Function at 0x14003c670
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x40
mov edx, 0xfffffff0
mov rbx, rcx
call qword [sym.imp.USER32.dll_GetWindowLongW]
bt eax, 0x1d
jae 0x14003c6af
mov edx, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_UpdateWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
cmp edi, eax
je 0x14003c6de
mov r8d, 1
mov edx, eax
mov ecx, edi
call qword [sym.imp.USER32.dll_AttachThreadInput]
xor ebp, ebp
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebp
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebp
mov rcx, rbx
lea rdx, [rbp - 1]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 3
lea rdx, [rbp - 2]
mov dword [rsp + 0x28], ebp
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], ebp
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
cmp edi, esi
je case.default.0x14003c75d
xor r8d, r8d
mov edx, esi
mov ecx, edi
call qword [sym.imp.USER32.dll_AttachThreadInput]
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 1]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
jmp qword [sym.imp.USER32.dll_InvalidateRect]
push rsp
loopne 0x1407748da
and ebx, dword [rsp + rcx - 0x255c1400]
clc
mov cl, 0x4b
invalid
add bl, byte [rdx - 0x56]
and al, 0xc1
and dword [rdi + 0x78], eax
movabs byte [0xbb839459013396b8], al
invalid
add cl, dh
add bl, al
movabs byte [0x9b0d00ee55cb24a3], al
push 0x3dce09f9
or esi, ecx
cmp eax, 0x1921722a
xchg dword [rsi], edi
stosd dword [rdi], eax
cmp dword [rbx - 0x30], edx
invalid
or esi, ecx
cmp eax, 0x1921722a
xchg dword [rsi], edi
stosd dword [rdi], eax
cmp dword [rbx - 0x30], edx
rcl byte [rdi], 1
invalid
invalid
invalid
wait
xor dword [rcx - 0x7ed541b6], ebx
cdq
invalid
mov esi, 0x6483812a
and al, 0x8f
invalid
cdq
movabs rsi, 0x6cd38f246483812a
insb byte [rdi], dx
sti
test eax, 0x733d0feb
jae 0x1407748e6
invalid
mul dword [rcx]
sbb byte [rsi - 0x3eabcc7c], bh
push rsp
rcl ebx, 0x90
and ch, byte [rbx]
or dh, dh
enter 0xfffffffffffff75c, 0x77
test eax, 0xe118aa47
loope 0x14077490a
je 0x14077498c
invalid
in al, dx
and al, 0x89
lodsb al, byte [rsi]
sub dword [rdx + 0x48c8e9e6], eax
invalid
invalid
and dh, byte [rdx + 0xa]
jb case.0x14003c75d.3
std
fmul st(5)
sahf
invalid
invalid
mov bl, 0xfd
xchg esi, eax
imul edx, dword [rsi + 0x22db77a2], 0x98bf2b57
and dl, byte [rdi + 0x2b]
invalid
cwde
lodsd eax, dword [rsi]
push rsi
invalid
sbb eax, 0xb838c186
mov esi, 0x938fee7b
in al, 0x69
out 2, eax
invalid
pop rbp
or dword [rdx - 0x5de33553], edx
pcmpeqw mm3, mm1
xchg edi, eax
invalid
push 0xffffffff9fe1ce98
popfq
sub ebx, dword [rsi - 0x5b69357]
mov dl, 9
sub dword [rsi], ecx
invalid
add eax, 0xf1c7672
sahf
or eax, dword [rdx + 0x331d94eb]
xchg ebp, eax
ret 0x1b8
retf 0x2594
pop rbx
movabs byte [0x48f3e97513125fde], al
invalid
mov eax, 0x4478e049
add ch, byte [rsi + rax*4 - 0x76]
sbb eax, 0xb0e854a4
call 0x156872d3f