Function at 0x14011d360
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, r8
lea r10, [0x140000000]
movzx r8d, cx
xor ebx, ebx
mov ecx, r8d
mov r9, rdx
mov eax, ebx
nop dword [rax]
nop word [rax + rax]
lea rdx, [rax*8]
cmp dword [rdx + r10 + 0x378580], ecx
je 0x14011d674
inc rax
cmp rax, 0x4d
jb 0x14011d390
lea eax, [r8 - 0xd]
cmp eax, 0xd5
ja case.0x14011d3d4.25
cdqe
movzx eax, byte [r10 + rax + 0x11d6cc]
mov edx, dword [r10 + rax*4 + 0x11d698]
add rdx, r10
jmp rdx
mov edx, 2
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov ecx, eax
shr rax, 0x10
test ax, ax
cmovs ecx, ebx
test rdi, rdi
je 0x14011d3f5
mov word [rdi], cx
cmp ecx, 0xff
cmovle ebx, ecx
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d42e
shr r9, 0x10
bt r9w, 8
jb 0x14011d42e
mov ebx, 0x17c
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x16e
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d463
shr r9, 0x10
bt r9w, 8
jb 0x14011d463
mov ebx, 0x17d
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x16f
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d498
shr r9, 0x10
bt r9w, 8
jb 0x14011d498
mov ebx, 0x17e
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x138
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d4cd
shr r9, 0x10
bt r9w, 8
jb 0x14011d4cd
mov ebx, 0x177
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x139
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d502
shr r9, 0x10
bt r9w, 8
jb 0x14011d502
mov ebx, 0x178
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x13a
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d537
shr r9, 0x10
bt r9w, 8
jb 0x14011d537
mov ebx, 0x179
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x13b
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d56c
shr r9, 0x10
bt r9w, 8
jb 0x14011d56c
mov ebx, 0x17a
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x13c
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d5a1
shr r9, 0x10
bt r9w, 8
jb 0x14011d5a1
mov ebx, 0x17b
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x13d
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r9d, r9d
je 0x14011d5d6
shr r9, 0x10
bt r9w, 8
jb 0x14011d5d6
mov ebx, 0x180
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ebx, 0x142
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov ecx, 0x7f
test r9d, r9d
je 0x14011d603
shr r9, 0x10
mov ebx, 0x181
bt r9w, 8
jae 0x14011d605
mov ebx, ecx
test rdi, rdi
je 0x14011d667
mov word [rdi], cx
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
shr r9, 0x10
mov edx, reloc.WS2_32.dll_listen
bt r9w, 8
mov ebx, edx
mov ecx, 0x172
cmovb ebx, ecx
test rdi, rdi
je 0x14011d667
mov word [rdi], dx
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
lea eax, [r8 - 0x30]
cmp ax, 9
jbe 0x14011d65c
lea eax, [r8 - 0x41]
cmp ax, 0x19
ja 0x14011d65e
mov ebx, ecx
test rdi, rdi
je 0x14011d667
mov word [rdi], r8w
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov eax, dword [rdx + r10 + 0x378584]
cmp eax, 0x12c
jge 0x14011d68b
test rdi, rdi
je 0x14011d68b
mov word [rdi], ax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret