Function at 0x14018e4a8
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x140231ec8]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, rdx
mov rsi, rcx
xor r15d, r15d
cmp qword [0x14025bbf8], r15
jne 0x14018e586
lea rdx, str.MENUACC
mov rcx, qword [0x14023fc50]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bbf8], rax
lea rdx, str.LISTACC
mov rcx, qword [0x14023fc50]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bc00], rax
lea rdx, str.FILEACC
mov rcx, qword [0x14023fc50]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bc08], rax
lea rdx, str.VIEWACC
mov rcx, qword [0x14023fc50]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bc10], rax
lea rdx, str.ERRACC
mov rcx, qword [0x14023fc50]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bc18], rax
lea rdx, [0x1401f41a8]
mov rcx, qword [0x14023fc50]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14025bc20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x14018ea55
mov eax, dword [0x140233aac]
cmp dword [rbp - 0x41], eax
jne 0x14018e6f8
mov rbx, qword [rbp - 0x31]
mov r14b, byte [rbx + 0x40]
lea rsi, [rbx + 0x20]
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14018e5c8
mov rdx, qword [rsi]
mov qword [rbp + 7], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x17], xmm0
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rdx + r8*2], r15w
jne 0x14018e5db
lea rcx, [rbp + 7]
call fcn.1400041b8
nop
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14018e5fc
mov rdx, qword [rbx]
mov qword [rbp - 0x19], r15
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
inc rdi
cmp word [rdx + rdi*2], r15w
jne 0x14018e608
mov r8, rdi
lea rcx, [rbp - 0x19]
call fcn.1400041b8
nop
mov r8b, r14b
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x19]
call fcn.14016bc34
nop
mov edi, 0x1000
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x14018e671
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, rdi
jb 0x14018e66c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018ea7e
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], r15w
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x14018e6bf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, rdi
jb 0x14018e6ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018ea78
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 7], r15w
mov qword [rbp - 0x19], rbx
mov rcx, rsi
call fcn.140006b94
nop
mov rcx, rbx
call fcn.140006b94
mov edx, 0x48
mov rcx, rbx
call fcn.1401af9bc
jmp 0x14018ea53
mov rbx, qword [rbp - 0x49]
test rbx, rbx
je 0x14018ea3f
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
mov rdi, rax
mov rcx, qword [0x140233a50]
test rcx, rcx
je 0x14018e740
mov rdx, qword [0x14025bc10]
test rdx, rdx
je 0x14018e747
cmp rax, rcx
jne 0x14018e747
lea r8, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
mov rdx, qword [0x14025bc10]
mov rcx, qword [0x140233a60]
test rcx, rcx
je 0x14018e776
test rdx, rdx
je 0x14018e776
cmp rdi, rcx
jne 0x14018e776
lea r8, [rbp - 0x49]
mov rdx, qword [0x14025bc18]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
mov rcx, qword [0x140234a18]
test rcx, rcx
je 0x14018e7aa
mov rdx, qword [0x14025bc20]
test rdx, rdx
je 0x14018e7aa
cmp rbx, rcx
je 0x14018e798
cmp rdi, rcx
jne 0x14018e7aa
lea r8, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
mov r8, qword [0x14025bbf8]
mov rdx, qword [0x14025bc08]
lea rcx, [rbp - 0x49]
call fcn.14016464c
test al, al
jne 0x14018ea53
cmp qword [0x140233a58], r15
je 0x14018e844
call fcn.1401685b4
cmp eax, 8
jne 0x14018e826
mov rdx, qword [0x14025bc08]
test rdx, rdx
je 0x14018e801
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a58]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
mov rdx, qword [0x14025bbf8]
test rdx, rdx
je 0x14018e826
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a58]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
mov rcx, qword [0x140233a58]
test rcx, rcx
je 0x14018e844
lea rdx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018ea53
mov rcx, qword [0x140233a60]
test rcx, rcx
je 0x14018e862
lea rdx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018ea53
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
shr ecx, 0xf
mov edi, 0x100
cmp dword [rbp - 0x41], edi
jne 0x14018e89d
cmp qword [rbp - 0x39], 9
jne 0x14018e89d
not ecx
and ecx, 1
lea ecx, [rcx*2 - 1]
call 0x14018ea84
test al, al
jne 0x14018ea53
lea rcx, [0x1402349e0]
call fcn.14016a478
mov ecx, dword [rbp - 0x41]
test al, al
je 0x14018e8eb
cmp ecx, edi
jne 0x14018e8eb
cmp qword [rbp - 0x39], 0x70
jne 0x14018e946
lea rax, str.HELPArcComment
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], 0xe
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
xor edx, edx
lea rcx, [rbp - 0x19]
call fcn.140162190
jmp 0x14018ea53
mov rax, qword [0x140237180]
cmp ecx, 0x205
jne 0x14018e900
cmp qword [rbp - 0x49], rax
je 0x14018e90f
cmp ecx, 0xa5
jne 0x14018e920
cmp qword [rbp - 0x39], 5
jne 0x14018e946
lea rcx, [0x140237180]
call fcn.140132338
jmp 0x14018ea53
cmp ecx, 0x203
jne 0x14018e946
cmp qword [rbp - 0x49], rax
jne 0x14018e946
mov rdx, qword [0x140233a48]
lea rcx, [0x140237180]
call fcn.14012f9c8
jmp 0x14018ea53
mov rax, qword [0x140236ef0]
cmp rbx, rax
je 0x14018e99f
cmp rbx, qword [0x1402349c8]
je 0x14018e99f
mov rcx, qword [0x140233a68]
test rcx, rcx
je 0x14018ea0b
lea r8, [rbp - 0x49]
mov rdx, qword [0x14025bc10]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
lea r9, [rbp - 0x49]
xor r8d, r8d
mov edx, 0x8009
mov rcx, qword [0x140233a68]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14018ea0b
mov rdx, qword [0x14025bc00]
test rdx, rdx
je 0x14018e9c9
cmp rbx, rax
jne 0x14018e9c9
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
mov rdx, qword [0x14025bbf8]
test rdx, rdx
je 0x14018e9ea
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
mov rdx, qword [0x14025bc08]
test rdx, rdx
je 0x14018ea0b
lea r8, [rbp - 0x49]
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14018ea53
test rsi, rsi
je 0x14018ea21
lea rdx, [rbp - 0x49]
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14018ea53
test r14, r14
je 0x14018ea3f
lea r9, [rbp - 0x49]
xor r8d, r8d
mov edx, 0x475
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14018ea53
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov al, 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1401afad0
mov rbx, qword [rsp + 0xe0]
add rsp, 0xa0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x140231ec8]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rax, qword [0x1402349c8]
mov ebp, ecx
mov qword [r11 - 0x38], rax
mov rax, qword [0x140236ef0]
mov qword [r11 - 0x30], rax
mov rax, qword [0x140234a18]
mov qword [r11 - 0x28], rax
mov rax, qword [0x140236a08]
mov qword [r11 - 0x20], rax
call qword [sym.imp.USER32.dll_GetFocus]
xor ebx, ebx
lea rsi, [rsp + 0x20]
mov rdi, rax
mov rcx, qword [rsi]
test rcx, rcx
je 0x14018eaff
cmp rcx, rdi
je 0x14018eb2e
mov rdx, rdi
call qword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne 0x14018eb2e
inc ebx
add rsi, 8
cmp ebx, 4
jb 0x14018eae5
xor al, al
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1401afad0
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
ret
cmp ebx, 0xffffffff
je 0x14018eb0a
mov edx, 1
mov ecx, ebp
imul ecx, edx
add ecx, ebx
and ecx, 3
mov rax, qword [rsp + rcx*8 + 0x20]
test rax, rax
jne 0x14018eb55
inc edx
cmp edx, 4
jb 0x14018eb38
jmp 0x14018eb58
mov rdi, rax
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetFocus]
mov al, 1
jmp 0x14018eb0c