Function at 0x510bfc
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
add edi, 0xfffffffc
lea edx, [ebp - 0x14]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x110]
mov eax, dword [edi]
mov si, 0xffc8
call fcn.00403c58
test al, al
je 0x510c3c
mov eax, dword [edi]
call fcn.0044dad8
mov ebx, eax
sub ebx, dword [ebp - 0x14]
mov dword [ebp - 0xc], ebx
sub ebx, 0xd
mov dword [ebp - 0x14], ebx
mov eax, dword [edi]
test byte [eax + 0x54], 0x80
je 0x510c52
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xe4]
mov ebx, eax
jmp 0x510c5a
mov eax, dword [edi]
mov bl, byte [eax + 0x212]
cmp bl, 1
jne 0x510c66
xor eax, eax
mov dword [ebp - 4], eax
jmp 0x510c6d
mov dword [ebp - 4], 8
mov eax, dword [edi]
test byte [eax + 0x54], 1
je 0x510cc7
mov eax, dword [edi]
mov si, 0xffb5
call fcn.00403c58
test al, al
je 0x510cc7
mov eax, dword [edi]
test byte [eax + 0x54], 0x80
jne 0x510cc7
mov eax, dword [edi]
call fcn.0055496c
test al, al
je 0x510cb0
mov eax, dword [edi]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xdc]
test al, al
je 0x510cc7
or dword [ebp - 4], 0x200
jmp 0x510cc7
mov eax, dword [edi]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0xdc]
test al, al
je 0x510cc7
or dword [ebp - 4], 0x200
mov eax, dword [edi]
cmp byte [eax + 0x24c], 0
je 0x510cf4
push 0x20
call sub.user32.dll_GetKeyState
test ax, ax
jge 0x510cf4
mov eax, dword [edi]
mov si, 0xffb5
call fcn.00403c58
test al, al
je 0x510cf4
or dword [ebp - 4], 0x200
cmp bl, 1
jne 0x510d02
or dword [ebp - 4], 0x400
jmp 0x510d0e
cmp bl, 2
jne 0x510d0e
or dword [ebp - 4], 0x400
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
test eax, eax
je 0x510e10
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
call fcn.0045b484
test eax, eax
jle 0x510e10
mov esi, 0x10
test byte [ebp - 3], 2
je 0x510d48
or esi, 0x200
mov eax, dword [edi]
cmp byte [eax + 0x239], 0
je 0x510dbd
push esi
push edi
lea esi, [ebp - 0x14]
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
push 1
push 1
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_InflateRect
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
mov eax, dword [eax + 0x14]
mov edx, 0xffffff
call fcn.00425978
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
lea edx, [ebp - 0x24]
call fcn.00426058
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
mov eax, dword [eax + 0x14]
xor edx, edx
call fcn.00425978
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
lea edx, [ebp - 0x24]
call fcn.00426094
mov eax, dword [edi]
cmp byte [eax + 0x260], 0
je 0x510e10
push esi
push edi
lea esi, [ebp - 0x14]
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
push 2
push 2
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_InflateRect
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
jne 0x510df4
add esi, 0x100
push esi
push 4
lea eax, [ebp - 0x24]
push eax
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
call fcn.00426608
push eax
call sub.user32.dll_DrawFrameControl
cmp bl, 1
jne 0x510e68
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
test eax, eax
je 0x510f06
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
call fcn.0045b484
dec eax
jle 0x510f06
mov eax, dword [ebp - 0x10]
push eax
push 1
push 1
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
push eax
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
mov ecx, dword [ebp - 0x14]
pop edx
call fcn.0045b99c
jmp 0x510f85
test bl, bl
jne 0x510ebc
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
test eax, eax
je 0x510f06
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
call fcn.0045b484
test eax, eax
jle 0x510f06
mov eax, dword [ebp - 0x10]
push eax
push 0
push 1
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
push eax
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
mov ecx, dword [ebp - 0x14]
pop edx
call fcn.0045b99c
jmp 0x510f85
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
test eax, eax
je 0x510f06
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
call fcn.0045b484
cmp eax, 2
jle 0x510f06
mov eax, dword [ebp - 0x10]
push eax
push 2
push 1
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
push eax
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
mov ecx, dword [ebp - 0x14]
pop edx
call fcn.0045b99c
jmp 0x510f85
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
mov eax, dword [eax + 0x14]
mov edx, 0x8000000f
call fcn.00425978
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
lea edx, [ebp - 0x14]
call fcn.00426058
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
mov eax, dword [eax + 0x14]
mov edx, 0x80000010
call fcn.00425978
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xfc]
test eax, eax
jne 0x510f85
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
jne 0x510f66
add dword [ebp - 4], 0x100
mov eax, dword [ebp - 4]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf0]
call fcn.00426608
push eax
call sub.user32.dll_DrawFrameControl
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret