Function at 0x434c70
Capabilities:
Log keystrokes via application hook

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b9240
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x4fa008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x14], esi
push dword [esi + 8]
push 0x4d4288
push dword [esi + 0x18]
call fcn.004056e0
mov dword [ebp - 4], 0
add esp, 0xc
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
cmp byte [esi + 0xd], 0
jne 0x434e8c
cmp byte [esi + 0x14], 0
je 0x434d0f
mov eax, dword [0x4fee5c]
test eax, eax
jne 0x434d14
push eax
call ebx
push 0
push eax
push 0x434b40
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fee5c], eax
test eax, eax
setne cl
push ecx
push str.setKeyboardFilterHook_result___d
push dword [esi + 0x18]
call fcn.004056e0
add esp, 0xc
mov eax, dword [0x4fee5c]
cmp byte [esi + 0x14], 0
jne 0x434d34
test eax, eax
je 0x434d34
push eax
call edi
mov ecx, dword [0x4fee5c]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee5c], ecx
cmp byte [esi + 0x15], 0
je 0x434d73
mov eax, dword [0x4fee60]
test eax, eax
jne 0x434d78
push eax
call ebx
push 0
push eax
push 0x434b80
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fee60], eax
test eax, eax
setne cl
push ecx
push str.setMouseFilterHook_result___d
push dword [esi + 0x18]
call fcn.004056e0
add esp, 0xc
mov eax, dword [0x4fee60]
cmp byte [esi + 0x15], 0
jne 0x434d98
test eax, eax
je 0x434d98
push eax
call edi
mov ecx, dword [0x4fee60]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee60], ecx
cmp byte [esi + 0x16], 0
je 0x434dd7
mov eax, dword [0x4fee64]
test eax, eax
jne 0x434ddc
push eax
call ebx
push 0
push eax
push 0x434bc0
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fee64], eax
test eax, eax
setne cl
push ecx
push str.setSoftKeyboardFilterHook_result___b
push dword [esi + 0x18]
call fcn.004056e0
add esp, 0xc
mov eax, dword [0x4fee64]
cmp byte [esi + 0x16], 0
jne 0x434dfc
test eax, eax
je 0x434dfc
push eax
call edi
mov ecx, dword [0x4fee64]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee64], ecx
mov al, byte [esi + 0x17]
mov ecx, dword [0x4fee68]
test al, al
je 0x434e4a
test ecx, ecx
jne 0x434e46
push ecx
call ebx
push 0
push eax
push 0x434c10
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4fee68], eax
test eax, eax
setne cl
push ecx
push str.setSoftMouseFilterHook_result___b
push dword [esi + 0x18]
call fcn.004056e0
mov al, byte [esi + 0x17]
add esp, 0xc
mov ecx, dword [0x4fee68]
test al, al
jne 0x434e64
test ecx, ecx
je 0x434e64
push ecx
call edi
mov ecx, dword [0x4fee68]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee68], ecx
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x434f44
call dword [sym.imp.USER32.dll_WaitMessage]
test eax, eax
jne 0x434cc6
mov eax, dword [0x4fee5c]
test eax, eax
je 0x434eab
push eax
call edi
mov ecx, dword [0x4fee5c]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee5c], ecx
mov eax, dword [0x4fee60]
test eax, eax
je 0x434eca
push eax
call edi
mov ecx, dword [0x4fee60]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee60], ecx
mov eax, dword [0x4fee64]
test eax, eax
je 0x434ee9
push eax
call edi
mov ecx, dword [0x4fee64]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee64], ecx
mov eax, dword [0x4fee68]
test eax, eax
je 0x434f08
push eax
call edi
mov ecx, dword [0x4fee68]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fee68], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x30], 0x12
je 0x434e8c
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x434cc6