case.0x578ac1.1
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
test eax, eax
jl case.0x578ac1.1
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
test ecx, ecx
jl case.0x578ac1.1
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004c93f0
test eax, eax
je case.0x578ac1.1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00428b60
test eax, eax
jne 0x578c04
push 1
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.00428980
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.004277f0
test eax, eax
je 0x578c04
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
add ecx, 0x90
call fcn.00603550
push eax
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x74]
call fcn.004c93f0
mov ecx, eax
call fcn.004277f0
mov ecx, eax
call fcn.004270d0
mov eax, 1
jmp 0x578c17
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042ecf0
mov esp, ebp
pop ebp
ret 4