Function at 0x534338
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x38], ecx
mov esi, edx
xor eax, eax
push ebp
push 0x534619
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], 0x7fffffff
mov byte [ebp - 5], 0
mov byte [ebp - 6], 0
mov byte [ebp - 7], 0
mov byte [ebp - 8], 0
xor ebx, ebx
mov eax, esi
call fcn.0040adc0
mov edi, eax
cmp edi, dword [ebp - 0x18]
jle 0x53438a
mov edi, dword [ebp - 0x18]
test edi, edi
je 0x534603
jmp 0x5345e8
xor eax, eax
mov al, byte [esi + ebx]
cmp eax, 0x2b
jg 0x5343b5
je 0x5343ff
sub eax, 0x25
je 0x5343e8
sub eax, 3
je 0x5343cd
dec eax
je 0x5343d7
jmp 0x5345b3
sub eax, 0x5e
je 0x534416
sub eax, 0x1d
je 0x53442d
sub eax, 3
je 0x53459c
jmp 0x5345b3
mov byte [ebp - 5], 1
inc ebx
jmp 0x5345e8
mov byte [ebp - 5], 0
push ebp
call fcn.005342e4
pop ecx
inc ebx
jmp 0x5345e8
mov byte [ebp - 8], 1
xor ecx, ecx
mov dx, 1
mov al, 0x12
call fcn.00534080
inc ebx
jmp 0x5345e8
mov byte [ebp - 6], 1
xor ecx, ecx
mov dx, 1
mov al, 0x10
call fcn.00534080
inc ebx
jmp 0x5345e8
mov byte [ebp - 7], 1
xor ecx, ecx
mov dx, 1
mov al, 0x11
call fcn.00534080
inc ebx
jmp 0x5345e8
mov word [ebp - 0x1a], 1
cmp byte [esi + ebx + 1], 0x7b
jne 0x534468
mov word [ebp - 0xa], 0xdb
lea eax, [ebp - 9]
mov dl, 1
call fcn.00534070
mov cl, 1
mov dx, 1
mov ax, word [ebp - 0xa]
call fcn.00534144
push ebp
call fcn.005342e4
pop ecx
add ebx, 3
jmp 0x5345e8
mov byte [ebp - 0x2f], 0
mov byte [ebp - 0x11], 0
cmp edi, ebx
jl 0x5344a6
inc ebx
cmp byte [esi + ebx], 0x7d
jne 0x534482
mov byte [ebp - 0x11], 1
inc ebx
jmp 0x5344a6
mov al, byte [esi + ebx]
call fcn.00403204
mov edx, eax
lea eax, [ebp - 0x34]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x34]
lea eax, [ebp - 0x2f]
mov cl, 0x14
call fcn.004036c0
cmp edi, ebx
jge 0x534474
cmp byte [ebp - 0x11], 0
jne 0x5344b8
mov dword [ebp - 4], 0xfffffff2
jmp 0x5345f6
cmp byte [esi + ebx], 0x7d
jne 0x5344ea
mov word [ebp - 0xa], 0xdd
lea eax, [ebp - 9]
mov dl, 1
call fcn.00534070
mov cl, 1
mov dx, 1
mov ax, word [ebp - 0xa]
call fcn.00534144
push ebp
call fcn.005342e4
pop ecx
inc ebx
jmp 0x5345e8
lea edx, [ebp - 0x2f]
mov eax, 0x53462c
call fcn.0040319c
mov byte [ebp - 0x12], al
cmp byte [ebp - 0x12], 0
je 0x534559
lea eax, [ebp - 0x50]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x2f]
xor eax, eax
mov al, byte [ebp - 0x12]
sub ecx, eax
xor edx, edx
mov dl, byte [ebp - 0x12]
inc edx
lea eax, [ebp - 0x2f]
call fcn.00402e50
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x38]
call fcn.00405258
mov eax, dword [ebp - 0x38]
call fcn.0040a148
mov word [ebp - 0x1a], ax
lea eax, [ebp - 0x50]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x12]
dec ecx
mov edx, 1
lea eax, [ebp - 0x2f]
call fcn.00402e50
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x2f]
mov cl, 0x14
call fcn.004036fc
cmp byte [ebp - 0x2f], 1
jne 0x53456e
mov al, byte [ebp - 0x2e]
push eax
call sub.user32.dll_VkKeyScanA
mov word [ebp - 0xa], ax
jmp 0x53457c
push ebp
lea eax, [ebp - 0x2f]
call fcn.005341f8
pop ecx
mov word [ebp - 0xa], ax
cmp word [ebp - 0xa], 0xffff
je 0x5345e8
mov cl, 1
mov dx, word [ebp - 0x1a]
mov ax, word [ebp - 0xa]
call fcn.00534144
push ebp
call fcn.005342e4
pop ecx
jmp 0x5345e8
mov cl, 1
mov dx, 1
mov al, 0xd
call fcn.00534080
push ebp
call fcn.005342e4
pop ecx
inc ebx
jmp 0x5345e8
mov al, byte [esi + ebx]
push eax
call sub.user32.dll_VkKeyScanA
mov word [ebp - 0xa], ax
cmp word [ebp - 0xa], 0xffff
je 0x5345e0
mov cl, 1
mov dx, 1
mov ax, word [ebp - 0xa]
call fcn.00534144
push ebp
call fcn.005342e4
pop ecx
jmp 0x5345e7
mov dword [ebp - 4], 0xfffffff3
inc ebx
cmp edi, ebx
jle 0x5345f6
cmp dword [ebp - 4], 0
je 0x534397
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
push ebp
call fcn.005342e4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x534620
lea eax, [ebp - 0x38]
call fcn.00404ff4
ret