Function at 0x4633fc
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
sub rsp, 0x20
cmp ecx, 0x44c
mov edx, ecx
jb 0x463495
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
call fcn.0047d7d4
mov r11d, dword [0x004d57d0]
lea rax, [0x004d5a90]
mov rbx, r11
imul rbx, rbx, 0x238
add rbx, rax
mov rcx, qword [rbx]
test rcx, rcx
je 0x463463
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
mov qword [rbx], 0
mov r11d, dword [0x004d57d0]
mov ebx, r11d
lea rax, [0x004d5a98]
imul rbx, rbx, 0x238
add rbx, rax
mov rcx, qword [rbx]
test rcx, rcx
je 0x463801
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
mov qword [rbx], 0
jmp 0x463801
mov eax, 0x223
cmp ecx, eax
ja 0x46362d
je 0x463610
mov eax, 0x21c
cmp ecx, eax
ja 0x463544
je 0x463526
sub edx, 0x65
je 0x46351d
dec edx
je 0x463514
dec edx
je 0x46350b
dec edx
je 0x463502
dec edx
je 0x4634f9
dec edx
je 0x4634f0
dec edx
jne 0x4637b5
lea rdx, [0x004a27c8]
lea rcx, [0x004d57c0]
call fcn.0046b4f8
jmp 0x463801
lea rdx, [0x004a27f8]
jmp 0x4634df
lea rdx, str.SHA256
jmp 0x4634df
lea rdx, str.SHA1
jmp 0x4634df
lea rdx, str.CRC64
jmp 0x4634df
lea rdx, str.CRC32
jmp 0x4634df
lea rdx, [0x0049cbf0]
jmp 0x4634df
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
mov dl, 1
imul rcx, rcx, 0x238
add rcx, rax
jmp 0x4635e8
sub edx, 0x21d
je 0x4635f2
dec edx
je 0x4635cf
dec edx
je 0x4635b4
dec edx
je 0x463591
dec edx
je 0x463570
dec edx
jne 0x4637b5
xor r8d, r8d
jmp 0x463615
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
call fcn.004802c0
jmp 0x463801
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
mov dl, 1
imul rcx, rcx, 0x238
add rcx, rax
call fcn.00479884
jmp 0x463801
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
xor edx, edx
jmp 0x4635aa
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
xor edx, edx
call fcn.00479a6c
jmp 0x463801
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
xor edx, edx
jmp 0x463797
xor r8d, r8d
mov dl, 1
mov r9d, dword [0x004d57d0]
lea rcx, [0x004d57c0]
call fcn.0044ca3c
jmp 0x463801
mov eax, 0x22b
cmp ecx, eax
ja 0x463739
je 0x463718
sub edx, 0x224
je 0x4636da
dec edx
je 0x4636c9
dec edx
je 0x4636b8
dec edx
je 0x463697
dec edx
je 0x463676
cmp edx, 2
jne 0x4637b5
lea rcx, [0x004d57c0]
call fcn.00474794
jmp 0x463801
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
call fcn.00480558
jmp 0x463801
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
call fcn.0047f35c
jmp 0x463801
lea rcx, [0x004d57c0]
call fcn.004854fc
jmp 0x463801
lea rcx, [0x004d57c0]
call fcn.004843f4
jmp 0x463801
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [0x004d57d0]
mov r11w, ax
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
shr r11d, 0xf
add rcx, rax
not r11b
and r11b, 1
mov dl, r11b
call fcn.00480d00
jmp 0x463801
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
call fcn.00481b70
jmp 0x463801
cmp ecx, 0x22c
je 0x4637e5
cmp ecx, 0x22e
je 0x4637d7
cmp ecx, 0x22f
je 0x4637b9
cmp ecx, 0x243
jbe 0x4637b5
cmp ecx, 0x247
jbe 0x4637a7
cmp ecx, 0x24e
je 0x46379e
cmp ecx, 0x24f
jne 0x4637b5
lea rdx, [0x004a1820]
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
call fcn.004794a8
jmp 0x463801
lea rdx, [0x0049cb40]
jmp 0x463780
lea rcx, [0x004d57c0]
call fcn.004933d4
jmp 0x463801
xor al, al
jmp 0x463803
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
call fcn.00471cd8
jmp 0x463801
lea rcx, [0x004d57c0]
call fcn.004982ec
jmp 0x463801
mov ecx, dword [0x004d57d0]
lea rax, [0x004d5878]
imul rcx, rcx, 0x238
add rcx, rax
call fcn.0048216c
mov al, 1
add rsp, 0x20
pop rbx
ret