Function at 0x1009f270
Capabilities:
Log keystrokes

Disassembly:
push ecx
push esi
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1009f284
pop esi
pop ecx
ret
mov eax, dword [esp + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x1009f2a6
push eax
push eax
push 0x10
push esi
call fcn.1006a720
test dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 1
jne 0x1009f354
push esi
call fcn.10053690
add esp, 4
mov esi, eax
mov ecx, ecx
push 4
push esi
call fcn.1006a610
add esp, 8
push ecx
pop ecx
push 5
push esi
call fcn.1006a610
add esp, 8
test eax, eax
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.1006a630
add esp, 0x1c
test eax, eax
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
mov dl, dl
mov esi, esi
test ch, ch
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
test dh, dh
push 0
push esi
call fcn.1006a6f0
add esp, 8
mov ebx, eax
test ebx, ebx
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
test edx, edx
push esi
call ebp
mov dh, dh
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dh, dh
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.1006a630
add esp, 0x1c
mov ah, ah
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 2
jne 0x1009f371
push 7
push esi
call fcn.1006a610
add esp, 8
test ah, ah
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 3
jne 0x1009f398
push 0
push 0xf020
push 0x112
push esi
call fcn.1006a680
add esp, 0x10
test eax, eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 4
jne 0x1009f3b5
push 3
push esi
call fcn.1006a610
add esp, 8
test bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 5
jne 0x1009f3d2
push 4
push esi
call fcn.1006a610
add esp, 8
mov edx, edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 6
jne 0x1009f3ef
push 0
push esi
call fcn.1006a610
add esp, 8
mov dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 7
jne 0x1009f40c
push 5
push esi
call fcn.1006a610
add esp, 8
mov bh, bh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 8
jne 0x1009f44d
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov cl, cl
or eax, 8
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ah, ah
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.1006a630
add esp, 0x1c
test al, al
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 9
jne 0x1009f48e
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dh, dh
and eax, 0xfffffff7
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
push eax
pop eax
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.1006a630
add esp, 0x1c
test ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xa
jne 0x1009f4ac
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
test eax, 0x698b
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xb
jne 0x1009f4c7
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov edx, edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xc
jne 0x1009f545
push esi
call fcn.10053690
add esp, 4
mov esi, eax
mov ah, ah
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.1009f080
add esp, 8
test bl, bl
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
test eax, 0x596e
test cl, cl
mov al, al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
test eax, 0x12ed
push 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call fcn.1006a6f0
add esp, 8
mov ebx, eax
test eax, eax
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
test bh, bh
push esi
call ebp
mov al, al
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ah, ah
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xd
jne 0x1009f5a4
push ecx
pop ecx
lea ecx, [esp + 0x10]
push ecx
push esi
call fcn.1006a6f0
add esp, 8
push ecx
pop ecx
mov edx, dword [esp + 0x10]
push 0
push 0
push edx
push 0
push 1
call fcn.1006a100
add esp, 0x14
mov esi, eax
mov ah, ah
test esi, esi
je 0x1009f59c
push 0
push esi
call fcn.1006a210
add esp, 8
mov dl, dl
push esi
call fcn.1004de50
add esp, 4
mov dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
pop ecx
ret
cmp eax, 0xe
jne 0x1009f5ce
push esi
call fcn.10053690
add esp, 4
test ah, ah
push 0
push 0
push eax
call fcn.1009f150
add esp, 0xc
test ah, ah
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xf
jne 0x1009f615
push ebx
pop ebx
test edx, edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
test edx, edx
push 0
push esi
call fcn.1006a6f0
add esp, 8
mov ebx, eax
test ch, ch
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push ebx
push edi
call ebp
test al, al
push esi
call dword [sym.imp.USER32.dll_SetFocus]
test eax, 0x6c63
push 0
push ebx
push edi
call ebp
test eax, 0x257d
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret