Function at 0x180024f70
Capabilities:
Log keystrokes

Disassembly:
lea eax, [rcx - 0x10]
cmp eax, 0x94
ja case.0x180024f99.19
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0x250b8]
mov edx, dword [r8 + rax*4 + 0x25048]
add rdx, r8
jmp rdx
mov eax, 0xcb
ret
mov eax, 0xcd
ret
mov eax, 0xc8
ret
mov eax, 0xd0
ret
mov eax, 0x3b
ret
mov eax, 0x3c
ret
mov eax, 0x3d
ret
mov eax, 0x3e
ret
mov eax, 0x3f
ret
mov eax, 0x40
ret
mov eax, 0x41
ret
mov eax, 0x42
ret
mov eax, 0x43
ret
mov eax, 0x44
ret
mov eax, 0x57
ret
mov eax, 0x58
ret
mov eax, 0x1d
ret
mov eax, 0x38
ret
mov eax, 0x2a
ret
mov eax, 0xd1
ret
mov eax, 0xc9
ret
mov eax, 0xc7
ret
mov eax, 0xcf
ret
mov eax, 0xd2
ret
mov eax, 0xd3
ret
mov eax, 0xb5
ret
mov eax, 0xdd
ret
xor edx, edx
jmp qword [sym.imp.USER32.dll_MapVirtualKeyA]
add al, byte [rax]
lodsb al, byte [rsi]
add al, 0
nop
jne 0x180080e65
add byte [rax + 0x77], ch
ja 0x180080e69
add al, byte [rax]
mov eax, 0x448
add byte [rax + 0x448], bh
add al, 0
add byte [rax + 2], bh
js 0x180080e71
add byte [rsi - 0x3ffffd88], ah
js 0x180080e75
add al, byte [rax]
ror byte [rax + 4], 0
add al, al
add al, 0
mov al, 0x78
add al, byte [rax]
in eax, dx
js 0x180080e81
add al, dl
add al, 0
add byte [rcx + 2], bh
add al, byte [rax]
cmp eax, 0xdc000279
add al, byte [rax]
cmp eax, 0xdc000279
add al, 0
push rax
jns 0x180080e95
invalid
add al, byte [rax]
in eax, 0x7a
add al, byte [rax]
call 0x1700812e5
jp 0x180080ea1
add ch, ah
jp 0x180080e99
add al, ch
add al, 0
invalid
add byte [0x178081125], dh
add byte [rdx], 0
clc
add al, 0
add byte [rdx], 0
retf 0x280
invalid
add al, byte [rax]
lodsb al, byte [rsi]
add al, 0
rol byte [rax - 0x7efdfffe], 1
add al, byte [rax]
add al, 0
and byte [rcx - 0x7df2fffe], al
add al, byte [rax]
enter 0x44a, 0
or eax, 0x4d000282
invalid
add al, byte [rax]
fmul qword [rdx + 4]
add byte [rbp - 0x7e], cl
add al, byte [rax]
invalid
add al, byte [rax]
mov ebp, 0x282
add al, 0
mov ebp, 0x46000282
add dword [rdx], 0
adc al, 0x4b
add al, 0
push rax
add dword [rdx], 0
ret 0x288
loopne case.0x18002503f.28
add al, byte [rax]
and eax, 0x54000289
add al, 0
xor byte [rcx - 0x7594fffe], cl
add al, byte [rax]
pop rsp
add al, 0
or byte [rdx - 0x752dfffe], 2
add byte [rax + 0x4c], dh
add al, 0
add byte [rbx - 0x746dfffe], cl
add al, byte [rax]
jl 0x180080f82
add al, 0
movabs al, byte [0x8400028d0000028b]
add al, 0
add al, 0
add al, 0
adc byte [rbp - 0x726afffe], cl
add al, byte [rax]
xchg esp, eax
add al, 0
movabs al, byte [0x9c000292f500028d]
cmc
xchg edx, eax
add al, byte [rax]
pushfq
cmc
xchg edx, eax
add al, byte [rax]
pushfq
add al, 0
add byte [rbx - 0x65cdfffe], dl
add al, byte [rax]
mov ah, 0x4c
add al, 0
invalid
add al, byte [rax]
call 0x1e20813cd
movabs al, byte [0x4cfc000309830002]
add al, 0
add al, byte [rax]
or dword [rcx], 3
add ah, bh
add al, 0
nop
or dword [rbx], eax
add al, ah
add r8d, dword [r8]
adc al, 0x4d
add al, 0
lock add r8d, dword [r8]
adc al, 0x46
add eax, dword [rax]
sub al, 0x4d
add al, 0
and byte [rsi + 3], al
add byte [rdi + 0x46], dh
add eax, dword [rax]
xor al, 0x4d
add al, 0
add byte [rsi + 3], 0
xlatb
add r8d, dword [rax]
add al, 0
loopne 0x180081004
add eax, dword [rax]
cmp eax, 0x54000347
add al, 0
push rax
add r8d, dword [r8]
lodsd eax, dword [rsi]
add r8d, dword [r8]
add al, 0
loopne 0x18008101d
add eax, dword [rax]
jae 0x180081022
add eax, dword [rax]
je 0x18008102b
add al, 0
or byte [rax + 3], 0
adc ecx, dword [rcx + 3]
add byte [rbp + rcx*2 + 4], bh
add byte [rax], ah
add rax, qword [r8]
mov bl, 0x49
add eax, dword [rax]
test byte [rbp + 4], cl
add al, al
add rax, qword [r8]
sbb eax, 0x8c00034a
add al, 0
xor byte [rdx + 3], cl
add bl, al
add rax, qword [rax]
pushfq
add al, 0
ror byte [rdx + 3], 1
add ah, dl
add rax, qword [r8]
movsb byte [rdi], byte [rsi]
add al, 0
loopne 0x180081069
add rax, qword [r8]
add eax, dword [rax]
mov dh, 0x55
add eax, dword [rax]
mov ah, 0x4d
add al, 0
rcl byte [rbp + 3], 0
push r14
add byte [rcx + 0x56], cl
add eax, dword [rax]
int3
pop rbp
add eax, dword [rax]
and byte [rsi + 4], cl
add byte [rbx - 0x3ffffca3], dl
invalid
test al, 0x4f
add al, 0
nop
ja 0x180081166
add cl, dh
js 0x18008116a
add eax, dword [rax]
push rax
add al, 0
add byte [rax + 0x26], dl
add al, 0
hlt