Function at 0x1006d280
Capabilities:
Log keystrokes

Disassembly:
push esi
mov esi, dword [esp + 8]
mov eax, dword [esi + 0x18]
push edi
mov dword [esp + 0xc], eax
mov esi, esi
call fcn.1000d440
test eax, eax
jne 0x1006d2b2
mov dword [esi + 0x2650], 0xf
test dh, dh
mov dword [esi + 0x264c], 1
mov dh, dh
jmp 0x1006d2be
mov dword [esi + 0x264c], 0
test esi, esi
cmp dword [0x101d00ac], 0x1000
je 0x1006d2e5
mov dword [esi + 0x2650], 0x28
test dl, dl
mov edi, 1
mov dword [esi + 0x264c], edi
test cl, cl
jmp 0x1006d2f6
mov dword [esi + 0x264c], 0
xchg ebx, eax
xchg ebx, eax
mov edi, 1
cmp dword [esi + 0x264c], 0
je 0x1006d31b
call fcn.1000cba0
cdq
mov ecx, 0x64
idiv ecx
test edi, edi
cmp dword [esi + 0x2650], edx
jl 0x1006d31b
mov eax, edi
pop edi
pop esi
ret
push ebx
mov ebx, dword [esp + 0x14]
cmp ebx, 0xa0
push ebp
je 0x1006d331
cmp ebx, 0xa1
jne 0x1006d33a
mov ebx, 0x10
test eax, eax
jmp 0x1006d36a
cmp ebx, 0xa4
je 0x1006d34a
cmp ebx, 0xa5
jne 0x1006d353
mov ebx, 0x12
test ebx, ebx
jmp 0x1006d36a
cmp ebx, 0xa2
je 0x1006d363
cmp ebx, 0xa3
jne 0x1006d36a
mov ebx, 0x11
push eax
pop eax
cmp dword [esi + 0x3374], 0
jne 0x1006d37d
add dword [esi + 0x3360], edi
test al, al
mov ebp, ebp
mov eax, dword [esi + 0x3c]
test eax, eax
jne 0x1006d399
push edi
push esi
call fcn.1006c770
add esp, 8
nop
pop ebp
pop ebx
pop edi
mov eax, 1
pop esi
ret
cmp eax, edi
jne 0x1006d4d8
push 0
push ebx
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
mov cl, cl
shl eax, 0x10
or eax, edi
mov edi, eax
mov ah, ah
mov ah, ah
push ebx
call fcn.100643b0
add esp, 4
test eax, eax
je 0x1006d3cc
or edi, 0x1000000
xchg ebx, eax
xchg ebx, eax
xor ebp, ebp
mov edi, edi
cmp dword [esi + 0x14], ebp
je 0x1006d3fe
cmp dword [esi + 0x32c8], ebp
jne 0x1006d3fe
push 0x717be38b
push esi
call fcn.10066700
add esp, 8
test eax, eax
jne 0x1006d3fe
or edi, 0x4000000
push edx
pop edx
mov ebp, 0x4000000
mov esi, esi
cmp ebx, 0x12
jne 0x1006d40c
mov dword [esi + 0x60], 1
xchg ebx, eax
xchg ebx, eax
cmp dword [esi + 0x60], 0
jne 0x1006d475
cmp ebx, 0x79
je 0x1006d475
cmp dword [esi + 0x32a8], 0
je 0x1006d424
mov edi, ebp
mov esi, esi
cmp dword [esi + 0x32a4], 0
je 0x1006d458
mov edx, dword [esi + 0x32ac]
mov eax, dword [esp + 0x14]
push 0
push edx
push 1
push edi
push ebx
push 0x100
push eax
call fcn.1006a6a0
add esp, 0x1c
test ah, ah
pop ebp
pop ebx
pop edi
mov eax, 1
pop esi
ret
mov ecx, dword [esp + 0x14]
push edi
push ebx
push 0x100
push ecx
call fcn.1006a560
test edx, edx
pop ebp
pop ebx
pop edi
mov eax, 1
pop esi
ret
or edi, 0x20000000
test edi, edi
cmp dword [esi + 0x32a8], 0
je 0x1006d48a
mov edi, ebp
xchg ebx, eax
xchg ebx, eax
cmp dword [esi + 0x32a4], 0
je 0x1006d4bb
mov edx, dword [esi + 0x32ac]
mov eax, dword [esp + 0x14]
push 0
push edx
push 1
push edi
push ebx
push 0x104
push eax
call fcn.1006a570
test edi, edi
pop ebp
pop ebx
pop edi
mov eax, 1
pop esi
ret
mov ecx, dword [esp + 0x14]
push edi
push ebx
push 0x104
push ecx
call fcn.1006a560
mov ah, ah
pop ebp
pop ebx
pop edi
mov eax, 1
pop esi
ret
cmp eax, 2
jne 0x1006d4f4
cmp ebx, 0x12
jne 0x1006d4e7
mov dword [esi + 0x60], edi
push ecx
pop ecx
push edi
push ebx
push esi
call fcn.100cc190
add esp, 0xc
mov ebp, ebp
pop ebp
pop ebx
pop edi
mov eax, 1
pop esi
ret