Function at 0x54b2f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0xc]
push esi
push edi
push ebp
call dword [sym.imp.USER32.dll_GetParent]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, eax
push 0x461
push edi
call esi
mov ebx, eax
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, ebx
je 0x54b57e
push 0x1068
push 0x628dc0
call fcn.004232e0
mov eax, dword [0x62b300]
add esp, 8
test eax, eax
je 0x54b35a
push 0x480
push edi
call esi
push eax
call dword [sym.imp.USER32.dll_IsWindow]
mov esi, eax
neg esi
sbb esi, esi
and esi, 4
add esi, 0x47c
jmp 0x54b35f
mov esi, 0x480
push 0x628dc0
push 0x1068
push 0x628dc0
call fcn.00423310
add esp, 8
push eax
push 0xd
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
call edi
mov al, byte [0x628dc0]
test al, al
je 0x54b57e
push 0x2a
push 0x628dc0
call fcn.005d9b20
add esp, 8
test eax, eax
jne 0x54b57e
push 0x3f
push 0x628dc0
call fcn.005d9b20
add esp, 8
test eax, eax
jne 0x54b57e
push 0x1068
push 0x627d58
call fcn.004232e0
push 0x132
push 0x68d420
call fcn.004232e0
add esp, 0x10
push 0x627d58
push 0x100
push 0xd
push 0x98
push ebp
call edi
mov cl, byte [0x627d58]
mov bl, 0x20
cmp cl, bl
mov eax, 0x627d58
jne 0x54b40c
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
je 0x54b404
cmp byte [eax], 0
je 0x54b454
push eax
push 0x132
push 0x68d420
call fcn.00425550
mov eax, 0x68d420
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x54b430
sub eax, edx
dec eax
test eax, eax
jle 0x54b454
mov edi, edi
cmp byte [eax + 0x68d420], bl
jne 0x54b454
mov byte [eax + 0x68d420], 0
dec eax
test eax, eax
jg 0x54b440
mov al, byte [0x68d420]
test al, al
jne 0x54b484
push 0x98
push ebp
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
push 0
call fcn.00421dc0
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
mov esi, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0x90
push ebp
call esi
dec eax
neg eax
sbb eax, eax
push 0x97
inc eax
push ebp
mov dword [0x68e9f8], eax
call esi
dec eax
neg eax
sbb eax, eax
push 0x92
inc eax
push ebp
mov dword [0x61a9c0], eax
call esi
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [0x61a9c8], eax
mov eax, dword [esp + 0x18]
push eax
call fcn.0054add0
mov al, byte [0x692578]
add esp, 4
test al, al
jne 0x54b4f6
push 0x460
push ebp
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
test ah, ah
jns 0x54b53e
push 0x53
call esi
test ah, ah
js 0x54b53e
push 9
push 0x692578
call fcn.005d9b20
add esp, 8
test eax, eax
jne 0x54b534
call fcn.00508b70
push eax
push 0xffffffffffffffff
push 0x692578
call fcn.00555340
add esp, 0xc
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret
push 0
push 0
push 0x147
push 0x9a
push ebp
call edi
cmp eax, 0xffffffff
jne 0x54b556
xor eax, eax
test eax, eax
mov ecx, 0x200
mov dword [0x61a9c4], ecx
jle 0x54b570
add ecx, ecx
dec eax
jne 0x54b565
mov dword [0x61a9c4], ecx
push ecx
call fcn.00545b20
add esp, 4
mov dword [0x61a9c4], eax
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret