Function at 0x140095718
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x20
mov rbx, rdx
mov eax, 0x104
mov edx, dword [rdx + 8]
mov r12d, 1
mov dword [rsp + 0x58], r12d
mov rdi, rcx
cmp edx, eax
ja 0x140095956
je 0x14009586e
mov eax, edx
sub eax, 0x7b
je 0x140095892
sub eax, 0x26
je 0x140095845
sub eax, r12d
je 0x140095845
sub eax, 2
je 0x140095845
sub eax, r12d
je 0x140095845
sub eax, 2
je 0x140095845
sub eax, r12d
je 0x140095845
cmp eax, 0x58
jne 0x140095a15
mov rcx, rbx
call fcn.1400d8078
test eax, eax
jne 0x1400957c7
mov edx, dword [rbx + 0x10]
lea rcx, [rdi + 0x1f0]
lea r8, [rsp + 0x58]
call fcn.1400d6f90
test eax, eax
jne 0x140095937
cmp qword [rbx + 0x10], 0x1b
jne 0x140095833
cmp dword [rdi + 0x338], 0
je 0x1400957e6
lea rcx, [rdi + 0x318]
mov rdx, rdi
call fcn.140151ec8
mov rcx, qword [rdi + 0x688]
test rcx, rcx
je 0x140095803
cmp dword [rcx + 0xc], 0
je 0x140095803
cmp dword [rcx + 8], 0
je 0x140095803
call fcn.1401417cc
call qword [sym.imp.USER32.dll_GetCapture]
mov rcx, rax
call fcn.140016dc8
mov rdx, rax
lea rcx, str.CPaneDivider
call fcn.1400397fc
test rax, rax
je 0x140095833
mov rcx, qword [rax + 0x40]
mov edx, 0x1f
jmp 0x14009592b
cmp dword [rsp + 0x58], 0
jne 0x140095a15
xor eax, eax
jmp 0x140095a20
movsx eax, word [rbx + 0x18]
add rcx, 0x1f0
mov r9, qword [rbx]
mov dword [rsp + 0x60], eax
movsx eax, word [rbx + 0x1a]
mov dword [rsp + 0x64], eax
mov r8, qword [rsp + 0x60]
call fcn.1400d72a0
jmp 0x140095a74
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x140095892
mov r9, qword [rbx + 0x18]
mov rdx, rdi
mov r8, qword [rbx + 0x10]
call fcn.14013bd28
test eax, eax
jne 0x140095937
mov eax, dword [0x14027ad80]
lea rsi, [0x14027ad80]
test eax, eax
jne 0x1400958b4
mov rcx, rsi
call fcn.140020038
mov eax, r12d
mov dword [0x14027ad80], eax
cmp dword [0x14027b000], 0
jne 0x1400958fa
test eax, eax
jne 0x1400958d2
mov rcx, rsi
call fcn.140020038
mov eax, r12d
mov dword [0x14027ad80], eax
cmp dword [0x14027affc], 0
jne 0x1400958fa
test eax, eax
jne 0x1400958ee
mov rcx, rsi
call fcn.140020038
mov dword [0x14027ad80], r12d
mov dword [0x14027affc], r12d
call fcn.140046770
mov rcx, qword [0x14027c940]
test rcx, rcx
je 0x14009593f
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14009593f
cmp qword [rbx + 0x10], 0x12
jne 0x14009593f
mov rcx, qword [0x14027c940]
mov edx, reloc.WS2_32.dll_recv
mov rcx, qword [rcx + 0x40]
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, r12d
jmp 0x140095a20
mov edx, dword [rbx + 0x10]
lea rcx, [rdi + 0x1f0]
xor r8d, r8d
call fcn.1400d6f90
jmp 0x140095a74
sub edx, 0x105
je 0x140095a7e
sub edx, 0xfb
je 0x140095a37
sub edx, r12d
je 0x1400959a9
sub edx, 3
je 0x1400959a9
sub edx, r12d
je 0x1400959a9
sub edx, 2
je 0x1400959a9
sub edx, r12d
je 0x1400959a9
cmp edx, 2
jne 0x140095a15
mov r8, qword [rbx + 0x18]
add rcx, 0x1f0
mov rdx, qword [rbx + 0x10]
call fcn.1400d7a60
jmp 0x140095a74
movsx eax, word [rbx + 0x18]
mov rcx, qword [rbx]
mov dword [rsp + 0x60], eax
movsx eax, word [rbx + 0x1a]
mov dword [rsp + 0x64], eax
call fcn.140016dc8
mov rsi, rax
test rax, rax
je 0x1400959e5
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400959e5
mov rcx, qword [rsi + 0x40]
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov r9, qword [rbx]
lea rcx, [rdi + 0x1f0]
mov r8, qword [rsp + 0x60]
mov edx, dword [rbx + 8]
call fcn.1400d72a0
test eax, eax
jne 0x140095937
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140095937
mov rdx, rbx
mov rcx, rdi
call fcn.140111128
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
movsx eax, word [rbx + 0x18]
mov rcx, qword [rbx]
mov dword [rsp + 0x60], eax
movsx eax, word [rbx + 0x1a]
mov dword [rsp + 0x64], eax
call fcn.140016dc8
test rax, rax
je 0x140095a63
mov rcx, qword [rax + 0x40]
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rdx, qword [rsp + 0x60]
lea rcx, [rdi + 0x1f0]
call fcn.1400d7964
test eax, eax
jne 0x140095937
jmp 0x140095a15
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x140095aa2
mov r9, qword [rbx + 0x18]
mov rdx, rdi
mov r8, qword [rbx + 0x10]
call fcn.14013beac
test eax, eax
jne 0x140095937
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, reloc.WS2_32.dll_recv
movsx r14d, ax
call qword [sym.imp.USER32.dll_GetKeyState]
mov rcx, qword [rdi + 0x40]
movsx r15d, ax
call sub.IMM32.dll_ImmGetContext
mov rsi, rax
test rax, rax
je 0x140095ae2
mov rcx, rax
call sub.IMM32.dll_ImmGetOpenStatus
test eax, eax
je 0x140095ae2
mov ebp, r12d
jmp 0x140095ae9
xor ebp, ebp
test rsi, rsi
je 0x140095af5
mov rcx, qword [rdi + 0x40]
mov rdx, rsi
call sub.IMM32.dll_ImmReleaseContext
cmp qword [rdi + 0x300], 0
je 0x140095b5d
cmp qword [rbx + 0x10], 0x12
je 0x140095b1f
cmp qword [rbx + 0x10], 0x79
jne 0x140095b5d
bt r14d, 0xf
jb 0x140095b5d
bt r15d, 0xf
jb 0x140095b5d
test ebp, ebp
jne 0x140095b5d
call qword [sym.imp.USER32.dll_GetFocus]
mov rcx, rax
call fcn.140016dc8
mov rcx, qword [rdi + 0x300]
cmp rcx, rax
jne 0x140095b3e
mov rcx, rdi
jmp 0x140095b53
cmp qword [rbx + 0x10], 0x12
je 0x140095b53
mov eax, dword [rbx + 0x18]
bt rax, 0x1d
jb 0x140095937
call fcn.140024490
jmp 0x140095937
mov rcx, qword [0x14027c940]
test rcx, rcx
je 0x140095a15
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_IsWindow]
jmp 0x140095a74