Function at 0x14001c4c0
Capabilities:
Log keystrokes

Disassembly:
push rbx
sub rsp, 0x20
movzx ebx, cx
mov eax, ebx
cmp ebx, 0x11c
ja 0x14001c59e
je 0x14001c596
sub eax, 0x1d
cmp eax, 0x36
ja case.0x14001c5c3.286
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x1c694]
mov ecx, dword [rdx + rax*4 + 0x1c648]
add rcx, rdx
jmp rcx
mov al, 0xa0
add rsp, 0x20
pop rbx
ret
mov al, 0xa2
add rsp, 0x20
pop rbx
ret
mov al, 0xa4
add rsp, 0x20
pop rbx
ret
mov al, 0x6a
add rsp, 0x20
pop rbx
ret
mov al, 0x6d
add rsp, 0x20
pop rbx
ret
mov al, 0x6b
add rsp, 0x20
pop rbx
ret
mov al, 0x2e
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
add rsp, 0x20
pop rbx
ret
mov al, 0x2d
add rsp, 0x20
pop rbx
ret
mov al, 0x26
add rsp, 0x20
pop rbx
ret
mov al, 0x28
add rsp, 0x20
pop rbx
ret
mov al, 0x25
add rsp, 0x20
pop rbx
ret
mov al, 0x27
add rsp, 0x20
pop rbx
ret
mov al, 0x24
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_SafeArrayAllocDescriptor
add rsp, 0x20
pop rbx
ret
mov al, 0x21
add rsp, 0x20
pop rbx
ret
mov al, SafeArrayAllocDescriptor
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_SafeArrayGetLBound
add rsp, 0x20
pop rbx
ret
mov al, 0xd
add rsp, 0x20
pop rbx
ret
sub eax, 0x11d
cmp eax, 0x40
ja case.0x14001c5c3.286
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x1c6f4]
mov ecx, dword [rdx + rax*4 + 0x1c6cc]
add rcx, rdx
jmp rcx
mov al, 0xa1
add rsp, 0x20
pop rbx
ret
mov al, 0xa3
add rsp, 0x20
pop rbx
ret
mov al, 0xa5
add rsp, 0x20
pop rbx
ret
mov al, 0x5b
add rsp, 0x20
pop rbx
ret
mov al, 0x5c
add rsp, 0x20
pop rbx
ret
mov al, 0x90
add rsp, 0x20
pop rbx
ret
mov al, 0x6f
add rsp, 0x20
pop rbx
ret
mov al, 0x5d
add rsp, 0x20
pop rbx
ret
mov al, 0x2c
add rsp, 0x20
pop rbx
ret
bt bx, 8
jae 0x14001c62c
movzx ecx, bl
mov edx, 1
or ecx, 0xe000
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
test eax, eax
jne 0x14001c640
movzx ecx, bl
mov edx, 1
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_MapVirtualKeyW]
add rsp, 0x20
pop rbx
ret
movabs byte [0x4728b182871483c0], al
cli
xor cl, 0x52
add edx, dword [rax - 0x15]
scasq rax, qword [rdi]
mov eax, 0x723c8952
cmp al, 0x72
retf
enter 0xffffffffffff9c21, 0xffffffffffffffb3
cdq
movabs dword [0xaf88baa4e03d9cd9], eax
jge 0x1401f0553
cmp edi, esi
jb 0x1401f0568
mov ecx, 0x1853ae67
invalid
sbb byte [rdi], bl
rcr dword [rdi + 0x20c893bf], 1
int 0x67
invalid
lahf
retf 0xf011
xor esi, dword [rcx + 0x144b3637]
lea ebx, [rdx]
sar byte [rbx], cl
xor ecx, dword ss:[rbp + 0x5cb1ecb9]
xor dword [rcx + 0xc24bfb], 0x7f688d6c
and al, 0xcd
int1
shl byte [rcx - 0x52f90031], 1
sub r9d, dword [r9 + 0x18]
jae 0x1401f0572
invalid
mov bh, 0xf0
test dword [rdx], edi
sub dh, byte [rsi + 0x4c306590]
sbb dword [rsp + rsi*2], edi
je 0x1401f06a4
mov ebp, 0x277ee8aa
add dl, byte [rbp + 0x1c]
pop rsi
je 0x1401f06a4
mov ebp, 0x277ee8aa
add dl, byte [rbp + 0x1c]
pop rsi
and bh, byte [rax]
invalid
jne 0x1401f068a
stc
invalid
cmp r10d, dword [rcx + riz*4]
fidiv dword [rbx - 0x3f]
retf
out 0x6a, al
xor al, 0xa
mov byte [rsi - 0x40f4ead4], bl
cwde
invalid
jno 0x1401f0753
jge 0x1401f0747
hlt
xlatb
jp 0x1401f0795
invalid
out dx, eax
imul edx, dword [rax + 0x25], 0xffffffe5
cmp byte [rax + 0x15], cl
push r8
in eax, dx
test al, 0x7c
adc eax, 0x7eeacc67
nop
xchg esp, eax
push rsp
out dx, eax
rcl byte [rbx + rdx]
or al, 0xc3
int3
and byte [rbp + r10*8 + 0x78], 0x6d
sbb al, 0x9e
mov bh, 0xc3
invalid
lea edi, [rbx - 0x13e349d6]
movabs byte [0x4fb4e265290211ef], al
neg byte [rbx - 0x571435fa]
mov bl, 0x1c
mov bh, 0xcc
pop rbp
stosb byte [rdi], al
sub eax, ebx
mov ah, 0x5d
and eax, 0xee10b4f
outsd dx, dword [rsi]
mov esi, 0xb40cd8fc
push rcx
nop
pushfq
or ebx, ebx
movabs byte [0xba97d3a27b512414], al
imul edi, dword [rbp + rbp*2 - 0x3d1e7f8f], 0xbde50e3f
invalid