Function at 0x10191f00
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x1023c014]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, ecx
cmp dword [ebx], 0x20a
jne 0x10192030
mov eax, dword [edi]
mov eax, dword [eax + 0x5c]
cmp eax, sym.HncOfficeFramework.dll_public_virtual:_class_CHDCScrollItemData____thiscall_CHDCEditBase::GetScrollItemData_void_const
jne 0x1019240f
mov eax, dword [edi + 4]
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x10191f4d
lea eax, [ecx + 0x34]
neg ecx
sbb ecx, ecx
and ecx, eax
jmp 0x10191f59
mov ecx, dword [ecx + 0x5c]
lea eax, [ecx + 0x34]
neg ecx
sbb ecx, ecx
and ecx, eax
test ecx, ecx
je 0x10192030
mov edx, dword [edi]
mov ecx, edi
mov eax, dword [edx + 0x58]
cmp eax, sym.HncOfficeFramework.dll_public_virtual:_class_CHDCScrollBar____thiscall_CHDCScrollItem::GetScrollBarCtrl_int_const
jne 0x10192418
call dword [edx + 0x5c]
test eax, eax
je 0x10191f7c
mov eax, dword [eax]
test eax, eax
je 0x10191f97
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x10191f97
test dword [eax + 8], 0x10000000
jne 0x10192030
mov edx, dword [edi]
mov ecx, edi
mov eax, dword [edx + 0x58]
cmp eax, sym.HncOfficeFramework.dll_public_virtual:_class_CHDCScrollBar____thiscall_CHDCScrollItem::GetScrollBarCtrl_int_const
jne 0x10192421
call dword [edx + 0x5c]
test eax, eax
je 0x10191fb3
mov eax, dword [eax + 4]
test eax, eax
je 0x10191fca
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x10191fca
test dword [eax + 8], 0x10000000
jne 0x10192030
mov eax, dword [edi + 4]
mov ecx, dword [eax + 4]
call fcn.1001bad0
push 0x10003
mov ecx, dword [eax]
mov edx, dword [ecx + 0x2b4]
mov ecx, eax
call edx
mov esi, eax
test esi, esi
jle 0x10192000
cmp dword [ebx + 0x1c], 0
jge 0x10192020
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax + 0x6c]
sub esi, 1
jne 0x10191ff2
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.1008548c
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0x6c]
sub esi, 1
jne 0x10192020
jmp 0x10192000
push ebx
mov ecx, edi
call sym.HncOfficeFramework.dll_public_virtual:_long_int___thiscall_CHDCScrollItem::OnMouseEvent_class_CHDlgCtrlMouseEvent__
test eax, eax
jne 0x10192000
mov eax, dword [edi + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x101923f9
cmp dword [eax + 0x5c], 0
je 0x101923f9
push dword [ebx + 0x18]
mov esi, dword [ebx]
lea eax, [ebx + 4]
push dword [ebx + 0x14]
mov dword [esp + 0x18], esi
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x10192351
cmp esi, 0x205
jne 0x1019221a
mov eax, dword [edi + 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x10192144
mov eax, dword [esi + 0x5c]
test eax, eax
je 0x101920f4
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x14], eax
test eax, eax
je 0x101920f4
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x10], ecx
mov dword [eax + 0x10], esi
test ecx, ecx
je 0x101920f4
cmp ecx, esi
je 0x101920f4
mov edx, dword [ecx + 0x58]
mov eax, dword [edx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x101920cd
mov eax, dword [eax + 0x5c]
and dword [eax + 4], 0xfffeffff
mov edx, dword [ecx + 0x58]
mov eax, dword [edx]
mov ecx, edx
push 0
call dword [eax + 0x30]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 4]
cmp dword [eax + 0x10], esi
jne 0x10192144
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x58]
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
mov ecx, dword [esi + 0x58]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x1019210e
mov eax, dword [eax + 0x5c]
or dword [eax + 4], 0x10000
mov ecx, dword [esi + 0x58]
mov eax, dword [ecx]
push 1
call dword [eax + 0x30]
mov eax, dword [esi + 0x58]
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
test dword [esi + 8], 0x10000000
je 0x10192144
mov eax, dword [esi + 0x5c]
push 0
push 0
push esi
push dword [eax + 8]
push 0x8005
call sym.HncOfficeFramework.dll_public:_static_void___cdecl_CHncAAEventProxy::HncNotifyWinEvent_unsigned_long_int__struct_HWND_____void___long_int__long_int_
add esp, 0x14
push dword [ebx + 0x18]
mov ecx, edi
push dword [ebx + 0x14]
call sym.HncOfficeFramework.dll_protected:_int___thiscall_CHDCEditBase::_ContextMenu_struct_tagPOINT_
mov eax, dword [edi + 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x10192000
mov ebx, dword [esi + 0x5c]
test ebx, ebx
je 0x101921c1
mov ebx, dword [ebx + 0x1c]
test ebx, ebx
je 0x101921c1
mov eax, dword [ebx + 4]
mov edi, dword [eax + 0x10]
mov dword [eax + 0x10], esi
test edi, edi
je 0x101921c1
cmp edi, esi
je 0x101921c1
mov ecx, dword [edi + 0x58]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x10192198
mov eax, dword [eax + 0x5c]
and dword [eax + 4], 0xfffeffff
mov ecx, dword [edi + 0x58]
mov eax, dword [ecx]
push 0
call dword [eax + 0x30]
mov ecx, dword [ebx + 4]
push 0x66
push 0
call fcn.10139c00
cmp eax, esi
jne 0x10192000
mov eax, dword [edi + 0x58]
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
mov ecx, dword [esi + 0x58]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x101921db
mov eax, dword [eax + 0x5c]
or dword [eax + 4], 0x10000
mov ecx, dword [esi + 0x58]
mov eax, dword [ecx]
push 1
call dword [eax + 0x30]
mov eax, dword [esi + 0x58]
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
test dword [esi + 8], 0x10000000
je 0x10192000
mov eax, dword [esi + 0x5c]
push 0
push 0
push esi
push dword [eax + 8]
push 0x8005
call sym.HncOfficeFramework.dll_public:_static_void___cdecl_CHncAAEventProxy::HncNotifyWinEvent_unsigned_long_int__struct_HWND_____void___long_int__long_int_
add esp, 0x14
jmp 0x10192000
cmp esi, 0x201
jne 0x10192347
mov eax, dword [edi + 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x10192301
mov eax, dword [esi + 0x5c]
test eax, eax
je 0x101922b1
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x14], eax
test eax, eax
je 0x101922b1
mov ecx, dword [eax + 4]
push 0x66
push 0
call fcn.10139c00
mov ecx, dword [esp + 0x14]
mov edx, eax
mov dword [esp + 0x18], edx
mov ecx, dword [ecx + 4]
mov dword [ecx + 0x10], esi
test edx, edx
je 0x101922b1
cmp edx, esi
je 0x101922b1
mov ecx, dword [edx + 0x58]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x10192284
mov eax, dword [eax + 0x5c]
and dword [eax + 4], 0xfffeffff
mov ecx, dword [edx + 0x58]
mov eax, dword [ecx]
push 0
call dword [eax + 0x30]
mov eax, dword [esp + 0x14]
push 0x66
push 0
mov ecx, dword [eax + 4]
call fcn.10139c00
cmp eax, esi
jne 0x10192301
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x58]
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
mov ecx, dword [esi + 0x58]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x101922cb
mov eax, dword [eax + 0x5c]
or dword [eax + 4], 0x10000
mov ecx, dword [esi + 0x58]
mov eax, dword [ecx]
push 1
call dword [eax + 0x30]
mov eax, dword [esi + 0x58]
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
test dword [esi + 8], 0x10000000
je 0x10192301
mov eax, dword [esi + 0x5c]
push 0
push 0
push esi
push dword [eax + 8]
push 0x8005
call sym.HncOfficeFramework.dll_public:_static_void___cdecl_CHncAAEventProxy::HncNotifyWinEvent_unsigned_long_int__struct_HWND_____void___long_int__long_int_
add esp, 0x14
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x18]
mov ecx, edi
push eax
push 0
push 0
push 0x20
call sym.HncOfficeFramework.dll_public:_long_int___thiscall_CHDCEditBase::_OnSetCursor_unsigned_int__unsigned_int__long_int__int__
cmp esi, 0x20
jne 0x10192351
lea eax, [esp + 0x18]
mov ecx, edi
push eax
push 0
push 0
push esi
call sym.HncOfficeFramework.dll_public:_long_int___thiscall_CHDCEditBase::_OnSetCursor_unsigned_int__unsigned_int__long_int__int__
neg eax
sbb eax, eax
neg eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.1008548c
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x203
jne 0x10192317
jmp 0x10192305
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
mov eax, dword [edi + 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x10192374
mov esi, dword [esi + 0x5c]
mov esi, dword [esi + 0x20]
lea eax, [esp + 0x24]
push eax
mov ecx, edi
call sym.HncOfficeFramework.dll_public:_void___thiscall_CHDCScrollItem::GetScrollRect_struct_tagRECT__const
mov eax, dword [esp + 0x18]
movzx edx, ax
mov eax, dword [esp + 0x14]
shl edx, 0x10
movzx eax, ax
push ecx
or edx, eax
push edx
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [esi + 4]
shr eax, 0xd
and eax, 4
push eax
push dword [ebx]
call fcn.10046ec0
cmp dword [esp + 0x10], 0x201
jne 0x10192000
call dword [sym.imp.USER32.dll_GetCapture]
test eax, eax
jne 0x10192000
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x24]
call fcn.10017670
test eax, eax
je 0x10192000
lea eax, [esp + 0x18]
mov ecx, edi
push eax
push 0
push 0
push 0x20
call sym.HncOfficeFramework.dll_public:_long_int___thiscall_CHDCEditBase::_OnSetCursor_unsigned_int__unsigned_int__long_int__int__
jmp 0x10192000
mov ecx, dword [esp + 0x34]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1008548c
mov esp, ebp
pop ebp
ret 4
call eax
mov ecx, eax
jmp 0x10191f59
push 1
call eax
jmp 0x10191f7c
push 0
call eax
jmp 0x10191fb3