Function at 0x5294a4
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x30
mov eax, 0
mov edx, dword [ebp + 0x14]
cmp eax, edx
jne 0x5294c6
mov eax, dword [ebp + 0x10]
cmp eax, 0x3e8
jge 0x5294c6
jmp 0x5294ca
xor eax, eax
jmp 0x5294cd
xor eax, eax
inc eax
cmp eax, 0
je 0x5294fd
mov eax, 0
mov edx, dword [0x5803c4]
cmp eax, edx
sete al
xor ah, ah
cwde
xor al, 1
cmp eax, 0
je 0x5294fd
push dword [ebp + 8]
call fcn.005303f5
jmp 0x529bdb
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
mov eax, 0
mov edx, dword [0x580538]
cmp eax, edx
jne 0x529519
call fcn.00529457
jmp 0x529523
mov eax, dword [0x580538]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sar eax, 0x10
cmp eax, 0
je 0x529592
cmp eax, 3
je 0x529775
cmp eax, 0x300
je 0x52982e
cmp eax, 0x100
je 0x5298c8
cmp eax, 4
je 0x5298c8
cmp eax, 0x200
je 0x5299a1
cmp eax, 1
je 0x5299c0
cmp eax, 5
je 0x529b16
cmp eax, 0
je 0x529b9a
mov eax, 0
jmp 0x529bb4
push 0
push dword [0x580538]
call fcn.0053b311
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044e3f8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f8e0]
cmp eax, edx
jne 0x5295d6
mov eax, 9
jmp 0x529725
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f8ec]
cmp eax, edx
jne 0x5295f8
push dword [0x580538]
call fcn.0053cebb
mov eax, 0x1a
jmp 0x529725
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f8f8]
cmp eax, edx
jne 0x5296a2
push 0xb
push dword [0x580538]
call fcn.0053b311
push eax
call fcn.00524863
mov edx, eax
mov eax, 0x20000
and eax, edx
mov edx, eax
mov eax, 0
cmp eax, edx
je 0x52968d
push 0
push 0
push 0xf0
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0
je 0x529664
cmp eax, 2
je 0x52966b
cmp eax, 1
je 0x529672
mov eax, 0
jmp 0x529677
mov eax, 1
jmp 0x529677
mov eax, 0
jmp 0x529677
mov eax, 2
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xf1
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
push dword [0x580538]
call fcn.0053cebb
mov eax, 0x1a
jmp 0x529725
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f904]
cmp eax, edx
jne 0x5296eb
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov edx, eax
mov eax, 1
and eax, edx
mov edx, eax
mov eax, 1
cmp eax, edx
je 0x5296eb
push 9
call dword [sym.imp.USER32.DLL_GetKeyState]
and eax, 0x8000
cmp eax, 0
jne 0x5296eb
jmp 0x5296ef
xor eax, eax
jmp 0x5296f2
xor eax, eax
inc eax
cmp eax, 0
je 0x52970b
push dword [0x580538]
call fcn.0053cebb
mov eax, 9
jmp 0x529725
xor eax, eax
inc eax
je 0x529717
mov eax, 0
jmp 0x529725
call fcn.0052971c
push 0
push dword [0x580538]
call fcn.0053b311
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f904]
cmp eax, edx
jne 0x5297d9
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
xor edi, edi
cmp eax, 0
je 0x5297bd
inc edi
mov eax, edi
xor al, 1
cmp eax, 0
je 0x5297d7
push 0x1a
push 0
push dword [0x580538]
call fcn.00528d4c
jmp 0x529829
push dword [ebp + 8]
call fcn.0053b273
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x5297ff
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.00527b33
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
push 0
push dword [0x580538]
call fcn.0053b311
mov dword [ebp - 0xc], eax
push 0x11
push 0
push dword [0x580538]
call fcn.00528d4c
jmp 0x529bb4
mov eax, 0
mov edx, dword [0x580538]
cmp eax, edx
je 0x529850
push dword [ebp + 8]
call fcn.0053b1a8
cmp eax, 0
jne 0x529850
xor eax, eax
jmp 0x529853
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x5298be
push dword [ebp - 0x30]
call fcn.0053b1a8
xor al, 1
cmp eax, 0
je 0x5298be
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
push 0x1a
push 0xffffffffffffffff
push dword [0x580538]
call fcn.00528d4c
push 0
push dword [0x580538]
call fcn.0053b311
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f91c]
cmp eax, edx
jne 0x5298be
push 0x10
push dword [ebp - 0x30]
call fcn.0053f2a7
push 0
push dword [ebp - 0x30]
call fcn.0053b7f5
mov eax, 0
jmp 0x529bb4
push dword [ebp + 8]
call fcn.0053b273
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x5298ee
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.00527b33
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
push 0
push dword [0x580538]
call fcn.0053b311
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044e3f8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f910]
cmp eax, edx
je 0x529939
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f91c]
cmp eax, edx
je 0x529939
xor eax, eax
jmp 0x52993c
xor eax, eax
inc eax
cmp eax, 0
je 0x529954
push dword [ebp - 0x30]
call fcn.0053b273
push eax
push dword [ebp - 0x30]
call fcn.0053f4fa
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f964]
cmp eax, edx
je 0x529972
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f974]
cmp eax, edx
je 0x529972
xor eax, eax
jmp 0x529975
xor eax, eax
inc eax
cmp eax, 0
je 0x52998d
push 0x12
push 0
push dword [0x580538]
call fcn.00528d4c
jmp 0x52999c
push 0x11
push 0
push dword [0x580538]
call fcn.00528d4c
jmp 0x529bb4
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
push 0x12
push 0
push dword [0x580538]
call fcn.00528d4c
jmp 0x529bb4
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
push dword [ebp - 0x30]
call fcn.0053b273
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f938]
cmp eax, edx
jne 0x5299fb
mov eax, 0x188
jmp 0x529a00
mov eax, 0x147
mov dword [ebp - 0x38], eax
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x529a49
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x529a49
jmp 0x529a4d
xor eax, eax
jmp 0x529a50
xor eax, eax
inc eax
cmp eax, 0
je 0x529a5c
jmp 0x529bdb
push 0x19
push dword [ebp - 0x1c]
push dword [0x580538]
call fcn.00528d4c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
add eax, 0xf0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 5
je 0x529a90
jmp 0x529bdb
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x529acb
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x529acb
jmp 0x529acf
xor eax, eax
jmp 0x529ad2
xor eax, eax
inc eax
cmp eax, 0
je 0x529ade
jmp 0x529bdb
mov eax, 0xb
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
inc eax
mov edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x20]
cmp eax, 1
jne 0x529b11
push 0x1a
push 0
push dword [0x580538]
call fcn.00528d4c
jmp 0x529bb4
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
push 0
push dword [0x580538]
call fcn.0053b311
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f938]
cmp eax, edx
je 0x529b5b
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f904]
cmp eax, edx
je 0x529b5b
xor eax, eax
jmp 0x529b5e
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x529b76
push 0x1a
push 0xffffffffffffffff
push dword [0x580538]
call fcn.00528d4c
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f938]
cmp eax, edx
jne 0x529b98
push 0x12
push 0
push dword [0x580538]
call fcn.00528d4c
jmp 0x529bb4
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580538]
mov dword [eax], edx
push 1
push 0
push dword [0x580538]
call fcn.00528d4c