Function at 0x18000168c
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x250
mov rax, qword [0x180013020]
xor rax, rsp
mov qword [rsp + 0x240], rax
movsxd rbx, ecx
mov esi, edx
xor edx, edx
mov ecx, ebx
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
mov edi, eax
cmp ebx, 0x1b
ja 0x1800016d0
mov eax, 0x8002300
bt eax, ebx
jb 0x18000173d
test edi, edi
je 0x18000173d
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8d, 0x200
call fcn.1800030b0
mov eax, esi
lea r9, [rsp + 0x30]
neg eax
lea r8, [rsp + 0x40]
mov edx, edi
sbb cl, cl
and dword [rsp + 0x20], 0
mov byte [rsp + 0x50], cl
mov ecx, ebx
mov byte [rsp + rbx + 0x40], 0xff
call qword [sym.imp.USER32.dll_ToAscii]
cmp eax, 1
jne 0x18000173d
movsx r9d, byte [rsp + 0x30]
lea r8, [0x18000c3b8]
lea rcx, [0x180014b00]
mov edx, 0x20
call fcn.1800033c4
lea rax, [0x180014b00]
jmp 0x18000224a
mov edx, 0xba
lea r10d, [rdx + 1]
lea r9d, [rdx + 0x21]
lea r8d, [rdx + 6]
test esi, esi
je 0x180001a92
cmp ebx, edx
jg 0x1800019f1
je 0x1800019e5
cmp ebx, 0x49
jg 0x1800018bc
je 0x1800018b0
cmp ebx, 0x39
jg 0x180001829
je 0x18000181d
mov ecx, ebx
sub ecx, 0x30
je 0x180001811
dec ecx
je 0x180001805
dec ecx
je 0x1800017f9
dec ecx
je 0x1800017ed
dec ecx
je 0x1800017e1
dec ecx
je 0x1800017d5
dec ecx
je 0x1800017c9
dec ecx
je 0x1800017bd
dec ecx
jne 0x180001a92
lea rax, [0x18000c3f4]
jmp 0x18000224a
lea rax, [0x18000c3f0]
jmp 0x18000224a
lea rax, [0x18000c3ec]
jmp 0x18000224a
lea rax, [0x18000c3e8]
jmp 0x18000224a
lea rax, [0x18000c3e4]
jmp 0x18000224a
lea rax, [0x18000c3e0]
jmp 0x18000224a
lea rax, [0x18000c3dc]
jmp 0x18000224a
lea rax, [0x18000c3d8]
jmp 0x18000224a
lea rax, [0x18000c3d4]
jmp 0x18000224a
lea rax, [0x18000c3f8]
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x41
je 0x1800018a4
dec ecx
je 0x180001898
dec ecx
je 0x18000188c
dec ecx
je 0x180001880
dec ecx
je 0x180001874
dec ecx
je 0x180001868
dec ecx
je 0x18000185c
dec ecx
jne 0x180001a92
lea rax, [0x18000c418]
jmp 0x18000224a
lea rax, [0x18000c414]
jmp 0x18000224a
lea rax, [0x18000c410]
jmp 0x18000224a
lea rax, [0x18000c40c]
jmp 0x18000224a
lea rax, [0x18000c408]
jmp 0x18000224a
lea rax, [0x18000c404]
jmp 0x18000224a
lea rax, [0x18000c400]
jmp 0x18000224a
lea rax, [0x18000c3fc]
jmp 0x18000224a
lea rax, [0x18000c41c]
jmp 0x18000224a
cmp ebx, 0x52
jg 0x18000195e
je 0x180001952
mov ecx, ebx
sub ecx, 0x4a
je 0x180001946
dec ecx
je 0x18000193a
dec ecx
je 0x18000192e
dec ecx
je 0x180001922
dec ecx
je 0x180001916
dec ecx
je 0x18000190a
dec ecx
je 0x1800018fe
dec ecx
jne 0x180001a92
lea rax, [0x18000c43c]
jmp 0x18000224a
lea rax, [0x18000c438]
jmp 0x18000224a
lea rax, [0x18000c434]
jmp 0x18000224a
lea rax, [0x18000c430]
jmp 0x18000224a
lea rax, [0x18000c42c]
jmp 0x18000224a
lea rax, [0x18000c428]
jmp 0x18000224a
lea rax, [0x18000c424]
jmp 0x18000224a
lea rax, [0x18000c420]
jmp 0x18000224a
lea rax, [0x18000c440]
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x53
je 0x1800019d9
dec ecx
je 0x1800019cd
dec ecx
je 0x1800019c1
dec ecx
je 0x1800019b5
dec ecx
je 0x1800019a9
dec ecx
je 0x18000199d
dec ecx
je 0x180001991
dec ecx
jne 0x180001a92
lea rax, [0x18000c460]
jmp 0x18000224a
lea rax, [0x18000c45c]
jmp 0x18000224a
lea rax, [0x18000c458]
jmp 0x18000224a
lea rax, [0x18000c454]
jmp 0x18000224a
lea rax, [0x18000c450]
jmp 0x18000224a
lea rax, [0x18000c44c]
jmp 0x18000224a
lea rax, [0x18000c448]
jmp 0x18000224a
lea rax, [0x18000c444]
jmp 0x18000224a
lea rax, str.:__________ABCDEFGHIJKLMNOPQRSTUVWXYZ_
jmp 0x18000224a
cmp ebx, r8d
jg 0x180001a4f
je 0x180001a43
mov ecx, ebx
sub ecx, r10d
je 0x180001f67
dec ecx
je 0x180001a37
dec ecx
je 0x180001a2b
dec ecx
je 0x180001a1f
dec ecx
jne 0x180001a92
lea rax, [0x18000c3d0]
jmp 0x18000224a
lea rax, [0x18000c3cc]
jmp 0x18000224a
lea rax, [0x18000c3c8]
jmp 0x18000224a
lea rax, [0x18000c3c4]
jmp 0x18000224a
lea rax, [0x18000c464]
jmp 0x18000224a
mov ecx, ebx
sub ecx, r9d
je 0x180001a86
dec ecx
je 0x180001a7a
dec ecx
je 0x180001a6e
dec ecx
jne 0x180001a92
lea rax, [0x18000c474]
jmp 0x18000224a
lea rax, [0x18000c470]
jmp 0x18000224a
lea rax, [0x18000c46c]
jmp 0x18000224a
lea rax, [0x18000c468]
jmp 0x18000224a
cmp ebx, 0x5a
jg 0x180001ed4
je 0x180001ec8
cmp ebx, 0x34
jg 0x180001cb2
je 0x180001ca6
cmp ebx, 0x22
jg 0x180001bb0
je 0x180001ba4
cmp ebx, 0x10
jg 0x180001b33
je 0x180001b27
mov ecx, ebx
dec ecx
je 0x180001b1b
dec ecx
je 0x180001b1b
sub ecx, 2
je 0x180001b1b
sub ecx, 4
je 0x180001b0f
dec ecx
je 0x180001b03
sub ecx, 3
je 0x180001af7
dec ecx
jne 0x180002219
lea rax, [0x18000c498]
jmp 0x18000224a
lea rax, str._clear_
jmp 0x18000224a
lea rax, str._tab_
jmp 0x18000224a
lea rax, [0x18000c478]
jmp 0x18000224a
lea rax, [0x18000c476]
jmp 0x18000224a
lea rax, str._shift_
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x11
je 0x180001b98
dec ecx
je 0x180002174
dec ecx
je 0x180001b8c
dec ecx
je 0x180001b80
sub ecx, 7
je 0x180001b74
sub ecx, 5
je 0x180001b68
dec ecx
jne 0x180002219
lea rax, str._page_up_
jmp 0x18000224a
lea rax, [0x18000c4e4]
jmp 0x18000224a
lea rax, str._escape_
jmp 0x18000224a
lea rax, str._caps_lock_
jmp 0x18000224a
lea rax, str._pause_
jmp 0x18000224a
lea rax, str._control_
jmp 0x18000224a
lea rax, str._page_down_
jmp 0x18000224a
cmp ebx, 0x2d
jg 0x180001c3f
je 0x180001c33
mov ecx, ebx
sub ecx, 0x23
je 0x180001c27
dec ecx
je 0x180001c1b
dec ecx
je 0x180001c0f
dec ecx
je 0x180001c03
dec ecx
je 0x180001bf7
dec ecx
je 0x180001beb
cmp ecx, 4
jne 0x180002219
lea rax, str._prtscr_
jmp 0x18000224a
lea rax, str._down_
jmp 0x18000224a
lea rax, str._right_
jmp 0x18000224a
lea rax, str._up_
jmp 0x18000224a
lea rax, str._left_
jmp 0x18000224a
lea rax, str._home_
jmp 0x18000224a
lea rax, str._end_
jmp 0x18000224a
lea rax, str._insert_
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x2e
je 0x180001c9a
dec ecx
je 0x180001c8e
dec ecx
je 0x180001c82
dec ecx
je 0x180001c76
dec ecx
je 0x180001c6a
dec ecx
jne 0x180002219
lea rax, [0x18000c578]
jmp 0x18000224a
lea rax, [0x18000c574]
jmp 0x18000224a
lea rax, [0x18000c570]
jmp 0x18000224a
lea rax, str.0123456789abcdefghijklmnopqrstuvwxyz
jmp 0x18000224a
lea rax, str._help_
jmp 0x18000224a
lea rax, str._delete_
jmp 0x18000224a
lea rax, [0x18000c57c]
jmp 0x18000224a
cmp ebx, 0x4b
jg 0x180001dd3
je 0x180001dc7
cmp ebx, 0x43
jg 0x180001d50
je 0x180001d44
mov ecx, ebx
sub ecx, 0x35
je 0x180001d38
dec ecx
je 0x180001d2c
dec ecx
je 0x180001d20
dec ecx
je 0x180001d14
dec ecx
je 0x180001d08
sub ecx, 8
je 0x180001cfc
dec ecx
jne 0x180002219
lea rax, [0x18000c598]
jmp 0x18000224a
lea rax, [0x18000c594]
jmp 0x18000224a
lea rax, [0x18000c590]
jmp 0x18000224a
lea rax, [0x18000c58c]
jmp 0x18000224a
lea rax, [0x18000c588]
jmp 0x18000224a
lea rax, [0x18000c584]
jmp 0x18000224a
lea rax, [0x18000c580]
jmp 0x18000224a
lea rax, [0x18000c59c]
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x44
je 0x180001dbb
dec ecx
je 0x180001daf
dec ecx
je 0x180001da3
dec ecx
je 0x180001d97
dec ecx
je 0x180001d8b
dec ecx
je 0x180001d7f
dec ecx
jne 0x180002219
lea rax, [0x18000c5b8]
jmp 0x18000224a
lea rax, [0x18000c5b4]
jmp 0x18000224a
lea rax, [0x18000c5b0]
jmp 0x18000224a
lea rax, [0x18000c5ac]
jmp 0x18000224a
lea rax, [0x18000c5a8]
jmp 0x18000224a
lea rax, [0x18000c5a4]
jmp 0x18000224a
lea rax, [0x18000c5a0]
jmp 0x18000224a
lea rax, [0x18000c5bc]
jmp 0x18000224a
cmp ebx, 0x53
jg 0x180001e61
je 0x180001e55
mov ecx, ebx
sub ecx, 0x4c
je 0x180001e49
dec ecx
je 0x180001e3d
dec ecx
je 0x180001e31
dec ecx
je 0x180001e25
dec ecx
je 0x180001e19
dec ecx
je 0x180001e0d
dec ecx
jne 0x180002219
lea rax, [0x18000c5d8]
jmp 0x18000224a
lea rax, [0x18000c5d4]
jmp 0x18000224a
lea rax, [0x18000c5d0]
jmp 0x18000224a
lea rax, [0x18000c5cc]
jmp 0x18000224a
lea rax, [0x18000c5c8]
jmp 0x18000224a
lea rax, [0x18000c5c4]
jmp 0x18000224a
lea rax, [0x18000c5c0]
jmp 0x18000224a
lea rax, [0x18000c5dc]
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x54
je 0x180001ebc
dec ecx
je 0x180001eb0
dec ecx
je 0x180001ea4
dec ecx
je 0x180001e98
dec ecx
je 0x180001e8c
dec ecx
jne 0x180002219
lea rax, [0x18000c5f4]
jmp 0x18000224a
lea rax, [0x18000c5f0]
jmp 0x18000224a
lea rax, [0x18000c5ec]
jmp 0x18000224a
lea rax, [0x18000c5e8]
jmp 0x18000224a
lea rax, [0x18000c5e4]
jmp 0x18000224a
lea rax, [0x18000c5e0]
jmp 0x18000224a
lea rax, [0x18000c5f8]
jmp 0x18000224a
cmp ebx, 0x7c
jg 0x180002074
je 0x180002068
cmp ebx, 0x6d
jg 0x180001f7f
je 0x180001f73
cmp ebx, 0x64
jg 0x180001f2c
je 0x180001ca6
mov ecx, ebx
sub ecx, 0x5b
je 0x180001f20
dec ecx
je 0x180001f20
dec ecx
je 0x180001f14
sub ecx, 3
jmp 0x180001c4c
lea rax, str._menu_
jmp 0x18000224a
lea rax, str._command_
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x65
je 0x180001d38
dec ecx
je 0x180001d2c
dec ecx
je 0x180001d20
dec ecx
je 0x180001d14
dec ecx
je 0x180001d08
dec ecx
je 0x1800017b1
dec ecx
jne 0x180002219
lea rax, [0x18000c3c0]
jmp 0x18000224a
lea rax, [0x18000c614]
jmp 0x18000224a
cmp ebx, 0x75
jg 0x180002001
je 0x180001ff5
mov ecx, ebx
sub ecx, 0x6e
je 0x180001fe9
dec ecx
je 0x1800021e2
dec ecx
je 0x180001fdd
dec ecx
je 0x180001fd1
dec ecx
je 0x180001fc5
dec ecx
je 0x180001fb9
dec ecx
jne 0x180002219
lea rax, str._F5_
jmp 0x18000224a
lea rax, str._F4_
jmp 0x18000224a
lea rax, str._F3_
jmp 0x18000224a
lea rax, str._F2_
jmp 0x18000224a
lea rax, [0x18000c620]
jmp 0x18000224a
lea rax, [0x18000c618]
jmp 0x18000224a
lea rax, str._F6_
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x76
je 0x18000205c
dec ecx
je 0x180002050
dec ecx
je 0x180002044
dec ecx
je 0x180002038
dec ecx
je 0x18000202c
dec ecx
jne 0x180002219
lea rax, str._F12_
jmp 0x18000224a
lea rax, str._F11_
jmp 0x18000224a
lea rax, str._F10_
jmp 0x18000224a
lea rax, str._F9_
jmp 0x18000224a
lea rax, str._F8_
jmp 0x18000224a
lea rax, str._F7_
jmp 0x18000224a
lea rax, str._F13_
jmp 0x18000224a
cmp ebx, edx
jg 0x1800021bc
je 0x1800021b0
mov eax, 0x86
cmp ebx, eax
jg 0x18000213c
je 0x180002130
mov ecx, ebx
sub ecx, 0x7d
je 0x180002124
dec ecx
je 0x180002118
dec ecx
je 0x18000210c
dec ecx
je 0x180002100
dec ecx
je 0x1800020f4
dec ecx
je 0x1800020e8
dec ecx
je 0x1800020dc
dec ecx
je 0x1800020d0
dec ecx
jne 0x180002219
lea rax, str._F22_
jmp 0x18000224a
lea rax, str._F21_
jmp 0x18000224a
lea rax, str._F20_
jmp 0x18000224a
lea rax, str._F19_
jmp 0x18000224a
lea rax, str._F18_
jmp 0x18000224a
lea rax, str._F17_
jmp 0x18000224a
lea rax, str._F16_
jmp 0x18000224a
lea rax, str._F15_
jmp 0x18000224a
lea rax, str._F14_
jmp 0x18000224a
lea rax, str._F23_
jmp 0x18000224a
mov ecx, ebx
sub ecx, 0x87
je 0x1800021a4
sub ecx, 9
je 0x180002198
dec ecx
je 0x18000218c
sub ecx, 0xf
je 0x180001b1b
dec ecx
je 0x180001b1b
dec ecx
je 0x180002180
dec ecx
je 0x180002180
dec ecx
je 0x180002174
dec ecx
jne 0x180002219
lea rax, str._alt_
jmp 0x18000224a
lea rax, str._ctrl_
jmp 0x18000224a
lea rax, str._scroll_lock_
jmp 0x18000224a
lea rax, str._numlock_
jmp 0x18000224a
lea rax, str._F24_
jmp 0x18000224a
lea rax, str._____
jmp 0x18000224a
cmp ebx, r8d
jg 0x180002206
je 0x1800021fd
mov ecx, ebx
sub ecx, r10d
je 0x1800021f4
dec ecx
je 0x1800021eb
dec ecx
je 0x180001f73
dec ecx
je 0x180001fe9
dec ecx
jne 0x180002219
lea rax, [0x18000c61c]
jmp 0x18000224a
lea rax, [0x18000c710]
jmp 0x18000224a
lea rax, [0x18000c70c]
jmp 0x18000224a
lea rax, [0x18000c714]
jmp 0x18000224a
mov ecx, ebx
sub ecx, r9d
je 0x180002243
dec ecx
je 0x18000223a
dec ecx
je 0x180002231
dec ecx
je 0x180002228
mov r9d, ebx
lea r8, [0x18000c728]
jmp 0x180001720
lea rax, [0x18000c724]
jmp 0x18000224a
lea rax, [0x18000c720]
jmp 0x18000224a
lea rax, [0x18000c71c]
jmp 0x18000224a
lea rax, [0x18000c718]
mov rcx, qword [rsp + 0x240]
xor rcx, rsp
call fcn.180003510
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret