Function at 0x1001642f
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [ebp + 0xc], 0
jne 0x10016449
mov dword [ebp + 0xc], 0x32
cmp dword [ebp + 0x18], 0
jne 0x1001645e
push dword [ebp + 8]
call fcn.100167e7
mov dword [ebp + 0x14], eax
cmp dword [ebp + 0x14], 0
je 0x10016627
cmp dword [ebp + 0xc], 3
jne 0x100164d0
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10016499
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x100164cb
push 6
call fcn.1003356f
add esp, 4
jmp 0x10016622
cmp dword [ebp + 0xc], 4
jne 0x10016538
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10016501
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 3
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10016533
push 6
call fcn.1003356f
add esp, 4
jmp 0x10016622
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001655f
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10016591
push 6
call fcn.1003356f
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.100351b0
add esp, 0x10
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100165d4
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 3
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10016606
push 6
call fcn.1003356f
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.100351b0
add esp, 0x10
jmp 0x100167e1
cmp dword [ebp + 0xc], 3
jne 0x1001668f
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10016658
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001668a
push 6
call fcn.1003356f
add esp, 4
jmp 0x100167e1
cmp dword [ebp + 0xc], 4
jne 0x100166f7
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x100166c0
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x100166f2
push 6
call fcn.1003356f
add esp, 4
jmp 0x100167e1
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001671e
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10016750
push 6
call fcn.1003356f
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.100351b0
add esp, 0x10
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x10016793
push 6
call fcn.1003356f
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x100167c5
push 6
call fcn.1003356f
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.100351b0
add esp, 0x10
mov esp, ebp
pop ebp
ret 0x14