Function at 0x10085fb0
Capabilities:
Log keystrokes

Disassembly:
push ecx
push esi
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x10085fc4
pop esi
pop ecx
ret
mov eax, dword [esp + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x10085fe6
push eax
push eax
push 0x10
push esi
call fcn.100522d0
mov cl, cl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 1
jne 0x10086094
push esi
call fcn.1003b480
add esp, 4
mov esi, eax
mov ebx, ebx
push 4
push esi
call fcn.100521c0
add esp, 8
mov eax, eax
push 5
push esi
call fcn.100521c0
add esp, 8
push eax
pop eax
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.100521e0
add esp, 0x1c
push ebx
pop ebx
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
push edx
pop edx
mov edx, edx
mov bl, bl
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov ch, ch
push 0
push esi
call fcn.100522a0
add esp, 8
mov ebx, eax
mov ah, ah
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dh, dh
push esi
call ebp
mov dh, dh
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
push ebx
pop ebx
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.100521e0
add esp, 0x1c
push edx
pop edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 2
jne 0x100860b1
push 7
push esi
call fcn.100521c0
add esp, 8
mov ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 3
jne 0x100860d7
push 0
push 0xf020
push 0x112
push esi
call fcn.10052230
add esp, 0x10
nop
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 4
jne 0x100860f4
push 3
push esi
call fcn.100521c0
add esp, 8
mov bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 5
jne 0x10086111
push 4
push esi
call fcn.100521c0
add esp, 8
mov eax, eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 6
jne 0x1008612e
push 0
push esi
call fcn.100521c0
add esp, 8
mov ecx, ecx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 7
jne 0x1008614b
push 5
push esi
call fcn.100521c0
add esp, 8
mov bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 8
jne 0x1008618c
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov eax, eax
or eax, 8
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ch, ch
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.100521e0
add esp, 0x1c
mov dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 9
jne 0x100861cd
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
pop ebx
and eax, 0xfffffff7
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ch, ch
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.100521e0
add esp, 0x1c
mov dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xa
jne 0x100861e8
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov ch, ch
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xb
jne 0x10086203
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov edx, edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xc
jne 0x1008627b
push esi
call fcn.1003b480
add esp, 4
mov esi, eax
xchg ebx, eax
xchg ebx, eax
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.10085dd0
add esp, 8
mov al, al
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
mov ebp, ebp
mov ebx, ebx
mov dl, dl
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
push ebx
pop ebx
push 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call fcn.100522a0
add esp, 8
mov ebx, eax
mov esi, esi
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
xchg ebx, eax
xchg ebx, eax
push esi
call ebp
mov cl, cl
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
push edx
pop edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xd
jne 0x100862da
mov ecx, ecx
lea ecx, [esp + 0x10]
push ecx
push esi
call fcn.100522a0
add esp, 8
mov edx, edx
mov edx, dword [esp + 0x10]
push 0
push 0
push edx
push 0
push 1
call fcn.10051cc0
add esp, 0x14
mov esi, eax
xchg ebx, eax
xchg ebx, eax
test esi, esi
je 0x100862d2
push 0
push esi
call fcn.10051dc0
add esp, 8
mov dl, dl
push esi
call fcn.10036090
add esp, 4
push eax
pop eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
pop ecx
ret
cmp eax, 0xe
jne 0x10086304
push esi
call fcn.1003b480
add esp, 4
mov edi, edi
push 0
push 0
push eax
call fcn.10085ea0
add esp, 0xc
mov bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xf
jne 0x10086345
mov edi, edi
mov ah, ah
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
xchg ebx, eax
xchg ebx, eax
push 0
push esi
call fcn.100522a0
add esp, 8
mov ebx, eax
push ebx
pop ebx
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push ebx
push edi
call ebp
push ecx
pop ecx
push esi
call dword [sym.imp.USER32.dll_SetFocus]
mov bh, bh
push 0
push ebx
push edi
call ebp
mov edi, edi
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret