Function at 0x100ac410
Capabilities:
Log keystrokes

Disassembly:
push ecx
push esi
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x100ac424
pop esi
pop ecx
ret
mov eax, dword [esp + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x100ac446
push eax
push eax
push 0x10
push esi
call fcn.100724b0
mov bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 1
jne 0x100ac524
push esi
call fcn.10058930
add esp, 4
mov esi, eax
mov bl, bl
push 4
push esi
call fcn.100723a0
add esp, 8
push ebx
pop ebx
push 5
push esi
call fcn.100723a0
add esp, 8
cmp dword [0x101d08ec], 0x2e72
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.100723c0
add esp, 0x1c
push edx
pop edx
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
cmp dword [0x101d08f8], 0xffff8d29
cmp dword [0x101d08fc], 0xfffff233
mov ecx, ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
mov esi, esi
push 0
push esi
call fcn.10072480
add esp, 8
mov ebx, eax
cmp dword [0x101d08ec], 0xffffd18d
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
cmp dword [0x101d0904], 0x301b
push esi
call ebp
cmp dword [0x101d08e8], 0xffff895d
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ecx, ecx
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.100723c0
add esp, 0x1c
mov cl, cl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 2
jne 0x100ac549
push 7
push esi
call fcn.100723a0
add esp, 8
cmp dword [0x101d08e8], 0x76a2
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 3
jne 0x100ac570
push 0
push 0xf020
push 0x112
push esi
call fcn.10072410
add esp, 0x10
push ebx
pop ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 4
jne 0x100ac595
push 3
push esi
call fcn.100723a0
add esp, 8
cmp dword [0x101d08f4], 0xffff8705
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 5
jne 0x100ac5ba
push 4
push esi
call fcn.100723a0
add esp, 8
cmp dword [0x101d08ec], 0x2e72
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 6
jne 0x100ac5df
push 0
push esi
call fcn.100723a0
add esp, 8
cmp dword [0x101d08f4], 0x78fa
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 7
jne 0x100ac5fc
push 5
push esi
call fcn.100723a0
add esp, 8
mov ah, ah
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 8
jne 0x100ac63d
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
pop eax
or eax, 8
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, edx
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.100723c0
add esp, 0x1c
mov ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 9
jne 0x100ac686
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp dword [0x101d08f4], 0xffff8705
and eax, 0xfffffff7
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dl, dl
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.100723c0
add esp, 0x1c
mov bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xa
jne 0x100ac6a9
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [0x101d08e0], 0x6e83
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xb
jne 0x100ac6c4
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
push edx
pop edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xc
jne 0x100ac788
push esi
call fcn.10058930
add esp, 4
mov esi, eax
cmp dword [0x101d0904], 0x301b
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.100ac1e0
add esp, 8
mov bl, bl
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
cmp dword [0x101d08f4], 0x78fa
cmp dword [0x101d08ec], 0x2e72
cmp dword [0x101d0904], 0x301b
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
cmp dword [0x101d08f0], 0x1cea
push 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call fcn.10072480
add esp, 8
mov ebx, eax
cmp dword [0x101d08e0], 0x6e83
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
cmp dword [0x101d0904], 0xffffcfe4
push esi
call ebp
cmp dword [0x101d08e8], 0x76a2
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
cmp dword [0x101d08f4], 0xffff8705
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xd
jne 0x100ac7ef
cmp dword [0x101d0904], 0xffffcfe4
lea ecx, [esp + 0x10]
push ecx
push esi
call fcn.10072480
add esp, 8
mov edx, edx
mov edx, dword [esp + 0x10]
push 0
push 0
push edx
push 0
push 1
call fcn.10071e30
add esp, 0x14
mov esi, eax
push edx
pop edx
test esi, esi
je 0x100ac7e7
push 0
push esi
call fcn.10071f30
add esp, 8
mov bl, bl
push esi
call fcn.10052250
add esp, 4
mov edx, edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
pop ecx
ret
cmp eax, 0xe
jne 0x100ac820
push esi
call fcn.10058930
add esp, 4
nop
push 0
push 0
push eax
call fcn.100ac2d0
add esp, 0xc
cmp dword [0x101d08e4], 0xffff85c3
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xf
jne 0x100ac881
cmp dword [0x101d0900], 0xffffb4c1
cmp dword [0x101d08f8], 0xffff8d29
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
cmp dword [0x101d08ec], 0xffffd18d
push 0
push esi
call fcn.10072480
add esp, 8
mov ebx, eax
mov dh, dh
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push ebx
push edi
call ebp
mov dl, dl
push esi
call dword [sym.imp.USER32.dll_SetFocus]
mov bl, bl
push 0
push ebx
push edi
call ebp
cmp dword [0x101d08f0], 0xffffe315
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret