Function at 0x435890
Capabilities:
Log keystrokes via application hook

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bab10
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x4fa008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x14], esi
push dword [esi + 8]
push str.input_blocker_thread_id___d
push dword [esi + 0x18]
call fcn.004054f0
mov dword [ebp - 4], 0
add esp, 0xc
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
cmp byte [esi + 0xd], 0
jne 0x435aac
cmp byte [esi + 0x14], 0
je 0x43592f
mov eax, dword [0x4fee64]
test eax, eax
jne 0x435934
push eax
call ebx
push 0
push eax
push 0x435760
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fee64], eax
test eax, eax
setne cl
push ecx
push str.setKeyboardFilterHook_result___d
push dword [esi + 0x18]
call fcn.004054f0
add esp, 0xc
mov eax, dword [0x4fee64]
cmp byte [esi + 0x14], 0
jne 0x435954
test eax, eax
je 0x435954
push eax
call edi
mov ecx, dword [0x4fee64]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee64], ecx
cmp byte [esi + 0x15], 0
je 0x435993
mov eax, dword [0x4fee68]
test eax, eax
jne 0x435998
push eax
call ebx
push 0
push eax
push 0x4357a0
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fee68], eax
test eax, eax
setne cl
push ecx
push str.setMouseFilterHook_result___d
push dword [esi + 0x18]
call fcn.004054f0
add esp, 0xc
mov eax, dword [0x4fee68]
cmp byte [esi + 0x15], 0
jne 0x4359b8
test eax, eax
je 0x4359b8
push eax
call edi
mov ecx, dword [0x4fee68]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee68], ecx
cmp byte [esi + 0x16], 0
je 0x4359f7
mov eax, dword [0x4fee6c]
test eax, eax
jne 0x4359fc
push eax
call ebx
push 0
push eax
push 0x4357e0
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fee6c], eax
test eax, eax
setne cl
push ecx
push str.setSoftKeyboardFilterHook_result___b
push dword [esi + 0x18]
call fcn.004054f0
add esp, 0xc
mov eax, dword [0x4fee6c]
cmp byte [esi + 0x16], 0
jne 0x435a1c
test eax, eax
je 0x435a1c
push eax
call edi
mov ecx, dword [0x4fee6c]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee6c], ecx
mov al, byte [esi + 0x17]
mov ecx, dword [0x4fee70]
test al, al
je 0x435a6a
test ecx, ecx
jne 0x435a66
push ecx
call ebx
push 0
push eax
push 0x435830
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fee70], eax
test eax, eax
setne cl
push ecx
push str.setSoftMouseFilterHook_result___b
push dword [esi + 0x18]
call fcn.004054f0
mov al, byte [esi + 0x17]
add esp, 0xc
mov ecx, dword [0x4fee70]
test al, al
jne 0x435a84
test ecx, ecx
je 0x435a84
push ecx
call edi
mov ecx, dword [0x4fee70]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee70], ecx
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x435b64
call dword [sym.imp.USER32.dll_WaitMessage]
test eax, eax
jne 0x4358e6
mov eax, dword [0x4fee64]
test eax, eax
je 0x435acb
push eax
call edi
mov ecx, dword [0x4fee64]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee64], ecx
mov eax, dword [0x4fee68]
test eax, eax
je 0x435aea
push eax
call edi
mov ecx, dword [0x4fee68]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee68], ecx
mov eax, dword [0x4fee6c]
test eax, eax
je 0x435b09
push eax
call edi
mov ecx, dword [0x4fee6c]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee6c], ecx
mov eax, dword [0x4fee70]
test eax, eax
je 0x435b28
push eax
call edi
mov ecx, dword [0x4fee70]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee70], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x30], 0x12
je 0x435aac
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x4358e6