Function at 0x545ba8
Capabilities:
Log keystrokes via polling

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0x104
ja 0x545b81
cmp dword [ebp - 0x18], 0x104
je case.0x545ba1.0
mov edx, dword [ebp - 0x18]
sub edx, 0xa1
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 0x5f
ja case.0x545ba1.3
mov eax, dword [ebp - 0x18]
movzx ecx, byte [eax + 0x545e10]
jmp dword [ecx*4 + 0x545e04]
mov edx, dword [ebp - 0x18]
sub edx, 0x200
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 8
ja case.0x545ba1.3
mov eax, dword [ebp - 0x18]
movzx ecx, byte [eax + 0x545e78]
jmp dword [ecx*4 + 0x545e70]
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0xa0], 0xffffffff
je case.0x545ba1.0
push 0x11
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
je case.0x545ba1.0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0x21
je 0x545cb7
cmp dword [ebp - 0x1c], 0x22
je 0x545bea
jmp case.0x545ba1.0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xa0]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x545c04
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xa0]
mov edx, dword [ebp - 0x14]
add ecx, dword [edx + 0x9c]
cmp dword [ebp - 4], ecx
jge 0x545cad
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
cdq
idiv dword [ecx + 0x9c]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x280]
call eax
test eax, eax
je 0x545ca8
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x200], 1
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x218]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x214]
call eax
mov ecx, eax
call fcn.00435df0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xa0]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x274]
call eax
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x200], 0
jmp 0x545cad
jmp 0x545bfb
mov eax, 1
jmp 0x545dfe
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xa0]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x9c]
lea eax, [eax + edx - 1]
mov dword [ebp - 0xc], eax
jmp 0x545cdb
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
cmp eax, dword [edx + 0xa0]
jle 0x545d7b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ecx + 0x9c]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x280]
call eax
test eax, eax
je 0x545d76
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x200], 1
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x218]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x214]
call eax
mov ecx, eax
call fcn.00435df0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xa0]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x274]
call eax
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x200], 0
jmp 0x545d7b
jmp 0x545cd2
mov eax, 1
jmp 0x545dfe
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0xdc]
call fcn.00432330
test eax, eax
je 0x545da6
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0xdc]
call fcn.00447550
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0xd8]
call fcn.00432330
test eax, eax
je case.0x545ba1.3
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0xd8]
call fcn.00447550
mov edx, dword [ebp + 8]
cmp dword [edx + 4], 0x203
jne 0x545df2
mov ecx, dword [ebp - 0x14]
add ecx, 0x2094
call fcn.00432330
mov ecx, dword [ebp + 8]
cmp dword [ecx], eax
jne 0x545df2
mov eax, 1
jmp 0x545dfe
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.00562790
mov esp, ebp
pop ebp
ret 4