Function at 0x140184910
Capabilities:
Log keystrokes via application hook

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8, qword [0x140404ea8]
mov dword [0x140404fb8], eax
test r8, r8
je 0x140184b10
xor r9d, r9d
mov rbx, qword [sym.imp.USER32.dll_SetWindowsHookExA]
mov ecx, 0xd
lea rdx, [0x140184040]
call rbx
xor r9d, r9d
mov r8, qword [0x140404ea8]
lea rdx, [0x140183730]
mov ecx, 0xe
mov qword [0x140404fb0], rax
call rbx
xor r8d, r8d
mov edx, 0x800c
mov dword [rsp + 0x30], 2
mov qword [0x140404fa8], rax
lea r9, [0x140182a80]
mov ecx, 0x800c
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.USER32.dll_SetWinEventHook]
cmp qword [0x140404fb0], 0
mov qword [0x140404fa0], rax
je 0x140184bb0
cmp qword [0x140404fa8], 0
je 0x140184bb0
test rax, rax
je 0x140184c20
mov r9d, 0x2b3
lea r8, str.hook_run
lea rdx, str._s___u_:_SetWindowsHookEx___successful._n
mov ecx, 1
call qword [case.0x1401833e5.0]
lea r12, [0x140404f60]
call fcn.140182840
mov r13, qword [sym.imp.USER32.dll_GetMessageTime]
call r13
cmp qword [0x140404f48], 0
mov dword [0x140404f60], 1
mov dword [0x140404f70], 0
cdqe
mov qword [0x140404f68], rax
je 0x140184bf8
mov ecx, 1
mov dword [rsp + 0x20], 1
mov r9d, 0x36
lea r8, str.dispatch_event
lea rdx, str._s___u_:_Dispatching_event_type__u._n
call qword [case.0x1401833e5.0]
mov rcx, r12
call qword [0x140404f48]
mov rsi, qword [sym.imp.USER32.dll_GetMessageA]
mov rbp, qword [sym.imp.USER32.dll_TranslateMessage]
lea rbx, [rsp + 0x40]
mov rdi, qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140184a8a
mov rcx, rbx
call rbp
mov rcx, rbx
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call rsi
test eax, eax
jg 0x140184a80
xor ebx, ebx
call fcn.140184770
call r13
cmp qword [0x140404f48], 0
mov dword [0x140404f60], 2
mov dword [0x140404f70], 0
cdqe
mov qword [0x140404f68], rax
je 0x140184b80
mov r9d, 0x36
lea r8, str.dispatch_event
lea rdx, str._s___u_:_Dispatching_event_type__u._n
mov dword [rsp + 0x20], 2
mov ecx, 1
call qword [case.0x1401833e5.0]
mov rcx, r12
call qword [0x140404f48]
mov eax, ebx
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov r9d, 0x291
lea r8, str.hook_run
mov ecx, 2
lea rdx, str._s___u_:_hInst_was_not_set_by_DllMain__._n
call qword [case.0x1401833e5.0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x140404ea8], rax
test rax, rax
je 0x140184c48
call fcn.140182c30
mov r9d, 0x31e
mov ecx, 2
lea r8, str.load_input_helper
mov dword [rsp + 0x20], eax
lea rdx, str._s___u_:_refresh_locale_list___found__i_locale_s_._n
call qword [case.0x1401833e5.0]
mov r8, qword [0x140404ea8]
jmp 0x140184938
mov r9d, 0x3b
lea r8, str.dispatch_event
mov ecx, 3
lea rdx, str._s___u_:_No_dispatch_callback_set__n
call qword [case.0x1401833e5.0]
mov eax, ebx
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov rbx, qword [case.0x1401833e5.0]
lea r12, [0x140404f60]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x2c7
mov ecx, 4
lea r8, str.hook_run
mov dword [rsp + 0x20], eax
lea rdx, str._s___u_:_SetWindowsHookEx___failed____lX__n
call rbx
mov r13, qword [sym.imp.USER32.dll_GetMessageTime]
mov ebx, 0x30
jmp 0x140184a9d
mov r9d, 0x3b
lea r8, str.dispatch_event
mov ecx, 3
lea rdx, str._s___u_:_No_dispatch_callback_set__n
call qword [case.0x1401833e5.0]
jmp 0x140184a64
mov r9d, 0x2af
lea r8, str.hook_run
mov ecx, 3
lea rdx, str._s___u_:_SetWinEventHook___failed__n
call qword [case.0x1401833e5.0]
jmp 0x1401849d4
mov rbx, qword [case.0x1401833e5.0]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x299
mov ecx, 4
lea r8, str.hook_run
mov dword [rsp + 0x20], eax
lea rdx, str._s___u_:_Could_not_determine_hInst_for_SetWindowsHookEx______lX__n
call rbx
mov r8, qword [0x140404ea8]
jmp 0x140184938