Function at 0x6792d9a0
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 4]
test eax, eax
jne 0x6792d9c2
mov ecx, dword [esi + 0x34]
call sub.MFC42.DLL_CWnd::Default
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 0xc
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
xor ebx, ebx
push 0x10
test ax, ax
setl bl
mov dword [esp + 0x18], ebx
call edi
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
xor ecx, ecx
test ax, ax
setl cl
mov eax, ecx
test ebx, ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
jne 0x6792da72
test eax, eax
jne 0x6792da72
cmp ebx, 0x26
je 0x6792da38
cmp ebx, 0x28
je 0x6792da38
cmp ebx, 0x21
je 0x6792da38
cmp ebx, 0x22
je 0x6792da38
cmp ebx, 0x24
je 0x6792da38
cmp ebx, 0x23
je 0x6792da38
cmp ebx, 0x25
je 0x6792da38
cmp ebx, 0x27
je 0x6792da38
cmp ebx, 8
je 0x6792da38
cmp ebx, 0x6b
je 0x6792da38
cmp ebx, 0x6a
je 0x6792da38
cmp ebx, 0x6d
jne 0x6792da72
mov ecx, esi
call sym.MfcHlpr520.dll_public:_unsigned_int___thiscall_CMHPTreeBase::GetSelectedCount_void_const
cmp eax, 1
ja 0x6792da67
jne 0x6792da72
mov eax, dword [esi + 0x34]
push 0
push 9
push 0x110a
mov edx, dword [eax + 0x20]
push edx
call ebp
mov ecx, dword [esi + 0x34]
push 2
push eax
call sub.MFC42.DLL_CTreeCtrl::GetItemState
test al, 2
jne 0x6792da72
push 0
push 0
mov ecx, esi
call sym.MfcHlpr520.dll_public:_void___thiscall_CMHPTreeBase::SelectAll_int__struct__TREEITEM__
lea eax, [ebx - 0x21]
xor edi, edi
cmp eax, 7
ja case.0x6792da7c.35
jmp dword [eax*4 + 0x6792db78]
mov eax, dword [esi + 0x34]
push 0
push 9
push 0x110a
mov eax, dword [eax + 0x20]
push eax
call ebp
mov edi, eax
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x6792daa1
mov dword [esi + 0xc], edi
mov eax, dword [esp + 0x14]
test eax, eax
jne case.0x6792da7c.35
mov eax, dword [esp + 0x10]
test eax, eax
jne case.0x6792da7c.35
mov dword [esi + 0xc], 0
cmp ebx, 0x26
je 0x6792daca
cmp ebx, 0x21
mov dword [esp + 0x1c], 0
jne 0x6792dad2
mov dword [esp + 0x1c], 1
mov ecx, dword [esi + 0x34]
call sub.MFC42.DLL_CWnd::Default
test edi, edi
je 0x6792db6e
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x6792daf2
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6792db6e
cmp ebx, 0x22
je 0x6792db22
cmp ebx, 0x21
je 0x6792db22
mov eax, dword [esp + 0x1c]
push edi
test eax, eax
mov eax, dword [esi + 0x34]
je 0x6792db15
mov ecx, dword [eax + 0x20]
push 7
push 0x110a
push ecx
jmp 0x6792db32
mov edx, dword [eax + 0x20]
push 6
push 0x110a
push edx
jmp 0x6792db32
mov eax, dword [esi + 0x34]
push 0
push 9
push 0x110a
mov eax, dword [eax + 0x20]
push eax
call ebp
test eax, eax
jne 0x6792db3a
mov eax, edi
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x6792db5a
mov ecx, dword [esi + 0xc]
push 1
push eax
push ecx
mov ecx, esi
call sym.MfcHlpr520.dll_public:_void___thiscall_CMHPTreeBase::SelectItems_struct__TREEITEM___struct__TREEITEM___int_
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 0xc
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x6792db6e
push 1
push 1
push eax
mov ecx, esi
call sym.MfcHlpr520.dll_public:_int___thiscall_CMHPTreeBase::SetItemState_struct__TREEITEM___unsigned_int__unsigned_int_
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 0xc