Function at 0x45a14b
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov esi, 0x54b200
call sub.USER32.dll_GetFocus
mov edi, eax
mov dword [0x54b204], edi
test edi, edi
jne 0x45a178
push 0
call fcn.00415bea
xor eax, eax
jmp 0x45a612
push 0x14
push 0x54b218
push dword [0x54b204]
call sub.USER32.dll_GetClassNameA
push str.edit
push 0x54b218
call fcn.005185a0
add esp, 8
test eax, eax
je 0x45a1c4
push 0x52d18a
push 0x54b218
call fcn.005185a0
add esp, 8
test eax, eax
je 0x45a1c4
push 0
call fcn.00415bea
xor eax, eax
jmp 0x45a612
push 0xfffffffffffffff0
push dword [0x54b204]
call sub.USER32.dll_GetWindowLongA
mov edi, eax
mov dword [0x54b22c], edi
test edi, 0x800
je 0x45a1e8
xor eax, eax
jmp 0x45a612
push dword [0x54b204]
call sub.USER32.dll_GetParent
mov edi, eax
mov dword [0x54b208], edi
push edi
call fcn.004f9c59
test eax, eax
je 0x45a214
mov dword [0x54b214], 1
jmp 0x45a2e7
mov eax, dword [0x54b208]
cmp eax, dword [0x535730]
je 0x45a266
mov edi, dword [0x54b208]
cmp edi, dword [0x5296a8]
je 0x45a266
push edi
call sub.USER32.dll_GetParent
cmp eax, dword [0x5296a8]
je 0x45a266
mov eax, dword [0x54b208]
cmp eax, dword [0x52cc78]
je 0x45a266
mov edx, dword [0x54b208]
cmp edx, dword [0x52e0f8]
je 0x45a266
mov ecx, dword [0x54b208]
cmp ecx, dword [0x52e110]
jne 0x45a272
mov dword [0x54b214], 2
jmp 0x45a2e7
cmp dword [0x52e0f8], 0
je 0x45a29a
push dword [0x54b208]
call sub.USER32.dll_GetParent
cmp eax, dword [0x52e0f8]
jne 0x45a29a
mov dword [0x54b214], 2
jmp 0x45a2e7
mov eax, dword [0x52bc48]
mov dword [esi], eax
jmp 0x45a2cc
mov edx, dword [esi]
mov edi, dword [edx + 0xc8]
cmp edi, dword [0x54b208]
je 0x45a2d1
push dword [0x54b208]
call sub.USER32.dll_GetParent
cmp edi, eax
je 0x45a2d1
mov eax, dword [esi]
mov edx, dword [eax + 0xffc]
mov dword [esi], edx
cmp dword [esi], 0
jne 0x45a2a3
cmp dword [esi], 0
jne 0x45a2dd
xor eax, eax
jmp 0x45a612
mov dword [0x54b214], 2
cmp bl, 3
jne 0x45a306
cmp dword [0x52a36c], 0
je 0x45a306
push dword [0x54b214]
push dword [0x54b204]
call fcn.00426006
push 0
push 0
push 0xb0
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
mov esi, eax
mov dword [0x54b22c], esi
movzx edx, word [0x54b22c]
mov dword [0x54b20c], edx
mov eax, esi
shr eax, 0x10
and ax, 0xffff
movzx eax, ax
mov dword [0x54b210], eax
cmp edx, eax
jne 0x45a446
cmp bl, 3
jne 0x45a38c
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x45a373
xor eax, eax
mov al, bl
push eax
push eax
push 0x52d194
push 0x54b218
call sub.USER32.dll_wsprintfA
add esp, 0x10
jmp 0x45a3c9
xor edx, edx
mov dl, bl
push edx
push 0x52d19a
push 0x54b218
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x45a3c9
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x45a3b2
xor eax, eax
mov al, bl
push eax
push eax
push str._c_c
push 0x54b218
call sub.USER32.dll_wsprintfA
add esp, 0x10
jmp 0x45a3c9
xor edx, edx
mov dl, bl
push edx
push 0x52d1a4
push 0x54b218
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov eax, dword [0x54b20c]
push eax
push eax
push 0xb1
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0x54b218
push 0
push 0xc2
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
inc dword [0x54b20c]
mov eax, dword [0x54b20c]
push eax
push eax
push 0xb1
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
mov eax, 1
jmp 0x45a612
cmp bl, 3
jne 0x45a545
mov esi, ebx
and esi, 0xff
push esi
push 0x52d1a8
push 0x54b218
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov eax, dword [0x54b210]
push eax
push eax
push 0xb1
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0x54b218
push 0
push 0xc2
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push esi
push 0x52d1ac
push 0x54b218
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov eax, dword [0x54b20c]
push eax
push eax
push 0xb1
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0x54b218
push 0
push 0xc2
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0x54b218
call fcn.005183dc
pop ecx
mov ebx, eax
add ebx, dword [0x54b20c]
mov dword [0x54b20c], ebx
push ebx
push ebx
push 0xb1
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
jmp 0x45a60d
mov esi, ebx
and esi, 0xff
push esi
push 0x52d1b0
push 0x54b218
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov eax, dword [0x54b20c]
push eax
push eax
push 0xb1
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0x54b218
push 0
push 0xc2
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0x54b218
call fcn.005183dc
pop ecx
add eax, dword [0x54b210]
mov dword [0x54b210], eax
push esi
push 0x52d1b4
push 0x54b218
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov eax, dword [0x54b210]
push eax
push eax
push 0xb1
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
push 0x54b218
push 0
push 0xc2
push dword [0x54b204]
call sub.USER32.dll_SendMessageA
mov eax, 1
pop edi
pop esi
pop ebx
pop ebp
ret 4