Function at 0x529ab7
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x30
mov eax, 0
mov edx, dword [ebp + 0x14]
cmp eax, edx
jne 0x529ad9
mov eax, dword [ebp + 0x10]
cmp eax, 0x3e8
jge 0x529ad9
jmp 0x529add
xor eax, eax
jmp 0x529ae0
xor eax, eax
inc eax
cmp eax, 0
je 0x529b10
mov eax, 0
mov edx, dword [0x5814cc]
cmp eax, edx
sete al
xor ah, ah
cwde
xor al, 1
cmp eax, 0
je 0x529b10
push dword [ebp + 8]
call fcn.00530f1c
jmp 0x52a1ee
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
mov eax, 0
mov edx, dword [0x581640]
cmp eax, edx
jne 0x529b2c
call fcn.00529a6a
jmp 0x529b36
mov eax, dword [0x581640]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sar eax, 0x10
cmp eax, 0
je 0x529ba5
cmp eax, 3
je 0x529d88
cmp eax, 0x300
je 0x529e41
cmp eax, 0x100
je 0x529edb
cmp eax, 4
je 0x529edb
cmp eax, 0x200
je 0x529fb4
cmp eax, 1
je 0x529fd3
cmp eax, 5
je 0x52a129
cmp eax, 0
je 0x52a1ad
mov eax, 0
jmp 0x52a1c7
push 0
push dword [0x581640]
call fcn.0053beaa
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044e8d0
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
mov eax, dword [ebp - 0x24]
mov edx, dword [0x58099c]
cmp eax, edx
jne 0x529be9
mov eax, 9
jmp 0x529d38
mov eax, dword [ebp - 0x24]
mov edx, dword [0x5809a8]
cmp eax, edx
jne 0x529c0b
push dword [0x581640]
call fcn.0053dae5
mov eax, 0x1a
jmp 0x529d38
mov eax, dword [ebp - 0x24]
mov edx, dword [0x5809b4]
cmp eax, edx
jne 0x529cb5
push 0xb
push dword [0x581640]
call fcn.0053beaa
push eax
call fcn.00524e37
mov edx, eax
mov eax, 0x20000
and eax, edx
mov edx, eax
mov eax, 0
cmp eax, edx
je 0x529ca0
push 0
push 0
push 0xf0
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0
je 0x529c77
cmp eax, 2
je 0x529c7e
cmp eax, 1
je 0x529c85
mov eax, 0
jmp 0x529c8a
mov eax, 1
jmp 0x529c8a
mov eax, 0
jmp 0x529c8a
mov eax, 2
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xf1
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
push dword [0x581640]
call fcn.0053dae5
mov eax, 0x1a
jmp 0x529d38
mov eax, dword [ebp - 0x24]
mov edx, dword [0x5809c0]
cmp eax, edx
jne 0x529cfe
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov edx, eax
mov eax, 1
and eax, edx
mov edx, eax
mov eax, 1
cmp eax, edx
je 0x529cfe
push 9
call dword [sym.imp.USER32.DLL_GetKeyState]
and eax, 0x8000
cmp eax, 0
jne 0x529cfe
jmp 0x529d02
xor eax, eax
jmp 0x529d05
xor eax, eax
inc eax
cmp eax, 0
je 0x529d1e
push dword [0x581640]
call fcn.0053dae5
mov eax, 9
jmp 0x529d38
xor eax, eax
inc eax
je 0x529d2a
mov eax, 0
jmp 0x529d38
call fcn.00529d2f
push 0
push dword [0x581640]
call fcn.0053beaa
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x5809c0]
cmp eax, edx
jne 0x529dec
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
push 0
push 0
push 0xf2
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
xor edi, edi
cmp eax, 0
je 0x529dd0
inc edi
mov eax, edi
xor al, 1
cmp eax, 0
je 0x529dea
push 0x1a
push 0
push dword [0x581640]
call fcn.0052933d
jmp 0x529e3c
push dword [ebp + 8]
call fcn.0053be0c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x529e12
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.00528124
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
push 0
push dword [0x581640]
call fcn.0053beaa
mov dword [ebp - 0xc], eax
push 0x11
push 0
push dword [0x581640]
call fcn.0052933d
jmp 0x52a1c7
mov eax, 0
mov edx, dword [0x581640]
cmp eax, edx
je 0x529e63
push dword [ebp + 8]
call fcn.0053bd41
cmp eax, 0
jne 0x529e63
xor eax, eax
jmp 0x529e66
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x529ed1
push dword [ebp - 0x30]
call fcn.0053bd41
xor al, 1
cmp eax, 0
je 0x529ed1
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
push 0x1a
push 0xffffffffffffffff
push dword [0x581640]
call fcn.0052933d
push 0
push dword [0x581640]
call fcn.0053beaa
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x5809d8]
cmp eax, edx
jne 0x529ed1
push 0x10
push dword [ebp - 0x30]
call fcn.0053ffe8
push 0
push dword [ebp - 0x30]
call fcn.0053c38e
mov eax, 0
jmp 0x52a1c7
push dword [ebp + 8]
call fcn.0053be0c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
je 0x529f01
mov eax, dword [ebp - 0x10]
add eax, 0xa0
push eax
push dword [ebp - 0x30]
call fcn.00528124
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
push 0
push dword [0x581640]
call fcn.0053beaa
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push eax
call fcn.0044e8d0
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [0x5809cc]
cmp eax, edx
je 0x529f4c
mov eax, dword [ebp - 0x24]
mov edx, dword [0x5809d8]
cmp eax, edx
je 0x529f4c
xor eax, eax
jmp 0x529f4f
xor eax, eax
inc eax
cmp eax, 0
je 0x529f67
push dword [ebp - 0x30]
call fcn.0053be0c
push eax
push dword [ebp - 0x30]
call fcn.0054023b
mov eax, dword [ebp - 0x24]
mov edx, dword [0x580a20]
cmp eax, edx
je 0x529f85
mov eax, dword [ebp - 0x24]
mov edx, dword [0x580a30]
cmp eax, edx
je 0x529f85
xor eax, eax
jmp 0x529f88
xor eax, eax
inc eax
cmp eax, 0
je 0x529fa0
push 0x12
push 0
push dword [0x581640]
call fcn.0052933d
jmp 0x529faf
push 0x11
push 0
push dword [0x581640]
call fcn.0052933d
jmp 0x52a1c7
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
push 0x12
push 0
push dword [0x581640]
call fcn.0052933d
jmp 0x52a1c7
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
push dword [ebp - 0x30]
call fcn.0053be0c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x5809f4]
cmp eax, edx
jne 0x52a00e
mov eax, 0x188
jmp 0x52a013
mov eax, 0x147
mov dword [ebp - 0x38], eax
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x52a05c
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x52a05c
jmp 0x52a060
xor eax, eax
jmp 0x52a063
xor eax, eax
inc eax
cmp eax, 0
je 0x52a06f
jmp 0x52a1ee
push 0x19
push dword [ebp - 0x1c]
push dword [0x581640]
call fcn.0052933d
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
add eax, 0xf0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 5
je 0x52a0a3
jmp 0x52a1ee
push 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.DLL_SendMessageW]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0xb
jne 0x52a0de
mov eax, dword [ebp - 0x1c]
inc eax
push eax
pop edx
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
xchg edx, eax
cmp eax, edx
jne 0x52a0de
jmp 0x52a0e2
xor eax, eax
jmp 0x52a0e5
xor eax, eax
inc eax
cmp eax, 0
je 0x52a0f1
jmp 0x52a1ee
mov eax, 0xb
xchg edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
inc eax
mov edx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x20]
cmp eax, 1
jne 0x52a124
push 0x1a
push 0
push dword [0x581640]
call fcn.0052933d
jmp 0x52a1c7
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
push 0
push dword [0x581640]
call fcn.0053beaa
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x5809f4]
cmp eax, edx
je 0x52a16e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x5809c0]
cmp eax, edx
je 0x52a16e
xor eax, eax
jmp 0x52a171
xor eax, eax
inc eax
xor al, 1
cmp eax, 0
je 0x52a189
push 0x1a
push 0xffffffffffffffff
push dword [0x581640]
call fcn.0052933d
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [0x5809f4]
cmp eax, edx
jne 0x52a1ab
push 0x12
push 0
push dword [0x581640]
call fcn.0052933d
jmp 0x52a1c7
mov eax, dword [ebp - 0x30]
xchg edx, eax
mov eax, dword [0x581640]
mov dword [eax], edx
push 1
push 0
push dword [0x581640]
call fcn.0052933d