Function at 0x5293dd
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x30
mov eax, 0
mov edx, dword [ebp + 0x14]
cmp eax, edx
jne 0x5293ff
mov eax, dword [ebp + 0x10]
cmp eax, 0x3e8
jge 0x5293ff
jmp 0x529403
xor eax, eax
jmp 0x529406
xor eax, eax
inc eax
cmp eax, 0
je 0x529436
mov eax, 0
mov edx, dword [0x5803ac]
cmp eax, edx
sete al
xor ah, ah
cwde
xor al, 1
cmp eax, 0
je 0x529436
push dword [ebp + 8]
call fcn.0053030d
jmp 0x529b14
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
mov eax, 0
mov edx, dword [0x580520]
cmp eax, edx
jne 0x529452
call fcn.00529390
jmp 0x52945c
mov eax, dword [0x580520]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sar eax, 0x10
cmp eax, 0
je 0x5294cb
cmp eax, 3
je 0x5296ae
cmp eax, 0x300
je 0x529767
cmp eax, 0x100
je 0x529801
cmp eax, 4
je 0x529801
cmp eax, 0x200
je 0x5298da
cmp eax, 1
je 0x5298f9
cmp eax, 5
je 0x529a4f
cmp eax, 0
je 0x529ad3
mov eax, 0
jmp 0x529aed
push 0
push dword [0x580520]
call fcn.0053b21e
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044e3f8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f8d8]
cmp eax, edx
jne 0x52950f
mov eax, 9
jmp 0x52965e
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f8e4]
cmp eax, edx
jne 0x529531
push dword [0x580520]
call fcn.0053cdbd
mov eax, 0x1a
jmp 0x52965e
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f8f0]
cmp eax, edx
jne 0x5295db
push 0xb
push dword [0x580520]
call fcn.0053b21e
push eax
call fcn.00524863
mov edx, eax
mov eax, 0x20000
and eax, edx
mov edx, eax
mov eax, 0
cmp eax, edx
je 0x5295c6
push 0
push 0
push 0xf0
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0
je 0x52959d
cmp eax, 2
je 0x5295a4
cmp eax, 1
je 0x5295ab
mov eax, 0
jmp 0x5295b0
mov eax, 1
jmp 0x5295b0
mov eax, 0
jmp 0x5295b0
mov eax, 2
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xf1
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
push dword [0x580520]
call fcn.0053cdbd
mov eax, 0x1a
jmp 0x52965e
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f8fc]
cmp eax, edx
jne 0x529624
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov edx, eax
mov eax, 1
and eax, edx
mov edx, eax
mov eax, 1
cmp eax, edx
je 0x529624
push 9
call dword [sym.imp.USER32.DLL_GetKeyState]
and eax, 0x8000
cmp eax, 0
jne 0x529624
jmp 0x529628
xor eax, eax
jmp 0x52962b
xor eax, eax
inc eax
cmp eax, 0
je 0x529644
push dword [0x580520]
call fcn.0053cdbd
mov eax, 9
jmp 0x52965e
xor eax, eax
inc eax
je 0x529650
mov eax, 0
jmp 0x52965e
call fcn.00529655
push 0
push dword [0x580520]
call fcn.0053b21e
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f8fc]
cmp eax, edx
jne 0x529712
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
xor edi, edi
cmp eax, 0
je 0x5296f6
inc edi
mov eax, edi
xor al, 1
cmp eax, 0
je 0x529710
push 0x1a
push 0
push dword [0x580520]
call fcn.00528c85
jmp 0x529762
push dword [ebp + 8]
call fcn.0053b180
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x529738
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.00527a6c
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
push 0
push dword [0x580520]
call fcn.0053b21e
mov dword [ebp - 0xc], eax
push 0x11
push 0
push dword [0x580520]
call fcn.00528c85
jmp 0x529aed
mov eax, 0
mov edx, dword [0x580520]
cmp eax, edx
je 0x529789
push dword [ebp + 8]
call fcn.0053b0b5
cmp eax, 0
jne 0x529789
xor eax, eax
jmp 0x52978c
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x5297f7
push dword [ebp - 0x30]
call fcn.0053b0b5
xor al, 1
cmp eax, 0
je 0x5297f7
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
push 0x1a
push 0xffffffffffffffff
push dword [0x580520]
call fcn.00528c85
push 0
push dword [0x580520]
call fcn.0053b21e
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f914]
cmp eax, edx
jne 0x5297f7
push 0x10
push dword [ebp - 0x30]
call fcn.0053f1a9
push 0
push dword [ebp - 0x30]
call fcn.0053b702
mov eax, 0
jmp 0x529aed
push dword [ebp + 8]
call fcn.0053b180
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x529827
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.00527a6c
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
push 0
push dword [0x580520]
call fcn.0053b21e
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044e3f8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f908]
cmp eax, edx
je 0x529872
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f914]
cmp eax, edx
je 0x529872
xor eax, eax
jmp 0x529875
xor eax, eax
inc eax
cmp eax, 0
je 0x52988d
push dword [ebp - 0x30]
call fcn.0053b180
push eax
push dword [ebp - 0x30]
call fcn.0053f3fc
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f95c]
cmp eax, edx
je 0x5298ab
mov eax, dword [ebp - 0x24]
mov edx, dword [0x57f96c]
cmp eax, edx
je 0x5298ab
xor eax, eax
jmp 0x5298ae
xor eax, eax
inc eax
cmp eax, 0
je 0x5298c6
push 0x12
push 0
push dword [0x580520]
call fcn.00528c85
jmp 0x5298d5
push 0x11
push 0
push dword [0x580520]
call fcn.00528c85
jmp 0x529aed
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
push 0x12
push 0
push dword [0x580520]
call fcn.00528c85
jmp 0x529aed
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
push dword [ebp - 0x30]
call fcn.0053b180
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f930]
cmp eax, edx
jne 0x529934
mov eax, 0x188
jmp 0x529939
mov eax, 0x147
mov dword [ebp - 0x38], eax
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x529982
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x529982
jmp 0x529986
xor eax, eax
jmp 0x529989
xor eax, eax
inc eax
cmp eax, 0
je 0x529995
jmp 0x529b14
push 0x19
push dword [ebp - 0x1c]
push dword [0x580520]
call fcn.00528c85
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
add eax, 0xf0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 5
je 0x5299c9
jmp 0x529b14
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x529a04
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x529a04
jmp 0x529a08
xor eax, eax
jmp 0x529a0b
xor eax, eax
inc eax
cmp eax, 0
je 0x529a17
jmp 0x529b14
mov eax, 0xb
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
inc eax
mov edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x20]
cmp eax, 1
jne 0x529a4a
push 0x1a
push 0
push dword [0x580520]
call fcn.00528c85
jmp 0x529aed
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
push 0
push dword [0x580520]
call fcn.0053b21e
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f930]
cmp eax, edx
je 0x529a94
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f8fc]
cmp eax, edx
je 0x529a94
xor eax, eax
jmp 0x529a97
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x529aaf
push 0x1a
push 0xffffffffffffffff
push dword [0x580520]
call fcn.00528c85
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x57f930]
cmp eax, edx
jne 0x529ad1
push 0x12
push 0
push dword [0x580520]
call fcn.00528c85
jmp 0x529aed
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x580520]
mov dword [eax], edx
push 1
push 0
push dword [0x580520]
call fcn.00528c85