Function at 0x1402636bc
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0x88
mov rax, qword [0x1403d88e8]
xor rax, rsp
mov qword [rbp - 9], rax
mov r13, qword [rbp + 0x7f]
xor ebx, ebx
mov r15, r9
mov qword [rbp - 0x41], r8
mov r12, r8
mov dword [rbp - 0x51], ecx
mov rsi, rdx
mov dword [rbp - 0x61], ebx
and dword [r13], 0
mov r14d, ecx
cmp dword [rdx + 0x10], ebx
jle 0x140263739
movsxd rdx, dword [rdx + 0x10]
xor ecx, ecx
test rcx, rcx
js 0x140263cc9
cmp rcx, qword [rsi + 0x10]
jge 0x140263cc9
mov rax, qword [rsi + 8]
cmp qword [rax + rcx*8], r15
je 0x14026375b
inc ebx
inc rcx
mov dword [rbp - 0x61], ebx
cmp rcx, rdx
jl 0x14026370f
xor eax, eax
mov rcx, qword [rbp - 9]
xor rcx, rsp
call fcn.14029d880
add rsp, 0x88
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test ebx, ebx
js 0x140263739
lea rdx, str.CMFCRibbonTab
mov rcx, r15
call fcn.1401083a4
xor edi, edi
cmp r14d, 9
jne 0x1402639bb
movsxd rdi, eax
lea ecx, [r14 + 7]
mov qword [rbp - 0x59], rdi
or r12d, 0xffffffff
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
je 0x1402638ba
lea r14d, [rbx - 1]
test r14d, r14d
jns 0x1402637c1
cmp dword [rbp + 0x6f], 0
jne 0x1402638b0
cmp dword [rbp + 0x77], 0
jne 0x1402638a3
mov r14d, dword [rsi + 0x10]
dec r14d
cmp r14d, ebx
je 0x140263739
movsxd r15, r14d
test rdi, rdi
je 0x1402637fd
test r14d, r14d
js 0x140263c99
cmp r15, qword [rsi + 0x10]
jge 0x140263c99
mov rcx, qword [rsi + 8]
lea rdx, str.CMFCRibbonTab
mov rcx, qword [rcx + r15*8]
call fcn.1401083a4
test eax, eax
jne 0x140263871
test r14d, r14d
js 0x140263ca5
cmp r15, qword [rsi + 0x10]
jge 0x140263ca5
mov rax, qword [rsi + 8]
mov rdi, qword [rax + r15*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 0x238]
mov rcx, rbx
call fcn.14029e28c
mov rcx, rdi
call rbx
test eax, eax
je 0x14026386a
test r14d, r14d
js 0x140263c9f
cmp r15, qword [rsi + 0x10]
jge 0x140263c9f
mov rax, qword [rsi + 8]
mov rcx, qword [rax + r15*8]
movups xmm0, xmmword [rcx + 0xc8]
lea rcx, [rbp - 0x29]
movdqu xmmword [rbp - 0x29], xmm0
call qword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
cmove r12d, r14d
mov rdi, qword [rbp - 0x59]
mov ebx, dword [rbp - 0x61]
dec r14d
test r12d, r12d
js 0x1402637a1
movsxd rdi, r12d
test r12d, r12d
js 0x140263cb7
cmp rdi, qword [rsi + 0x10]
jge 0x140263cb7
mov rax, qword [rsi + 8]
mov rdi, qword [rax + rdi*8]
mov rax, rdi
jmp 0x14026373b
mov dword [r13], 2
jmp 0x140263739
or dword [r13], 0xffffffff
jmp 0x140263739
lea r15d, [rbx + 1]
movsxd rax, ebx
movsxd r14, r15d
mov qword [rbp - 0x49], rax
cmp r15d, dword [rsi + 0x10]
jl 0x1402638e8
cmp dword [rbp + 0x77], 0
jne 0x1402639ae
cmp dword [rbp + 0x6f], 0
jne 0x1402639a1
xor r15d, r15d
xor r14d, r14d
cmp r14, rax
je 0x140263739
test rdi, rdi
je 0x140263921
test r14, r14
js 0x140263cab
cmp r14, qword [rsi + 0x10]
jge 0x140263cab
mov rcx, qword [rsi + 8]
lea rdx, str.CMFCRibbonTab
mov rcx, qword [rcx + r14*8]
call fcn.1401083a4
test eax, eax
jne 0x140263989
test r14, r14
js 0x140263cbd
cmp r14, qword [rsi + 0x10]
jge 0x140263cbd
mov rax, qword [rsi + 8]
mov rdi, qword [rax + r14*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 0x238]
mov rcx, rbx
call fcn.14029e28c
mov rcx, rdi
call rbx
test eax, eax
je 0x140263985
cmp r14, qword [rsi + 0x10]
jge 0x140263cb1
mov rax, qword [rsi + 8]
mov rcx, qword [rax + r14*8]
movups xmm0, xmmword [rcx + 0xc8]
lea rcx, [rbp - 0x29]
movdqu xmmword [rbp - 0x29], xmm0
call qword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
cmove r12d, r15d
mov rdi, qword [rbp - 0x59]
inc r15d
inc r14
test r12d, r12d
jns 0x14026387d
mov rax, qword [rbp - 0x49]
jmp 0x1402638c8
mov dword [r13], 0xfffffffe
jmp 0x140263739
mov dword [r13], 1
jmp 0x140263739
mov rax, qword [r15]
mov rbx, qword [rax + 0x2c0]
mov rcx, rbx
call fcn.14029e28c
mov rcx, r15
call rbx
test eax, eax
jne 0x140263739
movups xmm0, xmmword [r15 + 0xc8]
mov ecx, r14d
movdqu xmmword [rbp - 0x39], xmm0
sub ecx, 0x25
je 0x140263b09
sub ecx, 1
je 0x140263a0a
sub ecx, 1
je 0x140263b09
cmp ecx, 1
jne 0x14026389b
mov r8, qword [rbp - 0x39]
mov rcx, qword [rbp - 0x31]
mov r13, qword [rbp - 0x41]
lea eax, [r8 + rcx]
shr rcx, 0x20
inc ecx
shr r8, 0x20
cdq
dec r8d
sub eax, edx
sar eax, 1
mov r15d, eax
cmp r14d, 0x28
mov r12d, r15d
mov dword [rbp - 0x59], r15d
cmove r8d, ecx
mov ecx, 0xfffffffb
mov qword [rbp - 0x39], r8
lea eax, [rcx + 0xa]
cmove ecx, eax
mov dword [rbp - 0x61], ecx
mov r14d, r8d
cmp r12d, dword [r13]
jge 0x140263a63
cmp r15d, dword [r13 + 8]
jg 0x14026389b
test rdi, rdi
jne 0x140263af1
mov dword [rbp - 0x41], r12d
mov r12d, dword [rbp - 0x51]
mov dword [rbp - 0x3d], r14d
mov rdx, rsi
mov rcx, qword [rbp - 0x41]
call fcn.140263638
mov rdi, rax
test rax, rax
jne 0x140263aa8
mov dword [rbp - 0x49], r15d
mov rdx, rsi
mov dword [rbp - 0x45], r14d
mov rcx, qword [rbp - 0x49]
call fcn.140263638
mov rdi, rax
test rax, rax
je 0x140263ac7
mov rax, qword [rdi]
mov rbx, qword [rax + 0x238]
mov rcx, rbx
call fcn.14029e28c
mov rcx, rdi
call rbx
neg eax
sbb rcx, rcx
and rdi, rcx
add r14d, dword [rbp - 0x61]
cmp r12d, 0x28
jne 0x140263ad9
cmp r14d, dword [r13 + 0xc]
jg 0x140263ae4
jmp 0x140263adf
cmp r14d, dword [r13 + 4]
jl 0x140263ae4
test rdi, rdi
je 0x140263a74
mov r12d, dword [rbp - 0x59]
mov eax, 5
mov r8, qword [rbp - 0x39]
sub r12d, eax
add r15d, eax
mov dword [rbp - 0x59], r12d
test rdi, rdi
je 0x140263a50
jmp 0x14026389b
mov rdx, qword [rbp - 0x31]
cmp r14d, 0x27
mov r8, qword [rbp - 0x39]
mov ecx, 0xfffffffb
lea eax, [rcx + 0xa]
cmove ecx, eax
lea r14d, [r8 - 6]
mov dword [rbp - 0x61], ecx
lea eax, [rdx + 1]
mov ecx, dword [rbp - 0x51]
cmp ecx, 0x27
cmove r14d, eax
cmp ecx, 0x27
jne 0x140263b5a
cmp r14d, dword [r12 + 8]
jle 0x140263b79
cmp dword [rbp + 0x77], 0
jne 0x1402639ae
cmp dword [rbp + 0x6f], 0
jne 0x1402639a1
mov r14d, dword [r12]
jmp 0x140263b79
cmp r14d, dword [r12]
jge 0x140263b79
cmp dword [rbp + 0x6f], 0
jne 0x1402638b0
cmp dword [rbp + 0x77], 0
jne 0x1402638a3
mov r14d, dword [r12 + 8]
cmp r14d, r8d
jl 0x140263b87
cmp r14d, edx
jle 0x14026389b
cmp dword [r15 + 0x12c], 0
lea eax, [r14 + 5]
mov edx, dword [rbp - 0x35]
mov ecx, dword [rbp - 0x2d]
mov dword [rbp - 0x21], eax
mov dword [rbp - 0x29], r14d
mov dword [rbp - 0x25], edx
mov dword [rbp - 0x1d], ecx
jne 0x140263bb2
cmp dword [r15 + 0x130], 0
je 0x140263bd3
mov rax, qword [r15]
mov rbx, qword [rax + 0x288]
mov rcx, rbx
call fcn.14029e28c
mov rcx, r15
call rbx
test eax, eax
je 0x140263bf6
mov ecx, dword [rbp - 0x1d]
mov edx, dword [rbp - 0x25]
sub ecx, edx
mov eax, 0x55555555
imul ecx
sub edx, ecx
lea rcx, [rbp - 0x29]
sar edx, 1
mov r8d, edx
shr r8d, 0x1f
add r8d, edx
xor edx, edx
call qword [sym.imp.USER32.dll_InflateRect]
and dword [rbp - 0x59], 0
xor r12d, r12d
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x19], xmm0
cmp dword [rsi + 0x10], r12d
jle 0x140263c78
test r12, r12
js 0x140263cc3
cmp r12, qword [rsi + 0x10]
jge 0x140263cc3
mov rax, qword [rsi + 8]
mov rax, qword [rax + r12*8]
mov qword [rbp - 0x49], rax
mov rax, qword [rax]
mov rbx, qword [rax + 0x238]
mov rcx, rbx
call fcn.14029e28c
mov rcx, qword [rbp - 0x49]
call rbx
test eax, eax
je 0x140263c63
mov rbx, qword [rbp - 0x49]
lea r8, [rbp - 0x29]
lea rcx, [rbp - 0x19]
lea rdx, [rbx + 0xc8]
call qword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
jne 0x140263c75
mov eax, dword [rbp - 0x59]
inc r12
inc eax
mov dword [rbp - 0x59], eax
cmp eax, dword [rsi + 0x10]
jge 0x140263c78
jmp 0x140263c0b
mov rdi, rbx
add r14d, dword [rbp - 0x61]
test rdi, rdi
jne 0x14026389b
mov r12, qword [rbp - 0x41]
mov ecx, dword [rbp - 0x51]
mov rdx, qword [rbp - 0x31]
mov r8, qword [rbp - 0x39]
jmp 0x140263b34
call fcn.1400f91a0
int3
call fcn.1400f91a0
int3
call fcn.1400f91a0
int3
call fcn.1400f91a0
int3
call fcn.1400f91a0
int3
call fcn.1400f91a0
int3
call fcn.1400f91a0
int3
call fcn.1400f91a0
int3
call fcn.1400f91a0
int3