Function at 0x100076d0
Capabilities:
Connect pipe
Create pipe
Log keystrokes via polling
Read pipe
Swap mouse buttons
Write pipe

Disassembly:
push ebp
mov ebp, esp
push ecx
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaProximityNode]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CallNamedPipeW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateConsoleScreenBuffer]
call dword [sym.imp.USER32.dll_GetShellWindow]
push 0
push 0
call dword [sym.imp.USER32.dll_ValidateRgn]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessDEPPolicy]
push 0
push 0
call dword [sym.imp.USER32.dll_GetMenuItemID]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetScrollRange]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefDlgProcW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CommConfigDialogW]
push 0
push 0
call dword [sym.imp.USER32.dll_SetLastErrorEx]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowRgn]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveVectoredExceptionHandler]
call dword [sym.imp.KERNEL32.dll_UnregisterApplicationRecoveryCallback]
push 0
push 0
call dword [sym.imp.USER32.dll_GetMenuInfo]
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CheckDlgButton]
push 0
push 0
call dword [sym.imp.USER32.dll_DdeFreeStringHandle]
push 0
call dword [sym.imp.USER32.dll_UnhookWinEvent]
push 0
push 0
call dword [sym.imp.USER32.dll_VkKeyScanExW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekConsoleInputW]
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaProcessorNodeEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AppendMenuW]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0
call dword [sym.imp.USER32.dll_SwapMouseButton]
push 0
push 0
push 0
push 0x100d8800
push 0
call dword [sym.imp.KERNEL32.dll_GetStringScripts]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
push 0
call dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetErrorMode]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessPreferredUILanguages]
push 0
call dword [sym.imp.USER32.dll_GetThreadDesktop]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsW]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowDisplayAffinity]
push 0
push 0
call dword [sym.imp.USER32.dll_ValidateRgn]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
push dword [ebp - 4]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FillConsoleOutputAttribute]
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
push 0
push 0
call dword [sym.imp.USER32.dll_BeginPaint]
mov esp, ebp
pop ebp
ret