Function at 0x180024f50
Capabilities:
Log keystrokes

Disassembly:
lea eax, [rcx - 0x10]
cmp eax, 0x94
ja case.0x180024f79.19
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0x25098]
mov edx, dword [r8 + rax*4 + 0x25028]
add rdx, r8
jmp rdx
mov eax, 0xcb
ret
mov eax, 0xcd
ret
mov eax, 0xc8
ret
mov eax, 0xd0
ret
mov eax, 0x3b
ret
mov eax, 0x3c
ret
mov eax, 0x3d
ret
mov eax, 0x3e
ret
mov eax, 0x3f
ret
mov eax, 0x40
ret
mov eax, 0x41
ret
mov eax, 0x42
ret
mov eax, 0x43
ret
mov eax, 0x44
ret
mov eax, 0x57
ret
mov eax, 0x58
ret
mov eax, 0x1d
ret
mov eax, 0x38
ret
mov eax, 0x2a
ret
mov eax, 0xd1
ret
mov eax, 0xc9
ret
mov eax, 0xc7
ret
mov eax, 0xcf
ret
mov eax, 0xd2
ret
mov eax, 0xd3
ret
mov eax, 0xb5
ret
mov eax, 0xdd
ret
xor edx, edx
jmp qword [sym.imp.USER32.dll_MapVirtualKeyA]
add al, 0
mov esi, dword [rdx + 2]
add byte [rsi], ah
je 0x180080e45
add byte [rax + 0x26000448], al
je 0x180080e4d
add al, 0
je 0x180080e4d
add byte [rsi + 0x74], al
add al, byte [rax]
pushfq
je 0x180080e51
add byte [rax + rcx*2 + 0x74e00004], bl
add al, 0
loopne 0x180080eca
add al, byte [rax]
push 0x75
add al, byte [rax]
lodsb al, byte [rsi]
add al, 0
jo 0x180080ed7
add al, byte [rax]
ja 0x180080e69
invalid
add al, byte [rax]
mov eax, 0xe0000448
add byte [rax - 0x1ffffbb8], bh
add al, 0
loopne 0x180080ee5
ja 0x180080e71
add al, byte [rax]
xchg byte [rax + 2], bh
invalid
add byte [rsi - 0x3ffffd88], al
js 0x180080e75
add al, byte [rax]
ror byte [rax + 4], 0
add al, al
add al, 0
nop
js 0x180080e7d
invalid
add al, byte [rax]
int 0x78
add al, byte [rax]
ror byte [rax + 4], 1
add al, ah
js 0x180080e89
invalid
add ch, cl
js 0x180080e81
add al, dl
add al, 0
loopne 0x180080efe
add al, byte [rax]
sbb eax, 0xdc000279
add byte [0x15c081106], bl
jns 0x180080e8d
add ah, bl
add al, 0
xor byte [rcx + 2], bh
add al, byte [rax]
invalid
jp 0x180080e99
add al, byte [rax]
invalid
add al, ch
add al, 0
sar byte [rdx + 2], 1
add byte [0x178081125], dl
add al, 0
and byte [rax - 0x7f55fffe], al
add al, byte [rax]
lodsb al, byte [rsi]
add al, 0
mov al, 0x80
add al, byte [rax]
loop 0x180080e3a
add al, byte [rax]
add al, 0
add byte [rcx - 0x7e12fffe], al
add al, byte [rax]
enter 0x44a, 0
add al, 0
in eax, dx
add dword [rdx], 0x2822d00
add al, byte [rax]
fmul qword [rdx + 4]
add byte [0x1c108115f], ch
add al, byte [rax]
fmul qword [rdx + 4]
add byte [0x1c108115f], ch
invalid
invalid
add al, byte [rax]
popfq
invalid
adc al, 0x4b
add al, 0
xor byte [rbx - 0x775dfffe], al
add al, byte [rax]
and al, 0x4b
add al, 0
add al, byte [rax]
movabs byte [0xc000044b24000288], al
ror byte [rax - 0x76fafffe], 2
add byte [rsp + rcx*2 + 4], dl
add byte [rax], dl
mov dword [rdx], eax
add byte [rbx - 0x76], cl
ror byte [rax - 0x76fafffe], 2
add byte [rsp + rcx*2 + 4], dl
add byte [rax], dl
mov dword [rdx], eax
add byte [rbx - 0x76], cl
add al, byte [rax]
pop rsp
add al, 0
invalid
add al, byte [rax]
jl 0x180080f82
add al, 0
or byte [rbx - 0x731ffffe], 2
add byte [rsp + rcx*2 - 0x730ffffc], al
add al, 0
invalid
mov word [rdx], es
add byte [rbp - 0x73], dh
add al, 0
invalid
add al, byte [rax]
xchg esp, eax
add al, 0
or byte [rbp - 0x6d2afffe], 2
invalid
xchg edx, eax
add al, byte [rax]
pushfq
add al, 0
loopne 0x180080ef0
add al, byte [rax]
adc bl, byte [rdx + 0x4cb40002]
invalid
add al, 0
and byte [rdx - 0x60cffffe], bl
add al, byte [rax]
ror byte [rsp + rax], 1
lahf
add al, byte [rax]
movabs al, byte [0xa04200044ce80002]
add al, byte [rax]
call 0x1c20813cd
invalid
add al, byte [rax]
call 0x1c20813cd
movabs al, byte [0x4cfc000309630002]
add al, 0
jo 0x180080f97
add al, byte [rax]
invalid
add eax, dword [rax]
rol byte [rbp + 3], 0
adc al, 0x4d
add al, 0
rol byte [rbp + 3], 1
add ah, dh
add r8d, dword [r8]
sub al, 0x4d
add al, 0
add byte [rsi + 3], al
add byte [rdi + 0x46], dl
add eax, dword [rax]
xor al, 0x4d
add al, 0
invalid
add al, dl
add r8d, dword [r8]
hlt
test al, 0x4f
add al, 0
invalid