Function at 0x10b0741
Capabilities:
Log keystrokes via polling

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x111121c]
and dword [ebp - 0x48], 0
push ebx
mov ebx, dword [ebp + 0xc]
push esi
xor edx, edx
mov dword [ebp - 4], eax
mov esi, ecx
mov ecx, dword [ebp + 8]
inc edx
mov eax, 0x102
cmp ecx, eax
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], edx
ja 0x10b0b71
je 0x10b0b2a
cmp ecx, 0x16
ja 0x10b088b
je 0x10b0864
cmp ecx, 0x10
ja 0x10b0827
je 0x10b0805
sub ecx, 5
je 0x10b07f7
dec ecx
je 0x10b07ea
dec ecx
je 0x10b07de
sub ecx, 8
jne 0x10b083c
lea eax, [ebp - 0x44]
push eax
push dword [esi + 0x2614]
call dword [sym.imp.USER32.dll_BeginPaint]
test eax, eax
je 0x10b07c9
push eax
mov ecx, esi
call fcn.0109ffa9
lea eax, [ebp - 0x44]
push eax
push dword [esi + 0x2614]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x10b0d6a
mov ecx, esi
call fcn.0109fae0
jmp 0x10b0d6a
push ebx
mov ecx, esi
call fcn.010a33d3
jmp 0x10b0d6a
push edi
push ebx
mov ecx, esi
call fcn.010a4fda
jmp 0x10b0d6a
push dword [esi + 0x2614]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x10b0d6a
push 0
mov ecx, esi
call fcn.010a8d46
jmp 0x10b0d6a
sub ecx, 0x11
je 0x10b085c
sub ecx, 3
je 0x10b0d51
dec ecx
je 0x10b0a39
push edi
push ebx
push dword [ebp + 8]
push dword [esi + 0x2614]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0105eca9
leave
ret 0xc
mov dword [ebp - 0x48], edx
jmp 0x10b0d6a
cmp ebx, edx
jne 0x10b0d6a
mov ecx, esi
call fcn.010a09cd
lea ecx, [esi + 0x5c]
call fcn.010bd4e7
lea ecx, [esi + 0x22cc]
call fcn.010c2dba
jmp 0x10b0d6a
sub ecx, 0x1a
je 0x10b0a39
sub ecx, 6
je 0x10b0a29
sub ecx, 4
je 0x10b099e
sub ecx, 7
je 0x10b093c
sub ecx, 0x23
je 0x10b092e
sub ecx, 0x30
je 0x10b090c
sub ecx, 4
jne 0x10b083c
lea edi, [esi + 0x2fc0]
mov eax, dword [edi]
test eax, eax
je 0x10b08da
add eax, 0x20
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
and dword [edi], 0
mov ecx, dword [esi + 0x2b1c]
push esi
call fcn.0104ac2e
xor ebx, ebx
push ebx
push 0xffffffffffffffeb
lea edi, [esi + 0x2614]
push dword [edi]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [esi]
push esi
mov dword [edi], ebx
mov dword [esi + 0x2d98], ebx
call dword [eax + 8]
jmp 0x10b0d6a
lea ecx, [esi + 0x40]
call fcn.0110af3b
push 0x185
push 0
push 0
push dword [esi + 0x2614]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x10b0d6a
push edi
push ebx
mov ecx, esi
call fcn.010af923
jmp 0x10b0d6a
cmp ebx, 0x9ffc
mov dword [ebp - 0x48], edx
jne 0x10b0963
mov ecx, dword [esi + 0x2b1c]
push 0x10
push 0x10
push 0
call fcn.0104bf9f
mov dword [edi + 0x2c], eax
lea ecx, [esi + 0x118]
jmp 0x10b0971
cmp ebx, 0xa000
jne 0x10b097c
mov ecx, dword [esi + 0x25f0]
mov eax, dword [ecx]
push edi
call dword [eax + 8]
jmp 0x10b0d6a
cmp ebx, 0x9c59
jne 0x10b0995
push edi
lea ecx, [esi + 0x2620]
call fcn.01075858
jmp 0x10b0d6a
and dword [ebp - 0x48], 0
jmp 0x10b0d6a
cmp dword [0x11142c4], 0
jg 0x10b09fd
mov eax, dword [esi + 0x2b24]
shl eax, 2
push 4
cdq
pop ecx
idiv ecx
lea ecx, [esi + 0x40]
mov dword [0x11142c4], eax
call fcn.010b21bd
mov ecx, dword [0x11142c4]
lea ecx, [ecx + eax + 0x28]
mov eax, 0x8c
cmp ecx, eax
mov dword [0x11142c4], ecx
jle 0x10b09e1
mov dword [0x11142c4], eax
cmp dword [esi + 0x2564], 0
je 0x10b09fd
push 1
lea ecx, [esi + 0x7a0]
call fcn.0109c3a1
add dword [0x11142c4], eax
mov eax, dword [0x11142c4]
mov dword [edi + 0x18], eax
mov eax, dword [esi + 0x2f98]
add eax, dword [0x11142a0]
mov ecx, dword [0x11142ac]
add eax, dword [0x11142a4]
lea eax, [eax + ecx + 5]
mov dword [edi + 0x1c], eax
jmp 0x10b0d6a
push edi
push ebx
push 0x20
mov ecx, esi
call fcn.0109fe06
jmp 0x10b0bdd
call fcn.010768cf
lea ebx, [esi + 0x2dd0]
push ebx
call fcn.0109f84f
push ebx
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 4
push 0x444
push dword [esi + 0x2618]
call ebx
lea eax, [esi + 0x2dd0]
push eax
push 0
push 0x444
push dword [esi + 0x2618]
call ebx
lea ecx, [esi + 0x2fa0]
call fcn.0109c270
mov ecx, esi
call fcn.0109feab
push edi
push dword [ebp - 0x4c]
lea ebx, [esi + 0x40]
push dword [ebp + 8]
mov ecx, ebx
call fcn.0110afd9
push edi
push dword [ebp - 0x4c]
lea ecx, [esi + 0x118]
push dword [ebp + 8]
call fcn.0110bc0e
push edi
push dword [ebp - 0x4c]
lea ecx, [esi + 0x7a0]
push dword [ebp + 8]
call fcn.0109cc56
mov ecx, dword [esi + 0x2fc0]
test ecx, ecx
je 0x10b0ad3
push edi
push dword [ebp - 0x4c]
push dword [ebp + 8]
call fcn.010975bf
lea eax, [ebp - 0x60]
push eax
push dword [esi + 0x2614]
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, dword [ebx]
mov ecx, ebx
call fcn.0110af0c
mov ecx, dword [ebp - 0x54]
sub ecx, dword [ebp - 0x5c]
movzx eax, ax
movzx ecx, cx
shl eax, 0x10
or eax, ecx
push eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x60]
mov ecx, ebx
push eax
call dword [edi]
mov ecx, esi
call fcn.010a6edd
push 0x185
push 0
push 0
push dword [esi + 0x2614]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x10b0bdd
cmp ebx, 9
jne 0x10b0b62
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
and eax, 0x8000
push eax
call dword [sym.imp.USER32.dll_GetFocus]
push eax
push dword [esi + 0x2614]
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
test eax, eax
je 0x10b0b5b
push eax
call dword [sym.imp.USER32.dll_SetFocus]
xor eax, eax
jmp 0x10b084d
push edi
push ebx
push eax
mov ecx, esi
call fcn.010afd87
jmp 0x10b084d
mov eax, 0x2b1
cmp ecx, eax
ja 0x10b0c6f
je 0x10b0c61
sub ecx, 0x111
je 0x10b0c53
dec ecx
dec ecx
je 0x10b0c46
sub ecx, 4
je 0x10b0c38
sub ecx, 0x1c
je 0x10b0be5
dec ecx
dec ecx
je 0x10b0bc8
sub ecx, 3
je 0x10b0be5
sub ecx, 0xfb
jne 0x10b083c
push ebx
mov ecx, esi
call fcn.010a73d0
jmp 0x10b0d6a
cmp dword [esi + 0x2b7c], 0
je 0x10b0bd5
push 5
jmp 0x10b0bd7
push 0xf
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov dword [ebp - 0x48], eax
jmp 0x10b0d6a
cmp edi, dword [esi + 0x2b50]
je 0x10b0bf5
cmp edi, dword [esi + 0x2b54]
jne 0x10b0c28
push 0x23
call fcn.0107689c
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0x24
call fcn.0107689c
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [esi + 0x2fa0]
test eax, eax
jne 0x10b0c25
push 5
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov dword [ebp - 0x48], eax
xor eax, eax
cmp dword [ebp - 0x48], eax
setne al
mov dword [ebp - 0x50], eax
jmp 0x10b0d60
push edi
push ebx
mov ecx, esi
call fcn.010ad2b0
jmp 0x10b0d6a
push ebx
mov ecx, esi
call fcn.010a5590
jmp 0x10b0d6a
push edi
push ebx
mov ecx, esi
call fcn.010af01a
jmp 0x10b0d6a
push edi
push ebx
mov ecx, esi
call fcn.010a3353
jmp 0x10b0d3f
sub ecx, 0x318
je 0x10b0d51
sub ecx, 0xe8
je 0x10b0d48
sub ecx, 0x11
je 0x10b0d2f
dec ecx
je 0x10b0d1d
dec ecx
je 0x10b0d0b
dec ecx
je 0x10b0cff
dec ecx
jne 0x10b083c
push edi
push dword [esi + 0x2da8]
lea ebx, [esi + 0x2614]
push dword [ebx]
lea ecx, [ebp - 0x68]
call fcn.010da1e3
lea ecx, [ebp - 0x68]
call fcn.010da21d
cmp eax, 1
je 0x10b0ceb
push dword [ebx]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x10b0ceb
and dword [esi + 0x2fd8], 0
and dword [esi + 0x2fd4], 0
push 1
mov ecx, esi
call fcn.010a4224
test edi, edi
je 0x10b0cf5
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0x68]
call fcn.010a49e6
jmp 0x10b0d6a
mov ecx, esi
call fcn.0109fae0
jmp 0x10b083c
mov ecx, esi
call fcn.0109fae0
push edi
push ebx
mov ecx, esi
call fcn.010a7d9f
jmp 0x10b0d3f
mov ecx, esi
call fcn.0109fae0
push edi
push ebx
mov ecx, esi
call fcn.010a7d51
jmp 0x10b0d3f
mov ecx, esi
call fcn.0109fae0
push edi
push ebx
mov ecx, esi
call fcn.010a7d11
mov dword [ebp - 0x48], 1
jmp 0x10b0d6a
mov dword [ebp - 0x48], 0x534b9c59
jmp 0x10b0d6a
push ebx
mov ecx, esi
call fcn.0109fe5f
mov dword [ebp - 0x48], 1
cmp dword [ebp - 0x50], 0
je 0x10b083c
mov eax, dword [ebp - 0x48]
jmp 0x10b084d