Function at 0x140110650
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rdi, r8
mov r15, rdx
mov rsi, rcx
xor r12d, r12d
movzx r14d, r8w
shr rdi, 0x10
mov ebx, dword [0x1404c6154]
cmp ebx, dword [0x1404c613c]
je 0x140110698
cmp ebx, dword [0x1404c6144]
jne 0x1401106dd
cmp qword [0x1404b3060], r12
je 0x1401106dd
lea rax, str.CreateKeyEvent___cant_be_used_for_char_events
mov qword [rsp + 0x20], rax
lea r9, str.evType___wxEVT_CHAR__evType___wxEVT_CHAR_HOOK
lea r8, str.wxWindow::CreateKeyEvent
mov edx, 0x18df
lea rcx, str.C:LibrarieswxWidgets3.2.4_srcmswwindow.cpp
call fcn.140041e40
cmp byte [0x1404c47a8], r12b
je 0x1401106dd
mov byte [0x1404c47a8], r12b
int3
mov edx, ebx
lea rcx, [rbp - 0x39]
call fcn.14013b120
test rsi, rsi
je 0x1401106f9
mov eax, dword [rsi + 0x78]
mov dword [rbp - 0x19], eax
mov qword [rbp - 0x29], rsi
jmp 0x140110700
mov dword [rbp - 0x19], 0xffffffff
mov ecx, reloc.COMCTL32.dll_CreateUpDownControl
call qword [sym.imp.USER32.dll_GetKeyState]
shr ax, 0xf
add al, al
movzx ecx, byte [rbp + 0x17]
and cl, 0xfd
or al, cl
mov byte [rbp + 0x17], al
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
shr ax, 0xf
movzx ecx, byte [rbp + 0x17]
and cl, 0xfa
or al, cl
mov byte [rbp + 0x17], al
movzx ebx, di
mov dword [rbp + 0x2b], ebx
mov dword [rbp + 0x2f], r12d
call qword [sym.imp.USER32.dll_GetMessageTime]
mov dword [rbp - 0x1d], eax
mov byte [rbp + 0x33], r12b
mov rax, r12
lea rdx, [0x140000000]
nop dword [rax]
lea rcx, [rax*8]
cmp dword [rcx + rdx + 0x378580], ebx
je 0x140110844
inc rax
cmp rax, 0x4d
jb 0x140110760
lea eax, [rbx - 0xd]
cmp eax, 0xd5
ja case.0x1401107a0.25
cdqe
movzx eax, byte [rdx + rax + 0x11090c]
mov ecx, dword [rdx + rax*4 + 0x1108d8]
add rcx, rdx
jmp rcx
mov edx, 2
mov ecx, ebx
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov ebx, eax
shr rax, 0x10
test ax, ax
jns 0x1401107c7
mov ebx, r12d
mov word [rbp + 0x27], r12w
jmp 0x140110857
mov word [rbp + 0x27], bx
cmp ebx, 0xff
jle 0x140110857
mov ebx, r12d
jmp 0x140110857
mov ebx, 0x16e
jmp 0x140110857
mov ebx, 0x16f
jmp 0x140110857
mov ebx, 0x138
jmp 0x140110857
mov ebx, 0x139
jmp 0x140110857
mov ebx, 0x13a
jmp 0x140110857
mov ebx, 0x13b
jmp 0x140110857
mov ebx, 0x13c
jmp 0x140110857
mov ebx, 0x13d
jmp 0x140110857
mov ebx, 0x142
jmp 0x140110857
mov ebx, 0x7f
jmp 0x140110853
mov ebx, reloc.WS2_32.dll_listen
jmp 0x140110853
lea eax, [rdi - 0x30]
cmp ax, 9
jbe 0x14011083e
lea eax, [rdi - 0x41]
cmp ax, 0x19
jbe 0x14011083e
mov ebx, r12d
mov word [rbp + 0x27], di
jmp 0x140110857
mov ebx, dword [rcx + rdx + 0x378584]
cmp ebx, 0x12c
jge 0x140110857
mov word [rbp + 0x27], bx
mov dword [rbp + 0x23], ebx
mov dword [rbp - 0x19], r15d
mov ecx, r14d
shr ecx, 3
and cl, 1
add cl, cl
movzx eax, r14b
and al, 1
or cl, al
add cl, cl
mov eax, r14d
shr eax, 2
and al, 1
or cl, al
add cl, cl
shr r14d, 1
and r14b, 1
or cl, r14b
movzx eax, byte [rbp + 0x17]
and al, 0xf0
or cl, al
mov byte [rbp + 0x17], cl
lea rdx, [rbp - 0x39]
mov rcx, rsi
call fcn.140105820
movzx ebx, al
lea rax, vtable.wxObject.0
mov qword [rbp - 0x39], rax
lea rcx, [rbp - 0x39]
call fcn.14004cf00
nop
movzx eax, bl
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret