Function at 0x5fed40
Capabilities:
Log keystrokes

Disassembly:
mov edx, dword [esp + 0xc]
push ebx
mov ebx, dword [esp + 8]
push ebp
mov ebp, dword [esp + 0x10]
mov dword [ebx], 0x420
lea eax, [edx - 8]
mov ecx, edx
cmp eax, 0x89
ja case.0x5fed64.10
jmp dword [eax*4 + 0x6d66bc]
cmp dword [0x7f3c60], 1
jne 0x5ff16a
mov dword [ebx], 0x418
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fed90
mov al, 1
jmp 0x5fed92
xor al, al
test al, al
je 0x5feda1
mov dword [ebx], 0x40f
jmp 0x5ff16a
mov dword [ebx], 0x415
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fedc0
mov al, 1
jmp 0x5fedc2
xor al, al
test al, al
je 0x5fedd1
mov dword [ebx], 0x41a
jmp 0x5ff16a
mov dword [ebx], 0x419
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fedf0
mov al, 1
jmp 0x5fedf2
xor al, al
test al, al
je 0x5fee01
mov dword [ebx], 0x41c
jmp 0x5ff16a
mov dword [ebx], 0x41b
jmp 0x5ff16a
mov dword [ebx], 0x41f
jmp 0x5ff16a
mov dword [ebx], 0x411
jmp 0x5ff16a
mov dword [ebx], 0x414
jmp 0x5ff16a
mov dword [ebx], 0x3e8
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fee45
mov al, 1
jmp 0x5fee47
xor al, al
test al, al
je 0x5fee56
mov dword [ebx], 0x3f9
jmp 0x5ff16a
mov dword [ebx], 0x40d
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fee70
mov al, 1
jmp 0x5fee72
xor al, al
test al, al
je 0x5fee81
mov dword [ebx], 0x3fa
jmp 0x5ff16a
mov dword [ebx], 0x406
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5feea0
mov al, 1
jmp 0x5feea2
xor al, al
test al, al
je 0x5feeb1
mov dword [ebx], 0x3f8
jmp 0x5ff16a
mov dword [ebx], 0x404
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5feed0
mov al, 1
jmp 0x5feed2
xor al, al
test al, al
je 0x5feee1
mov dword [ebx], 0x3f7
jmp 0x5ff16a
mov dword [ebx], 0x40b
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fef00
mov al, 1
jmp 0x5fef02
xor al, al
test al, al
je 0x5fef11
mov dword [ebx], 0x3fd
jmp 0x5ff16a
mov dword [ebx], 0x407
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fef30
mov al, 1
jmp 0x5fef32
xor al, al
test al, al
je 0x5fef41
mov dword [ebx], 0x3fb
jmp 0x5ff16a
mov dword [ebx], 0x40c
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fef60
mov al, 1
jmp 0x5fef62
xor al, al
test al, al
je 0x5fef71
mov dword [ebx], 0x3fe
jmp 0x5ff16a
mov dword [ebx], 0x40a
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fef90
mov al, 1
jmp 0x5fef92
xor al, al
test al, al
je 0x5fefa1
mov dword [ebx], 0x3fc
jmp 0x5ff16a
mov dword [ebx], 0x405
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5fefc0
mov al, 1
jmp 0x5fefc2
xor al, al
test al, al
je 0x5fefd1
mov dword [ebx], 0x3f5
jmp 0x5ff16a
mov dword [ebx], 0x40e
jmp 0x5ff16a
mov eax, ebp
and eax, 0x1000000
je 0x5feff0
mov al, 1
jmp 0x5feff2
xor al, al
test al, al
je 0x5ff001
mov dword [ebx], 0x3f6
jmp 0x5ff16a
mov dword [ebx], 0x403
jmp 0x5ff16a
mov dword [ebx], 0x41d
jmp 0x5ff16a
mov dword [ebx], 0x41e
jmp 0x5ff16a
mov dword [ebx], 0x40e
jmp 0x5ff16a
mov dword [ebx], 0x404
jmp 0x5ff16a
mov dword [ebx], 0x405
jmp 0x5ff16a
mov dword [ebx], 0x406
jmp 0x5ff16a
mov dword [ebx], 0x407
jmp 0x5ff16a
mov dword [ebx], 0x408
jmp 0x5ff16a
mov dword [ebx], 0x40a
jmp 0x5ff16a
mov dword [ebx], 0x40b
jmp 0x5ff16a
mov dword [ebx], 0x40c
jmp 0x5ff16a
mov dword [ebx], 0x40d
jmp 0x5ff16a
mov dword [ebx], 0x400
jmp 0x5ff16a
mov dword [ebx], 0x3ff
jmp 0x5ff16a
mov dword [ebx], 0x401
jmp 0x5ff16a
mov dword [ebx], 0x402
jmp 0x5ff16a
mov dword [ebx], 0x403
jmp 0x5ff16a
mov dword [ebx], 0x3e9
jmp 0x5ff16a
mov dword [ebx], 0x3ea
jmp 0x5ff16a
mov dword [ebx], 0x3eb
jmp 0x5ff16a
mov dword [ebx], 0x3ec
jmp 0x5ff16a
mov dword [ebx], 0x3ed
jmp 0x5ff16a
mov dword [ebx], 0x3ee
jmp 0x5ff16a
mov dword [ebx], 0x3ef
jmp 0x5ff16a
mov dword [ebx], 0x3f0
jmp 0x5ff16a
mov dword [ebx], 0x3f1
jmp 0x5ff16a
mov dword [ebx], 0x3f2
jmp 0x5ff16a
mov dword [ebx], 0x3f3
jmp 0x5ff16a
mov dword [ebx], 0x3f4
jmp 0x5ff16a
mov dword [ebx], 0x409
jmp 0x5ff16a
mov dword [ebx], 0x410
jmp 0x5ff16a
mov dword [ebx], 0x412
jmp 0x5ff16a
mov dword [ebx], 0x413
jmp 0x5ff16a
push 2
push edx
call dword [sym.imp.user32.dll_MapVirtualKeyA]
and eax, 0xffff
movzx eax, ax
cmp eax, 0xff
jge 0x5ff16a
mov dword [ebx], eax
cmp dword [ebx], 0x420
jne 0x5ff177
xor al, al
pop ebp
pop ebx
ret
mov al, 1
pop ebp
pop ebx
ret