Function at 0x56fa0e
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp dword [ebp + 0x10], 0x10
jne 0x56faea
mov dword [ebp - 4], esp
push 0
push 0
push 0x1d
push 0x10
call dword [sym.imp.user32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fa54
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 4], esp
push 0
push dword [ebp + 0xc]
push 0x100
push dword [ebp + 8]
call dword [sym.imp.user32.dll_PostMessageA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fa83
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 4], esp
push 0
push dword [ebp + 0xc]
push 0x101
push dword [ebp + 8]
call dword [sym.imp.user32.dll_PostMessageA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fab2
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 4], esp
push 0
push 2
push 0x1d
push 0x10
call dword [sym.imp.user32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fae5
push 6
call fcn.005fffca
add esp, 4
jmp 0x56fe0f
cmp dword [ebp + 0x10], 0x11
jne 0x56fbbd
mov dword [ebp - 4], esp
push 0
push 0
push 0x1d
push 0x11
call dword [sym.imp.user32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fb27
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 4], esp
push 0
push dword [ebp + 0xc]
push 0x100
push dword [ebp + 8]
call dword [sym.imp.user32.dll_PostMessageA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fb56
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 4], esp
push 0
push dword [ebp + 0xc]
push 0x101
push dword [ebp + 8]
call dword [sym.imp.user32.dll_PostMessageA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fb85
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 4], esp
push 0
push 2
push 0x1d
push 0x11
call dword [sym.imp.user32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fbb8
push 6
call fcn.005fffca
add esp, 4
jmp 0x56fe0f
cmp dword [ebp + 0x10], 0x12
jne 0x56fe0f
mov dword [ebp - 4], esp
push 0
push 0x12
call dword [sym.imp.user32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fbf0
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push 0x12
call dword [sym.imp.user32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x56fc24
push 6
call fcn.005fffca
add esp, 4
push 0
push 0
push 0
push 0x80000301
push 0
push 3
push reloc.wsock32.dll_getpeername
push 0
push 0x77f1c0
push 3
mov ebx, 0x19c
call fcn.00603990
add esp, 0x28
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], esp
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
cmp ecx, 0x80000101
jne 0x56fc78
and eax, 0xff
jmp 0x56fcc3
cmp ecx, 0x80000201
jne 0x56fc83
cwde
jmp 0x56fcc3
cmp ecx, 0x80000301
je 0x56fcc3
cmp ecx, 0x80000401
je 0x56fcc3
mov dword [ebp - 0x18], eax
cmp ecx, 0x80000501
je 0x56fcb3
cmp ecx, 0x80000601
je 0x56fcb8
push 2
call fcn.005fffca
add esp, 4
fld dword [ebp - 0x18]
jmp 0x56fcbe
mov dword [ebp - 0x14], edx
fld qword [ebp - 0x18]
call fcn.004c58cd
push eax
push dword [ebp + 0xc]
push 0x104
push dword [ebp + 8]
call dword [sym.imp.user32.dll_PostMessageA]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x56fceb
push 6
call fcn.005fffca
add esp, 4
push 0
push 0
push 0
push 0x80000301
push 0
push 3
push reloc.wsock32.dll_getpeername
push 0
push 0x77f1c0
push 3
mov ebx, 0x19c
call fcn.00603990
add esp, 0x28
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], esp
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
cmp ecx, 0x80000101
jne 0x56fd3f
and eax, 0xff
jmp 0x56fd8a
cmp ecx, 0x80000201
jne 0x56fd4a
cwde
jmp 0x56fd8a
cmp ecx, 0x80000301
je 0x56fd8a
cmp ecx, 0x80000401
je 0x56fd8a
mov dword [ebp - 0x18], eax
cmp ecx, 0x80000501
je 0x56fd7a
cmp ecx, 0x80000601
je 0x56fd7f
push 2
call fcn.005fffca
add esp, 4
fld dword [ebp - 0x18]
jmp 0x56fd85
mov dword [ebp - 0x14], edx
fld qword [ebp - 0x18]
call fcn.004c58cd
push eax
push dword [ebp + 0xc]
push 0x106
push dword [ebp + 8]
call dword [sym.imp.user32.dll_PostMessageA]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x56fdb2
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 4], esp
push 0
push 0x12
call dword [sym.imp.user32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x56fddb
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push 0x12
call dword [sym.imp.user32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x56fe0f
push 6
call fcn.005fffca
add esp, 4
mov esp, ebp
pop ebp
ret 0xc