Function at 0x52a3b6
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x30
mov eax, 0
mov edx, dword [ebp + 0x14]
cmp eax, edx
jne 0x52a3d8
mov eax, dword [ebp + 0x10]
cmp eax, 0x3e8
jge 0x52a3d8
jmp 0x52a3dc
xor eax, eax
jmp 0x52a3df
xor eax, eax
inc eax
cmp eax, 0
je 0x52a40f
mov eax, 0
mov edx, dword [0x5839b8]
cmp eax, edx
sete al
xor ah, ah
cwde
xor al, 1
cmp eax, 0
je 0x52a40f
push dword [ebp + 8]
call fcn.00531921
jmp 0x52aaed
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
mov eax, 0
mov edx, dword [0x583b30]
cmp eax, edx
jne 0x52a42b
call fcn.0052a369
jmp 0x52a435
mov eax, dword [0x583b30]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sar eax, 0x10
cmp eax, 0
je 0x52a4a4
cmp eax, 3
je 0x52a687
cmp eax, 0x300
je 0x52a740
cmp eax, 0x100
je 0x52a7da
cmp eax, 4
je 0x52a7da
cmp eax, 0x200
je 0x52a8b3
cmp eax, 1
je 0x52a8d2
cmp eax, 5
je 0x52aa28
cmp eax, 0
je 0x52aaac
mov eax, 0
jmp 0x52aac6
push 0
push dword [0x583b30]
call fcn.0053c8af
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044ebdc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
mov eax, dword [ebp - 0x24]
mov edx, dword [0x582e74]
cmp eax, edx
jne 0x52a4e8
mov eax, 9
jmp 0x52a637
mov eax, dword [ebp - 0x24]
mov edx, dword [0x582e80]
cmp eax, edx
jne 0x52a50a
push dword [0x583b30]
call fcn.0053e4ea
mov eax, 0x1a
jmp 0x52a637
mov eax, dword [ebp - 0x24]
mov edx, dword [0x582e8c]
cmp eax, edx
jne 0x52a5b4
push 0xb
push dword [0x583b30]
call fcn.0053c8af
push eax
call fcn.0052570c
mov edx, eax
mov eax, 0x20000
and eax, edx
mov edx, eax
mov eax, 0
cmp eax, edx
je 0x52a59f
push 0
push 0
push 0xf0
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0
je 0x52a576
cmp eax, 2
je 0x52a57d
cmp eax, 1
je 0x52a584
mov eax, 0
jmp 0x52a589
mov eax, 1
jmp 0x52a589
mov eax, 0
jmp 0x52a589
mov eax, 2
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xf1
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
push dword [0x583b30]
call fcn.0053e4ea
mov eax, 0x1a
jmp 0x52a637
mov eax, dword [ebp - 0x24]
mov edx, dword [0x582e98]
cmp eax, edx
jne 0x52a5fd
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov edx, eax
mov eax, 1
and eax, edx
mov edx, eax
mov eax, 1
cmp eax, edx
je 0x52a5fd
push 9
call dword [sym.imp.USER32.DLL_GetKeyState]
and eax, 0x8000
cmp eax, 0
jne 0x52a5fd
jmp 0x52a601
xor eax, eax
jmp 0x52a604
xor eax, eax
inc eax
cmp eax, 0
je 0x52a61d
push dword [0x583b30]
call fcn.0053e4ea
mov eax, 9
jmp 0x52a637
xor eax, eax
inc eax
je 0x52a629
mov eax, 0
jmp 0x52a637
call fcn.0052a62e
push 0
push dword [0x583b30]
call fcn.0053c8af
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x582e98]
cmp eax, edx
jne 0x52a6eb
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
xor edi, edi
cmp eax, 0
je 0x52a6cf
inc edi
mov eax, edi
xor al, 1
cmp eax, 0
je 0x52a6e9
push 0x1a
push 0
push dword [0x583b30]
call fcn.00529c2f
jmp 0x52a73b
push dword [ebp + 8]
call fcn.0053c811
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x52a711
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.00528a16
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
push 0
push dword [0x583b30]
call fcn.0053c8af
mov dword [ebp - 0xc], eax
push 0x11
push 0
push dword [0x583b30]
call fcn.00529c2f
jmp 0x52aac6
mov eax, 0
mov edx, dword [0x583b30]
cmp eax, edx
je 0x52a762
push dword [ebp + 8]
call fcn.0053c746
cmp eax, 0
jne 0x52a762
xor eax, eax
jmp 0x52a765
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x52a7d0
push dword [ebp - 0x30]
call fcn.0053c746
xor al, 1
cmp eax, 0
je 0x52a7d0
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
push 0x1a
push 0xffffffffffffffff
push dword [0x583b30]
call fcn.00529c2f
push 0
push dword [0x583b30]
call fcn.0053c8af
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x582eb0]
cmp eax, edx
jne 0x52a7d0
push 0x10
push dword [ebp - 0x30]
call fcn.005409ed
push 0
push dword [ebp - 0x30]
call fcn.0053cd93
mov eax, 0
jmp 0x52aac6
push dword [ebp + 8]
call fcn.0053c811
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x52a800
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.00528a16
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
push 0
push dword [0x583b30]
call fcn.0053c8af
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044ebdc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [0x582ea4]
cmp eax, edx
je 0x52a84b
mov eax, dword [ebp - 0x24]
mov edx, dword [0x582eb0]
cmp eax, edx
je 0x52a84b
xor eax, eax
jmp 0x52a84e
xor eax, eax
inc eax
cmp eax, 0
je 0x52a866
push dword [ebp - 0x30]
call fcn.0053c811
push eax
push dword [ebp - 0x30]
call fcn.00540c40
mov eax, dword [ebp - 0x24]
mov edx, dword [0x582ef8]
cmp eax, edx
je 0x52a884
mov eax, dword [ebp - 0x24]
mov edx, dword [0x582f08]
cmp eax, edx
je 0x52a884
xor eax, eax
jmp 0x52a887
xor eax, eax
inc eax
cmp eax, 0
je 0x52a89f
push 0x12
push 0
push dword [0x583b30]
call fcn.00529c2f
jmp 0x52a8ae
push 0x11
push 0
push dword [0x583b30]
call fcn.00529c2f
jmp 0x52aac6
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
push 0x12
push 0
push dword [0x583b30]
call fcn.00529c2f
jmp 0x52aac6
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
push dword [ebp - 0x30]
call fcn.0053c811
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x582ecc]
cmp eax, edx
jne 0x52a90d
mov eax, 0x188
jmp 0x52a912
mov eax, 0x147
mov dword [ebp - 0x38], eax
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x52a95b
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x52a95b
jmp 0x52a95f
xor eax, eax
jmp 0x52a962
xor eax, eax
inc eax
cmp eax, 0
je 0x52a96e
jmp 0x52aaed
push 0x19
push dword [ebp - 0x1c]
push dword [0x583b30]
call fcn.00529c2f
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
add eax, 0xf0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 5
je 0x52a9a2
jmp 0x52aaed
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x52a9dd
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x52a9dd
jmp 0x52a9e1
xor eax, eax
jmp 0x52a9e4
xor eax, eax
inc eax
cmp eax, 0
je 0x52a9f0
jmp 0x52aaed
mov eax, 0xb
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
inc eax
mov edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x20]
cmp eax, 1
jne 0x52aa23
push 0x1a
push 0
push dword [0x583b30]
call fcn.00529c2f
jmp 0x52aac6
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
push 0
push dword [0x583b30]
call fcn.0053c8af
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x582ecc]
cmp eax, edx
je 0x52aa6d
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x582e98]
cmp eax, edx
je 0x52aa6d
xor eax, eax
jmp 0x52aa70
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x52aa88
push 0x1a
push 0xffffffffffffffff
push dword [0x583b30]
call fcn.00529c2f
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x582ecc]
cmp eax, edx
jne 0x52aaaa
push 0x12
push 0
push dword [0x583b30]
call fcn.00529c2f
jmp 0x52aac6
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x583b30]
mov dword [eax], edx
push 1
push 0
push dword [0x583b30]
call fcn.00529c2f