Function at 0x4534e0
Capabilities:
Log keystrokes via polling

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4d8146
push eax
mov eax, 0x1488
mov dword fs:[0], esp
call fcn.004d3780
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea eax, [esi + 0x43d8]
test eax, eax
je 0x453517
lea eax, [esi + 0x43dc]
jmp 0x453519
xor eax, eax
mov eax, dword [eax + 4]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1f
push eax
call edi
lea eax, [esi + 0x6184]
test eax, eax
je 0x45353d
lea eax, [esi + 0x6188]
jmp 0x45353f
xor eax, eax
mov eax, dword [eax + 4]
push 0
push 0
push 0x1f
push eax
call edi
mov ebx, dword [esp + 0x14a8]
mov edi, dword [sym.imp.USER32.dll_IsMenu]
test ebx, ebx
je 0x453563
push ebx
call edi
test eax, eax
jne 0x45357c
mov ebx, dword [esi + 0x2d8c0]
test ebx, ebx
je 0x4539c2
push ebx
call edi
test eax, eax
je 0x4539c2
mov edi, dword [sym.imp.USER32.dll_GetMenuItemID]
push 0
push ebx
call edi
cmp eax, 0x8056
je 0x4536d8
cmp dword [esi + 0x2dd24], ebx
je 0x4536d8
push 0
push ebx
call edi
cmp eax, 0xa067
jne 0x453667
mov ebp, dword [esp + 0x14ac]
push ebp
push ebx
call edi
and eax, 0xffff
add eax, 0xffff5f99
cmp eax, 4
ja case.default.0x4535c8
jmp dword [eax*4 + 0x4539e0]
mov ecx, esi
mov dword [0x6bfb1c], 0xa
call fcn.00457c30
jmp 0x4539c2
mov ecx, dword [esi + 4]
push ecx
call fcn.004365f0
add esp, 4
jmp 0x4539c2
mov edx, dword [esi + 4]
push edx
call fcn.004367a0
add esp, 4
jmp 0x4539c2
push 0
jmp 0x45360d
push 1
mov ecx, 0x68da80
call fcn.00481f50
cmp ebp, 7
jbe 0x4539c2
push 0x400
lea eax, [esp + 0x24c]
push 0x104
push eax
push ebp
push ebx
call dword [sym.imp.USER32.dll_GetMenuStringW]
test eax, eax
je 0x4539c2
push 3
mov ecx, 0x68da80
call fcn.00481f50
lea ecx, [esp + 0x248]
push 0
push ecx
mov ecx, 0x68da80
call fcn.00482290
jmp 0x4539c2
push 0
push ebx
call edi
cmp eax, 0xa082
jne 0x4536ca
mov eax, dword [esp + 0x14ac]
cmp eax, 5
jb 0x4536b0
mov ecx, dword [0x6b3e54]
test ecx, ecx
je 0x4539c2
mov esi, dword [ecx + 4]
push 0
push 1
push eax
push ebx
call fcn.004bcba0
add esp, 0xc
push eax
push 0x9423
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4539c2
push 1
push 0
push eax
push ebx
call edi
and eax, 0xffff
mov ecx, esi
push eax
call fcn.0044f500
jmp 0x4539c2
mov edx, dword [esp + 0x14ac]
push 1
push 0
push edx
jmp 0x4536b5
mov ecx, 0xc
xor eax, eax
lea edi, [esp + 0x10]
push 1
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x14b0]
mov dword [esp + 0x14], 0x30
push edi
push ebx
mov dword [esp + 0x20], 2
call fcn.004bcba0
mov ebp, eax
add esp, 0xc
test ebp, ebp
je 0x4539c2
lea eax, [esp + 0x10]
push eax
push 1
push edi
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
test eax, eax
je 0x4539c2
cmp ebx, dword [esi + 0x2d8b8]
jne 0x453736
cmp edi, 5
jb 0x45374e
cmp ebx, dword [esi + 0x2dd24]
je 0x45391f
cmp edi, dword [esi + 0x2df44]
jae 0x45391f
mov eax, dword [esp + 0x20]
cmp eax, 0x8058
ja 0x453841
je 0x453830
mov ecx, eax
sub ecx, 0x26
je 0x453818
sub ecx, 0x62
je 0x453818
sub ecx, 0x7fce
jne 0x4539c2
mov eax, dword [esi + 0x2df58]
lea ebx, [esi + 0x2dae4]
test eax, eax
je 0x453799
lea ebx, [esi + 0x2dd2c]
mov cx, word [0x4ffec0]
xor eax, eax
mov word [esp + 0x40], cx
mov ecx, 0x81
lea edi, [esp + 0x42]
lea edx, [esp + 0x40]
rep stosd dword es:[edi], eax
push 0x104
push edx
push ebp
lea ecx, [esi + 0x2d8c4]
stosw word es:[edi], ax
call fcn.004aefe0
mov eax, dword [esi + 0x24acc]
mov edx, dword [esi + 4]
push 0
lea ecx, [esp + 0x44]
push eax
push ecx
push ebx
push edx
call fcn.00403380
lea eax, [esi + 0x43d8]
add esp, 0x14
test eax, eax
je 0x4537f7
lea eax, [esi + 0x43dc]
jmp 0x4537f9
xor eax, eax
mov eax, dword [eax + 4]
push 0
push 0
push 0x1f
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [esi + 0x2df58], 0
jmp 0x4539c2
xor ecx, ecx
cmp eax, 0x26
sete cl
push 0
push ecx
push ebp
mov ecx, esi
call fcn.00459c60
jmp 0x4539c2
push ebp
lea ecx, [esi + 0x2d8c4]
call fcn.004af8d0
jmp 0x4539c2
cmp eax, 0x80b5
je 0x453896
cmp eax, 0xa090
jne 0x4539c2
lea ecx, [esp + 0x450]
call fcn.00468000
mov edx, dword [esi + 4]
lea ecx, [esp + 0x450]
push edx
mov dword [esp + 0x14a4], 0
call fcn.00468090
lea ecx, [esp + 0x450]
mov dword [esp + 0x14a0], 0xffffffff
call fcn.00468050
jmp 0x4539c2
mov eax, dword [esi + 0x2df58]
lea ebx, [esi + 0x2dae4]
test eax, eax
je 0x4538ac
lea ebx, [esi + 0x2dd2c]
mov ax, word [0x4ffec0]
mov ecx, 0x81
mov word [esp + 0x40], ax
xor eax, eax
lea edi, [esp + 0x42]
push 0x104
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push ebp
lea ecx, [esi + 0x2d8c4]
stosw word es:[edi], ax
call fcn.004aefe0
mov eax, dword [esi + 4]
lea edx, [esp + 0x40]
push edx
push ebx
push eax
call fcn.004036b0
lea eax, [esi + 0x43d8]
add esp, 0xc
test eax, eax
je 0x453910
mov ecx, dword [esi + 0x43e0]
lea eax, [esi + 0x43dc]
push 0
push 0
push 0x1f
push ecx
jmp 0x453803
xor eax, eax
push eax
push eax
mov ecx, dword [eax + 4]
push 0x1f
push ecx
jmp 0x453803
mov dx, word [0x4ffec0]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x42]
mov word [esp + 0x40], dx
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x44]
lea ecx, [esi + 0x2d8c4]
push eax
push ebp
call fcn.004aefe0
test eax, eax
je 0x4539c2
mov edi, dword [0x6c432c]
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
shr eax, 8
test al, al
je 0x453972
xor ecx, ecx
test edi, edi
sete cl
mov edi, ecx
lea ecx, [esp + 0x450]
call fcn.004a94b0
lea edx, [esp + 0x40]
lea ecx, [esp + 0x450]
push edx
mov dword [esp + 0x14a4], 1
call fcn.004a94d0
push 0
push 0
push 0
push 0
push edi
push eax
mov ecx, esi
call fcn.00451540
lea ecx, [esp + 0x450]
mov dword [esp + 0x14a0], 0xffffffff
call fcn.00437c40
mov ecx, dword [esp + 0x1498]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1494
ret 8