Function at 0x14009d664
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x50
cmp qword [0x14012ae48], 0
mov rsi, rdx
mov rdi, rcx
jne 0x14009d6ef
mov rcx, qword [0x1400ec660]
lea rdx, str.MENUACC
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov rcx, qword [0x1400ec660]
lea rdx, str.LISTACC
mov qword [0x14012ae48], rax
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov rcx, qword [0x1400ec660]
lea rdx, str.FILEACC
mov qword [0x14012ae40], rax
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov rcx, qword [0x1400ec660]
lea rdx, str.VIEWACC
mov qword [0x14012ae38], rax
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x14012ae30], rax
lea rcx, [rsp + 0x20]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x14009d96c
mov eax, dword [0x1400fec10]
cmp dword [rsp + 0x28], eax
jne 0x14009d731
mov rbx, qword [rsp + 0x38]
mov rcx, rbx
call fcn.140095c0c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x14009d96a
call qword [sym.imp.USER32.dll_GetFocus]
mov rbx, rax
test rax, rax
je 0x14009d954
cmp qword [0x1400ffce0], 0
je 0x14009d786
cmp qword [0x14012ae30], 0
je 0x14009d786
mov rcx, rax
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, qword [0x1400ffce0]
cmp rax, rcx
jne 0x14009d786
mov rdx, qword [0x14012ae30]
lea r8, [rsp + 0x20]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14009d96a
mov rdx, qword [0x14012ae38]
lea rcx, [rsp + 0x20]
call fcn.140087b88
test al, al
jne 0x14009d96a
mov rcx, qword [0x1400fec08]
test rcx, rcx
je 0x14009d7be
lea rdx, [rsp + 0x20]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14009d96a
mov rcx, qword [0x1400ff4c0]
test rcx, rcx
je 0x14009d7dd
lea rdx, [rsp + 0x20]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14009d96a
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
mov r11w, ax
shr r11d, 0xf
and r11b, 1
cmp dword [rsp + 0x28], 0x100
jne 0x14009d81d
cmp qword [rsp + 0x30], 9
jne 0x14009d81d
neg r11b
sbb ecx, ecx
and ecx, 0xfffffffe
inc ecx
call fcn.14009b484
test al, al
jne 0x14009d96a
call fcn.14008ef80
mov ecx, dword [rsp + 0x28]
test eax, eax
je 0x14009d855
cmp ecx, 0x100
jne 0x14009d855
cmp qword [rsp + 0x30], 0x70
jne 0x14009d8b3
mov rcx, qword [0x1400ffd80]
lea rdx, str.HELPArcComment
xor r8d, r8d
call fcn.140087008
jmp 0x14009d96a
mov rax, qword [0x140108328]
cmp ecx, 0x205
jne 0x14009d86b
cmp qword [rsp + 0x20], rax
je 0x14009d87b
cmp ecx, 0xa5
jne 0x14009d88c
cmp qword [rsp + 0x30], 5
jne 0x14009d8b3
lea rcx, [0x140108328]
call fcn.14006f590
jmp 0x14009d96a
cmp ecx, 0x203
jne 0x14009d8b3
cmp qword [rsp + 0x20], rax
jne 0x14009d8b3
mov rdx, qword [0x1400ffd80]
lea rcx, [0x140108328]
call fcn.1400716fc
jmp 0x14009d96a
mov rax, qword [0x1401055a0]
cmp rbx, rax
je 0x14009d97c
cmp rbx, qword [0x140105570]
je 0x14009d97c
mov rcx, qword [0x1400ffce0]
test rcx, rcx
je 0x14009d8f7
mov rdx, qword [0x14012ae30]
test rdx, rdx
je 0x14009d8f7
lea r8, [rsp + 0x20]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14009d96a
mov rcx, qword [0x1400fec08]
test rcx, rcx
je 0x14009d91e
mov rdx, qword [0x14012ae38]
test rdx, rdx
je 0x14009d91e
lea r8, [rsp + 0x20]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14009d96a
test rdi, rdi
je 0x14009d935
lea rdx, [rsp + 0x20]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x14009d96a
test rsi, rsi
je 0x14009d954
lea r9, [rsp + 0x20]
xor r8d, r8d
mov edx, 0x475
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14009d96a
lea rcx, [rsp + 0x20]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x20]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov al, 1
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret
mov rdx, qword [0x14012ae40]
test rdx, rdx
je 0x14009d9a3
cmp rbx, rax
jne 0x14009d9a3
mov rcx, qword [0x1400ffd80]
lea r8, [rsp + 0x20]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14009d96a
mov rdx, qword [0x14012ae48]
test rdx, rdx
je 0x14009d9c5
mov rcx, qword [0x1400ffd80]
lea r8, [rsp + 0x20]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x14009d96a
mov rdx, qword [0x14012ae38]
test rdx, rdx
je 0x14009d91e
mov rcx, qword [0x1400ffd80]
jmp 0x14009d90f