Function at 0x454740
Capabilities:
Log keystrokes via polling

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4d96c6
push eax
mov eax, 0x1488
mov dword fs:[0], esp
call fcn.004d4ce0
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea eax, [esi + 0x43d8]
test eax, eax
je 0x454777
lea eax, [esi + 0x43dc]
jmp 0x454779
xor eax, eax
mov eax, dword [eax + 4]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1f
push eax
call edi
lea eax, [esi + 0x6184]
test eax, eax
je 0x45479d
lea eax, [esi + 0x6188]
jmp 0x45479f
xor eax, eax
mov eax, dword [eax + 4]
push 0
push 0
push 0x1f
push eax
call edi
mov ebx, dword [esp + 0x14a8]
mov edi, dword [sym.imp.USER32.dll_IsMenu]
test ebx, ebx
je 0x4547c3
push ebx
call edi
test eax, eax
jne 0x4547dc
mov ebx, dword [esi + 0x2d8bc]
test ebx, ebx
je 0x454c22
push ebx
call edi
test eax, eax
je 0x454c22
mov edi, dword [sym.imp.USER32.dll_GetMenuItemID]
push 0
push ebx
call edi
cmp eax, 0x8056
je 0x454938
cmp dword [esi + 0x2dd20], ebx
je 0x454938
push 0
push ebx
call edi
cmp eax, 0xa067
jne 0x4548c7
mov ebp, dword [esp + 0x14ac]
push ebp
push ebx
call edi
and eax, 0xffff
add eax, 0xffff5f99
cmp eax, 4
ja case.default.0x454828
jmp dword [eax*4 + 0x454c40]
mov ecx, esi
mov dword [0x722ab4], 0xa
call fcn.00458f40
jmp 0x454c22
mov ecx, dword [esi + 4]
push ecx
call fcn.00436ab0
add esp, 4
jmp 0x454c22
mov edx, dword [esi + 4]
push edx
call fcn.00436c60
add esp, 4
jmp 0x454c22
push 0
jmp 0x45486d
push 1
mov ecx, 0x6f0f70
call fcn.00483aa0
cmp ebp, 7
jbe 0x454c22
push 0x400
lea eax, [esp + 0x24c]
push 0x104
push eax
push ebp
push ebx
call dword [sym.imp.USER32.dll_GetMenuStringW]
test eax, eax
je 0x454c22
push 3
mov ecx, 0x6f0f70
call fcn.00483aa0
lea ecx, [esp + 0x248]
push 0
push ecx
mov ecx, 0x6f0f70
call fcn.00483de0
jmp 0x454c22
push 0
push ebx
call edi
cmp eax, 0xa082
jne 0x45492a
mov eax, dword [esp + 0x14ac]
cmp eax, 5
jb 0x454910
mov ecx, dword [0x717344]
test ecx, ecx
je 0x454c22
mov esi, dword [ecx + 4]
push 0
push 1
push eax
push ebx
call fcn.004bdfc0
add esp, 0xc
push eax
push 0x9423
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x454c22
push 1
push 0
push eax
push ebx
call edi
and eax, 0xffff
mov ecx, esi
push eax
call fcn.004506e0
jmp 0x454c22
mov edx, dword [esp + 0x14ac]
push 1
push 0
push edx
jmp 0x454915
mov ecx, 0xc
xor eax, eax
lea edi, [esp + 0x10]
push 1
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x14b0]
mov dword [esp + 0x14], 0x30
push edi
push ebx
mov dword [esp + 0x20], 2
call fcn.004bdfc0
mov ebp, eax
add esp, 0xc
test ebp, ebp
je 0x454c22
lea eax, [esp + 0x10]
push eax
push 1
push edi
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
test eax, eax
je 0x454c22
cmp ebx, dword [esi + 0x2d8b4]
jne 0x454996
cmp edi, 5
jb 0x4549ae
cmp ebx, dword [esi + 0x2dd20]
je 0x454b7f
cmp edi, dword [esi + 0x2df40]
jae 0x454b7f
mov eax, dword [esp + 0x20]
cmp eax, 0x8058
ja 0x454aa1
je 0x454a90
mov ecx, eax
sub ecx, 0x26
je 0x454a78
sub ecx, 0x62
je 0x454a78
sub ecx, 0x7fce
jne 0x454c22
mov eax, dword [esi + 0x2df54]
lea ebx, [esi + 0x2dae0]
test eax, eax
je 0x4549f9
lea ebx, [esi + 0x2dd28]
mov cx, word [0x500df0]
xor eax, eax
mov word [esp + 0x40], cx
mov ecx, 0x81
lea edi, [esp + 0x42]
lea edx, [esp + 0x40]
rep stosd dword es:[edi], eax
push 0x104
push edx
push ebp
lea ecx, [esi + 0x2d8c0]
stosw word es:[edi], ax
call fcn.004b0330
mov eax, dword [esi + 0x24acc]
mov edx, dword [esi + 4]
push 0
lea ecx, [esp + 0x44]
push eax
push ecx
push ebx
push edx
call fcn.00402380
lea eax, [esi + 0x43d8]
add esp, 0x14
test eax, eax
je 0x454a57
lea eax, [esi + 0x43dc]
jmp 0x454a59
xor eax, eax
mov eax, dword [eax + 4]
push 0
push 0
push 0x1f
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [esi + 0x2df54], 0
jmp 0x454c22
xor ecx, ecx
cmp eax, 0x26
sete cl
push 0
push ecx
push ebp
mov ecx, esi
call fcn.0045af70
jmp 0x454c22
push ebp
lea ecx, [esi + 0x2d8c0]
call fcn.004b0c20
jmp 0x454c22
cmp eax, 0x80b5
je 0x454af6
cmp eax, 0xa090
jne 0x454c22
lea ecx, [esp + 0x450]
call fcn.004698f0
mov edx, dword [esi + 4]
lea ecx, [esp + 0x450]
push edx
mov dword [esp + 0x14a4], 0
call fcn.00469980
lea ecx, [esp + 0x450]
mov dword [esp + 0x14a0], 0xffffffff
call fcn.00469940
jmp 0x454c22
mov eax, dword [esi + 0x2df54]
lea ebx, [esi + 0x2dae0]
test eax, eax
je 0x454b0c
lea ebx, [esi + 0x2dd28]
mov ax, word [0x500df0]
mov ecx, 0x81
mov word [esp + 0x40], ax
xor eax, eax
lea edi, [esp + 0x42]
push 0x104
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push ebp
lea ecx, [esi + 0x2d8c0]
stosw word es:[edi], ax
call fcn.004b0330
mov eax, dword [esi + 4]
lea edx, [esp + 0x40]
push edx
push ebx
push eax
call fcn.004026b0
lea eax, [esi + 0x43d8]
add esp, 0xc
test eax, eax
je 0x454b70
mov ecx, dword [esi + 0x43e0]
lea eax, [esi + 0x43dc]
push 0
push 0
push 0x1f
push ecx
jmp 0x454a63
xor eax, eax
push eax
push eax
mov ecx, dword [eax + 4]
push 0x1f
push ecx
jmp 0x454a63
mov dx, word [0x500df0]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x42]
mov word [esp + 0x40], dx
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x44]
lea ecx, [esi + 0x2d8c0]
push eax
push ebp
call fcn.004b0330
test eax, eax
je 0x454c22
mov edi, dword [0x7272c4]
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
shr eax, 8
test al, al
je 0x454bd2
xor ecx, ecx
test edi, edi
sete cl
mov edi, ecx
lea ecx, [esp + 0x450]
call fcn.004aa800
lea edx, [esp + 0x40]
lea ecx, [esp + 0x450]
push edx
mov dword [esp + 0x14a4], 1
call fcn.004aa820
push 0
push 0
push 0
push 0
push edi
push eax
mov ecx, esi
call fcn.00452680
lea ecx, [esp + 0x450]
mov dword [esp + 0x14a0], 0xffffffff
call fcn.004a21b0
mov ecx, dword [esp + 0x1498]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1494
ret 8