Function at 0x52a1af
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x30
mov eax, 0
mov edx, dword [ebp + 0x14]
cmp eax, edx
jne 0x52a1d1
mov eax, dword [ebp + 0x10]
cmp eax, 0x3e8
jge 0x52a1d1
jmp 0x52a1d5
xor eax, eax
jmp 0x52a1d8
xor eax, eax
inc eax
cmp eax, 0
je 0x52a208
mov eax, 0
mov edx, dword [0x5828c0]
cmp eax, edx
sete al
xor ah, ah
cwde
xor al, 1
cmp eax, 0
je 0x52a208
push dword [ebp + 8]
call fcn.00531656
jmp 0x52a8e6
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
mov eax, 0
mov edx, dword [0x582a38]
cmp eax, edx
jne 0x52a224
call fcn.0052a162
jmp 0x52a22e
mov eax, dword [0x582a38]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sar eax, 0x10
cmp eax, 0
je 0x52a29d
cmp eax, 3
je 0x52a480
cmp eax, 0x300
je 0x52a539
cmp eax, 0x100
je 0x52a5d3
cmp eax, 4
je 0x52a5d3
cmp eax, 0x200
je 0x52a6ac
cmp eax, 1
je 0x52a6cb
cmp eax, 5
je 0x52a821
cmp eax, 0
je 0x52a8a5
mov eax, 0
jmp 0x52a8bf
push 0
push dword [0x582a38]
call fcn.0053c5e4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044ebdc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581d7c]
cmp eax, edx
jne 0x52a2e1
mov eax, 9
jmp 0x52a430
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581d88]
cmp eax, edx
jne 0x52a303
push dword [0x582a38]
call fcn.0053e21f
mov eax, 0x1a
jmp 0x52a430
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581d94]
cmp eax, edx
jne 0x52a3ad
push 0xb
push dword [0x582a38]
call fcn.0053c5e4
push eax
call fcn.00525512
mov edx, eax
mov eax, 0x20000
and eax, edx
mov edx, eax
mov eax, 0
cmp eax, edx
je 0x52a398
push 0
push 0
push 0xf0
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0
je 0x52a36f
cmp eax, 2
je 0x52a376
cmp eax, 1
je 0x52a37d
mov eax, 0
jmp 0x52a382
mov eax, 1
jmp 0x52a382
mov eax, 0
jmp 0x52a382
mov eax, 2
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xf1
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
push dword [0x582a38]
call fcn.0053e21f
mov eax, 0x1a
jmp 0x52a430
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581da0]
cmp eax, edx
jne 0x52a3f6
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov edx, eax
mov eax, 1
and eax, edx
mov edx, eax
mov eax, 1
cmp eax, edx
je 0x52a3f6
push 9
call dword [sym.imp.USER32.DLL_GetKeyState]
and eax, 0x8000
cmp eax, 0
jne 0x52a3f6
jmp 0x52a3fa
xor eax, eax
jmp 0x52a3fd
xor eax, eax
inc eax
cmp eax, 0
je 0x52a416
push dword [0x582a38]
call fcn.0053e21f
mov eax, 9
jmp 0x52a430
xor eax, eax
inc eax
je 0x52a422
mov eax, 0
jmp 0x52a430
call fcn.0052a427
push 0
push dword [0x582a38]
call fcn.0053c5e4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581da0]
cmp eax, edx
jne 0x52a4e4
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
xor edi, edi
cmp eax, 0
je 0x52a4c8
inc edi
mov eax, edi
xor al, 1
cmp eax, 0
je 0x52a4e2
push 0x1a
push 0
push dword [0x582a38]
call fcn.00529a35
jmp 0x52a534
push dword [ebp + 8]
call fcn.0053c546
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x52a50a
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.0052881c
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
push 0
push dword [0x582a38]
call fcn.0053c5e4
mov dword [ebp - 0xc], eax
push 0x11
push 0
push dword [0x582a38]
call fcn.00529a35
jmp 0x52a8bf
mov eax, 0
mov edx, dword [0x582a38]
cmp eax, edx
je 0x52a55b
push dword [ebp + 8]
call fcn.0053c47b
cmp eax, 0
jne 0x52a55b
xor eax, eax
jmp 0x52a55e
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x52a5c9
push dword [ebp - 0x30]
call fcn.0053c47b
xor al, 1
cmp eax, 0
je 0x52a5c9
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
push 0x1a
push 0xffffffffffffffff
push dword [0x582a38]
call fcn.00529a35
push 0
push dword [0x582a38]
call fcn.0053c5e4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581db8]
cmp eax, edx
jne 0x52a5c9
push 0x10
push dword [ebp - 0x30]
call fcn.00540722
push 0
push dword [ebp - 0x30]
call fcn.0053cac8
mov eax, 0
jmp 0x52a8bf
push dword [ebp + 8]
call fcn.0053c546
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x52a5f9
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.0052881c
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
push 0
push dword [0x582a38]
call fcn.0053c5e4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044ebdc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581dac]
cmp eax, edx
je 0x52a644
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581db8]
cmp eax, edx
je 0x52a644
xor eax, eax
jmp 0x52a647
xor eax, eax
inc eax
cmp eax, 0
je 0x52a65f
push dword [ebp - 0x30]
call fcn.0053c546
push eax
push dword [ebp - 0x30]
call fcn.00540975
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581e00]
cmp eax, edx
je 0x52a67d
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581e10]
cmp eax, edx
je 0x52a67d
xor eax, eax
jmp 0x52a680
xor eax, eax
inc eax
cmp eax, 0
je 0x52a698
push 0x12
push 0
push dword [0x582a38]
call fcn.00529a35
jmp 0x52a6a7
push 0x11
push 0
push dword [0x582a38]
call fcn.00529a35
jmp 0x52a8bf
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
push 0x12
push 0
push dword [0x582a38]
call fcn.00529a35
jmp 0x52a8bf
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
push dword [ebp - 0x30]
call fcn.0053c546
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581dd4]
cmp eax, edx
jne 0x52a706
mov eax, 0x188
jmp 0x52a70b
mov eax, 0x147
mov dword [ebp - 0x38], eax
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x52a754
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x52a754
jmp 0x52a758
xor eax, eax
jmp 0x52a75b
xor eax, eax
inc eax
cmp eax, 0
je 0x52a767
jmp 0x52a8e6
push 0x19
push dword [ebp - 0x1c]
push dword [0x582a38]
call fcn.00529a35
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
add eax, 0xf0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 5
je 0x52a79b
jmp 0x52a8e6
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x52a7d6
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x52a7d6
jmp 0x52a7da
xor eax, eax
jmp 0x52a7dd
xor eax, eax
inc eax
cmp eax, 0
je 0x52a7e9
jmp 0x52a8e6
mov eax, 0xb
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
inc eax
mov edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x20]
cmp eax, 1
jne 0x52a81c
push 0x1a
push 0
push dword [0x582a38]
call fcn.00529a35
jmp 0x52a8bf
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
push 0
push dword [0x582a38]
call fcn.0053c5e4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581dd4]
cmp eax, edx
je 0x52a866
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581da0]
cmp eax, edx
je 0x52a866
xor eax, eax
jmp 0x52a869
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x52a881
push 0x1a
push 0xffffffffffffffff
push dword [0x582a38]
call fcn.00529a35
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581dd4]
cmp eax, edx
jne 0x52a8a3
push 0x12
push 0
push dword [0x582a38]
call fcn.00529a35
jmp 0x52a8bf
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a38]
mov dword [eax], edx
push 1
push 0
push dword [0x582a38]
call fcn.00529a35