Function at 0x10079cd0
Capabilities:
Get keyboard layout
Log keystrokes

Disassembly:
push ebx
mov ebx, dword [esp + 0x10]
push ebp
mov ebp, dword [esp + 0x18]
push esi
push edi
mov edi, dword [esp + 0x18]
mov esi, ecx
cmp edi, 0x100
ja 0x10079fc5
je 0x10079d6b
lea eax, [edi - 1]
cmp eax, 0x50
ja case.0x10079fed.259
movzx eax, byte [eax + 0x1007a158]
jmp dword [eax*4 + 0x1007a144]
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
mov ecx, dword [esp + 0x14]
push eax
push 0
push ecx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnInputLanguageChange_struct_HWND_____unsigned_int__long_int_
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov edx, dword [esp + 0x14]
push ebp
push ebx
push edx
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnInputLanguageChange_struct_HWND_____unsigned_int__long_int_
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push edi
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
pop ebp
pop ebx
ret 0x14
mov eax, dword [esi + 0x30]
push eax
call sym.i3FrameworkDx.dll_public:_bool___thiscall_i3Ime::SetImeMode_enum_IME_MODE_
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::SetInputFinish_void_
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
cmp byte [esi + 0xfe], 0
je 0x10079e04
mov eax, ebx
add eax, 0xffffffbf
cmp eax, 0x17
ja case.0x10079d8d.68
movzx ecx, byte [eax + 0x1007a1c0]
jmp dword [ecx*4 + 0x1007a1ac]
mov edx, dword [esp + 0x14]
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::Copy_struct_HWND____
pop edi
mov byte [esi + 0x100], 1
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov eax, dword [esp + 0x14]
push eax
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::Cut_struct_HWND____
pop edi
mov byte [esi + 0x100], 1
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::Paste_struct_HWND____
pop edi
mov byte [esi + 0x100], 1
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov edx, dword [esp + 0x14]
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::SelectAll_struct_HWND____
pop edi
mov byte [esi + 0x100], 1
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
cmp byte [esi + 0xfd], 0
mov dl, 1
mov ecx, ebx
je 0x10079e3c
cmp ecx, 0x21
jb 0x10079e3c
cmp ecx, 0x28
ja 0x10079e3c
cmp byte [esi + 0xfc], 0
jne 0x10079e3c
mov eax, dword [esi + 0xbc]
mov byte [esi + 0xfc], dl
mov dword [esi + 0xf8], eax
mov dword [esi + 0xf4], eax
lea eax, [ecx - 8]
cmp eax, 0xdd
ja case.0x10079e51.9
movzx eax, byte [eax + 0x1007a21c]
jmp dword [eax*4 + 0x1007a1d8]
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownLeft_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov edx, dword [esp + 0x14]
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownRight_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov eax, dword [esp + 0x14]
push eax
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownDown_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownUp_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov edx, dword [esp + 0x14]
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownPageup_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov eax, dword [esp + 0x14]
push eax
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownPagedown_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownHome_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov edx, dword [esp + 0x14]
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownEnd_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownDelete_void_
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownBackspace_void_
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov eax, dword [esp + 0x14]
push eax
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownSpacebar_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
pop edi
mov byte [esi + 0xfd], dl
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
pop edi
mov byte [esi + 0xfe], dl
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov edx, dword [esp + 0x14]
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownEscape_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
call dword [0x10123414]
cmp eax, 0x3b6
je case.0x10079d8d.68
mov eax, ebp
sar eax, 0x10
push 3
and eax, 0xff
push eax
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
test eax, eax
je case.0x10079d8d.68
cmp eax, 0xd
jne case.0x10079d8d.68
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnKeyDownReturn_struct_HWND____
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
pop edi
mov dword [esi + 0xd4], 0
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
cmp edi, 0x10e
ja 0x1007a0bd
je 0x1007a0a2
lea eax, [edi - 0x101]
cmp eax, 0xc
ja case.0x10079fed.259
movzx edx, byte [eax + 0x1007a310]
jmp dword [edx*4 + 0x1007a2fc]
mov edx, dword [esp + 0x14]
mov eax, ebp
push eax
mov ecx, ebx
push ecx
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_bool___thiscall_i3Ime::OnStartComposition_struct_HWND_____unsigned_int__long_int_
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
cmp byte [esi + 0x100], 0
jne 0x1007a02a
mov edx, dword [esp + 0x14]
mov eax, ebp
push eax
mov ecx, ebx
push ecx
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_bool___thiscall_i3Ime::OnChar_struct_HWND_____unsigned_int__long_int_
pop edi
mov byte [esi + 0x100], 0
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov eax, ebx
sub eax, 0x10
je 0x1007a065
sub eax, 1
jne case.0x10079fed.259
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push edi
push ecx
mov byte [esi + 0xfe], al
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
pop ebp
pop ebx
ret 0x14
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push edi
push ecx
mov byte [esi + 0xfd], 0
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
pop ebp
pop ebx
ret 0x14
cmp ebx, 0x11
jne case.0x10079fed.259
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push edi
push ecx
mov byte [esi + 0xfe], 0
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
pop ebp
pop ebx
ret 0x14
mov edx, dword [esp + 0x14]
mov eax, ebp
push eax
mov ecx, ebx
push ecx
push edx
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_bool___thiscall_i3Ime::OnEndComposition_struct_HWND_____unsigned_int__long_int_
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14
mov eax, edi
sub eax, 0x10f
je 0x1007a127
sub eax, 0x172
je 0x1007a0f7
sub eax, 1
jne case.0x10079fed.259
mov eax, dword [esp + 0x14]
push ebp
push ebx
push eax
call sym.i3FrameworkDx.dll_public:_bool___thiscall_i3Ime::OnNotify_struct_HWND_____unsigned_int__long_int_
test al, al
je case.0x10079d8d.68
mov ecx, dword [esp + 0x14]
push ebp
push ebx
push edi
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
pop ebp
pop ebx
ret 0x14
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
mov edi, dword [esp + 0x14]
push eax
push 0
push edi
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_void___thiscall_i3Ime::OnInputLanguageChange_struct_HWND_____unsigned_int__long_int_
mov edx, ebp
push edx
mov eax, ebx
push eax
push 0x281
push edi
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
pop ebp
pop ebx
ret 0x14
mov eax, dword [esp + 0x14]
mov ecx, ebp
push ecx
mov edx, ebx
push edx
push eax
mov ecx, esi
call sym.i3FrameworkDx.dll_public:_bool___thiscall_i3Ime::OnComposition_struct_HWND_____unsigned_int__long_int_
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 0x14