Function at 0x10337dc
Capabilities:
Log keystrokes via polling

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
mov esi, ecx
mov eax, dword [esi + 0xd0]
push edi
mov edi, dword [eax + 0x2b4]
xor ebx, ebx
cmp dword [ebp + 8], 9
mov dword [ebp - 4], edi
jne 0x10339c3
cmp edi, dword [eax + 0x1d30]
jne 0x103384f
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, ah
mov eax, dword [esi + 0xd0]
mov ax, word [eax + 0x1f98]
jns 0x103383a
test al, 4
jne 0x1033945
test al, 8
jne 0x103388c
test al, 1
je 0x103389e
jmp 0x10339b2
test al, 1
jne 0x10339b2
test al, 8
jne 0x103388c
test al, 4
je 0x103389e
jmp 0x1033945
cmp edi, dword [eax + 0x1d0c]
jne 0x1033913
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, ah
mov eax, dword [esi + 0xd0]
mov ax, word [eax + 0x1f98]
jns 0x1033902
test al, 2
jne 0x1033999
test al, 4
jne 0x1033945
test al, 8
je 0x103389e
mov eax, dword [esi + 0xd0]
mov ecx, dword [eax + 0x1d4c]
mov dword [eax + 0x2b4], ecx
mov eax, dword [esi + 0xd0]
cmp dword [eax + 0x2b4], ebx
je 0x10338fa
test byte [eax + 0x1f98], 0x10
je 0x10338d6
push ebx
push edi
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
call edi
mov eax, dword [esi + 0xd0]
push 5
push dword [eax + 0x2b4]
call edi
mov ecx, esi
call fcn.0102d2af
mov eax, dword [esi + 0xd0]
push dword [eax + 0x2b4]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [esi + 0xd0]
push dword [eax + 0x2b4]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0xfffffffffffffffe
pop eax
jmp 0x1033a53
test al, 8
jne 0x103388c
test al, 4
jne 0x1033945
test al, 2
je 0x103389e
jmp 0x1033999
cmp edi, dword [eax + 0x1d4c]
jne 0x103395f
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, ah
mov eax, dword [esi + 0xd0]
mov ax, word [eax + 0x1f98]
jns 0x1033941
test al, 1
jne 0x10339b2
test al, 2
jne 0x1033999
jmp 0x1033846
test al, 4
je 0x1033956
mov eax, dword [esi + 0xd0]
mov ecx, dword [eax + 0x1d70]
jmp 0x1033898
test al, 2
jne 0x1033999
jmp 0x1033831
cmp edi, dword [eax + 0x1d70]
jne 0x1033a50
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ah, ah
mov eax, dword [esi + 0xd0]
mov ax, word [eax + 0x1f98]
jns 0x1033995
test al, 8
jne 0x103388c
test al, 1
jne 0x10339b2
jmp 0x103390a
test al, 2
je 0x10339aa
mov eax, dword [esi + 0xd0]
mov ecx, dword [eax + 0x1d30]
jmp 0x1033898
test al, 1
je 0x1033888
mov eax, dword [esi + 0xd0]
mov ecx, dword [eax + 0x1d0c]
jmp 0x1033898
cmp edi, dword [eax + 0x1d0c]
jne 0x1033a50
mov eax, dword [ebp + 8]
sub eax, 0x21
je 0x1033a36
dec eax
je 0x10339e3
sub eax, 4
je 0x1033a36
dec eax
dec eax
jne 0x1033a50
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x18e
push edi
call esi
mov edi, eax
lea eax, [ebp - 0x14]
push eax
push edi
push 0x198
push dword [ebp - 4]
call esi
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x10]
je 0x1033a29
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x10]
cdq
idiv ecx
lea ebx, [eax + edi - 1]
push 0
push ebx
push 0x186
push dword [ebp - 4]
jmp 0x1033a4e
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x18e
push edi
call esi
push ebx
push eax
push 0x186
push edi
call esi
or eax, 0xffffffff
pop edi
pop esi
pop ebx
leave
ret 0xc