Function at 0x468c3c
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x28
cmp word [rdx + 0x18], 9
mov r14, r8
mov r13, rdx
mov rdi, rcx
jne 0x468c85
mov rax, qword [rcx + 0xa8]
cmp qword [rdx], rax
jne 0x468c85
mov rcx, qword [rcx + 0x58]
mov rax, qword [rcx]
call qword [rax]
xor al, al
add rsp, 0x28
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, reloc.COMCTL32.dll_InitCommonControls
mov r12w, ax
shr r12d, 0xf
and r12b, 1
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0xa3
mov si, ax
shr esi, 0xf
and sil, 1
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, InitCommonControls
mov r15w, ax
shr r15d, 0xf
and r15b, 1
call qword [sym.imp.USER32.dll_GetKeyState]
xor ebx, ebx
mov bp, ax
mov qword [r14], rbx
movzx edx, word [r13 + 0x18]
shr ebp, 0xf
and bpl, 1
cmp dx, 0x30
jb 0x468d1f
cmp dx, 0x39
ja 0x468d1f
cmp r15b, bl
jne 0x468cfd
cmp r12b, bl
je 0x468d1f
movzx edx, dx
mov rcx, rdi
sub edx, 0x30
cmp bpl, bl
je 0x468d15
call fcn.0045c854
jmp 0x4690d1
call fcn.0045d8a8
jmp 0x4690d1
cmp dx, 0x71
je 0x468d2b
cmp dx, 0x70
jne 0x468d52
cmp r12b, bl
je 0x468d52
cmp sil, bl
jne 0x468d52
cmp bpl, bl
jne 0x468d52
mov rcx, qword [rdi + 0x58]
cmp dx, 0x70
mov rax, qword [rcx]
setne bl
mov edx, ebx
call qword [rax + VariantCopy]
jmp 0x4690d1
cmp dx, 0x78
jne 0x468d73
cmp r12b, bl
jne 0x468d73
cmp sil, bl
jne 0x468d73
cmp bpl, bl
jne 0x468d73
lea rcx, [0x004bb750]
call fcn.0043e8a4
movzx ecx, word [r13 + 0x18]
mov r14, 0xffffffffffffffff
cmp cx, 0x72
jb 0x468dc2
cmp cx, 0x7b
ja 0x468dc2
cmp sil, bl
je 0x468dc2
lea r8, [0x004913d0]
mov eax, ebx
mov rdx, r8
cmp word [rdx], cx
je 0x468daf
inc eax
add rdx, 8
cmp eax, 5
jb 0x468d9c
mov eax, r14d
cmp eax, ebx
jl 0x468dc2
cdqe
mov rcx, rdi
mov edx, dword [r8 + rax*8 + 4]
call fcn.00470120
movzx ecx, word [r13 + 0x18]
cmp ecx, 0x52
jg 0x468f96
je 0x468f80
cmp ecx, 0x28
jg 0x468ea0
je 0x468e8a
sub ecx, 8
je 0x468e7d
sub ecx, 8
je 0x468e51
sub ecx, 0x12
je 0x468e31
sub ecx, 3
je 0x468e09
dec ecx
je 0x468e1d
dec ecx
jne 0x468c72
cmp r12b, bl
je 0x468e8a
mov rcx, qword [rdi + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x20]
jmp 0x468c72
cmp r12b, bl
je 0x468e8a
mov rcx, qword [rdi + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x18]
jmp 0x468c72
cmp sil, bl
je 0x468c72
cmp r12b, bl
jne 0x468c72
cmp bpl, bl
jne 0x468c72
jmp 0x4690d1
mov rcx, qword [rdi + 0xa8]
mov r9d, 1
mov r8, r14
mov edx, 0x100c
mov byte [rdi + 0x204], bl
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rdi + 0x208], eax
jmp 0x468c72
mov rcx, rdi
call fcn.0045e34c
jmp 0x4690d1
cmp bpl, bl
je 0x468c72
mov rcx, rdi
call fcn.0046f074
jmp 0x468c72
cmp ecx, 0x2d
je 0x468f3f
cmp ecx, 0x2e
je 0x468f2c
cmp ecx, 0x30
jle 0x468c72
cmp ecx, 0x34
jle 0x468f13
cmp ecx, 0x41
je 0x468efb
cmp ecx, 0x43
je 0x468ee5
cmp ecx, 0x4e
jne 0x468c72
cmp sil, bl
je 0x468c72
mov rcx, rdi
call fcn.0046ea00
jmp 0x4690d1
cmp sil, bl
je 0x468c72
mov rcx, rdi
call fcn.0046a300
jmp 0x4690d1
cmp sil, bl
je 0x468c72
mov dl, 1
mov rcx, rdi
call fcn.0046f6a4
jmp 0x4690d1
cmp sil, bl
je 0x468c72
lea edx, [rcx - 0x31]
mov rcx, rdi
call fcn.00454664
jmp 0x4690d1
cmp bpl, bl
mov rcx, rdi
sete dl
call fcn.0046d794
jmp 0x4690d1
cmp r12b, bl
jne 0x468c72
cmp sil, bl
je 0x468f54
cmp bpl, bl
jne 0x468f59
jmp 0x468eee
cmp bpl, bl
je 0x468f67
cmp sil, bl
jne 0x468c72
jmp 0x469059
cmp byte [rdi + 0xdb], bl
je 0x468c72
mov rcx, rdi
call fcn.0046f17c
jmp 0x4690d1
cmp sil, bl
je 0x468c72
mov rcx, rdi
call fcn.00468b30
jmp 0x4690d1
cmp ecx, 0x71
jg 0x469088
je 0x469063
sub ecx, 0x56
je 0x469050
sub ecx, 2
je 0x46903a
sub ecx, 2
je 0x469024
sub ecx, 0x10
je 0x469017
dec ecx
je 0x468fe2
cmp ecx, 2
jne 0x468c72
xor edx, edx
cmp r12b, bl
mov rcx, rdi
jne 0x468fec
cmp bpl, bl
je 0x46900d
jmp 0x468f09
cmp r12b, bl
je 0x468ff6
mov dl, 1
mov rcx, rdi
call fcn.0046f3f8
jmp 0x4690d1
cmp bpl, bl
jne 0x468f04
cmp sil, bl
jne 0x4690d1
mov dl, 1
mov rcx, rdi
call fcn.0046f954
jmp 0x4690d1
mov rcx, rdi
call fcn.0046f6cc
jmp 0x4690d1
cmp sil, bl
je 0x468c72
mov rcx, rdi
call fcn.0046cffc
jmp 0x4690d1
cmp sil, bl
je 0x468c72
mov rcx, rdi
call fcn.00452c88
jmp 0x4690d1
cmp sil, bl
je 0x468c72
mov rcx, rdi
call fcn.00452c88
jmp 0x4690d1
cmp r12b, bl
jne 0x468c72
cmp sil, bl
jne 0x468c72
cmp bpl, bl
jne 0x468c72
mov rcx, rdi
call fcn.0046ccac
jmp 0x4690d1
sub ecx, 0x72
je 0x469158
dec ecx
je 0x469136
dec ecx
je 0x469113
dec ecx
je 0x4690fd
dec ecx
je 0x4690d8
cmp ecx, 5
jne 0x468c72
cmp r12b, bl
je 0x468c72
cmp sil, bl
jne 0x468c72
cmp bpl, bl
jne 0x468c72
mov rcx, rdi
call fcn.0045e194
mov al, 1
jmp 0x468c74
cmp r12b, bl
jne 0x468c72
cmp sil, bl
jne 0x468c72
cmp bpl, bl
jne 0x468c72
mov rcx, rdi
call fcn.0046e494
jmp 0x4690d1
cmp r12b, bl
jne 0x468c72
cmp sil, bl
jne 0x468c72
mov dl, 1
jmp 0x469127
cmp r12b, bl
jne 0x468c72
cmp sil, bl
jne 0x468c72
xor edx, edx
mov rcx, qword [rdi + 0x58]
mov r8b, bpl
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
jmp 0x4690d1
cmp r12b, bl
jne 0x468c72
cmp sil, bl
jne 0x468c72
cmp bpl, bl
mov rcx, rdi
jne 0x468edb
mov dl, 1
jmp 0x469178
cmp r12b, bl
jne 0x468c72
cmp sil, bl
jne 0x468c72
cmp bpl, bl
jne 0x468c72
xor edx, edx
mov rcx, rdi
call fcn.0046644c
jmp 0x4690d1