Function at 0x100865b0
Capabilities:
Log keystrokes

Disassembly:
push ecx
push esi
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x100865c4
pop esi
pop ecx
ret
mov eax, dword [esp + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x100865e6
push eax
push eax
push 0x10
push esi
call fcn.10052950
mov edi, edi
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 1
jne 0x10086693
push esi
call fcn.1003bf10
add esp, 4
mov esi, eax
mov bl, bl
push 4
push esi
call fcn.10052840
add esp, 8
nop
push 5
push esi
call fcn.10052840
add esp, 8
push edx
pop edx
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.10052860
add esp, 0x1c
mov bh, bh
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
mov eax, eax
push ecx
pop ecx
mov ch, ch
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov edi, edi
push 0
push esi
call fcn.10052920
add esp, 8
mov ebx, eax
mov al, al
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ebx, ebx
push esi
call ebp
mov ebx, ebx
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov bl, bl
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.10052860
add esp, 0x1c
push edx
pop edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 2
jne 0x100866b0
push 7
push esi
call fcn.10052840
add esp, 8
mov dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 3
jne 0x100866d7
push 0
push 0xf020
push 0x112
push esi
call fcn.100528b0
add esp, 0x10
mov ebp, ebp
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 4
jne 0x100866f4
push 3
push esi
call fcn.10052840
add esp, 8
mov eax, eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 5
jne 0x10086711
push 4
push esi
call fcn.10052840
add esp, 8
push ebx
pop ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 6
jne 0x1008672e
push 0
push esi
call fcn.10052840
add esp, 8
push ebx
pop ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 7
jne 0x1008674b
push 5
push esi
call fcn.10052840
add esp, 8
mov cl, cl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 8
jne 0x1008678b
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ecx
pop ecx
or eax, 8
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
nop
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.10052860
add esp, 0x1c
mov ch, ch
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 9
jne 0x100867cc
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, edx
and eax, 0xfffffff7
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dh, dh
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.10052860
add esp, 0x1c
mov bh, bh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xa
jne 0x100867e7
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
xchg ebx, eax
xchg ebx, eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xb
jne 0x10086802
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov edi, edi
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xc
jne 0x10086879
push esi
call fcn.1003bf10
add esp, 4
mov esi, eax
push eax
pop eax
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.100863d0
add esp, 8
nop
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
mov bl, bl
mov esi, esi
xchg ebx, eax
xchg ebx, eax
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov bh, bh
push 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call fcn.10052920
add esp, 8
mov ebx, eax
mov bl, bl
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ch, ch
push esi
call ebp
mov edi, edi
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov al, al
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xd
jne 0x100868d7
mov bl, bl
lea ecx, [esp + 0x10]
push ecx
push esi
call fcn.10052920
add esp, 8
nop
mov edx, dword [esp + 0x10]
push 0
push 0
push edx
push 0
push 1
call fcn.10052340
add esp, 0x14
mov esi, eax
mov ah, ah
test esi, esi
je 0x100868cf
push 0
push esi
call fcn.10052440
add esp, 8
push edx
pop edx
push esi
call fcn.10036ab0
add esp, 4
mov cl, cl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
pop ecx
ret
cmp eax, 0xe
jne 0x10086901
push esi
call fcn.1003bf10
add esp, 4
mov edi, edi
push 0
push 0
push eax
call fcn.100864a0
add esp, 0xc
mov cl, cl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xf
jne 0x10086942
mov eax, eax
push edx
pop edx
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov ch, ch
push 0
push esi
call fcn.10052920
add esp, 8
mov ebx, eax
mov al, al
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push ebx
push edi
call ebp
mov al, al
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push ebx
pop ebx
push 0
push ebx
push edi
call ebp
push ecx
pop ecx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret