Function at 0x180104030
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov qword [rax - 0x40], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov r15, r9
mov esi, r8d
mov r13, rdx
mov rdi, rcx
mov dword [rax - 0x48], 1
cmp dword [rsp + 0xc0], 0
jne 0x1801043e7
xor ebx, ebx
mov r14, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0xb0]
cmp r8d, 0x4e
jne 0x1801040e5
cmp qword [rbp + 8], 0x3e8
jne 0x18010437e
mov dword [rcx + 0x190], 1
cmp dword [rbp + 0x10], 1
jne 0x1801040c3
mov edx, dword [rbp + 0x18]
lea eax, [rdx - 0x1a4]
cmp eax, 0xa
ja 0x1801040c3
call fcn.1801044e0
lea eax, [rsi - 0x4d]
jmp 0x1801040cc
mov dword [rcx + 0x190], ebx
mov rax, rbx
mov qword [r14], rax
cmp dword [rdi + 0x190], ebx
je 0x18010437e
mov eax, 1
jmp 0x1801043e9
cmp esi, 1
jne 0x180104186
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbp
mov r8, r15
mov edx, esi
call fcn.18011d050
mov r12, rax
lea rcx, [rdi + 0x48]
xor r8d, r8d
mov edx, 0x1a7
call qword [sym.imp.2345MiniUI.dll_public:_void___cdecl_RC::RCMiniUIDialogView::SetItemCheck_unsigned_int__bool____ptr64]
mov rcx, rdi
call fcn.180105060
mov rcx, qword [rdi + 0x160]
test rcx, rcx
je 0x18010416e
mov rdx, qword [rcx]
call qword [rdx + 0x38]
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x18010414a
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
nop
test rbx, rbx
jne 0x180104151
jmp 0x18010416c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x120]
mov byte [rdi + 0x1b4], al
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
xor ebx, ebx
mov qword [r14], r12
cmp dword [rsp + 0x40], 0
je 0x18010437e
mov eax, 1
jmp 0x1801043e9
cmp esi, 0x113
jne 0x18010428e
cmp r15d, 0x1771
jb 0x180104276
cmp r15d, 0x1772
jbe 0x180104211
cmp r15d, 0x1773
jne 0x180104276
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
jne 0x180104276
and dword [rdi + 0xe8], 0xfffffff7
mov rdx, qword [rdi + 0x1a0]
test rdx, rdx
je 0x1801041f2
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0x1a0], rbx
mov rdx, qword [rdi + 0x1a8]
test rdx, rdx
je 0x180104276
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0x1a8], rbx
jmp 0x180104276
add dword [rcx + 0x1b0], 0x64
mov ecx, dword [rcx + 0x1b0]
cmp ecx, 0xbb8
jae 0x18010423a
mov eax, 0x1b4e81b5
mul ecx
shr edx, 5
imul eax, edx, 0x12c
cmp ecx, eax
jne 0x180104276
cmp r15d, 0x1771
setne bl
lea rcx, [rdi + 8]
lea rdx, [rsp + 0x50]
call qword [sym.imp.2345MiniUI.dll_public:_class_RCMiniAtlWindow___cdecl_RCMiniAtlWindow::GetParent_void____ptr64]
mov rcx, rax
call qword [sym.imp.2345MiniUI.dll_public:_struct_HWND______ptr64___cdecl_RCMiniAtlWindow::operator_struct_HWND______ptr64_void_const___ptr64]
mov rcx, rax
xor r9d, r9d
lea r8, [rbx + 0x9c4e]
mov edx, VarUI4FromDisp
call qword [sym.imp.USER32.dll_PostMessageW]
xor ebx, ebx
mov qword [r14], rbx
cmp dword [rsp + 0x40], 0
je 0x18010437e
mov eax, 1
jmp 0x1801043e9
cmp esi, 0x200
jne 0x1801042dd
mov dword [rsp + 0x40], ebx
add rcx, 8
lea rdx, [rsp + 0x50]
call qword [sym.imp.2345MiniUI.dll_public:_class_RCMiniAtlWindow___cdecl_RCMiniAtlWindow::GetParent_void____ptr64]
mov rcx, rax
call qword [sym.imp.2345MiniUI.dll_public:_struct_HWND______ptr64___cdecl_RCMiniAtlWindow::operator_struct_HWND______ptr64_void_const___ptr64]
mov rcx, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x426
call qword [sym.imp.USER32.dll_PostMessageW]
mov qword [r14], rbx
cmp dword [rsp + 0x40], ebx
je 0x18010437e
mov eax, 1
jmp 0x1801043e9
cmp esi, 0x201
jne 0x18010430a
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbp
call fcn.180104ba0
mov qword [r14], rax
cmp dword [rsp + 0x40], ebx
je 0x18010437e
mov eax, 1
jmp 0x1801043e9
cmp esi, 0x202
jne 0x18010435c
mov dword [rsp + 0x40], ebx
and dword [rcx + 0xe8], 0xfffffff7
mov rdx, qword [rcx + 0x1a0]
test rdx, rdx
je 0x18010433a
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0x1a0], rbx
mov rdx, qword [rdi + 0x1a8]
test rdx, rdx
je 0x1801042c6
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0x1a8], rbx
jmp 0x1801042c6
cmp esi, 0x203
jne 0x18010437e
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbp
call fcn.180104ba0
mov qword [r14], rax
jmp 0x1801042c9
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbp
mov r9, r15
mov r8d, esi
mov rdx, r13
mov rcx, rdi
call qword [sym.imp.2345MiniUI.dll_public_virtual:_int___cdecl_RC::RCMiniUISimpleWindow::ProcessWindowMessage_struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64___long_long___int64_____ptr64__unsigned_long_int____ptr64]
test eax, eax
jne 0x1801040db
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbp
mov r8, r15
mov edx, esi
mov rcx, rdi
call qword [sym.imp.2345MiniUI.dll_public:_long_long___int64____cdecl_ATL::CWindowImplRoot_class_RCMiniAtlWindow_::ReflectNotifications_unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64___int____ptr64____ptr64]
mov qword [r14], rax
test rax, rax
jne 0x1801043dc
lea eax, [rsi - 0x132]
cmp eax, 6
jbe 0x1801043e7
cmp dword [rsp + 0x40], 0
jne 0x1801040db
xor eax, eax
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret