Function at 0x1800ffd70
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov qword [rax - 0x40], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov r15, r9
mov esi, r8d
mov r13, rdx
mov rdi, rcx
mov dword [rax - 0x48], 1
cmp dword [rsp + 0xc0], 0
jne 0x180100127
xor ebx, ebx
mov r14, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0xb0]
cmp r8d, 0x4e
jne 0x1800ffe25
cmp qword [rbp + 8], 0x3e8
jne 0x1801000be
mov dword [rcx + 0x190], 1
cmp dword [rbp + 0x10], 1
jne 0x1800ffe03
mov edx, dword [rbp + 0x18]
lea eax, [rdx - 0x1a4]
cmp eax, 0xa
ja 0x1800ffe03
call fcn.180100220
lea eax, [rsi - 0x4d]
jmp 0x1800ffe0c
mov dword [rcx + 0x190], ebx
mov rax, rbx
mov qword [r14], rax
cmp dword [rdi + 0x190], ebx
je 0x1801000be
mov eax, 1
jmp 0x180100129
cmp esi, 1
jne 0x1800ffec6
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbp
mov r8, r15
mov edx, esi
call fcn.1801180b0
mov r12, rax
lea rcx, [rdi + 0x48]
xor r8d, r8d
mov edx, 0x1a7
call qword [sym.imp.2345MiniUI.dll_public:_void___cdecl_RC::RCMiniUIDialogView::SetItemCheck_unsigned_int__bool____ptr64]
mov rcx, rdi
call fcn.180100da0
mov rcx, qword [rdi + 0x160]
test rcx, rcx
je 0x1800ffeae
mov rdx, qword [rcx]
call qword [rdx + 0x38]
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1800ffe8a
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
nop
test rbx, rbx
jne 0x1800ffe91
jmp 0x1800ffeac
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x120]
mov byte [rdi + 0x1b4], al
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
xor ebx, ebx
mov qword [r14], r12
cmp dword [rsp + 0x40], 0
je 0x1801000be
mov eax, 1
jmp 0x180100129
cmp esi, 0x113
jne 0x1800fffce
cmp r15d, 0x1771
jb 0x1800fffb6
cmp r15d, 0x1772
jbe 0x1800fff51
cmp r15d, 0x1773
jne 0x1800fffb6
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
jne 0x1800fffb6
and dword [rdi + 0xe8], 0xfffffff7
mov rdx, qword [rdi + 0x1a0]
test rdx, rdx
je 0x1800fff32
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0x1a0], rbx
mov rdx, qword [rdi + 0x1a8]
test rdx, rdx
je 0x1800fffb6
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0x1a8], rbx
jmp 0x1800fffb6
add dword [rcx + 0x1b0], 0x64
mov ecx, dword [rcx + 0x1b0]
cmp ecx, 0xbb8
jae 0x1800fff7a
mov eax, 0x1b4e81b5
mul ecx
shr edx, 5
imul eax, edx, 0x12c
cmp ecx, eax
jne 0x1800fffb6
cmp r15d, 0x1771
setne bl
lea rcx, [rdi + 8]
lea rdx, [rsp + 0x50]
call qword [sym.imp.2345MiniUI.dll_public:_class_RCMiniAtlWindow___cdecl_RCMiniAtlWindow::GetParent_void____ptr64]
mov rcx, rax
call qword [sym.imp.2345MiniUI.dll_public:_struct_HWND______ptr64___cdecl_RCMiniAtlWindow::operator_struct_HWND______ptr64_void_const___ptr64]
mov rcx, rax
xor r9d, r9d
lea r8, [rbx + 0x9c4e]
mov edx, VarUI4FromDisp
call qword [sym.imp.USER32.dll_PostMessageW]
xor ebx, ebx
mov qword [r14], rbx
cmp dword [rsp + 0x40], 0
je 0x1801000be
mov eax, 1
jmp 0x180100129
cmp esi, 0x200
jne 0x18010001d
mov dword [rsp + 0x40], ebx
add rcx, 8
lea rdx, [rsp + 0x50]
call qword [sym.imp.2345MiniUI.dll_public:_class_RCMiniAtlWindow___cdecl_RCMiniAtlWindow::GetParent_void____ptr64]
mov rcx, rax
call qword [sym.imp.2345MiniUI.dll_public:_struct_HWND______ptr64___cdecl_RCMiniAtlWindow::operator_struct_HWND______ptr64_void_const___ptr64]
mov rcx, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x426
call qword [sym.imp.USER32.dll_PostMessageW]
mov qword [r14], rbx
cmp dword [rsp + 0x40], ebx
je 0x1801000be
mov eax, 1
jmp 0x180100129
cmp esi, 0x201
jne 0x18010004a
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbp
call fcn.1801008e0
mov qword [r14], rax
cmp dword [rsp + 0x40], ebx
je 0x1801000be
mov eax, 1
jmp 0x180100129
cmp esi, 0x202
jne 0x18010009c
mov dword [rsp + 0x40], ebx
and dword [rcx + 0xe8], 0xfffffff7
mov rdx, qword [rcx + 0x1a0]
test rdx, rdx
je 0x18010007a
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0x1a0], rbx
mov rdx, qword [rdi + 0x1a8]
test rdx, rdx
je 0x180100006
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0x1a8], rbx
jmp 0x180100006
cmp esi, 0x203
jne 0x1801000be
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbp
call fcn.1801008e0
mov qword [r14], rax
jmp 0x180100009
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbp
mov r9, r15
mov r8d, esi
mov rdx, r13
mov rcx, rdi
call qword [sym.imp.2345MiniUI.dll_public_virtual:_int___cdecl_RC::RCMiniUISimpleWindow::ProcessWindowMessage_struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64___long_long___int64_____ptr64__unsigned_long_int____ptr64]
test eax, eax
jne 0x1800ffe1b
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbp
mov r8, r15
mov edx, esi
mov rcx, rdi
call qword [sym.imp.2345MiniUI.dll_public:_long_long___int64____cdecl_ATL::CWindowImplRoot_class_RCMiniAtlWindow_::ReflectNotifications_unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64___int____ptr64____ptr64]
mov qword [r14], rax
test rax, rax
jne 0x18010011c
lea eax, [rsi - 0x132]
cmp eax, 6
jbe 0x180100127
cmp dword [rsp + 0x40], 0
jne 0x1800ffe1b
xor eax, eax
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret