Function at 0x14013c960
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
mov rax, qword [rcx]
mov rdi, rdx
mov rbx, rcx
call qword [rax + 0x250]
test al, al
jne 0x14013c9ac
mov eax, dword [rdi]
sub eax, 9
cmp eax, 9
ja 0x14013c9ac
mov rcx, qword [rbx + 0x620]
mov rdx, rdi
test rcx, rcx
jne 0x14013ccbd
mov rcx, rbx
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
jmp fcn.140117330
mov eax, dword [rdi]
cmp eax, 0x10
jne 0x14013ca06
mov rcx, qword [rbx + 0x58]
lea r8, str.itemdbclick
mov byte [rsp + 0x28], 0
xor r9d, r9d
mov rdx, rbx
mov qword [rsp + 0x20], 0
call fcn.1400f3f60
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x238]
test al, al
je 0x14013ccd6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x38]
mov rcx, rbx
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
jmp fcn.140111440
cmp eax, 3
jne 0x14013ca22
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x238]
test al, al
je 0x14013ca22
cmp word [rdi + 0x1c], 0xd
je 0x14013c9eb
cmp dword [rdi], 0xd
jne 0x14013cad0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x238]
test al, al
je 0x14013ccd6
mov rcx, qword [rbx + 0x58]
lea r8, str.buttondown
mov byte [rsp + 0x28], 0
xor r9d, r9d
mov rdx, rbx
mov qword [rsp + 0x20], 0
call fcn.1400f3f60
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
mov edi, 0x8000
test di, ax
jne 0x14013caa6
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test di, ax
jne 0x14013caa6
xor edx, edx
mov rcx, rbx
call fcn.14013d440
mov dl, 1
mov rcx, rbx
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
jmp fcn.14013d440
mov rcx, qword [rbx + 0x620]
test rcx, rcx
je 0x14013ccd6
mov rax, qword [rcx]
xor r8d, r8d
mov edx, dword [rbx + 0x610]
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
jmp qword [rax + 0x28]
mov rcx, qword [rbx + 0x620]
test rcx, rcx
je 0x14013cb40
mov rax, qword [rcx]
call qword [rax]
cmp byte [rax + 0x46e], 0
je 0x14013cb40
cmp dword [rdi], 0xf
jne 0x14013cb40
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x238]
test al, al
je 0x14013ccd6
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
mov edi, 0x8000
test di, ax
jne 0x14013caa6
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test di, ax
jne 0x14013caa6
mov dl, 1
mov rcx, rbx
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
jmp fcn.14013d440
mov eax, dword [rdi]
cmp eax, 0xe
jne 0x14013cb8a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x238]
test al, al
je 0x14013ccd6
mov rcx, qword [rbx + 0x58]
lea r8, str.itemclick
mov byte [rsp + 0x28], 0
xor r9d, r9d
mov rdx, rbx
mov qword [rsp + 0x20], 0
call fcn.1400f3f60
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
cmp eax, 0xb
jne 0x14013cbe1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x238]
test al, al
je 0x14013ccd6
or dword [rbx + 0x618], 8
mov rcx, rbx
call fcn.140111440
mov rcx, qword [rbx + 0x58]
lea r8, str.mouseenter
xor r9d, r9d
mov byte [rsp + 0x28], 0
mov rdx, rbx
mov qword [rsp + 0x20], 0
call fcn.1400f3f60
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
cmp eax, 0xa
jne 0x14013cc34
mov eax, dword [rbx + 0x618]
test al, 8
je 0x14013ccd6
and eax, 0xfffffff7
mov rcx, rbx
mov dword [rbx + 0x618], eax
call fcn.140111440
mov rcx, qword [rbx + 0x58]
lea r8, str.mouseleave
xor r9d, r9d
mov byte [rsp + 0x28], 0
mov rdx, rbx
mov qword [rsp + 0x20], 0
call fcn.1400f3f60
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
cmp eax, 0x18
jne 0x14013cc69
mov rax, qword [rdi + 0x28]
lea r8, str.timer
mov r9, qword [rdi + 0x20]
mov rdx, rbx
mov rcx, qword [rbx + 0x58]
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call fcn.1400f3f60
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
cmp eax, 0x11
jne 0x14013ccae
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x1f0]
test al, al
je 0x14013ccae
mov rax, qword [rdi + 0x28]
lea r8, str.menu
mov r9, qword [rdi + 0x20]
mov rdx, rbx
mov rcx, qword [rbx + 0x58]
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call fcn.1400f3f60
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
mov rcx, qword [rbx + 0x620]
mov rdx, rdi
test rcx, rcx
je 0x14013ccce
mov rax, qword [rcx]
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
jmp qword [rax + SafeArrayCopy]
mov rcx, rbx
call fcn.1401008b0
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret