Function at 0x540413
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x44
mov eax, 0x5e349c
call fcn.005bfc70
mov esi, ecx
lea eax, [esi + 0x294]
cmp byte [eax], 0
je 0x54042f
mov byte [eax], 0
cmp dword [esi + 0x328], 0
je 0x540775
mov eax, dword [esi]
call dword [eax + 0x174]
push eax
mov ecx, 0x663798
call fcn.0055889d
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x540463
cmp dword [0x66379c], eax
jne 0x540463
call fcn.004c5890
mov eax, dword [esi + 0x324]
mov edi, dword [esi + 0x328]
mov dword [ebp + 8], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x36c]
mov ecx, esi
call fcn.0053de26
mov ebx, eax
cmp dword [ebp + 8], edi
jne 0x5404ac
mov eax, edi
sub eax, 8
je 0x5406c1
dec eax
je 0x540545
sub eax, 0xa
je 0x5404b8
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x35c]
mov ecx, esi
call fcn.004d2da9
jmp 0x540783
push esi
call fcn.004c6bf4
mov edi, eax
pop ecx
test edi, edi
je 0x540536
push edi
push 0x5fa9e8
call fcn.004cab57
pop ecx
pop ecx
test eax, eax
je 0x5404e3
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1ec]
jmp 0x54052e
push edi
push 0x5fa478
call fcn.004cab57
pop ecx
pop ecx
test eax, eax
je 0x540501
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1cc]
jmp 0x54052e
push edi
push 0x5fe56c
call fcn.004cab57
pop ecx
pop ecx
test eax, eax
jne 0x540523
push edi
push 0x5fe1dc
call fcn.004cab57
pop ecx
pop ecx
test eax, eax
je 0x540536
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx + 0x1e4]
test eax, eax
je 0x5404ac
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2b8]
jmp 0x5404ac
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x54066a
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x31c]
test eax, eax
je 0x54066a
mov ecx, dword [esi + 0x78]
xor edi, edi
push edi
call fcn.00506880
cmp dword [esi + 0x2c4], edi
jne 0x540602
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0052988a
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.0052f242
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 8], eax
cmp eax, edi
je 0x5405f4
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00547e95
push dword [eax]
push 0x663064
call fcn.004cab57
mov edi, eax
mov eax, dword [edi]
pop ecx
pop ecx
mov ecx, edi
mov dword [ebp - 0x10], edi
call dword [eax + 0x31c]
test eax, eax
je 0x5405ec
mov edi, dword [edi]
mov eax, dword [ebx]
push 0
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
mov ecx, dword [ebp - 0x10]
push eax
push 1
call dword [edi]
cmp dword [ebp + 8], 0
jne 0x5405a1
xor edi, edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.005298b2
jmp 0x540629
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx]
call dword [eax + 0x178]
push eax
push 0x60b754
call fcn.004cab57
pop ecx
pop ecx
cmp eax, edi
je 0x540629
push edi
mov ecx, eax
call fcn.0055e78c
mov ecx, dword [esi + 0x78]
push 1
call fcn.00506880
push dword [esi + 0x78]
push 0x5fcad0
call fcn.004cab57
pop ecx
pop ecx
cmp eax, edi
je 0x540652
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x150]
mov eax, dword [esi + 0x78]
push 0x181
push edi
push edi
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x540783
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x540783
test ebx, ebx
je 0x540783
mov edi, dword [eax + 0x11c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x16c]
test edi, eax
je 0x540783
mov edi, dword [esi]
mov eax, dword [ebx]
push 1
push 0
mov ecx, ebx
add edi, 0x344
call dword [eax + 0x16c]
push eax
xor eax, eax
cmp dword [esi + 0x2c4], eax
mov ecx, esi
sete al
push eax
call dword [edi]
jmp 0x540783
cmp dword [0x66b8b8], 0
je 0x540783
push 8
mov ecx, esi
call fcn.0053fdcd
mov edi, eax
test edi, edi
je 0x540783
mov eax, dword [edi]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, edi
call dword [eax + 0xc]
lea eax, [ebp - 0x34]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.004cef1d
push dword [ebp - 0x30]
lea eax, [ebp - 0x24]
push dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.004cef5e
mov dword [edi + 0x14], 1
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x24]
inc eax
mov ecx, esi
mov dword [ebp - 0x10], eax
call fcn.004f9578
test eax, 0x400000
je 0x540746
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add ebx, eax
mov eax, dword [esi + 0x20]
push dword [ebp - 0x10]
mov dword [ebp + 8], eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x2c0]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x540783
and dword [edi + 0x14], 0
push edi
mov ecx, esi
call fcn.0053f98c
jmp 0x540783
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.005069da
call fcn.005bfd48
ret 0xc