Function at 0x140032cb0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov r12d, edx
mov rdi, rcx
mov rax, qword [rcx]
mov rdx, r8
call qword [rax + 0x6d8]
mov esi, eax
or r14d, 0xffffffff
xor r13d, r13d
mov rcx, qword [0x140258ff0]
cmp rcx, rdi
je 0x140032d24
cmp dword [0x140258fb8], r13d
je 0x140032d2d
mov qword [0x140258ff0], rdi
cmp rcx, r13
je 0x140032d24
mov edx, dword [rcx + 0x103c]
mov dword [rcx + 0x103c], r14d
call fcn.14002f9c4
cmp dword [0x140258fb8], r13d
jne 0x140032d6d
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001bcf8
mov rdx, rax
lea rcx, str.CPane
call fcn.14005a468
cmp rax, r13
je 0x140032d6d
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001bcf8
mov rcx, rax
call fcn.14001259c
cmp esi, r13d
jge 0x140032df8
mov dword [rdi + 0x1034], r14d
cmp dword [0x140258fb8], r13d
je 0x140032dc2
cmp dword [rdi + 0xfb8], r13d
jne 0x140032dc2
mov edx, dword [rdi + 0x103c]
mov dword [rdi + 0x103c], r14d
cmp edx, r14d
je 0x140032db3
mov rcx, rdi
call fcn.14002f9c4
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rax, qword [rdi]
mov edx, r14d
mov rcx, rdi
call qword [rax + 0x718]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x348]
cmp eax, r13d
je 0x140032de0
mov rcx, qword [0x14025a780]
call qword [sym.imp.USER32.dll_SetCursor]
mov r8, qword [rsp + 0xf0]
mov edx, r12d
mov rcx, rdi
call fcn.1400d0c28
jmp 0x140033412
mov edx, esi
mov rcx, rdi
call fcn.14002d5f4
mov rbx, rax
cmp rax, r13
je 0x140033412
mov r8, qword [rdi]
mov edx, esi
mov rcx, rdi
call qword [r8 + 0x468]
mov dword [0x140258fbc], r13d
mov r15d, 1
cmp dword [0x140258fdc], r13d
je 0x140032e7c
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x7f0]
cmp eax, r13d
je 0x140032e7c
cmp dword [0x140258fb8], r13d
jne 0x140032e92
lea ecx, [r15 + 0x11]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
je 0x140032e7c
mov dword [0x140258fbc], r15d
mov dword [rdi + 0x103c], esi
mov dword [rdi + 0x1038], r14d
mov qword [0x140258ff0], rdi
cmp dword [0x140258fb8], r13d
jne 0x140032e92
cmp dword [0x140258fbc], r13d
je 0x140033302
cmp dword [rdi + 0xfb8], r13d
jne 0x140033302
cmp dword [rdi + 0xff8], r13d
jne 0x140033302
mov ebp, dword [rdi + 0x103c]
mov dword [rdi + 0x103c], esi
mov rax, qword [rdi]
lea r8, [rsp + 0x28]
mov edx, esi
mov rcx, rdi
call qword [rax + 0x690]
cmp ebp, r14d
je 0x140032eda
mov edx, ebp
mov rcx, rdi
call fcn.14002f9c4
mov edx, dword [rdi + 0x103c]
mov rcx, rdi
call fcn.14002d5f4
mov r11, rax
mov qword [rdi + 0x11e8], rax
mov ecx, r13d
cmp rax, r13
setne cl
cmp ecx, r13d
jne 0x140032f06
call fcn.14001501c
int3
and r12d, 8
mov dword [rdi + 0xfe0], r12d
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0xc0]
cmp eax, r13d
jne 0x140032f48
mov dword [rdi + 0x103c], r14d
mov qword [rdi + 0x11e8], r13
cmp ebp, r14d
je 0x140033412
mov edx, ebp
mov rcx, rdi
call fcn.14002f9c4
jmp 0x140033412
mov edx, esi
mov rcx, rdi
call fcn.14002f9c4
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [rdi + 0x11e8]
mov rax, qword [rcx]
call qword [rax + 0x78]
cmp eax, r13d
je 0x140032ff6
mov ecx, dword [rsp + 0xf0]
sub ecx, dword [rsp + 0x30]
call fcn.140187808
cmp eax, 6
jg 0x140032ff6
cmp dword [0x140258fbc], r13d
jne 0x140032ff6
mov dword [rdi + 0xfe4], r15d
mov rcx, qword [rdi + 0x11e8]
movdqu xmm0, xmmword [rcx + 0x60]
movdqu xmmword [rdi + 0x11a8], xmm0
mov rax, qword [rcx]
call qword [rax + 0x70]
cmp rax, r13
je 0x140032fcb
mov edx, 2
mov r8d, edx
lea rcx, [rdi + 0x11a8]
call qword [sym.imp.USER32.dll_InflateRect]
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SetCapture]
mov rcx, rax
call fcn.14001bcf8
mov qword [rdi + 0x11d8], rax
mov rcx, qword [0x14025a768]
call qword [sym.imp.USER32.dll_SetCursor]
jmp 0x1400333df
mov rcx, qword [rdi + 0x11e8]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cmp eax, r13d
je 0x1400332f6
mov rcx, qword [rdi + 0x11e8]
mov rax, qword [rcx]
call qword [rax + 0xe8]
cmp eax, r13d
je 0x1400332f6
lea rcx, [rsp + 0x40]
call fcn.1400a535c
nop
mov rcx, qword [rdi + 0x11e8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
call qword [rax + 0x18]
mov r11, qword [rdi]
mov edx, dword [rbx + 0x24]
mov rcx, rdi
call qword [r11 + 0x7e0]
mov dword [0x1402590e0], r13d
mov rax, qword [rsp + 0xf0]
mov qword [rdi + 0x11c8], rax
mov rbx, qword [rdi + 0x40]
mov eax, dword [0x140258fb8]
cmp dword [0x140258fbc], r13d
cmovne eax, r15d
mov dword [0x140258fb8], eax
lea r9, [0x140259070]
lea r8, [rsp + 0x28]
mov edx, 3
lea rcx, [rsp + 0x40]
call fcn.140103fbc
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
cmp eax, r13d
jne 0x1400330de
cmp dword [0x140258fbc], r13d
je 0x1400330cf
mov dword [0x140258fb8], r13d
mov dword [0x140258fbc], r13d
mov qword [0x140258ff0], r13
lea rcx, [rsp + 0x40]
call fcn.1400a539c
jmp 0x140033412
lea rcx, [rsp + 0xe0]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0xe0]
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [0x1402590e0], r13d
je 0x1400332ad
mov rdx, qword [rsp + 0xe0]
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_PtInRect]
cmp eax, r13d
jne 0x1400332ad
cmp ebp, r15d
je 0x14003328e
mov rdx, qword [rdi + 0x11e8]
cmp rdx, r13
je 0x14003328e
cmp dword [0x1402590dc], r13d
jne 0x14003328e
mov rax, qword [rdi]
mov r8d, ebp
mov rcx, rdi
call qword [rax + 0x6b0]
cmp eax, r13d
je 0x14003328e
mov rbx, qword [rdi]
mov rdx, qword [rdi + 0x11e8]
mov rcx, rdi
call fcn.14002d434
mov edx, eax
mov rcx, rdi
call qword [rbx + 0x650]
mov r11, qword [rdi]
mov rcx, rdi
call qword [r11 + 0x778]
mov r9d, 0x505
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_RedrawWindow]
mov r11, qword [rdi]
mov edx, r15d
mov rcx, rdi
call qword [r11 + 0x560]
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001bcf8
cmp rax, r13
je 0x1400331f8
cmp qword [rax + 0x40], r13
je 0x1400331f8
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001bcf8
mov r9d, 0x505
xor r8d, r8d
xor edx, edx
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_RedrawWindow]
cmp dword [0x140258fbc], r13d
jne 0x140033222
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x3c8]
mov r9d, 0x505
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_RedrawWindow]
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001bcf8
lea rdx, str.CMFCTabCtrl
mov rcx, rax
call fcn.14005a434
cmp eax, r13d
je 0x1400332c1
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001bcf8
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call fcn.14001bcf8
mov rdx, rax
lea rcx, str.CMFCToolBar
call fcn.14005a468
cmp rax, r13
je 0x1400332c1
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x3d0]
jmp 0x1400332c1
mov rdx, qword [rdi + 0x11e8]
cmp rdx, r13
je 0x1400332c1
add rdx, 0x60
mov r8d, r15d
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x1400332c1
mov dword [rdi + 0x1038], esi
mov rax, qword [rdi]
mov edx, esi
mov rcx, rdi
call qword [rax + 0x718]
mov qword [rdi + 0x11e8], r13
mov dword [rsp + 0xf8], r14d
mov dword [rsp + 0xfc], r14d
mov rax, qword [rsp + 0xf8]
mov qword [rdi + 0x11c8], rax
lea rcx, [rsp + 0x40]
call fcn.1400a539c
jmp 0x1400333df
mov qword [rdi + 0x11e8], r13
jmp 0x1400333df
mov dword [rdi + 0x1034], esi
mov edx, esi
mov rcx, rdi
call fcn.14002d7b0
bt dword [rbx + 0x28], 0x12
jae 0x140033339
lea rdx, str.CMFCDropDownToolbarButton
mov rcx, rbx
call fcn.14005a434
cmp eax, r13d
jne 0x140033339
mov dword [rdi + 0x1034], r14d
jmp 0x140033412
bts dword [rbx + 0x28], 0x11
mov edx, esi
mov rcx, rdi
call fcn.14002f9c4
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov r11, qword [rdi]
mov edx, dword [rbx + 0x24]
mov rcx, rdi
call qword [r11 + 0x7e0]
mov r11, qword [rbx]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call qword [r11 + 0x40]
cmp eax, r13d
je 0x1400333c6
lea rcx, [rdi + 0x1080]
xor r8d, r8d
mov rdx, rbx
call fcn.1400c0b44
cmp rax, r13
je 0x140033393
btr dword [rbx + 0x28], 0x11
mov dword [rdi + 0x1034], r14d
mov dword [rdi + 0x1038], r14d
mov rax, qword [rdi]
mov edx, r14d
mov rcx, rdi
call qword [rax + 0x718]
mov edx, esi
mov rcx, rdi
call fcn.14002f9c4
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_UpdateWindow]
jmp 0x1400333df
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SetCapture]
mov rcx, rax
call fcn.14001bcf8
mov qword [rdi + 0x11d8], rax
cmp dword [0x140258fbc], r13d
je 0x140033412
mov dword [0x140258fbc], r13d
mov qword [0x140258ff0], r13
xor ecx, ecx
call fcn.14003031c
mov r9d, 0x505
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_RedrawWindow]
mov rbx, qword [rsp + 0xe8]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret