Function at 0x14001c8a0
Capabilities:
Log keystrokes

Disassembly:
push rbx
sub rsp, 0x20
movzx ebx, cx
mov eax, ebx
cmp ebx, 0x11c
ja 0x14001c97e
je 0x14001c976
sub eax, 0x1d
cmp eax, 0x36
ja case.0x14001c9a3.286
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x1ca74]
mov ecx, dword [rdx + rax*4 + 0x1ca28]
add rcx, rdx
jmp rcx
mov al, 0xa0
add rsp, 0x20
pop rbx
ret
mov al, 0xa2
add rsp, 0x20
pop rbx
ret
mov al, 0xa4
add rsp, 0x20
pop rbx
ret
mov al, 0x6a
add rsp, 0x20
pop rbx
ret
mov al, 0x6d
add rsp, 0x20
pop rbx
ret
mov al, 0x6b
add rsp, 0x20
pop rbx
ret
mov al, 0x2e
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
add rsp, 0x20
pop rbx
ret
mov al, 0x2d
add rsp, 0x20
pop rbx
ret
mov al, 0x26
add rsp, 0x20
pop rbx
ret
mov al, 0x28
add rsp, 0x20
pop rbx
ret
mov al, 0x25
add rsp, 0x20
pop rbx
ret
mov al, 0x27
add rsp, 0x20
pop rbx
ret
mov al, 0x24
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_SafeArrayAllocDescriptor
add rsp, 0x20
pop rbx
ret
mov al, 0x21
add rsp, 0x20
pop rbx
ret
mov al, SafeArrayAllocDescriptor
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_SafeArrayGetLBound
add rsp, 0x20
pop rbx
ret
mov al, 0xd
add rsp, 0x20
pop rbx
ret
sub eax, 0x11d
cmp eax, 0x40
ja case.0x14001c9a3.286
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x1cad4]
mov ecx, dword [rdx + rax*4 + 0x1caac]
add rcx, rdx
jmp rcx
mov al, 0xa1
add rsp, 0x20
pop rbx
ret
mov al, 0xa3
add rsp, 0x20
pop rbx
ret
mov al, 0xa5
add rsp, 0x20
pop rbx
ret
mov al, 0x5b
add rsp, 0x20
pop rbx
ret
mov al, 0x5c
add rsp, 0x20
pop rbx
ret
mov al, 0x90
add rsp, 0x20
pop rbx
ret
mov al, 0x6f
add rsp, 0x20
pop rbx
ret
mov al, 0x5d
add rsp, 0x20
pop rbx
ret
mov al, 0x2c
add rsp, 0x20
pop rbx
ret
bt bx, 8
jae 0x14001ca0c
movzx ecx, bl
mov edx, 1
or ecx, 0xe000
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
test eax, eax
jne 0x14001ca20
movzx ecx, bl
mov edx, 1
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_MapVirtualKeyW]
add rsp, 0x20
pop rbx
ret
in eax, 0x3c
cmp eax, 0x9fce595
push rcx
mov dl, 0xe5
retf
mov ecx, 0x7bccc974
invalid
push rax
shl dl, cl
mov ecx, 0xe11cf0a9
and byte [rcx + 0x4cc3803e], bh
adc bh, byte [rcx]
sbb byte [rsi], al
loope 0x14024934d
invalid
sahf
jae 0x140249381
push rdi
xchg dword [rax + 0x35], esp
and eax, 0x47ebe694
cdq
loope 0x140249350
jle 0x140249361
bswap edx
xor bl, byte fs:[rsi]
xor bl, byte [rsi]
xor bl, byte [rsi]
sal dword [rdi + 0x59], 0x74
ja 0x140249376
je 0x140249387
and al, 0xa2
jge 0x1402492ce
adc dword [0x16774643d], edi
mov cl, 0x46
iretd
mov ch, 0x98
sbb dword [rsi], ebp
scasd eax, dword [rdi]
xchg dword [rdx + 0x13fa3683], esp
jno 0x1402492bf
invalid
lahf
fidivr word [rdi + 0x6589b610]
stosb byte [rdi], al
mov dh, 0x89
stosb byte [rdi], al
xchg edi, eax
xor edx, dword [rcx]
call 0x1aaafb596
mov dl, 0x7f
mov esi, 0xbd5a608f
scasd eax, dword [rdi]
invalid
pop rdx
mov ebp, 0x6eec9aaf
outsb dx, byte [rsi]
jne 0x140249390
mov ebx, 0xa60d2107
invalid
xor dword [rax + 0x7c15014f], ebp
invalid
xchg ebx, eax
and byte [rcx], bh
js 0x140249398
invalid
test eax, 0xd6270f08
and esp, eax
xchg byte [rbx - 0x3f], dl
fst qword [rcx - 0x60]
xchg ebx, eax
add dl, bh
xchg edx, eax
invalid
push rbx
rcr ebp, 0x51
movabs al, byte [0x1461fa0692fa0093]
push 0x4eae8027
push rax
test dword [rax - 0x349ab1c6], eax
jnp 0x140249384
invalid
fxtract
add esi, dword [rcx]
pop rax
popfq
invalid