Function at 0x4348c0
Capabilities:
Log keystrokes via application hook

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b8e40
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x4f8008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x14], esi
push dword [esi + 8]
push str.input_blocker_thread_id___d
push dword [esi + 0x18]
call fcn.004054f0
mov dword [ebp - 4], 0
add esp, 0xc
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
cmp byte [esi + 0xd], 0
jne 0x434adc
cmp byte [esi + 0x14], 0
je 0x43495f
mov eax, dword [0x4fce5c]
test eax, eax
jne 0x434964
push eax
call ebx
push 0
push eax
push 0x434790
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fce5c], eax
test eax, eax
setne cl
push ecx
push str.setKeyboardFilterHook_result___d
push dword [esi + 0x18]
call fcn.004054f0
add esp, 0xc
mov eax, dword [0x4fce5c]
cmp byte [esi + 0x14], 0
jne 0x434984
test eax, eax
je 0x434984
push eax
call edi
mov ecx, dword [0x4fce5c]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fce5c], ecx
cmp byte [esi + 0x15], 0
je 0x4349c3
mov eax, dword [0x4fce60]
test eax, eax
jne 0x4349c8
push eax
call ebx
push 0
push eax
push 0x4347d0
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fce60], eax
test eax, eax
setne cl
push ecx
push str.setMouseFilterHook_result___d
push dword [esi + 0x18]
call fcn.004054f0
add esp, 0xc
mov eax, dword [0x4fce60]
cmp byte [esi + 0x15], 0
jne 0x4349e8
test eax, eax
je 0x4349e8
push eax
call edi
mov ecx, dword [0x4fce60]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fce60], ecx
cmp byte [esi + 0x16], 0
je 0x434a27
mov eax, dword [0x4fce64]
test eax, eax
jne 0x434a2c
push eax
call ebx
push 0
push eax
push 0x434810
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fce64], eax
test eax, eax
setne cl
push ecx
push str.setSoftKeyboardFilterHook_result___b
push dword [esi + 0x18]
call fcn.004054f0
add esp, 0xc
mov eax, dword [0x4fce64]
cmp byte [esi + 0x16], 0
jne 0x434a4c
test eax, eax
je 0x434a4c
push eax
call edi
mov ecx, dword [0x4fce64]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fce64], ecx
mov al, byte [esi + 0x17]
mov ecx, dword [0x4fce68]
test al, al
je 0x434a9a
test ecx, ecx
jne 0x434a96
push ecx
call ebx
push 0
push eax
push 0x434860
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fce68], eax
test eax, eax
setne cl
push ecx
push str.setSoftMouseFilterHook_result___b
push dword [esi + 0x18]
call fcn.004054f0
mov al, byte [esi + 0x17]
add esp, 0xc
mov ecx, dword [0x4fce68]
test al, al
jne 0x434ab4
test ecx, ecx
je 0x434ab4
push ecx
call edi
mov ecx, dword [0x4fce68]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fce68], ecx
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x434b94
call dword [sym.imp.USER32.dll_WaitMessage]
test eax, eax
jne 0x434916
mov eax, dword [0x4fce5c]
test eax, eax
je 0x434afb
push eax
call edi
mov ecx, dword [0x4fce5c]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fce5c], ecx
mov eax, dword [0x4fce60]
test eax, eax
je 0x434b1a
push eax
call edi
mov ecx, dword [0x4fce60]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fce60], ecx
mov eax, dword [0x4fce64]
test eax, eax
je 0x434b39
push eax
call edi
mov ecx, dword [0x4fce64]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fce64], ecx
mov eax, dword [0x4fce68]
test eax, eax
je 0x434b58
push eax
call edi
mov ecx, dword [0x4fce68]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fce68], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x30], 0x12
je 0x434adc
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x434916