Function at 0x140002cf0
Capabilities:
Log keystrokes via application hook

Disassembly:
mov rax, rsp
mov dword [rax + 0x18], r8d
push rbx
push rbp
push rdi
push r12
sub rsp, 0x58
mov rbp, qword [rsp + 0xb0]
xor ebx, ebx
cmp dword [0x140036040], ebx
mov qword [rax + 8], rsi
mov esi, r9d
mov qword [rax + 0x10], r13
mov r13d, r8d
mov qword [rax - 0x28], r15
mov r15d, ecx
mov r12d, edx
je 0x140002de7
mov edx, dword [0x140034cd8]
lea rcx, str._n_03d.
lea eax, [rdx + 1]
mov dword [0x140034cd8], eax
call fcn.140001020
cmp dword [0x14003601c], ebx
mov edi, ebx
jle 0x140002d69
lea rcx, [0x14002d6f8]
call fcn.140001020
inc edi
cmp edi, dword [0x14003601c]
jl 0x140002d53
mov rdi, rbp
mov eax, 0xffffff00
and rdi, rax
cmp dword [rsp + 0xa0], ebx
je 0x140002d8e
mov eax, 0xffc3ce00
lea r10, str.output
cmp rdi, rax
je 0x140002d95
lea r10, str.input
lea rax, str.DOWN
cmp r13d, 1
lea r9, [0x14002cdd0]
mov ecx, r12d
cmove r9, rax
call fcn.1400010e0
mov qword [rsp + 0x38], rbp
lea rcx, str.__s___s__s__scan:0x_04X_virt:0x_02X_flags:0x_02X_dwExtraInfo:0x_IX_
mov r8, rax
mov rdx, r10
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r15d
call fcn.140001020
inc dword [0x14003601c]
jmp 0x140002df2
mov eax, 0xffffff00
mov rdi, rbp
and rdi, rax
mov ecx, dword [0x140034cdc]
mov r13, qword [rsp + 0xb8]
test ecx, ecx
jle 0x140002e18
mov eax, esi
sub eax, dword [0x140036018]
cmp eax, ecx
jbe 0x140002e18
mov rcx, r13
call fcn.140002270
cmp dword [rsp + 0xa0], ebx
je 0x140002f4e
mov eax, 0xffc3ce00
cmp rdi, rax
jne 0x140002e38
cmp rbp, rax
jne 0x140002f4e
mov ecx, dword [0x140034c50]
mov edi, ebx
test ecx, ecx
jle 0x140002eae
mov eax, esi
sub eax, dword [0x140036018]
cmp eax, ecx
jbe 0x140002eae
mov rcx, qword [0x140037558]
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov rcx, qword [0x140037548]
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
xor r9d, r9d
lea rdx, [0x140004bd0]
xor r8d, r8d
mov ecx, 0xe
call qword [sym.imp.USER32.dll_SetWindowsHookExA]
xor r9d, r9d
lea rdx, [0x140004dd0]
xor r8d, r8d
mov qword [0x140037548], rax
mov ecx, 0xd
call qword [sym.imp.USER32.dll_SetWindowsHookExA]
mov qword [0x140037558], rax
mov dword [0x140036018], esi
mov ebp, dword [rsp + 0x90]
cmp dword [0x140036040], ebx
mov r15, qword [rsp + 0x50]
mov r13, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x80]
je 0x140002f42
dec dword [0x14003601c]
test edi, edi
je 0x140002f42
mov edx, dword [0x140034cd8]
lea rcx, str._n_03d.
lea eax, [rdx + 1]
mov dword [0x140034cd8], eax
call fcn.140001020
cmp dword [0x14003601c], ebx
jle 0x140002f16
nop
lea rcx, [0x14002d6f8]
call fcn.140001020
inc ebx
cmp ebx, dword [0x14003601c]
jl 0x140002f00
lea rax, str.DOWN
cmp ebp, 1
lea r8, [0x14002cdd0]
mov ecx, r12d
cmove r8, rax
call fcn.1400010e0
mov rdx, rax
lea rcx, str.blocked_input__s__s
call fcn.140001020
mov eax, edi
add rsp, 0x58
pop r12
pop rdi
pop rbp
pop rbx
ret
cmp r15d, 0x22a
jne 0x140002f61
mov edi, 1
jmp 0x140002eae
mov dword [0x140036018], esi
cmp dword [rsp + 0xa0], ebx
je 0x140002f79
movzx r9d, bpl
jmp 0x140003034
mov rcx, qword [0x140036058]
lea rdx, [0x140036058]
test rcx, rcx
je 0x140002ff9
nop dword [rax]
cmp dword [rcx + 0x88], 4
jne 0x140002fd8
mov rcx, qword [rdx]
mov eax, esi
sub eax, dword [rcx + 0x8c]
cmp eax, dword [0x140036024]
jb 0x140002fd8
mov dword [rcx + 0x88], ebx
mov rcx, qword [rdx]
cmp dword [rcx + 0x80], ebx
jne 0x140002fe5
cmp dword [rcx + 0x84], ebx
jne 0x140002fe5
mov rax, qword [rcx + 0x98]
mov qword [rdx], rax
mov qword [rcx + 0x98], rbx
jmp 0x140002fec
mov rcx, qword [rdx]
mov rax, qword [rcx + 8]
cmp dword [rax + 0xc], r12d
je 0x140002ff4
lea rdx, [rcx + 0x98]
mov rcx, qword [rdx]
test rcx, rcx
jne 0x140002f90
test rcx, rcx
jne 0x140003054
movzx ecx, r12b
lea rax, [0x140036d20]
mov rax, qword [rax + rcx*8]
test rax, rax
je 0x140003031
nop dword [rax]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
test rdx, rdx
je 0x14000302c
cmp dword [rdx + 8], ebx
jne 0x14000302c
mov rax, qword [rax + 8]
test rax, rax
jne 0x140003010
jmp 0x140003031
test rcx, rcx
jne 0x140003054
mov r9d, ebx
mov ebp, dword [rsp + 0x90]
mov r8d, esi
mov edx, ebp
mov qword [rsp + 0x20], r13
mov ecx, r12d
call fcn.1400029f0
mov edi, eax
jmp 0x140002eb5
mov ebp, dword [rsp + 0x90]
mov r8, r13
mov edx, esi
test ebp, ebp
jne 0x140003070
call fcn.140002620
mov edi, eax
jmp 0x140002eb5
call fcn.1400023b0
mov edi, eax
jmp 0x140002eb5