Function at 0x1001332a
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [ebp + 0xc], 0
jne 0x10013344
mov dword [ebp + 0xc], 0x32
cmp dword [ebp + 0x18], 0
jne 0x10013359
push dword [ebp + 8]
call fcn.100136e2
mov dword [ebp + 0x14], eax
cmp dword [ebp + 0x14], 0
je 0x10013522
cmp dword [ebp + 0xc], 3
jne 0x100133cb
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10013394
push 6
call fcn.100152b5
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x100133c6
push 6
call fcn.100152b5
add esp, 4
jmp 0x1001351d
cmp dword [ebp + 0xc], 4
jne 0x10013433
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100133fc
push 6
call fcn.100152b5
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 3
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001342e
push 6
call fcn.100152b5
add esp, 4
jmp 0x1001351d
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001345a
push 6
call fcn.100152b5
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001348c
push 6
call fcn.100152b5
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10017430
add esp, 0x10
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100134cf
push 6
call fcn.100152b5
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 3
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10013501
push 6
call fcn.100152b5
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10017430
add esp, 0x10
jmp 0x100136dc
cmp dword [ebp + 0xc], 3
jne 0x1001358a
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10013553
push 6
call fcn.100152b5
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10013585
push 6
call fcn.100152b5
add esp, 4
jmp 0x100136dc
cmp dword [ebp + 0xc], 4
jne 0x100135f2
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100135bb
push 6
call fcn.100152b5
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x100135ed
push 6
call fcn.100152b5
add esp, 4
jmp 0x100136dc
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10013619
push 6
call fcn.100152b5
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001364b
push 6
call fcn.100152b5
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10017430
add esp, 0x10
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001368e
push 6
call fcn.100152b5
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x100136c0
push 6
call fcn.100152b5
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10017430
add esp, 0x10
mov esp, ebp
pop ebp
ret 0x14