Function at 0x5fed60
Capabilities:
Log keystrokes

Disassembly:
mov edx, dword [esp + 0xc]
push ebx
mov ebx, dword [esp + 8]
push ebp
mov ebp, dword [esp + 0x10]
mov dword [ebx], 0x420
lea eax, [edx - 8]
mov ecx, edx
cmp eax, 0x89
ja case.0x5fed84.10
jmp dword [eax*4 + 0x6d6690]
cmp dword [0x7f3c68], 1
jne 0x5ff18a
mov dword [ebx], 0x418
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fedb0
mov al, 1
jmp 0x5fedb2
xor al, al
test al, al
je 0x5fedc1
mov dword [ebx], 0x40f
jmp 0x5ff18a
mov dword [ebx], 0x415
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fede0
mov al, 1
jmp 0x5fede2
xor al, al
test al, al
je 0x5fedf1
mov dword [ebx], 0x41a
jmp 0x5ff18a
mov dword [ebx], 0x419
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fee10
mov al, 1
jmp 0x5fee12
xor al, al
test al, al
je 0x5fee21
mov dword [ebx], 0x41c
jmp 0x5ff18a
mov dword [ebx], 0x41b
jmp 0x5ff18a
mov dword [ebx], 0x41f
jmp 0x5ff18a
mov dword [ebx], 0x411
jmp 0x5ff18a
mov dword [ebx], 0x414
jmp 0x5ff18a
mov dword [ebx], 0x3e8
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fee65
mov al, 1
jmp 0x5fee67
xor al, al
test al, al
je 0x5fee76
mov dword [ebx], 0x3f9
jmp 0x5ff18a
mov dword [ebx], 0x40d
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fee90
mov al, 1
jmp 0x5fee92
xor al, al
test al, al
je 0x5feea1
mov dword [ebx], 0x3fa
jmp 0x5ff18a
mov dword [ebx], 0x406
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5feec0
mov al, 1
jmp 0x5feec2
xor al, al
test al, al
je 0x5feed1
mov dword [ebx], 0x3f8
jmp 0x5ff18a
mov dword [ebx], 0x404
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5feef0
mov al, 1
jmp 0x5feef2
xor al, al
test al, al
je 0x5fef01
mov dword [ebx], 0x3f7
jmp 0x5ff18a
mov dword [ebx], 0x40b
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fef20
mov al, 1
jmp 0x5fef22
xor al, al
test al, al
je 0x5fef31
mov dword [ebx], 0x3fd
jmp 0x5ff18a
mov dword [ebx], 0x407
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fef50
mov al, 1
jmp 0x5fef52
xor al, al
test al, al
je 0x5fef61
mov dword [ebx], 0x3fb
jmp 0x5ff18a
mov dword [ebx], 0x40c
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fef80
mov al, 1
jmp 0x5fef82
xor al, al
test al, al
je 0x5fef91
mov dword [ebx], 0x3fe
jmp 0x5ff18a
mov dword [ebx], 0x40a
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fefb0
mov al, 1
jmp 0x5fefb2
xor al, al
test al, al
je 0x5fefc1
mov dword [ebx], 0x3fc
jmp 0x5ff18a
mov dword [ebx], 0x405
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5fefe0
mov al, 1
jmp 0x5fefe2
xor al, al
test al, al
je 0x5feff1
mov dword [ebx], 0x3f5
jmp 0x5ff18a
mov dword [ebx], 0x40e
jmp 0x5ff18a
mov eax, ebp
and eax, 0x1000000
je 0x5ff010
mov al, 1
jmp 0x5ff012
xor al, al
test al, al
je 0x5ff021
mov dword [ebx], 0x3f6
jmp 0x5ff18a
mov dword [ebx], 0x403
jmp 0x5ff18a
mov dword [ebx], 0x41d
jmp 0x5ff18a
mov dword [ebx], 0x41e
jmp 0x5ff18a
mov dword [ebx], 0x40e
jmp 0x5ff18a
mov dword [ebx], 0x404
jmp 0x5ff18a
mov dword [ebx], 0x405
jmp 0x5ff18a
mov dword [ebx], 0x406
jmp 0x5ff18a
mov dword [ebx], 0x407
jmp 0x5ff18a
mov dword [ebx], 0x408
jmp 0x5ff18a
mov dword [ebx], 0x40a
jmp 0x5ff18a
mov dword [ebx], 0x40b
jmp 0x5ff18a
mov dword [ebx], 0x40c
jmp 0x5ff18a
mov dword [ebx], 0x40d
jmp 0x5ff18a
mov dword [ebx], 0x400
jmp 0x5ff18a
mov dword [ebx], 0x3ff
jmp 0x5ff18a
mov dword [ebx], 0x401
jmp 0x5ff18a
mov dword [ebx], 0x402
jmp 0x5ff18a
mov dword [ebx], 0x403
jmp 0x5ff18a
mov dword [ebx], 0x3e9
jmp 0x5ff18a
mov dword [ebx], 0x3ea
jmp 0x5ff18a
mov dword [ebx], 0x3eb
jmp 0x5ff18a
mov dword [ebx], 0x3ec
jmp 0x5ff18a
mov dword [ebx], 0x3ed
jmp 0x5ff18a
mov dword [ebx], 0x3ee
jmp 0x5ff18a
mov dword [ebx], 0x3ef
jmp 0x5ff18a
mov dword [ebx], 0x3f0
jmp 0x5ff18a
mov dword [ebx], 0x3f1
jmp 0x5ff18a
mov dword [ebx], 0x3f2
jmp 0x5ff18a
mov dword [ebx], 0x3f3
jmp 0x5ff18a
mov dword [ebx], 0x3f4
jmp 0x5ff18a
mov dword [ebx], 0x409
jmp 0x5ff18a
mov dword [ebx], 0x410
jmp 0x5ff18a
mov dword [ebx], 0x412
jmp 0x5ff18a
mov dword [ebx], 0x413
jmp 0x5ff18a
push 2
push edx
call dword [sym.imp.user32.dll_MapVirtualKeyA]
and eax, 0xffff
movzx eax, ax
cmp eax, 0xff
jge 0x5ff18a
mov dword [ebx], eax
cmp dword [ebx], 0x420
jne 0x5ff197
xor al, al
pop ebp
pop ebx
ret
mov al, 1
pop ebp
pop ebx
ret