Function at 0x52a14e
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x30
mov eax, 0
mov edx, dword [ebp + 0x14]
cmp eax, edx
jne 0x52a170
mov eax, dword [ebp + 0x10]
cmp eax, 0x3e8
jge 0x52a170
jmp 0x52a174
xor eax, eax
jmp 0x52a177
xor eax, eax
inc eax
cmp eax, 0
je 0x52a1a7
mov eax, 0
mov edx, dword [0x5828d0]
cmp eax, edx
sete al
xor ah, ah
cwde
xor al, 1
cmp eax, 0
je 0x52a1a7
push dword [ebp + 8]
call fcn.005316b9
jmp 0x52a885
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
mov eax, 0
mov edx, dword [0x582a48]
cmp eax, edx
jne 0x52a1c3
call fcn.0052a101
jmp 0x52a1cd
mov eax, dword [0x582a48]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sar eax, 0x10
cmp eax, 0
je 0x52a23c
cmp eax, 3
je 0x52a41f
cmp eax, 0x300
je 0x52a4d8
cmp eax, 0x100
je 0x52a572
cmp eax, 4
je 0x52a572
cmp eax, 0x200
je 0x52a64b
cmp eax, 1
je 0x52a66a
cmp eax, 5
je 0x52a7c0
cmp eax, 0
je 0x52a844
mov eax, 0
jmp 0x52a85e
push 0
push dword [0x582a48]
call fcn.0053c647
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044ebdc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581d8c]
cmp eax, edx
jne 0x52a280
mov eax, 9
jmp 0x52a3cf
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581d98]
cmp eax, edx
jne 0x52a2a2
push dword [0x582a48]
call fcn.0053e282
mov eax, 0x1a
jmp 0x52a3cf
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581da4]
cmp eax, edx
jne 0x52a34c
push 0xb
push dword [0x582a48]
call fcn.0053c647
push eax
call fcn.005254a4
mov edx, eax
mov eax, 0x20000
and eax, edx
mov edx, eax
mov eax, 0
cmp eax, edx
je 0x52a337
push 0
push 0
push 0xf0
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0
je 0x52a30e
cmp eax, 2
je 0x52a315
cmp eax, 1
je 0x52a31c
mov eax, 0
jmp 0x52a321
mov eax, 1
jmp 0x52a321
mov eax, 0
jmp 0x52a321
mov eax, 2
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xf1
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
push dword [0x582a48]
call fcn.0053e282
mov eax, 0x1a
jmp 0x52a3cf
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581db0]
cmp eax, edx
jne 0x52a395
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov edx, eax
mov eax, 1
and eax, edx
mov edx, eax
mov eax, 1
cmp eax, edx
je 0x52a395
push 9
call dword [sym.imp.USER32.DLL_GetKeyState]
and eax, 0x8000
cmp eax, 0
jne 0x52a395
jmp 0x52a399
xor eax, eax
jmp 0x52a39c
xor eax, eax
inc eax
cmp eax, 0
je 0x52a3b5
push dword [0x582a48]
call fcn.0053e282
mov eax, 9
jmp 0x52a3cf
xor eax, eax
inc eax
je 0x52a3c1
mov eax, 0
jmp 0x52a3cf
call fcn.0052a3c6
push 0
push dword [0x582a48]
call fcn.0053c647
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581db0]
cmp eax, edx
jne 0x52a483
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
xor edi, edi
cmp eax, 0
je 0x52a467
inc edi
mov eax, edi
xor al, 1
cmp eax, 0
je 0x52a481
push 0x1a
push 0
push dword [0x582a48]
call fcn.005299c7
jmp 0x52a4d3
push dword [ebp + 8]
call fcn.0053c5a9
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x52a4a9
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.005287ae
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
push 0
push dword [0x582a48]
call fcn.0053c647
mov dword [ebp - 0xc], eax
push 0x11
push 0
push dword [0x582a48]
call fcn.005299c7
jmp 0x52a85e
mov eax, 0
mov edx, dword [0x582a48]
cmp eax, edx
je 0x52a4fa
push dword [ebp + 8]
call fcn.0053c4de
cmp eax, 0
jne 0x52a4fa
xor eax, eax
jmp 0x52a4fd
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x52a568
push dword [ebp - 0x30]
call fcn.0053c4de
xor al, 1
cmp eax, 0
je 0x52a568
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
push 0x1a
push 0xffffffffffffffff
push dword [0x582a48]
call fcn.005299c7
push 0
push dword [0x582a48]
call fcn.0053c647
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581dc8]
cmp eax, edx
jne 0x52a568
push 0x10
push dword [ebp - 0x30]
call fcn.00540785
push 0
push dword [ebp - 0x30]
call fcn.0053cb2b
mov eax, 0
jmp 0x52a85e
push dword [ebp + 8]
call fcn.0053c5a9
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x52a598
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.005287ae
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
push 0
push dword [0x582a48]
call fcn.0053c647
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044ebdc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581dbc]
cmp eax, edx
je 0x52a5e3
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581dc8]
cmp eax, edx
je 0x52a5e3
xor eax, eax
jmp 0x52a5e6
xor eax, eax
inc eax
cmp eax, 0
je 0x52a5fe
push dword [ebp - 0x30]
call fcn.0053c5a9
push eax
push dword [ebp - 0x30]
call fcn.005409d8
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581e10]
cmp eax, edx
je 0x52a61c
mov eax, dword [ebp - 0x24]
mov edx, dword [0x581e20]
cmp eax, edx
je 0x52a61c
xor eax, eax
jmp 0x52a61f
xor eax, eax
inc eax
cmp eax, 0
je 0x52a637
push 0x12
push 0
push dword [0x582a48]
call fcn.005299c7
jmp 0x52a646
push 0x11
push 0
push dword [0x582a48]
call fcn.005299c7
jmp 0x52a85e
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
push 0x12
push 0
push dword [0x582a48]
call fcn.005299c7
jmp 0x52a85e
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
push dword [ebp - 0x30]
call fcn.0053c5a9
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581de4]
cmp eax, edx
jne 0x52a6a5
mov eax, 0x188
jmp 0x52a6aa
mov eax, 0x147
mov dword [ebp - 0x38], eax
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x52a6f3
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x52a6f3
jmp 0x52a6f7
xor eax, eax
jmp 0x52a6fa
xor eax, eax
inc eax
cmp eax, 0
je 0x52a706
jmp 0x52a885
push 0x19
push dword [ebp - 0x1c]
push dword [0x582a48]
call fcn.005299c7
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
add eax, 0xf0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 5
je 0x52a73a
jmp 0x52a885
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x52a775
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x52a775
jmp 0x52a779
xor eax, eax
jmp 0x52a77c
xor eax, eax
inc eax
cmp eax, 0
je 0x52a788
jmp 0x52a885
mov eax, 0xb
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
inc eax
mov edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x20]
cmp eax, 1
jne 0x52a7bb
push 0x1a
push 0
push dword [0x582a48]
call fcn.005299c7
jmp 0x52a85e
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
push 0
push dword [0x582a48]
call fcn.0053c647
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581de4]
cmp eax, edx
je 0x52a805
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581db0]
cmp eax, edx
je 0x52a805
xor eax, eax
jmp 0x52a808
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x52a820
push 0x1a
push 0xffffffffffffffff
push dword [0x582a48]
call fcn.005299c7
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x581de4]
cmp eax, edx
jne 0x52a842
push 0x12
push 0
push dword [0x582a48]
call fcn.005299c7
jmp 0x52a85e
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x582a48]
mov dword [eax], edx
push 1
push 0
push dword [0x582a48]
call fcn.005299c7