Function at 0x4633d8
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
sub rsp, 0x20
cmp ecx, 0x44c
mov edx, ecx
jb 0x463471
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
call fcn.0047e16c
mov r11d, dword [0x004d67d0]
lea rax, [0x004d6a68]
mov rbx, r11
imul rbx, rbx, 0x210
add rbx, rax
mov rcx, qword [rbx]
test rcx, rcx
je 0x46343f
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
mov qword [rbx], 0
mov r11d, dword [0x004d67d0]
mov ebx, r11d
lea rax, [0x004d6a70]
imul rbx, rbx, 0x210
add rbx, rax
mov rcx, qword [rbx]
test rcx, rcx
je 0x4637dd
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
mov qword [rbx], 0
jmp 0x4637dd
mov eax, 0x223
cmp ecx, eax
ja 0x463609
je 0x4635ec
mov eax, 0x21c
cmp ecx, eax
ja 0x463520
je 0x463502
sub edx, 0x65
je 0x4634f9
dec edx
je 0x4634f0
dec edx
je 0x4634e7
dec edx
je 0x4634de
dec edx
je 0x4634d5
dec edx
je 0x4634cc
dec edx
jne 0x463791
lea rdx, [0x004a37d0]
lea rcx, [0x004d67c0]
call fcn.0046b530
jmp 0x4637dd
lea rdx, [0x004a3800]
jmp 0x4634bb
lea rdx, str.SHA256
jmp 0x4634bb
lea rdx, str.SHA1
jmp 0x4634bb
lea rdx, str.CRC64
jmp 0x4634bb
lea rdx, str.CRC32
jmp 0x4634bb
lea rdx, [0x0049dbf0]
jmp 0x4634bb
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
mov dl, 1
imul rcx, rcx, 0x210
add rcx, rax
jmp 0x4635c4
sub edx, 0x21d
je 0x4635ce
dec edx
je 0x4635ab
dec edx
je 0x463590
dec edx
je 0x46356d
dec edx
je 0x46354c
dec edx
jne 0x463791
xor r8d, r8d
jmp 0x4635f1
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
call fcn.00480bec
jmp 0x4637dd
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
mov dl, 1
imul rcx, rcx, 0x210
add rcx, rax
call fcn.0047a1d4
jmp 0x4637dd
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
xor edx, edx
jmp 0x463586
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
xor edx, edx
call fcn.0047a3bc
jmp 0x4637dd
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
xor edx, edx
jmp 0x463773
xor r8d, r8d
mov dl, 1
mov r9d, dword [0x004d67d0]
lea rcx, [0x004d67c0]
call fcn.0044c9f0
jmp 0x4637dd
mov eax, 0x22b
cmp ecx, eax
ja 0x463715
je 0x4636f4
sub edx, 0x224
je 0x4636b6
dec edx
je 0x4636a5
dec edx
je 0x463694
dec edx
je 0x463673
dec edx
je 0x463652
cmp edx, 2
jne 0x463791
lea rcx, [0x004d67c0]
call fcn.004750f4
jmp 0x4637dd
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
call fcn.00480e84
jmp 0x4637dd
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
call fcn.0047fc88
jmp 0x4637dd
lea rcx, [0x004d67c0]
call fcn.00485df4
jmp 0x4637dd
lea rcx, [0x004d67c0]
call fcn.00484cec
jmp 0x4637dd
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [0x004d67d0]
mov r11w, ax
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
shr r11d, 0xf
add rcx, rax
not r11b
and r11b, 1
mov dl, r11b
call fcn.0048162c
jmp 0x4637dd
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
call fcn.0048249c
jmp 0x4637dd
cmp ecx, 0x22c
je 0x4637c1
cmp ecx, 0x22e
je 0x4637b3
cmp ecx, 0x22f
je 0x463795
cmp ecx, 0x243
jbe 0x463791
cmp ecx, 0x247
jbe 0x463783
cmp ecx, 0x24e
je 0x46377a
cmp ecx, 0x24f
jne 0x463791
lea rdx, [0x004a2820]
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
call fcn.00479df8
jmp 0x4637dd
lea rdx, [0x0049db40]
jmp 0x46375c
lea rcx, [0x004d67c0]
call fcn.004940ac
jmp 0x4637dd
xor al, al
jmp 0x4637df
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
call fcn.0047265c
jmp 0x4637dd
lea rcx, [0x004d67c0]
call fcn.00498ea4
jmp 0x4637dd
mov ecx, dword [0x004d67d0]
lea rax, [0x004d6878]
imul rcx, rcx, 0x210
add rcx, rax
call fcn.00482a98
mov al, 1
add rsp, 0x20
pop rbx
ret