Function at 0x410260
Capabilities:
Identify system language via api
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bc0f6
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x90
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0xa0]
mov ecx, 0x24
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x51197c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0x15], 1
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
call fcn.00410a80
mov byte [ebp - 0x7d], al
movzx eax, byte [ebp - 0x7d]
cmp eax, 1
jne 0x4102ca
jmp 0x4104bd
mov esi, esp
mov cx, word [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_VkKeyScanW]
cmp esi, esp
call fcn.004b81e1
mov word [ebp - 0x1c], ax
movsx edx, word [ebp - 0x1c]
cmp edx, 8
jne 0x4102f0
jmp 0x4104bd
lea ecx, [ebp - 0x28]
call fcn.00411140
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00410a00
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
mov edx, dword [ecx]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], eax
jmp 0x41032b
push 0
lea ecx, [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004111a0
lea edx, [ebp - 0x7c]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.00410a40
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
push eax
lea ecx, [ebp - 0x28]
call fcn.00411230
mov byte [ebp - 0x89], al
movzx ecx, byte [ebp - 0x89]
test ecx, ecx
je 0x4104b5
lea ecx, [ebp - 0x28]
call fcn.00411170
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x90]
add ecx, 0x1c
call fcn.00410f90
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x50], 0
mov esi, esp
lea edx, [ebp - 0x50]
push edx
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x38]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov ax, word [ebp + 8]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
mov ecx, dword [eax + 0x1c]
call ecx
cmp esi, esp
call fcn.004b81e1
mov dword [ebp - 0x94], eax
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x4103e6
jmp 0x41040d
cmp dword [ebp - 0x38], 0
jne 0x4103f1
jmp 0x41031d
mov esi, esp
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBeep]
cmp esi, esp
call fcn.004b81e1
mov byte [ebp - 0x15], 0
jmp 0x410412
jmp 0x41031d
lea ecx, [ebp - 0x60]
call fcn.00405100
mov byte [ebp - 4], 1
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0x60]
call fcn.004054a0
mov dword [ebp - 0x9c], eax
mov esi, esp
lea ecx, [ebp - 0x50]
push ecx
push 0
lea edx, [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x9c]
push eax
mov edi, esp
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
cmp edi, esp
call fcn.004b81e1
movzx ecx, ax
push ecx
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
call eax
cmp esi, esp
call fcn.004b81e1
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 0
jne 0x4104a2
lea ecx, [ebp - 0x60]
call fcn.004052d0
mov esi, esp
push eax
mov ecx, dword [ebp + 0x10]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
cmp esi, esp
call fcn.004b81e1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x60]
call fcn.004051d0
jmp 0x4104b5
xor edx, edx
jne 0x4102b1
jmp 0x4104cc
mov dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x15]
push edx
mov ecx, ebp
push eax
lea edx, [0x410508]
call fcn.004b8204
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0xa0
cmp ebp, esp
call fcn.004b81e1
mov esp, ebp
pop ebp
ret 0xc