Function at 0x526dbd
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x30
mov eax, 0
mov edx, dword [ebp + 0x14]
cmp eax, edx
jne 0x526ddf
mov eax, dword [ebp + 0x10]
cmp eax, 0x3e8
jge 0x526ddf
jmp 0x526de3
xor eax, eax
jmp 0x526de6
xor eax, eax
inc eax
cmp eax, 0
je 0x526e16
mov eax, 0
mov edx, dword [0x61f72c]
cmp eax, edx
sete al
xor ah, ah
cwde
xor al, 1
cmp eax, 0
je 0x526e16
push dword [ebp + 8]
call fcn.0052dc2f
jmp 0x5274d5
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
mov eax, 0
mov edx, dword [0x61f8a0]
cmp eax, edx
jne 0x526e32
call fcn.00526d70
jmp 0x526e3c
mov eax, dword [0x61f8a0]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sar eax, 0x10
cmp eax, 0
je 0x526eab
cmp eax, 3
je 0x52706f
cmp eax, 0x300
je 0x527128
cmp eax, 0x100
je 0x5271c2
cmp eax, 4
je 0x5271c2
cmp eax, 0x200
je 0x52729b
cmp eax, 1
je 0x5272ba
cmp eax, 5
je 0x527410
cmp eax, 0
je 0x527494
mov eax, 0
jmp 0x5274ae
push 0
push dword [0x61f8a0]
call fcn.00538ab9
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044e050
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
mov eax, dword [ebp - 0x24]
mov edx, dword [0x61ec58]
cmp eax, edx
jne 0x526eef
mov eax, 9
jmp 0x52703e
mov eax, dword [ebp - 0x24]
mov edx, dword [0x61ec64]
cmp eax, edx
jne 0x526f11
push dword [0x61f8a0]
call fcn.0053a67b
mov eax, 0x1a
jmp 0x52703e
mov eax, dword [ebp - 0x24]
mov edx, dword [0x61ec70]
cmp eax, edx
jne 0x526fbb
push 0xb
push dword [0x61f8a0]
call fcn.00538ab9
push eax
call fcn.0052228b
mov edx, eax
mov eax, 0x20000
and eax, edx
mov edx, eax
mov eax, 0
cmp eax, edx
je 0x526fa6
push 0
push 0
push 0xf0
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0
je 0x526f7d
cmp eax, 2
je 0x526f84
cmp eax, 1
je 0x526f8b
mov eax, 0
jmp 0x526f90
mov eax, 1
jmp 0x526f90
mov eax, 0
jmp 0x526f90
mov eax, 2
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xf1
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
push dword [0x61f8a0]
call fcn.0053a67b
mov eax, 0x1a
jmp 0x52703e
mov eax, dword [ebp - 0x24]
mov edx, dword [0x61ec7c]
cmp eax, edx
jne 0x527004
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov edx, eax
mov eax, 1
and eax, edx
mov edx, eax
mov eax, 1
cmp eax, edx
je 0x527004
push 9
call dword [sym.imp.USER32.DLL_GetKeyState]
and eax, 0x8000
cmp eax, 0
jne 0x527004
jmp 0x527008
xor eax, eax
jmp 0x52700b
xor eax, eax
inc eax
cmp eax, 0
je 0x527024
push dword [0x61f8a0]
call fcn.0053a67b
mov eax, 9
jmp 0x52703e
xor eax, eax
inc eax
je 0x527030
mov eax, 0
jmp 0x52703e
call fcn.00527035
push 0
push dword [0x61f8a0]
call fcn.00538ab9
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x61ec7c]
cmp eax, edx
jne 0x5270d3
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
xor edi, edi
cmp eax, 0
je 0x5270b7
inc edi
mov eax, edi
xor al, 1
cmp eax, 0
je 0x5270d1
push 0x1a
push 0
push dword [0x61f8a0]
call fcn.00526665
jmp 0x527123
push dword [ebp + 8]
call fcn.00538a1b
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x5270f9
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.0052544c
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
push 0
push dword [0x61f8a0]
call fcn.00538ab9
mov dword [ebp - 0xc], eax
push 0x11
push 0
push dword [0x61f8a0]
call fcn.00526665
jmp 0x5274ae
mov eax, 0
mov edx, dword [0x61f8a0]
cmp eax, edx
je 0x52714a
push dword [ebp + 8]
call fcn.00538950
cmp eax, 0
jne 0x52714a
xor eax, eax
jmp 0x52714d
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x5271b8
push dword [ebp - 0x30]
call fcn.00538950
xor al, 1
cmp eax, 0
je 0x5271b8
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
push 0x1a
push 0xffffffffffffffff
push dword [0x61f8a0]
call fcn.00526665
push 0
push dword [0x61f8a0]
call fcn.00538ab9
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x61ec94]
cmp eax, edx
jne 0x5271b8
push 0x10
push dword [ebp - 0x30]
call fcn.0053ca0a
push 0
push dword [ebp - 0x30]
call fcn.00538f9d
mov eax, 0
jmp 0x5274ae
push dword [ebp + 8]
call fcn.00538a1b
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x5271e8
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.0052544c
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
push 0
push dword [0x61f8a0]
call fcn.00538ab9
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044e050
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [0x61ec88]
cmp eax, edx
je 0x527233
mov eax, dword [ebp - 0x24]
mov edx, dword [0x61ec94]
cmp eax, edx
je 0x527233
xor eax, eax
jmp 0x527236
xor eax, eax
inc eax
cmp eax, 0
je 0x52724e
push dword [ebp - 0x30]
call fcn.00538a1b
push eax
push dword [ebp - 0x30]
call fcn.0053cc5d
mov eax, dword [ebp - 0x24]
mov edx, dword [0x61ecdc]
cmp eax, edx
je 0x52726c
mov eax, dword [ebp - 0x24]
mov edx, dword [0x61ecec]
cmp eax, edx
je 0x52726c
xor eax, eax
jmp 0x52726f
xor eax, eax
inc eax
cmp eax, 0
je 0x527287
push 0x12
push 0
push dword [0x61f8a0]
call fcn.00526665
jmp 0x527296
push 0x11
push 0
push dword [0x61f8a0]
call fcn.00526665
jmp 0x5274ae
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
push 0x12
push 0
push dword [0x61f8a0]
call fcn.00526665
jmp 0x5274ae
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
push dword [ebp - 0x30]
call fcn.00538a1b
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x61ecb0]
cmp eax, edx
jne 0x5272f5
mov eax, 0x188
jmp 0x5272fa
mov eax, 0x147
mov dword [ebp - 0x38], eax
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x527343
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x527343
jmp 0x527347
xor eax, eax
jmp 0x52734a
xor eax, eax
inc eax
cmp eax, 0
je 0x527356
jmp 0x5274d5
push 0x19
push dword [ebp - 0x1c]
push dword [0x61f8a0]
call fcn.00526665
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
add eax, 0xf0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 5
je 0x52738a
jmp 0x5274d5
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x5273c5
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x5273c5
jmp 0x5273c9
xor eax, eax
jmp 0x5273cc
xor eax, eax
inc eax
cmp eax, 0
je 0x5273d8
jmp 0x5274d5
mov eax, 0xb
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
inc eax
mov edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x20]
cmp eax, 1
jne 0x52740b
push 0x1a
push 0
push dword [0x61f8a0]
call fcn.00526665
jmp 0x5274ae
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
push 0
push dword [0x61f8a0]
call fcn.00538ab9
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x61ecb0]
cmp eax, edx
je 0x527455
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x61ec7c]
cmp eax, edx
je 0x527455
xor eax, eax
jmp 0x527458
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x527470
push 0x1a
push 0xffffffffffffffff
push dword [0x61f8a0]
call fcn.00526665
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x61ecb0]
cmp eax, edx
jne 0x527492
push 0x12
push 0
push dword [0x61f8a0]
call fcn.00526665
jmp 0x5274ae
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x61f8a0]
mov dword [eax], edx
push 1
push 0
push dword [0x61f8a0]
call fcn.00526665