Function at 0x10075690
Capabilities:
Log keystrokes

Disassembly:
push ebx
push esi
mov esi, dword [esp + 0xc]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0xc], eax
cmp dword [0x101d08bc], 0x7693
call fcn.1000e760
test eax, eax
jne 0x100756d2
mov dword [esi + 0x2658], 0xf
mov cl, cl
mov dword [esi + 0x2654], 1
cmp dword [0x101d08bc], 0x7693
jmp 0x100756e6
mov dword [esi + 0x2654], 0
cmp dword [0x101d08c8], 0x764f
cmp dword [0x101e7b8c], 0x1000
je 0x10075715
mov dword [esi + 0x2658], 0x28
cmp dword [0x101d08c4], 0xfffff546
mov ebx, 1
mov dword [esi + 0x2654], ebx
mov dh, dh
jmp 0x1007572e
mov dword [esi + 0x2654], 0
cmp dword [0x101d08bc], 0x7693
mov ebx, 1
cmp dword [esi + 0x2654], 0
je 0x1007575b
call fcn.1000dec0
cdq
mov ecx, 0x64
idiv ecx
cmp dword [0x101d08b4], 0xffffabbe
cmp dword [esi + 0x2658], edx
jl 0x1007575b
pop esi
mov eax, ebx
pop ebx
ret
push ebp
push edi
mov edi, dword [esp + 0x18]
cmp edi, 0xa0
je 0x10075771
cmp edi, 0xa1
jne 0x1007577a
mov edi, 0x10
mov dl, dl
jmp 0x100757b2
cmp edi, 0xa4
je 0x1007578a
cmp edi, 0xa5
jne 0x10075793
mov edi, 0x12
mov ah, ah
jmp 0x100757b2
cmp edi, 0xa2
je 0x100757a3
cmp edi, 0xa3
jne 0x100757b2
mov edi, 0x11
cmp dword [0x101d08b0], 0x2f18
cmp dword [esi + 0x337c], 0
jne 0x100757d5
add dword [esi + 0x3368], ebx
cmp dword [0x101d08c8], 0xffff89b0
cmp dword [0x101d08d0], 0xffffb36b
mov eax, dword [esi + 0x40]
test eax, eax
jne 0x100757fb
push ebx
push edi
push esi
call fcn.100749c0
add esp, 0xc
cmp dword [0x101d08d0], 0xffffb36b
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
cmp eax, ebx
jne 0x10075972
push 0
push edi
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
cmp dword [0x101d08cc], 0xffffb203
shl eax, 0x10
or eax, ebx
mov ebx, eax
cmp dword [0x101d08b0], 0xffffd0e7
cmp dword [0x101d08d0], 0x4c94
push edi
call fcn.1006b6b0
add esp, 4
test eax, eax
je 0x10075846
or ebx, 0x1000000
mov edx, edx
xor ebp, ebp
cmp dword [0x101d08b8], 0xffffd2f4
cmp dword [esi + 0x18], ebp
je 0x10075880
cmp dword [esi + 0x32d0], ebp
jne 0x10075880
push 0x717be38b
push esi
call fcn.1006dc00
add esp, 8
test eax, eax
jne 0x10075880
or ebx, 0x4000000
mov eax, eax
mov ebp, 0x4000000
mov dh, dh
cmp edi, 0x12
jne 0x10075896
mov dword [esi + 0x64], 1
cmp dword [0x101d08c8], 0x764f
cmp dword [esi + 0x64], 0
jne 0x10075907
cmp edi, 0x79
je 0x10075907
cmp dword [esi + 0x32b0], 0
je 0x100758ae
mov ebx, ebp
mov bh, bh
cmp dword [esi + 0x32ac], 0
je 0x100758ea
mov edx, dword [esi + 0x32b4]
mov eax, dword [esp + 0x14]
push 0
push edx
push 1
push ebx
push edi
push 0x100
push eax
call fcn.10072430
add esp, 0x1c
cmp dword [0x101d08c4], 0xfffff546
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
mov ecx, dword [esp + 0x14]
push ebx
push edi
push 0x100
push ecx
call fcn.100722e0
mov edx, edx
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
or ebx, 0x20000000
mov esi, esi
cmp dword [esi + 0x32b0], 0
je 0x10075924
mov ebx, ebp
cmp dword [0x101d08b0], 0x2f18
cmp dword [esi + 0x32ac], 0
je 0x10075955
mov edx, dword [esi + 0x32b4]
mov eax, dword [esp + 0x14]
push 0
push edx
push 1
push ebx
push edi
push 0x104
push eax
call fcn.100722f0
mov al, al
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
mov ecx, dword [esp + 0x14]
push ebx
push edi
push 0x104
push ecx
call fcn.100722e0
mov edx, edx
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
cmp eax, 2
jne 0x10075996
cmp edi, 0x12
jne 0x10075989
mov dword [esi + 0x64], ebx
cmp dword [0x101d08d0], 0x4c94
push ebx
push edi
push esi
call fcn.100dd210
add esp, 0xc
mov ah, ah
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret