Function at 0x100911a0
Capabilities:
Log keystrokes

Disassembly:
push ecx
push esi
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x100911b4
pop esi
pop ecx
ret
mov eax, dword [esp + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x100911d6
push eax
push eax
push 0x10
push esi
call fcn.10059680
mov bh, bh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 1
jne 0x10091283
push esi
call fcn.10042850
add esp, 4
mov esi, eax
push eax
pop eax
push 4
push esi
call fcn.10059570
add esp, 8
push ebx
pop ebx
push 5
push esi
call fcn.10059570
add esp, 8
mov bl, bl
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.10059590
add esp, 0x1c
mov bh, bh
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
mov cl, cl
xchg ebx, eax
xchg ebx, eax
mov edi, edi
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov dl, dl
push 0
push esi
call fcn.10059650
add esp, 8
mov ebx, eax
push eax
pop eax
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
nop
push esi
call ebp
mov ah, ah
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov eax, eax
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.10059590
add esp, 0x1c
mov dl, dl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 2
jne 0x100912a0
push 7
push esi
call fcn.10059570
add esp, 8
mov bh, bh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 3
jne 0x100912c7
push 0
push 0xf020
push 0x112
push esi
call fcn.100595e0
add esp, 0x10
mov ecx, ecx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 4
jne 0x100912e4
push 3
push esi
call fcn.10059570
add esp, 8
mov edi, edi
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 5
jne 0x10091301
push 4
push esi
call fcn.10059570
add esp, 8
mov ecx, ecx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 6
jne 0x1009131e
push 0
push esi
call fcn.10059570
add esp, 8
push edx
pop edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 7
jne 0x1009133b
push 5
push esi
call fcn.10059570
add esp, 8
mov eax, eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 8
jne 0x1009137b
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
xchg ebx, eax
xchg ebx, eax
or eax, 8
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
nop
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.10059590
add esp, 0x1c
mov ebp, ebp
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 9
jne 0x100913bc
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push edx
pop edx
and eax, 0xfffffff7
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, edx
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.10059590
add esp, 0x1c
mov dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xa
jne 0x100913d7
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
push edx
pop edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xb
jne 0x100913f2
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov ebp, ebp
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xc
jne 0x1009146a
push esi
call fcn.10042850
add esp, 4
mov esi, eax
mov eax, eax
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.10090fc0
add esp, 8
mov bl, bl
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
mov cl, cl
mov esi, esi
mov ebp, ebp
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov ebp, ebp
push 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call fcn.10059650
add esp, 8
mov ebx, eax
mov al, al
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ebp, ebp
push esi
call ebp
push eax
pop eax
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ah, ah
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xd
jne 0x100914c9
push ecx
pop ecx
lea ecx, [esp + 0x10]
push ecx
push esi
call fcn.10059650
add esp, 8
push ebx
pop ebx
mov edx, dword [esp + 0x10]
push 0
push 0
push edx
push 0
push 1
call fcn.10059070
add esp, 0x14
mov esi, eax
mov edx, edx
test esi, esi
je 0x100914c1
push 0
push esi
call fcn.10059170
add esp, 8
mov dh, dh
push esi
call fcn.1003c7f0
add esp, 4
mov dl, dl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
pop ecx
ret
cmp eax, 0xe
jne 0x100914f3
push esi
call fcn.10042850
add esp, 4
push ecx
pop ecx
push 0
push 0
push eax
call fcn.10091090
add esp, 0xc
mov ecx, ecx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xf
jne 0x10091532
mov ebx, ebx
mov bl, bl
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
push edx
pop edx
push 0
push esi
call fcn.10059650
add esp, 8
mov ebx, eax
nop
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push ebx
push edi
call ebp
mov ecx, ecx
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push edx
pop edx
push 0
push ebx
push edi
call ebp
nop
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret