Function at 0x14018de28
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x140231eb8]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, rdx
mov rsi, rcx
xor r15d, r15d
cmp qword [0x14025bbe8], r15
jne 0x14018df06
lea rdx, str.MENUACC
mov rcx, qword [0x14023fc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bbe8], rax
lea rdx, str.LISTACC
mov rcx, qword [0x14023fc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bbf0], rax
lea rdx, str.FILEACC
mov rcx, qword [0x14023fc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bbf8], rax
lea rdx, str.VIEWACC
mov rcx, qword [0x14023fc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bc00], rax
lea rdx, [0x1401f41a8]
mov rcx, qword [0x14023fc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bc08], rax
lea rdx, [0x1401f41b8]
mov rcx, qword [0x14023fc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bc10], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x14018e3d5
mov eax, dword [0x140233a9c]
cmp dword [rbp - 0x41], eax
jne 0x14018e078
mov rbx, qword [rbp - 0x31]
mov r14b, byte [rbx + 0x40]
lea rsi, [rbx + 0x20]
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14018df48
mov rdx, qword [rsi]
mov qword [rbp + 7], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x17], xmm0
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rdx + r8*2], r15w
jne 0x14018df5b
lea rcx, [rbp + 7]
call fcn.1400041b8
nop
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14018df7c
mov rdx, qword [rbx]
mov qword [rbp - 0x19], r15
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
inc rdi
cmp word [rdx + rdi*2], r15w
jne 0x14018df88
mov r8, rdi
lea rcx, [rbp - 0x19]
call fcn.1400041b8
nop
mov r8b, r14b
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x19]
call fcn.14016b5b4
nop
mov edi, 0x1000
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x14018dff1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, rdi
jb 0x14018dfec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018e3fe
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], r15w
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x14018e03f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, rdi
jb 0x14018e03a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018e3f8
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 7], r15w
mov qword [rbp - 0x19], rbx
mov rcx, rsi
call fcn.140006b94
nop
mov rcx, rbx
call fcn.140006b94
mov edx, 0x48
mov rcx, rbx
call fcn.1401af36c
jmp 0x14018e3d3
mov rbx, qword [rbp - 0x49]
test rbx, rbx
je 0x14018e3bf
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
mov rdi, rax
mov rcx, qword [0x140233a40]
test rcx, rcx
je 0x14018e0c0
mov rdx, qword [0x14025bc00]
test rdx, rdx
je 0x14018e0c7
cmp rax, rcx
jne 0x14018e0c7
lea r8, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
mov rdx, qword [0x14025bc00]
mov rcx, qword [0x140233a50]
test rcx, rcx
je 0x14018e0f6
test rdx, rdx
je 0x14018e0f6
cmp rdi, rcx
jne 0x14018e0f6
lea r8, [rbp - 0x49]
mov rdx, qword [0x14025bc08]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
mov rcx, qword [0x140234a08]
test rcx, rcx
je 0x14018e12a
mov rdx, qword [0x14025bc10]
test rdx, rdx
je 0x14018e12a
cmp rbx, rcx
je 0x14018e118
cmp rdi, rcx
jne 0x14018e12a
lea r8, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
mov r8, qword [0x14025bbe8]
mov rdx, qword [0x14025bbf8]
lea rcx, [rbp - 0x49]
call fcn.140163fcc
test al, al
jne 0x14018e3d3
cmp qword [0x140233a48], r15
je 0x14018e1c4
call fcn.140167f34
cmp eax, 8
jne 0x14018e1a6
mov rdx, qword [0x14025bbf8]
test rdx, rdx
je 0x14018e181
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
mov rdx, qword [0x14025bbe8]
test rdx, rdx
je 0x14018e1a6
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
mov rcx, qword [0x140233a48]
test rcx, rcx
je 0x14018e1c4
lea rdx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018e3d3
mov rcx, qword [0x140233a50]
test rcx, rcx
je 0x14018e1e2
lea rdx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018e3d3
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
shr ecx, 0xf
mov edi, 0x100
cmp dword [rbp - 0x41], edi
jne 0x14018e21d
cmp qword [rbp - 0x39], 9
jne 0x14018e21d
not ecx
and ecx, 1
lea ecx, [rcx*2 - 1]
call 0x14018e404
test al, al
jne 0x14018e3d3
lea rcx, [0x1402349d0]
call fcn.140169df8
mov ecx, dword [rbp - 0x41]
test al, al
je 0x14018e26b
cmp ecx, edi
jne 0x14018e26b
cmp qword [rbp - 0x39], 0x70
jne 0x14018e2c6
lea rax, str.HELPArcComment
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], 0xe
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
xor edx, edx
lea rcx, [rbp - 0x19]
call fcn.140161b10
jmp 0x14018e3d3
mov rax, qword [0x140237170]
cmp ecx, 0x205
jne 0x14018e280
cmp qword [rbp - 0x49], rax
je 0x14018e28f
cmp ecx, 0xa5
jne 0x14018e2a0
cmp qword [rbp - 0x39], 5
jne 0x14018e2c6
lea rcx, [0x140237170]
call fcn.140131cd8
jmp 0x14018e3d3
cmp ecx, 0x203
jne 0x14018e2c6
cmp qword [rbp - 0x49], rax
jne 0x14018e2c6
mov rdx, qword [0x140233a38]
lea rcx, [0x140237170]
call fcn.14012f368
jmp 0x14018e3d3
mov rax, qword [0x140236ee0]
cmp rbx, rax
je 0x14018e31f
cmp rbx, qword [0x1402349b8]
je 0x14018e31f
mov rcx, qword [0x140233a58]
test rcx, rcx
je 0x14018e38b
lea r8, [rbp - 0x49]
mov rdx, qword [0x14025bc00]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
lea r9, [rbp - 0x49]
xor r8d, r8d
mov edx, 0x8009
mov rcx, qword [0x140233a58]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14018e38b
mov rdx, qword [0x14025bbf0]
test rdx, rdx
je 0x14018e349
cmp rbx, rax
jne 0x14018e349
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
mov rdx, qword [0x14025bbe8]
test rdx, rdx
je 0x14018e36a
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
mov rdx, qword [0x14025bbf8]
test rdx, rdx
je 0x14018e38b
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018e3d3
test rsi, rsi
je 0x14018e3a1
lea rdx, [rbp - 0x49]
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018e3d3
test r14, r14
je 0x14018e3bf
lea r9, [rbp - 0x49]
xor r8d, r8d
mov edx, 0x475
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14018e3d3
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov al, 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1401af480
mov rbx, qword [rsp + 0xe0]
add rsp, 0xa0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1401b6544
nop
call fcn.1401b6544
nop
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x140231eb8]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rax, qword [0x1402349b8]
mov ebp, ecx
mov qword [r11 - 0x38], rax
mov rax, qword [0x140236ee0]
mov qword [r11 - 0x30], rax
mov rax, qword [0x140234a08]
mov qword [r11 - 0x28], rax
mov rax, qword [0x1402369f8]
mov qword [r11 - 0x20], rax
call qword [sym.imp.USER32.dll_GetFocus]
xor ebx, ebx
lea rsi, [rsp + 0x20]
mov rdi, rax
mov rcx, qword [rsi]
test rcx, rcx
je 0x14018e47f
cmp rcx, rdi
je 0x14018e4ae
mov rdx, rdi
call qword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne 0x14018e4ae
inc ebx
add rsi, 8
cmp ebx, 4
jb 0x14018e465
xor al, al
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1401af480
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
ret
cmp ebx, 0xffffffff
je 0x14018e48a
mov edx, 1
mov ecx, ebp
imul ecx, edx
add ecx, ebx
and ecx, 3
mov rax, qword [rsp + rcx*8 + 0x20]
test rax, rax
jne 0x14018e4d5
inc edx
cmp edx, 4
jb 0x14018e4b8
jmp 0x14018e4d8
mov rdi, rax
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetFocus]
mov al, 1
jmp 0x14018e48c