Function at 0x140025710
Capabilities:
Log keystrokes

Disassembly:
push rbx
sub rsp, 0x20
movzx ebx, cx
mov eax, ebx
cmp ebx, 0x11c
ja 0x1400257ee
je 0x1400257e6
sub eax, 0x1d
cmp eax, 0x36
ja case.0x140025813.286
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x258e4]
mov ecx, dword [rdx + rax*4 + 0x25898]
add rcx, rdx
jmp rcx
mov al, 0xa0
add rsp, 0x20
pop rbx
ret
mov al, 0xa2
add rsp, 0x20
pop rbx
ret
mov al, 0xa4
add rsp, 0x20
pop rbx
ret
mov al, 0x6a
add rsp, 0x20
pop rbx
ret
mov al, 0x6d
add rsp, 0x20
pop rbx
ret
mov al, 0x6b
add rsp, 0x20
pop rbx
ret
mov al, 0x2e
add rsp, 0x20
pop rbx
ret
mov al, reloc.WSOCK32.dll_ioctlsocket
add rsp, 0x20
pop rbx
ret
mov al, 0x2d
add rsp, 0x20
pop rbx
ret
mov al, 0x26
add rsp, 0x20
pop rbx
ret
mov al, 0x28
add rsp, 0x20
pop rbx
ret
mov al, 0x25
add rsp, 0x20
pop rbx
ret
mov al, 0x27
add rsp, 0x20
pop rbx
ret
mov al, 0x24
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_SafeArrayAllocDescriptor
add rsp, 0x20
pop rbx
ret
mov al, 0x21
add rsp, 0x20
pop rbx
ret
mov al, SafeArrayAllocDescriptor
add rsp, 0x20
pop rbx
ret
mov al, reloc.WSOCK32.dll_send
add rsp, 0x20
pop rbx
ret
mov al, 0xd
add rsp, 0x20
pop rbx
ret
sub eax, 0x11d
cmp eax, 0x40
ja case.0x140025813.286
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x25944]
mov ecx, dword [rdx + rax*4 + 0x2591c]
add rcx, rdx
jmp rcx
mov al, 0xa1
add rsp, 0x20
pop rbx
ret
mov al, 0xa3
add rsp, 0x20
pop rbx
ret
mov al, 0xa5
add rsp, 0x20
pop rbx
ret
mov al, 0x5b
add rsp, 0x20
pop rbx
ret
mov al, 0x5c
add rsp, 0x20
pop rbx
ret
mov al, 0x90
add rsp, 0x20
pop rbx
ret
mov al, reloc.WSOCK32.dll_WSAGetLastError
add rsp, 0x20
pop rbx
ret
mov al, 0x5d
add rsp, 0x20
pop rbx
ret
mov al, 0x2c
add rsp, 0x20
pop rbx
ret
bt bx, 8
jae 0x14002587c
movzx ecx, bl
mov edx, 1
or ecx, 0xe000
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
test eax, eax
jne 0x140025890
movzx ecx, bl
mov edx, 1
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_MapVirtualKeyW]
add rsp, 0x20
pop rbx
ret
sbb eax, 0xdda8c995
invalid
pop rsp
invalid
test bl, bl
xor eax, 0x4c21c4e7
out dx, eax
mov ch, 0x6b
sbb ebx, esp
fbstp tbyte [rsi]
mov al, 0xab
loop 0x140272652
jmp 0xde489730
cmpsb byte ds:[rsi], byte [rdi]
invalid
lea edx, [rsp + rax*2]
pop rsp
ror byte [rdi - 0x3e], cl
invalid
invalid
js 0x140272608
invalid
in al, 0xc5
insb byte [rdi], dx
or byte [rax + 0x8e0daed], al
jmp 0xe2de60b9
popfq
and al, 0xf7
cdq
xchg ebx, eax
cmc
jnp 0x140272665
xor byte [rcx + rcx - 0x56679f34], ah
cmp bl, byte [rax - 0x79ddedcb]
xchg byte [rbp + 0x24c8c589], dl
scasd eax, dword [rdi]
xchg dword [rcx], edx
mov eax, 0x5eac837a
pop rsi
xchg byte [rbp + 0x24c8c589], dl
scasd eax, dword [rdi]
xchg dword [rcx], edx
mov eax, 0x5eac837a
pop rsi
je 0x140272725
je 0x14027264f
popfq
in al, dx
fistp word [rsi - 0x65]
int 9
xchg esp, eax
int 0x63
sbb ch, byte [rbx]
xchg edi, eax
int3
imul ebp, dword [rdi - 0x5682b141], 0x21
stosb byte [rdi], al
adc byte [rsi - 0x71], al
shr byte [rdx + 0x25abfc57], 0xb1
sbb edx, edi
or al, 0x40
sub ah, byte [rcx + riz*4]
push r10
add eax, 0x66723d5b
fistp qword [rbx - 0x63]
jae 0x140272740
add al, 0xa
enter 0x1758, 0x3c
xchg esi, eax
xchg esi, eax
xor dword [rax - 0x7beee542], edi
xchg edx, eax
xchg ecx, eax
pushfq
movsd dword [rdi], dword [rsi]
push rbx
jg 0x1402727af
xchg r13, rax
and dword [rdx + riz*8], ebp
xlatb
mov bh, 0xdf
invalid
test dword [0x16cac0dbe], ecx
xchg esi, eax
adc esp, dword [rbp - 0x1cc41544]
pop rbp
mov r11b, 0xa4
mov edx, 0xb0869ead
xchg ebp, eax
invalid