Function at 0x1009e250
Capabilities:
Log keystrokes

Disassembly:
push ecx
push esi
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1009e264
pop esi
pop ecx
ret
mov eax, dword [esp + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x1009e286
push eax
push eax
push 0x10
push esi
call fcn.10069d00
test eax, eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 1
jne 0x1009e337
push esi
call fcn.10052b50
add esp, 4
mov esi, eax
test eax, 0x623
push 4
push esi
call fcn.10069bf0
add esp, 8
mov eax, eax
push 5
push esi
call fcn.10069bf0
add esp, 8
test edi, edi
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.10069c10
add esp, 0x1c
test al, al
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
test ah, ah
mov ebp, ebp
test bh, bh
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov al, al
push 0
push esi
call fcn.10069cd0
add esp, 8
mov ebx, eax
mov ecx, ecx
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dh, dh
push esi
call ebp
test dl, dl
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
test cl, cl
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.10069c10
add esp, 0x1c
mov ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 2
jne 0x1009e354
push 7
push esi
call fcn.10069bf0
add esp, 8
mov bl, bl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 3
jne 0x1009e37b
push 0
push 0xf020
push 0x112
push esi
call fcn.10069c60
add esp, 0x10
test cl, cl
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 4
jne 0x1009e398
push 3
push esi
call fcn.10069bf0
add esp, 8
test esi, esi
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 5
jne 0x1009e3b5
push 4
push esi
call fcn.10069bf0
add esp, 8
test edx, edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 6
jne 0x1009e3d2
push 0
push esi
call fcn.10069bf0
add esp, 8
test ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 7
jne 0x1009e3ef
push 5
push esi
call fcn.10069bf0
add esp, 8
test ebx, ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 8
jne 0x1009e433
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
test bl, bl
or eax, 8
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
test eax, 0x44c0
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call fcn.10069c10
add esp, 0x1c
mov eax, eax
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 9
jne 0x1009e474
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
test edi, edi
and eax, 0xfffffff7
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
push eax
pop eax
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push esi
call fcn.10069c10
add esp, 0x1c
mov edx, edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xa
jne 0x1009e48f
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
push edx
pop edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xb
jne 0x1009e4aa
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov ebp, ebp
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xc
jne 0x1009e52b
push esi
call fcn.10052b50
add esp, 4
mov esi, eax
test cl, cl
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.1009e060
add esp, 8
mov ebx, ebx
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push esi
call ebp
test eax, 0x46a3
test eax, 0x1e01
push ecx
pop ecx
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov edx, edx
push 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call fcn.10069cd0
add esp, 8
mov ebx, eax
test ah, ah
push 1
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
test eax, 0x6709
push esi
call ebp
mov ebx, ebx
push 0
push ebx
push edi
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dh, dh
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xd
jne 0x1009e58c
test eax, 0x18bf
lea ecx, [esp + 0x10]
push ecx
push esi
call fcn.10069cd0
add esp, 8
mov ebx, ebx
mov edx, dword [esp + 0x10]
push 0
push 0
push edx
push 0
push 1
call fcn.100696f0
add esp, 0x14
mov esi, eax
test dh, dh
test esi, esi
je 0x1009e584
push 0
push esi
call fcn.100697f0
add esp, 8
push edx
pop edx
push esi
call fcn.1004c710
add esp, 4
nop
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
pop ecx
ret
cmp eax, 0xe
jne 0x1009e5b6
push esi
call fcn.10052b50
add esp, 4
mov ebp, ebp
push 0
push 0
push eax
call fcn.1009e130
add esp, 0xc
mov edx, edx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret
cmp eax, 0xf
jne 0x1009e5f7
test esi, esi
mov bh, bh
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov edi, eax
mov bh, bh
push 0
push esi
call fcn.10069cd0
add esp, 8
mov ebx, eax
mov esi, esi
mov ebp, dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push ebx
push edi
call ebp
push eax
pop eax
push esi
call dword [sym.imp.USER32.dll_SetFocus]
mov ebp, ebp
push 0
push ebx
push edi
call ebp
push ebx
pop ebx
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret