Function at 0x20a011d0
Capabilities:
Print debug messages

Disassembly:
push rbx
push rsi
push r12
sub rsp, 0x270
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x250], rax
cmp dword [0x20a0c020], 0xffffffff
mov rbx, r8
mov r12, rdx
mov esi, ecx
jne 0x20a0120b
lea rcx, [0x20a0c020]
call section..text
test esi, esi
jns 0x20a01224
mov r9, rbx
mov r8, r12
mov edx, esi
xor ecx, ecx
call qword [sym.imp.USER32.dll_CallNextHookEx]
jmp 0x20a0147d
mov qword [rsp + 0x260], rdi
test esi, esi
jne 0x20a01465
mov rax, qword [section..actmonh]
test rax, rax
je 0x20a01458
mov eax, dword [rbx + 8]
cmp eax, 0x102
ja 0x20a013b0
cmp eax, 0x102
je 0x20a0127a
sub eax, 0x100
je 0x20a0126e
cmp eax, 1
je 0x20a013d0
jmp 0x20a01465
mov byte [0x20a0ce3c], 1
jmp 0x20a01465
cmp dword [0x20a0ce44], 0
je 0x20a01397
cmp byte [0x20a0ce3c], 0
je 0x20a01397
cmp qword [rbx + 0x10], 0
je 0x20a01465
mov rcx, qword [rbx]
mov qword [rsp + 0x268], rbp
call qword [sym.imp.USER32.dll_IsWindowUnicode]
test eax, eax
je 0x20a012d7
cmp byte [0x20a0c024], 0
je 0x20a012d1
mov rax, qword [rbx + 0x10]
cmp rax, 0x80
jb 0x20a012d1
cmp rax, 0xff
jbe 0x20a012d7
mov rdi, qword [rbx + 0x10]
jmp 0x20a0131a
movzx eax, byte [rbx + 0x10]
mov byte [rsp + 0x30], al
xor eax, eax
mov word [rsp + 0x34], ax
call qword [sym.imp.KERNEL32.dll_GetACP]
mov r9d, 1
mov ecx, eax
lea rax, [rsp + 0x34]
lea r8, [rsp + 0x30]
lea edx, [r9 + 4]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movzx edi, word [rsp + 0x34]
mov rcx, qword [rbx]
call fcn.20a01180
mov rcx, qword [rbx]
lea rdx, [rsp + 0x40]
mov r8d, 0x104
mov rbp, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x20a0136a
lea rdx, str.Edit
lea rcx, [rsp + 0x40]
call fcn.20a0177c
test eax, eax
jne 0x20a0136a
mov rcx, qword [rbx]
lea edx, [rax - 0x10]
call qword [sym.imp.USER32.dll_GetWindowLongW]
test al, 0x20
je 0x20a0136a
mov eax, 0x80000000
or rdi, rax
mov edx, dword [0x20a0ce44]
mov rcx, qword [section..actmonh]
mov r9, rdi
mov r8, rbp
call qword [sym.imp.USER32.dll_PostMessageW]
mov rbp, qword [rsp + 0x268]
mov byte [0x20a0ce3c], 0
jmp 0x20a01465
lea rcx, str.g_uiKeyboardMsg__0_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov byte [0x20a0ce3c], 0
jmp 0x20a01465
cmp eax, 0x104
jb 0x20a01465
cmp eax, 0x105
jbe 0x20a013d0
add eax, 0xfffffe00
cmp eax, 0xa
ja 0x20a01465
mov edi, dword [0x20a0ce50]
test edi, edi
je 0x20a0144f
lea rcx, [0x20a0ce58]
mov r8d, 0x30
mov rdx, rbx
call fcn.20a05d90
test eax, eax
je 0x20a01465
mov rax, qword [rbx]
mov r9d, dword [0x20a0c020]
mov rcx, qword [section..actmonh]
mov qword [0x20a0ce58], rax
mov rax, qword [rbx + 8]
mov edx, edi
mov qword [0x20a0ce60], rax
mov rax, qword [rbx + 0x10]
mov qword [0x20a0ce68], rax
mov rax, qword [rbx + 0x18]
mov qword [0x20a0ce70], rax
mov rax, qword [rbx + 0x20]
mov qword [0x20a0ce78], rax
mov rax, qword [rbx + 0x28]
mov qword [0x20a0ce80], rax
mov r8, qword [rbx]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x20a01465
lea rcx, str.g_uiActivityMsg__0_n
jmp 0x20a0145f
lea rcx, str.g_hMonitorWnd__NULL_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov r9, rbx
mov r8, r12
mov edx, esi
xor ecx, ecx
call qword [sym.imp.USER32.dll_CallNextHookEx]
mov rdi, qword [rsp + 0x260]
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.20a01570
add rsp, 0x270
pop r12
pop rsi
pop rbx
ret