Function at 0x1401360d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0xc0
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0]
call qword [rax + COleVariant::operator=]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov rcx, qword [rsp + 0xd0]
call sub.mfc90u.dll_CRichEditView::GetContextMenu
and eax, 0x400000
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
je 0x14013615a
cmp dword [rsp + 0xd8], 0x25
jne 0x140136145
mov dword [rsp + 0xd8], 0x27
jmp 0x14013615a
cmp dword [rsp + 0xd8], 0x27
jne 0x14013615a
mov dword [rsp + 0xd8], 0x25
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0xa0], eax
mov eax, dword [rsp + 0xa0]
sub eax, 0xd
mov dword [rsp + 0xa0], eax
cmp dword [rsp + 0xa0], 0x1b
ja case.0x1401361a7.14
mov eax, dword [rsp + 0xa0]
lea rcx, [0x140000000]
movzx eax, byte [rcx + rax + 0x136840]
mov eax, dword [rcx + rax*4 + 0x136820]
add rax, rcx
jmp rax
cmp dword [0x1404e766c], 0x3e7
jne 0x1401361fe
xor eax, eax
test eax, eax
jne 0x1401361fe
cmp dword [0x1404e6488], 0
je 0x1401361f4
cmp dword [0x1404e648c], 0
je 0x1401361da
mov dword [rsp + 0xa4], 3
jmp 0x1401361e5
mov dword [rsp + 0xa4], 2
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0x38], eax
jmp 0x140136208
mov dword [rsp + 0x38], 0
jmp 0x140136208
mov eax, dword [0x1404e766c]
mov dword [rsp + 0x38], eax
mov dword [0x1404e766c], 0
mov rcx, qword [rsp + 0xd0]
call fcn.140136980
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
je 0x1401362ba
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0xc], 0xffffffff
je 0x14013625d
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0xc], 0
je 0x14013625d
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x30]
call qword [rax + COleDialog::COleDialog]
test eax, eax
je 0x1401362ba
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
xor edx, edx
mov rcx, qword [rsp + 0x30]
call qword [rax + CMapPtrToWord::CMapPtrToWord]
test eax, eax
je 0x1401362ba
mov rax, qword [rsp + 0x30]
cmp qword [rax + 0xd0], 0
je 0x1401362b5
mov rcx, qword [rsp + 0xd0]
call fcn.140136980
cmp rax, qword [rsp + 0x30]
jne 0x1401362b5
xor r9d, r9d
xor r8d, r8d
mov edx, 0x24
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx + 0xd0]
call fcn.1401360d0
jmp 0x140136357
mov rcx, qword [rsp + 0xd0]
call fcn.140136930
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
je 0x1401362ff
call fcn.1401cee10
mov rdx, rax
mov rcx, qword [rsp + 0x40]
call sub.mfc90u.dll_CWnd::GetTopLevelFrame
test eax, eax
jne 0x1401362ff
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x40]
call qword [rax + 0x700]
jmp 0x140136357
mov rcx, qword [rsp + 0xd0]
call fcn.140136860
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
je 0x140136357
cmp dword [rsp + 0x24], 0
je 0x14013632d
mov dword [rsp + 0xa8], 0x25
jmp 0x140136338
mov dword [rsp + 0xa8], 0x27
movsxd r8, dword [rsp + 0xa8]
xor r9d, r9d
mov edx, HashKey<wchar_t const *>
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rsp + 0x38]
mov dword [0x1404e766c], eax
jmp 0x140136814
mov rcx, qword [rsp + 0xd0]
call fcn.140136930
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
je 0x140136395
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x50]
call qword [rax + 0x6f8]
jmp 0x1401363e1
mov rax, qword [rsp + 0xd0]
cmp qword [rax + 0x1b8], 0
je 0x1401363e1
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax + 0x1b8]
mov rcx, qword [rsp + 0xd0]
mov rcx, qword [rcx + 0x1b8]
mov rax, qword [rax]
call qword [rax + 0xf0]
test eax, eax
je 0x1401363e1
xor edx, edx
mov rcx, qword [rsp + 0xd0]
call fcn.1401369d0
jmp 0x140136814
mov ecx, setsockopt
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je case.0x1401361a7.35
mov rax, qword [rsp + 0x28]
cmp dword [rax + 0x1344], 0
jne case.0x1401361a7.35
mov rcx, qword [rsp + 0xd0]
call fcn.140137b60
jmp 0x1401364db
mov dword [rsp + 0x20], 1
cmp dword [0x1404e6674], 0
jne 0x140136446
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov edx, dword [rsp + 0xd8]
mov rcx, qword [rsp + 0x28]
call qword [rax + reloc.mfc90u.dll_DDX_FieldScroll]
jmp 0x1401364db
mov rax, qword [rsp + 0xd0]
mov dword [rax + COlePropertyPage::XPropertyPage::SetPageSite], 1
mov edx, 1
mov rcx, qword [rsp + 0xd0]
call fcn.1401369d0
jmp 0x140136814
mov rax, qword [rsp + 0xd0]
cmp dword [rax + 0x1648], 0
je case.0x1401361a7.14
mov dword [rsp + 0x20], 1
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov edx, dword [rsp + 0xd8]
mov rcx, qword [rsp + 0x28]
call qword [rax + reloc.mfc90u.dll_DDX_FieldScroll]
jmp 0x1401364db
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov edx, dword [rsp + 0xd8]
mov rcx, qword [rsp + 0x28]
call qword [rax + reloc.mfc90u.dll_DDX_FieldScroll]
test eax, eax
je 0x1401364ce
jmp 0x140136814
mov rcx, qword [rsp + 0xd0]
call sub.mfc90u.dll_CDHtmlDialog::DDX_DHtml_CheckBox_1
cmp dword [rsp + 0x20], 0
je 0x1401367da
mov rax, qword [rsp + 0xd0]
cmp dword [rax + 0x161c], 0
je 0x1401367da
mov rax, qword [rsp + 0x28]
cmp dword [rax + 0x10bc], 0
jl 0x1401367da
mov rax, qword [rsp + 0x28]
mov edx, dword [rax + 0x10bc]
mov rcx, qword [rsp + 0x28]
call fcn.140110eb0
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x14013654b
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28]
call qword [rax + 0x670]
test eax, eax
jne 0x14013654b
jmp 0x1401367da
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x28]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rax, qword [rsp + 0x28]
mov eax, dword [rax + reloc.mfc90u.dll_CFileDialog::XFileDialogEvents::OnFolderChanging]
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x60], 0
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x6c]
cmp dword [rcx + 0x4c], eax
jge 0x1401365b7
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x6c]
mov ebx, dword [rcx + 0x4c]
sub ebx, eax
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28]
call qword [rax + 0x670]
mov r11d, eax
mov eax, ebx
cdq
idiv r11d
sub eax, 1
mov dword [rsp + 0x60], eax
jmp 0x1401365f6
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x74]
cmp dword [rcx + 0x54], eax
jle 0x1401365f6
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x74]
mov ebx, dword [rcx + 0x54]
sub ebx, eax
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28]
call qword [rax + 0x670]
mov r11d, eax
mov eax, ebx
cdq
idiv r11d
add eax, 1
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
je 0x1401367da
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28]
call qword [rax + 0x670]
mov r11d, eax
mov rax, qword [rsp + 0xd0]
mov eax, dword [rax + 0x15c4]
cdq
idiv r11d
sub eax, 2
mov dword [rsp + 0x80], eax
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0x78]
add eax, ecx
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x78], 0
jge 0x140136655
mov dword [rsp + 0xac], 0
jmp 0x140136660
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0xac], eax
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0x10e0]
mov qword [rsp + 0x88], rax
mov ecx, dword [rsp + 0x80]
mov eax, dword [rsp + 0x88]
sub eax, ecx
sub eax, 1
cmp dword [rsp + 0xac], eax
jge 0x1401366bf
cmp dword [rsp + 0x78], 0
jge 0x1401366a4
mov dword [rsp + 0xb0], 0
jmp 0x1401366af
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0xb4], eax
jmp 0x1401366ed
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0x10e0]
mov qword [rsp + 0x90], rax
mov ecx, dword [rsp + 0x80]
mov eax, dword [rsp + 0x90]
sub eax, ecx
sub eax, 1
mov dword [rsp + 0xb4], eax
mov eax, dword [rsp + 0xb4]
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x28]
mov eax, dword [rsp + 0x78]
cmp dword [rcx + reloc.mfc90u.dll_CFileDialog::XFileDialogEvents::OnFolderChanging], eax
je 0x14013672b
mov rcx, qword [rsp + 0x28]
mov eax, dword [rsp + 0x78]
mov dword [rcx + reloc.mfc90u.dll_CFileDialog::XFileDialogEvents::OnFolderChanging], eax
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28]
call qword [rax + DDX_Control]
xor edx, edx
mov rcx, qword [rsp + 0xd0]
call fcn.14013a7d0
mov dword [rsp + 0x7c], eax
mov rax, qword [rsp + 0xd0]
cmp dword [rax + 0x1648], 0
je 0x1401367c4
mov rax, qword [rsp + 0xd0]
add rax, 0x1650
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x14013677e
mov qword [rsp + 0xb8], 0
jmp 0x140136792
mov rax, qword [rsp + 0x98]
mov rax, qword [rax + 0x40]
mov qword [rsp + 0xb8], rax
cmp qword [rsp + 0xb8], 0
je 0x1401367c4
mov r9d, 1
mov r8d, dword [rsp + 0x78]
mov edx, 2
mov rcx, qword [rsp + 0xd0]
mov rcx, qword [rcx + 0x1690]
call qword [sym.imp.USER32.dll_SetScrollPos]
jmp 0x1401367da
cmp dword [rsp + 0x7c], 0
je 0x1401367da
xor edx, edx
mov rcx, qword [rsp + 0xd0]
call fcn.14013a7d0
cmp dword [rsp + 0x20], 0
je 0x140136814
mov rax, qword [rsp + 0x28]
cmp dword [rax + 0x13c4], 0
je 0x140136814
mov r8, qword [rsp + 0xd0]
mov r8, qword [r8]
mov rax, qword [rsp + 0x28]
mov edx, dword [rax + 0x10bc]
mov rcx, qword [rsp + 0xd0]
call qword [r8 + CAsyncSocket::Accept]
add rsp, 0xc0
pop rbx
ret