Function at 0x1400dfba0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
push rsi
push r14
sub rsp, 0x20
mov rax, qword [rcx + 0x1f0]
mov r14, rdx
mov rbx, rcx
test rax, rax
jne 0x1400dfbc0
call fcn.1400ec148
mov rdx, rax
mov qword [rsp + 0x50], rdi
lea rcx, str.CMDIFrameWnd
call fcn.1400fe8c0
xor esi, esi
test rax, rax
je 0x1400dfc80
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14010d31c
mov rdi, rax
test rax, rax
je 0x1400dfc0e
mov rcx, rax
call fcn.1400f1fec
bt eax, 0x13
jae 0x1400dfc0e
cmp dword [rsp + 0x40], esi
je 0x1400dfc0e
mov rax, qword [rdi + 0x40]
jmp 0x1400dfc11
mov rax, rsi
cmp rax, qword [rbx + 0x198]
je 0x1400dfc80
mov r8, qword [rbx + 0x1d8]
mov r9d, esi
mov qword [rbx + 0x198], rax
lea rax, [r8 - 1]
test rax, rax
js 0x1400dfc78
mov rdx, rsi
test rdx, rdx
js 0x1400dfd31
cmp rdx, r8
jge 0x1400dfd31
mov rax, qword [rbx + 0x1d0]
inc r9d
mov rcx, qword [rax + rdx*8]
inc rdx
mov rax, qword [rbx + 0x198]
mov qword [rcx + 8], rax
mov r8, qword [rbx + 0x1d8]
movsxd rax, r9d
lea rcx, [r8 - 1]
cmp rax, rcx
jle 0x1400dfc37
mov rcx, rbx
call fcn.1400deda0
call fcn.1400ffa7c
mov rdi, qword [rax + 8]
cmp dword [rdi + 0x178], 3
jne 0x1400dfd16
cmp byte [rbx + 0x1bc], sil
jne 0x1400dfd16
mov ecx, 0x12
mov qword [rsp + 0x48], rbp
call qword [sym.imp.USER32.dll_GetKeyState]
movzx ebp, ax
mov ecx, 0x79
and ebp, 0x8000
call qword [sym.imp.USER32.dll_GetKeyState]
and eax, 0x8000
cmp dword [rdi + 0x384], esi
je 0x1400dfcd8
cmp dword [rdi + 0x37c], esi
jne 0x1400dfce5
test ebp, ebp
jne 0x1400dfce5
test eax, eax
jne 0x1400dfce5
mov esi, 0x100000
mov rcx, qword [rbx + 0x40]
mov edx, 0x446
mov r9d, esi
mov r8d, 0x100000
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbp, qword [rsp + 0x48]
cmp eax, esi
je 0x1400dfd16
mov rcx, qword [rbx + 0x40]
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.USER32.dll_InvalidateRect]
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
mov rdi, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rsi
pop rbx
jmp method.CToolBar.virtual_728
call fcn.1400f9a54
int3
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
mov rax, qword [0x1401ea6a8]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rbx, rcx
mov esi, r8d
lea rcx, [rbp - 0x29]
mov rdi, rdx
call fcn.1400f2410
lea rax, vtable.CToolCmdUI.0
mov qword [rbp - 9], rbx
mov qword [rbp - 0x29], rax
xor r9d, r9d
mov rax, qword [rbx]
xor r8d, r8d
mov edx, 0x418
mov rcx, rbx
mov rax, qword [rax + 0x238]
call qword [case.0x140116099.0]
xor ecx, ecx
mov dword [rbp + 7], eax
mov dword [rbp - 0x1d], ecx
test eax, eax
je 0x140118466
mov edx, ecx
lea r8, [rbp + 0x17]
mov rcx, rbx
call fcn.140118ec8
test byte [rbp + 0x20], 1
mov eax, dword [rbp + 0x1b]
mov dword [rbp - 0x21], eax
jne 0x140118459
and qword [rsp + 0x20], 0
lea r9, [rbp - 0x29]
xor edx, edx
mov r8d, 0xbd11ffff
mov rcx, rbx
call fcn.1400f2670
test eax, eax
jne 0x140118459
mov edx, dword [rbp - 0x21]
lea r9, [rbp - 0x29]
and qword [rsp + 0x20], 0
or r8d, 0xffffffff
mov rcx, rbx
call fcn.1400f2670
test eax, eax
jne 0x140118459
mov r8d, esi
lea rcx, [rbp - 0x29]
mov rdx, rdi
call fcn.1400f2490
mov ecx, dword [rbp - 0x1d]
inc ecx
mov dword [rbp - 0x1d], ecx
cmp ecx, dword [rbp + 7]
jb 0x1401183f5
mov r8d, esi
mov rdx, rdi
mov rcx, rbx
call fcn.1400efa18
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140134190
mov rbx, qword [rsp + 0xd8]
add rsp, 0xa0
pop rdi
pop rsi
pop rbp
ret