Function at 0x4517f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
push esi
mov esi, ecx
mov eax, dword [esi]
mov edx, dword [eax + 0xdc]
push edi
call edx
mov ebx, dword [ebp + 8]
test al, al
jne 0x451838
mov eax, dword [ebx]
cmp eax, 8
jle 0x451838
cmp eax, 0x13
jge 0x451838
mov ecx, dword [esi + 0x4e0]
push ebx
test ecx, ecx
jne 0x451b26
mov ecx, esi
call fcn.0043b650
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx]
cmp eax, 0x10
jne 0x45186c
mov eax, dword [esi]
mov edx, dword [eax + 0xd4]
mov ecx, esi
call edx
test al, al
je 0x451b40
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
mov ecx, esi
call edx
mov ecx, esi
call fcn.004405f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 3
jne 0x451888
mov eax, dword [esi]
mov edx, dword [eax + 0xd4]
mov ecx, esi
call edx
test al, al
je 0x451888
cmp word [ebx + 0x14], 0xd
je 0x451853
cmp dword [ebx], 0xd
jne 0x451a42
mov eax, dword [esi]
mov edx, dword [eax + 0xd4]
mov ecx, esi
call edx
test al, al
je 0x451a42
mov edi, dword [esi + 0x40]
push 0
push 0
push 0
push str.itemclick
mov ecx, esi
call fcn.004188b0
mov ecx, dword [esi + 0x4f0]
test ecx, ecx
je 0x451a3b
mov eax, dword [ecx]
mov edx, dword [eax + 0x1c0]
call edx
test al, al
je 0x451909
mov eax, dword [esi + 0x4d0]
mov edx, dword [eax + 0x10]
lea ecx, [esi + 0x4d0]
call edx
mov ecx, dword [esi + 0x4f0]
test al, al
jne 0x451938
mov eax, dword [ecx]
mov edx, dword [esi + 0x4d4]
mov eax, dword [eax + 0x1b4]
push 0
push edx
call eax
jmp 0x451a3b
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
mov ecx, 0x8000
test cx, ax
je 0x451966
mov edx, dword [esi + 0x4d0]
mov eax, dword [edx + 0x10]
lea ecx, [esi + 0x4d0]
call eax
mov ecx, dword [esi + 0x4f0]
test al, al
je 0x45194e
mov edx, dword [ecx]
mov eax, dword [esi + 0x4d4]
mov edx, dword [edx + 0x1c4]
push eax
call edx
jmp 0x451a3b
mov eax, dword [ecx]
mov edx, dword [esi + 0x4d4]
mov eax, dword [eax + 0x1b8]
push 0
push edx
call eax
jmp 0x451a3b
push 0x10
call edi
mov ecx, 0x8000
test cx, ax
je 0x451aaa
mov eax, dword [esi + 0x4f0]
call fcn.00458850
mov ebx, eax
mov eax, dword [esi + 0x4f0]
call fcn.004588e0
mov ecx, dword [esi + 0x4f0]
mov edx, dword [ecx]
mov edi, eax
mov eax, dword [edx + 0x1b0]
call eax
mov ecx, dword [esi + 0x4f0]
cmp dword [esi + 0x4d4], eax
jle 0x4519c4
mov edx, dword [ecx]
mov eax, dword [edx + 0x1b0]
call eax
mov edi, dword [esi + 0x4d4]
mov ebx, eax
jmp 0x4519f4
mov edx, dword [esi + 0x4d4]
mov eax, dword [ecx]
mov dword [esp + 0xc], edx
mov edx, dword [eax + 0x1b0]
call edx
mov ecx, dword [esp + 0xc]
cmp ecx, eax
jge 0x4519f4
mov ebx, ecx
mov ecx, dword [esi + 0x4f0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1b0]
call edx
mov edi, eax
mov eax, dword [esi + 0x4d0]
mov edx, dword [eax + 0x10]
lea ecx, [esi + 0x4d0]
call edx
mov ecx, dword [esi + 0x4f0]
test al, al
mov eax, dword [ecx]
mov edx, dword [eax + 0x1cc]
je 0x451a8a
call edx
cmp ebx, edi
jg 0x451a38
lea ecx, [ecx]
mov ecx, dword [esi + 0x4f0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1b8]
push 0
push ebx
call edx
inc ebx
cmp ebx, edi
jle 0x451a20
mov ebx, dword [ebp + 8]
mov ecx, esi
call fcn.004405f0
mov eax, dword [ebx]
cmp eax, 0xe
je 0x451b40
cmp eax, 9
je 0x451b40
cmp eax, 0xb
jne 0x451af3
mov eax, dword [esi]
mov edx, dword [eax + 0xd4]
mov ecx, esi
call edx
test al, al
je 0x451b40
or dword [esi + 0x4dc], 8
mov ecx, esi
call fcn.004405f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call edx
cmp ebx, edi
jg 0x451a38
mov ecx, dword [esi + 0x4f0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1b8]
push 0
push ebx
call edx
inc ebx
cmp ebx, edi
jle 0x451a90
jmp 0x451a38
mov eax, dword [esi + 0x4d0]
mov edx, dword [eax + 0x10]
lea ecx, [esi + 0x4d0]
call edx
mov ecx, dword [esi + 0x4f0]
push 0
test al, al
jne 0x451add
mov eax, dword [ecx]
mov edx, dword [esi + 0x4d4]
mov eax, dword [eax + 0x1b4]
push edx
call eax
jmp 0x451a3b
mov edx, dword [ecx]
mov eax, dword [esi + 0x4d4]
mov edx, dword [edx + 0x1b4]
push eax
call edx
jmp 0x451a3b
cmp eax, 0xa
jne 0x451b1b
mov eax, dword [esi + 0x4dc]
test al, 8
je 0x451b40
and eax, 0xfffffff7
mov ecx, esi
mov dword [esi + 0x4dc], eax
call fcn.004405f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi + 0x4e0]
push ebx
test ecx, ecx
je 0x451b39
mov eax, dword [ecx]
mov edx, dword [eax + 0x10c]
call edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, esi
call fcn.0041df10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4