Function at 0x1001c4fa
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [ebp + 0xc], 0
jne 0x1001c514
mov dword [ebp + 0xc], 0x32
cmp dword [ebp + 0x18], 0
jne 0x1001c529
push dword [ebp + 8]
call fcn.1001c8b2
mov dword [ebp + 0x14], eax
cmp dword [ebp + 0x14], 0
je 0x1001c6f2
cmp dword [ebp + 0xc], 3
jne 0x1001c59b
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001c564
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001c596
push 6
call fcn.1001ebae
add esp, 4
jmp 0x1001c6ed
cmp dword [ebp + 0xc], 4
jne 0x1001c603
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001c5cc
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 3
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001c5fe
push 6
call fcn.1001ebae
add esp, 4
jmp 0x1001c6ed
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001c62a
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001c65c
push 6
call fcn.1001ebae
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10020df0
add esp, 0x10
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001c69f
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 3
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001c6d1
push 6
call fcn.1001ebae
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10020df0
add esp, 0x10
jmp 0x1001c8ac
cmp dword [ebp + 0xc], 3
jne 0x1001c75a
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001c723
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001c755
push 6
call fcn.1001ebae
add esp, 4
jmp 0x1001c8ac
cmp dword [ebp + 0xc], 4
jne 0x1001c7c2
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001c78b
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001c7bd
push 6
call fcn.1001ebae
add esp, 4
jmp 0x1001c8ac
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001c7e9
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001c81b
push 6
call fcn.1001ebae
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10020df0
add esp, 0x10
mov dword [ebp - 4], esp
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x1001c85e
push 6
call fcn.1001ebae
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 2
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1001c890
push 6
call fcn.1001ebae
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0xc]
push 1
mov ebx, 0x67c
call fcn.10020df0
add esp, 0x10
mov esp, ebp
pop ebp
ret 0x14