Function at 0x10055680
Capabilities:
Log keystrokes

Disassembly:
push ebx
push esi
mov esi, dword [esp + 0xc]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0xc], eax
mov ecx, ecx
call fcn.10011e40
test eax, eax
jne 0x100556b2
mov dword [esi + 0x2658], 0xf
push ebx
pop ebx
mov dword [esi + 0x2654], 1
mov ecx, ecx
jmp 0x100556be
mov dword [esi + 0x2654], 0
push eax
pop eax
cmp dword [0x101a749c], 0x1000
je 0x100556e4
mov dword [esi + 0x2658], 0x28
mov al, al
mov ebx, 1
mov dword [esi + 0x2654], ebx
nop
jmp 0x100556f4
mov dword [esi + 0x2654], 0
nop
mov ebx, 1
cmp dword [esi + 0x2654], 0
je 0x10055719
call fcn.10011650
cdq
mov ecx, 0x64
idiv ecx
mov bl, bl
cmp dword [esi + 0x2658], edx
jl 0x10055719
pop esi
mov eax, ebx
pop ebx
ret
push ebp
push edi
mov edi, dword [esp + 0x18]
cmp edi, 0xa0
je 0x1005572f
cmp edi, 0xa1
jne 0x10055738
mov edi, 0x10
push eax
pop eax
jmp 0x10055768
cmp edi, 0xa4
je 0x10055748
cmp edi, 0xa5
jne 0x10055751
mov edi, 0x12
push eax
pop eax
jmp 0x10055768
cmp edi, 0xa2
je 0x10055761
cmp edi, 0xa3
jne 0x10055768
mov edi, 0x11
mov esi, esi
cmp dword [esi + 0x337c], 0
jne 0x1005577b
add dword [esi + 0x3368], ebx
xchg ebx, eax
xchg ebx, eax
push edx
pop edx
mov eax, dword [esi + 0x40]
test eax, eax
jne 0x10055799
push ebx
push edi
push esi
call fcn.10054b80
add esp, 0xc
push ebx
pop ebx
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
cmp eax, ebx
jne 0x100558d7
push 0
push edi
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
mov dl, dl
shl eax, 0x10
or eax, ebx
mov ebx, eax
mov esi, esi
nop
push edi
call fcn.1004cb80
add esp, 4
test eax, eax
je 0x100557cb
or ebx, 0x1000000
xchg ebx, eax
xchg ebx, eax
xor ebp, ebp
mov ebx, ebx
cmp dword [esi + 0x18], ebp
je 0x100557fd
cmp dword [esi + 0x32d0], ebp
jne 0x100557fd
push 0x717be38b
push esi
call fcn.1004f1c0
add esp, 8
test eax, eax
jne 0x100557fd
or ebx, 0x4000000
push ecx
pop ecx
mov ebp, 0x4000000
mov ebp, ebp
cmp edi, 0x12
jne 0x1005580b
mov dword [esi + 0x64], 1
push eax
pop eax
cmp dword [esi + 0x64], 0
jne 0x10055874
cmp edi, 0x79
je 0x10055874
cmp dword [esi + 0x32b0], 0
je 0x10055823
mov ebx, ebp
mov dh, dh
cmp dword [esi + 0x32ac], 0
je 0x10055857
mov edx, dword [esi + 0x32b4]
mov eax, dword [esp + 0x14]
push 0
push edx
push 1
push ebx
push edi
push pe_nt_image_headers32
push eax
call fcn.10052bc0
add esp, 0x1c
mov edx, edx
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
mov ecx, dword [esp + 0x14]
push ebx
push edi
push pe_nt_image_headers32
push ecx
call fcn.10052a80
mov ch, ch
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
or ebx, 0x20000000
mov dh, dh
cmp dword [esi + 0x32b0], 0
je 0x10055889
mov ebx, ebp
push ebx
pop ebx
cmp dword [esi + 0x32ac], 0
je 0x100558ba
mov edx, dword [esi + 0x32b4]
mov eax, dword [esp + 0x14]
push 0
push edx
push 1
push ebx
push edi
push 0x104
push eax
call fcn.10052a90
push eax
pop eax
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
mov ecx, dword [esp + 0x14]
push ebx
push edi
push 0x104
push ecx
call fcn.10052a80
mov edi, edi
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret
cmp eax, 2
jne 0x100558f3
cmp edi, 0x12
jne 0x100558e6
mov dword [esi + 0x64], ebx
mov bh, bh
push ebx
push edi
push esi
call fcn.100ae330
add esp, 0xc
push ecx
pop ecx
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
ret