Function at 0x1000bdb3
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [ebp + 0xc], 0
jne 0x1000bdcd
mov dword [ebp + 0xc], 0x32
cmp dword [ebp + 0x18], 0
jne 0x1000bde2
push dword [ebp + 8]
call fcn.1000c16b
mov dword [ebp + 0x14], eax
cmp dword [ebp + 0x14], 0
je 0x1000bfab
cmp dword [ebp + 0xc], 3
jne 0x1000be54
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1000be1d
push 6
call fcn.1000ea96
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1000be4f
push 6
call fcn.1000ea96
add esp, 4
jmp 0x1000bfa6
cmp dword [ebp + 0xc], 4
jne 0x1000bebc
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1000be85
push 6
call fcn.1000ea96
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 3
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1000beb7
push 6
call fcn.1000ea96
add esp, 4
jmp 0x1000bfa6
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1000bee3
push 6
call fcn.1000ea96
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1000bf15
push 6
call fcn.1000ea96
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10010b50
add esp, 0x10
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1000bf58
push 6
call fcn.1000ea96
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 3
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1000bf8a
push 6
call fcn.1000ea96
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10010b50
add esp, 0x10
jmp 0x1000c165
cmp dword [ebp + 0xc], 3
jne 0x1000c013
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1000bfdc
push 6
call fcn.1000ea96
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1000c00e
push 6
call fcn.1000ea96
add esp, 4
jmp 0x1000c165
cmp dword [ebp + 0xc], 4
jne 0x1000c07b
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1000c044
push 6
call fcn.1000ea96
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1000c076
push 6
call fcn.1000ea96
add esp, 4
jmp 0x1000c165
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1000c0a2
push 6
call fcn.1000ea96
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1000c0d4
push 6
call fcn.1000ea96
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10010b50
add esp, 0x10
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1000c117
push 6
call fcn.1000ea96
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1000c149
push 6
call fcn.1000ea96
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10010b50
add esp, 0x10
mov esp, ebp
pop ebp
ret 0x14