Function at 0x14001c8a0
Capabilities:
Log keystrokes

Disassembly:
push rbx
sub rsp, 0x20
movzx ebx, cx
mov eax, ebx
cmp ebx, 0x11c
ja 0x14001c97e
je 0x14001c976
sub eax, 0x1d
cmp eax, 0x36
ja case.0x14001c9a3.286
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x1ca74]
mov ecx, dword [rdx + rax*4 + 0x1ca28]
add rcx, rdx
jmp rcx
mov al, 0xa0
add rsp, 0x20
pop rbx
ret
mov al, 0xa2
add rsp, 0x20
pop rbx
ret
mov al, 0xa4
add rsp, 0x20
pop rbx
ret
mov al, 0x6a
add rsp, 0x20
pop rbx
ret
mov al, 0x6d
add rsp, 0x20
pop rbx
ret
mov al, 0x6b
add rsp, 0x20
pop rbx
ret
mov al, 0x2e
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
add rsp, 0x20
pop rbx
ret
mov al, 0x2d
add rsp, 0x20
pop rbx
ret
mov al, 0x26
add rsp, 0x20
pop rbx
ret
mov al, 0x28
add rsp, 0x20
pop rbx
ret
mov al, 0x25
add rsp, 0x20
pop rbx
ret
mov al, 0x27
add rsp, 0x20
pop rbx
ret
mov al, 0x24
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_SafeArrayAllocDescriptor
add rsp, 0x20
pop rbx
ret
mov al, 0x21
add rsp, 0x20
pop rbx
ret
mov al, SafeArrayAllocDescriptor
add rsp, 0x20
pop rbx
ret
mov al, reloc.OLEAUT32.dll_SafeArrayGetLBound
add rsp, 0x20
pop rbx
ret
mov al, 0xd
add rsp, 0x20
pop rbx
ret
sub eax, 0x11d
cmp eax, 0x40
ja case.0x14001c9a3.286
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x1cad4]
mov ecx, dword [rdx + rax*4 + 0x1caac]
add rcx, rdx
jmp rcx
mov al, 0xa1
add rsp, 0x20
pop rbx
ret
mov al, 0xa3
add rsp, 0x20
pop rbx
ret
mov al, 0xa5
add rsp, 0x20
pop rbx
ret
mov al, 0x5b
add rsp, 0x20
pop rbx
ret
mov al, 0x5c
add rsp, 0x20
pop rbx
ret
mov al, 0x90
add rsp, 0x20
pop rbx
ret
mov al, 0x6f
add rsp, 0x20
pop rbx
ret
mov al, 0x5d
add rsp, 0x20
pop rbx
ret
mov al, 0x2c
add rsp, 0x20
pop rbx
ret
bt bx, 8
jae 0x14001ca0c
movzx ecx, bl
mov edx, 1
or ecx, 0xe000
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
test eax, eax
jne 0x14001ca20
movzx ecx, bl
mov edx, 1
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_MapVirtualKeyW]
add rsp, 0x20
pop rbx
ret
jmp 0x11a9c847a
cmp rax, 0x7f024475
xchg dword [rbx], edx
clc
sbb esp, dword [rdx - 0x638dbb0b]
mov edi, 0xb443258f
ror bl, cl
mov bh, 0xf4
push rdx
invalid
sub al, 0x58
clc
jne 0x14024933f
mov edi, 0x8dbc8d35
mov ch, 0xbc
movabs rdi, 0x9e928c864256fba0
xchg byte [rdx + rdx*4 - 0x367a2362], cl
invalid
invalid
popfq
cwde
jrcxz 0x14024935f
xchg byte [rdx + rdx*4 - 0x367a2362], cl
fstp dword es:[rbp - 0x1bb11c68]
cwde
in al, 0x98
sbb dword [rdx + rbp*4], 0x1b022ef9
add bl, byte [rbx]
fidiv word [rbx - 9]
sub dword [rdx - 0x22], edx
xor al, 0xcf
cmc
mov al, 0x5c
jno 0x1402492b6
push rcx
sub al, 0x81
pop rcx
and eax, 0xcd7e1ab3
out dx, al
sub qword [rax + rbp*2], r15
loopne 0x140249382
int 0x5f
jmp 0x16ebdd99d
xchg byte cs:[r13 - 0x65a6886e], r13b
adc al, 0x9d
and edx, esp
pushfq
mov bh, 0xdd
invalid
cwde
mov ebx, 0xb7f398a0
jb 0x140249398
fdivp st(6)
xor al, 0x52
mov ah, 0x64
enter 0xffffffffffff97d6, 0x76
jbe 0x1402493b5
and eax, 0xf86c82c6
jbe 0x1402493b5
and eax, 0xf86c82c6
invalid
push rcx
xchg edx, eax
sbb al, 0x77
cmp ebx, dword [rcx]
mov ch, 0
xor eax, 0x7baa1076
pop rdx
adc ecx, dword [rsi]
xchg esp, eax
invalid
mov eax, 0xcf766d23
mov ah, 0xea
movabs al, byte [0xdffc1bf2774c9f03]
movabs al, byte [0xdffc1bf2774c9f03]
cmpsd dword [rsi], dword [rdi]
sbb r11b, r9b
add dword [0x1a51c59ee], ebp
sub byte [rdx + 0x69], ch
outsb dx, byte [rsi]
int3
imul ebp, dword [rsi - 0x34], 0xce6c3e31
enter 0xffffffffffffdca7, 0x50
out 0x13, al
xchg ebx, eax
sal dword [rdi + rbp*4 - 0x35], cl
jns 0x1402493a0
or ebp, dword [rdi - 0x3e589c35]
hlt
imul esi, dword [rcx], 0xe28dc5b5
sub dword [rsi + 0x729e8ca7], esp
jp 0x140249732
invalid
int3