Function at 0x1401728b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x88
xor edx, edx
mov rcx, qword [rsp + 0x90]
call fcn.140166370
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
je 0x140172925
mov rax, qword [rsp + 0x28]
cmp qword [rax + 0xa0], 0
je 0x140172925
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x14017290f
mov qword [rsp + 0x70], 0
jmp 0x14017291d
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 0x40]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x14017292c
xor eax, eax
jmp 0x140172b78
mov ecx, send
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x14017295c
mov rax, qword [rsp + 0x90]
cmp dword [rax + 0x8c4], 0
jne 0x14017295c
mov dword [rsp + 0x78], 1
jmp 0x140172964
mov dword [rsp + 0x78], 0
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x30], eax
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x14017299c
mov rax, qword [rsp + 0x90]
cmp dword [rax + 0x8c0], 0
jne 0x14017299c
mov dword [rsp + 0x7c], 1
jmp 0x1401729a4
mov dword [rsp + 0x7c], 0
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x30], 0
je 0x1401729fc
cmp dword [rsp + 0x98], 0x43
je 0x1401729c7
cmp dword [rsp + 0x98], 0x2d
jne 0x1401729fc
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x40], rax
xor r9d, r9d
xor r8d, r8d
mov edx, reloc.mfc90u.dll_CSemaphore::CSemaphore
mov rcx, qword [rsp + 0x40]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x140172b78
cmp dword [rsp + 0x30], 0
je 0x140172a0d
cmp dword [rsp + 0x98], 0x56
je 0x140172a1e
cmp dword [rsp + 0x20], 0
je 0x140172a53
cmp dword [rsp + 0x98], 0x2d
jne 0x140172a53
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x48], rax
xor r9d, r9d
xor r8d, r8d
mov edx, reloc.mfc90u.dll_CSharedFile::CSharedFile
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x140172b78
cmp dword [rsp + 0x30], 0
je 0x140172a64
cmp dword [rsp + 0x98], 0x58
je 0x140172a75
cmp dword [rsp + 0x20], 0
je 0x140172aaa
cmp dword [rsp + 0x98], 0x2e
jne 0x140172aaa
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x50], rax
xor r9d, r9d
xor r8d, r8d
mov edx, reloc.mfc90u.dll_CScrollView::CScrollView
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x140172b78
cmp dword [rsp + 0x30], 0
je 0x140172af0
cmp dword [rsp + 0x98], 0x5a
jne 0x140172af0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x58], rax
xor r9d, r9d
xor r8d, r8d
mov edx, reloc.mfc90u.dll_CSliderCtrl::CSliderCtrl
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x140172b78
cmp dword [rsp + 0x30], 0
je 0x140172b37
cmp dword [rsp + 0x98], 0x41
jne 0x140172b37
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x60], rax
mov r9, 0xffffffffffffffff
xor r8d, r8d
mov edx, 0xb1
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x140172b78
cmp dword [rsp + 0x98], 0x2e
jne 0x140172b76
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x68], rax
xor r9d, r9d
mov r8d, 0x2e
mov edx, HashKey<wchar_t const *>
mov rcx, qword [rsp + 0x68]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x140172b78
xor eax, eax
add rsp, 0x88
ret