Function at 0x435780
Capabilities:
Log keystrokes via application hook

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b9d30
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x4fb008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x14], esi
push dword [esi + 8]
push str.input_blocker_thread_id___d
push dword [esi + 0x18]
call fcn.00406390
mov dword [ebp - 4], 0
add esp, 0xc
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
cmp byte [esi + 0xd], 0
jne 0x43599c
cmp byte [esi + 0x14], 0
je 0x43581f
mov eax, dword [0x4ffe5c]
test eax, eax
jne 0x435824
push eax
call ebx
push 0
push eax
push 0x435650
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4ffe5c], eax
test eax, eax
setne cl
push ecx
push str.setKeyboardFilterHook_result___d
push dword [esi + 0x18]
call fcn.00406390
add esp, 0xc
mov eax, dword [0x4ffe5c]
cmp byte [esi + 0x14], 0
jne 0x435844
test eax, eax
je 0x435844
push eax
call edi
mov ecx, dword [0x4ffe5c]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4ffe5c], ecx
cmp byte [esi + 0x15], 0
je 0x435883
mov eax, dword [0x4ffe60]
test eax, eax
jne 0x435888
push eax
call ebx
push 0
push eax
push 0x435690
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4ffe60], eax
test eax, eax
setne cl
push ecx
push str.setMouseFilterHook_result___d
push dword [esi + 0x18]
call fcn.00406390
add esp, 0xc
mov eax, dword [0x4ffe60]
cmp byte [esi + 0x15], 0
jne 0x4358a8
test eax, eax
je 0x4358a8
push eax
call edi
mov ecx, dword [0x4ffe60]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4ffe60], ecx
cmp byte [esi + 0x16], 0
je 0x4358e7
mov eax, dword [0x4ffe64]
test eax, eax
jne 0x4358ec
push eax
call ebx
push 0
push eax
push 0x4356d0
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4ffe64], eax
test eax, eax
setne cl
push ecx
push str.setSoftKeyboardFilterHook_result___b
push dword [esi + 0x18]
call fcn.00406390
add esp, 0xc
mov eax, dword [0x4ffe64]
cmp byte [esi + 0x16], 0
jne 0x43590c
test eax, eax
je 0x43590c
push eax
call edi
mov ecx, dword [0x4ffe64]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4ffe64], ecx
mov al, byte [esi + 0x17]
mov ecx, dword [0x4ffe68]
test al, al
je 0x43595a
test ecx, ecx
jne 0x435956
push ecx
call ebx
push 0
push eax
push 0x435720
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
xor ecx, ecx
mov dword [0x4ffe68], eax
test eax, eax
setne cl
push ecx
push str.setSoftMouseFilterHook_result___b
push dword [esi + 0x18]
call fcn.00406390
mov al, byte [esi + 0x17]
add esp, 0xc
mov ecx, dword [0x4ffe68]
test al, al
jne 0x435974
test ecx, ecx
je 0x435974
push ecx
call edi
mov ecx, dword [0x4ffe68]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4ffe68], ecx
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x435a54
call dword [sym.imp.USER32.dll_WaitMessage]
test eax, eax
jne 0x4357d6
mov eax, dword [0x4ffe5c]
test eax, eax
je 0x4359bb
push eax
call edi
mov ecx, dword [0x4ffe5c]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4ffe5c], ecx
mov eax, dword [0x4ffe60]
test eax, eax
je 0x4359da
push eax
call edi
mov ecx, dword [0x4ffe60]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4ffe60], ecx
mov eax, dword [0x4ffe64]
test eax, eax
je 0x4359f9
push eax
call edi
mov ecx, dword [0x4ffe64]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4ffe64], ecx
mov eax, dword [0x4ffe68]
test eax, eax
je 0x435a18
push eax
call edi
mov ecx, dword [0x4ffe68]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4ffe68], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x30], 0x12
je 0x43599c
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x4357d6