Function at 0x180036ed0
Capabilities:
Log keystrokes
Parse pe header

Disassembly:
push rbx
sub rsp, 0x20
mov rax, rdx
mov rbx, rdx
sar rax, 0x10
movzx eax, al
test eax, eax
jne 0x180036eef
xor edx, edx
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
dec eax
cmp eax, 0x75
ja case.0x180036f0d.84
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x37610]
add rcx, rdx
jmp rcx
mov eax, 0x25
add rsp, 0x20
pop rbx
ret
mov eax, 0x1a
add rsp, 0x20
pop rbx
ret
mov eax, 0x1b
add rsp, 0x20
pop rbx
ret
mov eax, 0x1c
add rsp, 0x20
pop rbx
ret
mov eax, 0x1d
add rsp, 0x20
pop rbx
ret
mov eax, 0x1e
add rsp, 0x20
pop rbx
ret
mov eax, 0x1f
add rsp, 0x20
pop rbx
ret
mov eax, 0x20
add rsp, 0x20
pop rbx
ret
mov eax, 0x21
add rsp, 0x20
pop rbx
ret
mov eax, 0x22
add rsp, 0x20
pop rbx
ret
mov eax, 0x23
add rsp, 0x20
pop rbx
ret
mov eax, 0x29
add rsp, 0x20
pop rbx
ret
mov eax, 0x2a
add rsp, 0x20
pop rbx
ret
mov eax, 0x26
add rsp, 0x20
pop rbx
ret
mov eax, 0x27
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x10
bt bx, 8
mov ecx, 0x7e
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x16
add rsp, 0x20
pop rbx
ret
mov eax, 4
add rsp, 0x20
pop rbx
ret
mov eax, 0x11
add rsp, 0x20
pop rbx
ret
mov eax, 0x13
add rsp, 0x20
pop rbx
ret
mov eax, 0x18
add rsp, 0x20
pop rbx
ret
mov eax, 0x14
add rsp, 0x20
pop rbx
ret
mov eax, 8
add rsp, 0x20
pop rbx
ret
mov eax, 0xe
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0xf
bt bx, 8
mov ecx, 0x7d
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x2b
add rsp, 0x20
pop rbx
ret
mov eax, 0x2c
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x24
bt bx, 8
mov ecx, 0x60
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x7f
bt bx, 8
mov ecx, 0x83
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, pe_nt_image_headers64
and bx, ax
neg bx
sbb eax, eax
and eax, 0x72
add rsp, 0x20
pop rbx
ret
mov eax, 0x12
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 3
bt bx, 8
mov ecx, 0x78
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 5
bt bx, 8
mov ecx, 0x8e
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 6
bt bx, 8
mov ecx, 0x7b
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 7
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 9
bt bx, 8
mov ecx, 0x7c
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0xa
add rsp, 0x20
pop rbx
ret
mov eax, 0xb
add rsp, 0x20
pop rbx
ret
mov eax, 0x2e
add rsp, 0x20
pop rbx
ret
mov eax, 0x2f
add rsp, 0x20
pop rbx
ret
mov eax, 0x30
add rsp, 0x20
pop rbx
ret
mov eax, 0x80
add rsp, 0x20
pop rbx
ret
mov eax, 0x2d
add rsp, 0x20
pop rbx
ret
mov eax, 0x19
add rsp, 0x20
pop rbx
ret
mov eax, 0x17
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 2
bt bx, 8
mov ecx, 0x7a
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x15
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 1
bt bx, 8
mov ecx, 0x79
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0xd
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0xc
bt bx, 8
mov ecx, 0x8d
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x31
add rsp, 0x20
pop rbx
ret
mov eax, 0x32
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x33
bt bx, 8
mov ecx, 0x5b
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x84
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x5c
bt bx, 8
mov ecx, 0x4d
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, pe_nt_image_headers64
and eax, ebx
or eax, 0x2040
shr eax, 6
add rsp, 0x20
pop rbx
ret
mov eax, 0x28
add rsp, 0x20
pop rbx
ret
mov eax, 0x4c
add rsp, 0x20
pop rbx
ret
mov eax, 0x34
add rsp, 0x20
pop rbx
ret
mov eax, 0x35
add rsp, 0x20
pop rbx
ret
mov eax, 0x36
add rsp, 0x20
pop rbx
ret
mov eax, 0x37
add rsp, 0x20
pop rbx
ret
mov eax, 0x38
add rsp, 0x20
pop rbx
ret
mov eax, 0x39
add rsp, 0x20
pop rbx
ret
mov eax, 0x3a
add rsp, 0x20
pop rbx
ret
mov eax, 0x3b
add rsp, 0x20
pop rbx
ret
mov eax, 0x3c
add rsp, 0x20
pop rbx
ret
mov eax, 0x3d
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x4f
bt bx, 8
mov ecx, 0x5a
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x4e
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x68
bt bx, 8
mov ecx, 0x51
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x69
bt bx, 8
mov ecx, 0x59
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x6a
bt bx, 8
mov ecx, 0x52
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x5d
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x65
bt bx, 8
mov ecx, 0x57
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x66
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x67
bt bx, 8
mov ecx, 0x56
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x5e
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x62
bt bx, 8
mov ecx, 0x54
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x63
bt bx, 8
mov ecx, 0x58
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x64
bt bx, 8
mov ecx, 0x55
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x6b
bt bx, 8
mov ecx, 0x50
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x61
bt bx, 8
mov ecx, 0x53
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x6c
add rsp, 0x20
pop rbx
ret
mov eax, 0x3e
add rsp, 0x20
pop rbx
ret
mov eax, 0x3f
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0xffffffff
bt bx, 8
mov ecx, 0x82
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0xffffffff
bt bx, 8
mov ecx, 0x86
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0xffffffff
bt bx, 8
mov ecx, 0x71
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0xffffffff
bt bx, 8
mov ecx, 0x70
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x40
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x41
bt bx, 8
mov ecx, 0x8b
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x42
bt bx, 8
mov ecx, 0x8c
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x43
bt bx, 8
mov ecx, 0x89
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x44
bt bx, 8
mov ecx, 0x8a
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x45
bt bx, 8
mov ecx, 0x88
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x46
bt bx, 8
mov ecx, 0x87
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x47
bt bx, 8
mov ecx, 0x8e
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x48
bt bx, 8
mov ecx, 0x90
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
shr rbx, 0x10
mov eax, 0x49
bt bx, 8
mov ecx, 0x91
cmovb eax, ecx
add rsp, 0x20
pop rbx
ret
mov eax, 0x4a
add rsp, 0x20
pop rbx
ret
mov eax, 0x4b
add rsp, 0x20
pop rbx
ret
mov eax, 0xffffffff
add rsp, 0x20
pop rbx
ret