Function at 0x10086350
Capabilities:
Log keystrokes

Disassembly:
push ecx
push esi
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x10086364
pop esi
pop ecx
ret
mov eax, dword [esp + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x10086386
push eax
push eax
push 0x10
push esi
call fcn.10052c40
mov bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 1
jne 0x10086434
push esi
call fcn.1003c290
add esp, 4
mov esi, eax
mov eax, eax
push 4
push esi
call fcn.10052b30
add esp, 8
mov edi, edi
push 5
push esi
call fcn.10052b30
add esp, 8
mov ebp, ebp
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.10052b50
add esp, 0x1c
push edx
pop edx
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
mov esi, esi
mov bl, bl
mov ch, ch
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov ah, ah
push 0
push esi
call fcn.10052c10
add esp, 8
mov ebx, eax
mov eax, eax
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov bh, bh
push esi
call ebp
push ecx
pop ecx
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
push ebx
pop ebx
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.10052b50
add esp, 0x1c
mov ebp, ebp
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 2
jne 0x10086451
push 7
push esi
call fcn.10052b30
add esp, 8
mov dl, dl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 3
jne 0x10086478
push 0
push 0xf020
push 0x112
push esi
call fcn.10052ba0
add esp, 0x10
mov ecx, ecx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 4
jne 0x10086495
push 3
push esi
call fcn.10052b30
add esp, 8
mov dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 5
jne 0x100864b2
push 4
push esi
call fcn.10052b30
add esp, 8
mov edi, edi
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 6
jne 0x100864cf
push 0
push esi
call fcn.10052b30
add esp, 8
mov ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 7
jne 0x100864ec
push 5
push esi
call fcn.10052b30
add esp, 8
mov ebp, ebp
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 8
jne 0x1008652d
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov al, al
or eax, 8
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dh, dh
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.10052b50
add esp, 0x1c
push eax
pop eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 9
jne 0x1008656e
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
pop eax
and eax, 0xfffffff7
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
push edx
pop edx
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.10052b50
add esp, 0x1c
mov ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xa
jne 0x10086589
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov bh, bh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xb
jne 0x100865a4
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xc
jne 0x1008661c
push esi
call fcn.1003c290
add esp, 4
mov esi, eax
mov ebx, ebx
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.10086170
add esp, 8
mov ebx, ebx
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
mov bh, bh
mov esi, esi
mov dh, dh
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
push eax
pop eax
push 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call fcn.10052c10
add esp, 8
mov ebx, eax
mov ch, ch
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ch, ch
push esi
call ebp
push eax
pop eax
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ch, ch
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xd
jne 0x1008667b
mov al, al
lea ecx, [esp + 0x10]
push ecx
push esi
call fcn.10052c10
add esp, 8
mov ch, ch
mov edx, dword [esp + 0x10]
push 0
push 0
push edx
push 0
push 1
call fcn.10052640
add esp, 0x14
mov esi, eax
mov dh, dh
test esi, esi
je 0x10086673
push 0
push esi
call fcn.10052740
add esp, 8
mov ah, ah
push esi
call fcn.10036e00
add esp, 4
mov ecx, ecx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
pop ecx
ret
cmp eax, 0xe
jne 0x100866a5
push esi
call fcn.1003c290
add esp, 4
mov ch, ch
push 0
push 0
push eax
call fcn.10086240
add esp, 0xc
push ebx
pop ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xf
jne 0x100866e6
mov bl, bl
push edx
pop edx
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
push ebx
pop ebx
push 0
push esi
call fcn.10052c10
add esp, 8
mov ebx, eax
push ebx
pop ebx
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push ebx
push edi
call ebp
mov edi, edi
push esi
call dword [sym.imp.USER32.dll_SetFocus]
mov bl, bl
push 0
push ebx
push edi
call ebp
mov ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret