Function at 0x14018c7c8
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x14022ff58]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, rdx
mov rsi, rcx
xor r15d, r15d
cmp qword [0x140257c40], r15
jne 0x14018c8a6
lea rdx, str.MENUACC
mov rcx, qword [0x14023bc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x140257c40], rax
lea rdx, str.LISTACC
mov rcx, qword [0x14023bc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x140257c48], rax
lea rdx, str.FILEACC
mov rcx, qword [0x14023bc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x140257c50], rax
lea rdx, str.VIEWACC
mov rcx, qword [0x14023bc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x140257c58], rax
lea rdx, [0x1401f22b8]
mov rcx, qword [0x14023bc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x140257c60], rax
lea rdx, [0x1401f22c8]
mov rcx, qword [0x14023bc40]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x140257c68], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x14018cd6e
mov eax, dword [0x140231b44]
cmp dword [rbp - 0x41], eax
jne 0x14018ca18
mov rbx, qword [rbp - 0x31]
mov r14b, byte [rbx + 0x40]
lea rsi, [rbx + 0x20]
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14018c8e8
mov rdx, qword [rsi]
mov qword [rbp + 7], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x17], xmm0
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rdx + r8*2], r15w
jne 0x14018c8fb
lea rcx, [rbp + 7]
call fcn.1400041a8
nop
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14018c91c
mov rdx, qword [rbx]
mov qword [rbp - 0x19], r15
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
inc rdi
cmp word [rdx + rdi*2], r15w
jne 0x14018c928
mov r8, rdi
lea rcx, [rbp - 0x19]
call fcn.1400041a8
nop
mov r8b, r14b
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x19]
call fcn.140168cd4
nop
mov edi, 0x1000
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x14018c991
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, rdi
jb 0x14018c98c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018cd97
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], r15w
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x14018c9df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, rdi
jb 0x14018c9da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018cd91
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 7], r15w
mov qword [rbp - 0x19], rbx
mov rcx, rsi
call fcn.140006b84
nop
mov rcx, rbx
call fcn.140006b84
mov edx, 0x48
mov rcx, rbx
call fcn.1401addcc
jmp 0x14018cd6c
mov rbx, qword [rbp - 0x49]
test rbx, rbx
je 0x14018cd58
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
mov rdi, rax
mov rcx, qword [0x140231ae8]
test rcx, rcx
je 0x14018ca60
mov rdx, qword [0x140257c58]
test rdx, rdx
je 0x14018ca67
cmp rax, rcx
jne 0x14018ca67
lea r8, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
mov rdx, qword [0x140257c58]
mov rcx, qword [0x140231af8]
test rcx, rcx
je 0x14018ca96
test rdx, rdx
je 0x14018ca96
cmp rdi, rcx
jne 0x14018ca96
lea r8, [rbp - 0x49]
mov rdx, qword [0x140257c60]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
mov rcx, qword [0x140231ae0]
test rcx, rcx
je 0x14018caca
mov rdx, qword [0x140257c68]
test rdx, rdx
je 0x14018caca
cmp rbx, rcx
je 0x14018cab8
cmp rdi, rcx
jne 0x14018caca
lea r8, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
mov r8, qword [0x140257c40]
mov rdx, qword [0x140257c50]
lea rcx, [rbp - 0x49]
call fcn.140162f1c
test al, al
jne 0x14018cd6c
cmp qword [0x140231af0], r15
je 0x14018cb64
call fcn.140166e24
cmp eax, 8
jne 0x14018cb46
mov rdx, qword [0x140257c50]
test rdx, rdx
je 0x14018cb21
lea r8, [rbp - 0x49]
mov rcx, qword [0x140231af0]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
mov rdx, qword [0x140257c40]
test rdx, rdx
je 0x14018cb46
lea r8, [rbp - 0x49]
mov rcx, qword [0x140231af0]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
mov rcx, qword [0x140231af0]
test rcx, rcx
je 0x14018cb64
lea rdx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018cd6c
mov rcx, qword [0x140231af8]
test rcx, rcx
je 0x14018cb82
lea rdx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018cd6c
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
shr ecx, 0xf
mov edi, 0x100
cmp dword [rbp - 0x41], edi
jne 0x14018cbbd
cmp qword [rbp - 0x39], 9
jne 0x14018cbbd
not ecx
and ecx, 1
lea ecx, [rcx*2 - 1]
call fcn.14018cda0
test al, al
jne 0x14018cd6c
call fcn.140182378
mov ecx, dword [rbp - 0x41]
test eax, eax
je 0x14018cc04
cmp ecx, edi
jne 0x14018cc04
cmp qword [rbp - 0x39], 0x70
jne 0x14018cc5f
lea rax, str.HELPArcComment
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], 0xe
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
xor edx, edx
lea rcx, [rbp - 0x19]
call fcn.140160a60
jmp 0x14018cd6c
mov rax, qword [0x140235170]
cmp ecx, 0x205
jne 0x14018cc19
cmp qword [rbp - 0x49], rax
je 0x14018cc28
cmp ecx, 0xa5
jne 0x14018cc39
cmp qword [rbp - 0x39], 5
jne 0x14018cc5f
lea rcx, [0x140235170]
call fcn.140131094
jmp 0x14018cd6c
cmp ecx, 0x203
jne 0x14018cc5f
cmp qword [rbp - 0x49], rax
jne 0x14018cc5f
mov rdx, qword [0x140231ad8]
lea rcx, [0x140235170]
call fcn.14012e738
jmp 0x14018cd6c
mov rax, qword [0x140234ee0]
cmp rbx, rax
je 0x14018ccb8
cmp rbx, qword [0x140231b88]
je 0x14018ccb8
mov rcx, qword [0x140231b00]
test rcx, rcx
je 0x14018cd24
lea r8, [rbp - 0x49]
mov rdx, qword [0x140257c58]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
lea r9, [rbp - 0x49]
xor r8d, r8d
mov edx, 0x8009
mov rcx, qword [0x140231b00]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14018cd24
mov rdx, qword [0x140257c48]
test rdx, rdx
je 0x14018cce2
cmp rbx, rax
jne 0x14018cce2
lea r8, [rbp - 0x49]
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
mov rdx, qword [0x140257c40]
test rdx, rdx
je 0x14018cd03
lea r8, [rbp - 0x49]
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
mov rdx, qword [0x140257c50]
test rdx, rdx
je 0x14018cd24
lea r8, [rbp - 0x49]
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018cd6c
test rsi, rsi
je 0x14018cd3a
lea rdx, [rbp - 0x49]
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018cd6c
test r14, r14
je 0x14018cd58
lea r9, [rbp - 0x49]
xor r8d, r8d
mov edx, 0x475
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14018cd6c
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov al, 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1401adee0
mov rbx, qword [rsp + 0xe0]
add rsp, 0xa0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
int3