Function at 0x140147e70
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x20
test rcx, rcx
mov ebx, edx
mov rsi, rcx
jne 0x140147ea2
mov rcx, qword [0x1401f3b08]
test rcx, rcx
je 0x140147ea2
mov rcx, qword [rcx]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.1400d0480
mov qword [rsp + 0x30], rbp
xor ebp, ebp
test edx, edx
mov qword [rsp + 0x38], rdi
js 0x140147eb7
cmp edx, 0x12
jl 0x140147eb9
mov ebx, ebp
mov ecx, 0x368
call fcn.1400be650
xor edx, edx
mov r8d, 0x368
mov rcx, rax
mov rdi, rax
call fcn.140193570
mov rcx, qword [0x1401f3b08]
test rsi, rsi
cmove rcx, rdi
cmp qword [0x1401f3af8], rbp
mov dword [rdi + 0x180], 1
mov qword [0x1401f3b08], rcx
mov dword [rdi + 0x184], 1
mov dword [rdi + 0x188], ebx
mov qword [rdi + 8], rsi
je 0x140147f29
mov rax, qword [0x1401f3b00]
mov qword [rax + 0x230], rdi
mov qword [rdi + 0x238], rax
jmp 0x140147f37
mov qword [0x1401f3af8], rdi
mov qword [rdi + 0x238], rbp
test rsi, rsi
mov qword [rdi + 0x230], rbp
mov qword [0x1401f3b00], rdi
jne 0x140147f53
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rsi, rax
lea r8, [0x140147d80]
mov r9, rdi
xor edx, edx
mov rcx, rsi
call fcn.1400c4920
mov r11, qword [0x1401f3b08]
mov rcx, qword [rdi + 0x10]
cmp r11, rdi
cmove r11, rbp
test rcx, rcx
mov qword [0x1401f3b08], r11
je 0x140147f8b
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rcx, qword [rdi + 0x238]
test rcx, rcx
je 0x140147fa7
mov rax, qword [rdi + 0x230]
mov qword [rcx + 0x230], rax
jmp 0x140147fb5
mov rax, qword [rdi + 0x230]
mov qword [0x1401f3af8], rax
mov rcx, qword [rdi + 0x230]
test rcx, rcx
je 0x140147fd1
mov rax, qword [rdi + 0x238]
mov qword [rcx + 0x238], rax
jmp 0x140147fdf
mov rax, qword [rdi + 0x238]
mov qword [0x1401f3b00], rax
mov rsi, qword [rdi + 0x138]
test rsi, rsi
je 0x140148028
nop
nop
mov rcx, qword [rsi + 0x48]
mov rbx, qword [rsi + 0x58]
call fcn.1400be6d0
mov rcx, qword [rsi + 0x20]
call fcn.1400be6d0
mov rcx, qword [rsi + 0x18]
call fcn.1400be6d0
mov rcx, qword [rsi + 0x10]
call fcn.1400be6d0
mov rcx, rsi
call fcn.1400be6d0
test rbx, rbx
mov rsi, rbx
jne 0x140147ff0
mov rsi, qword [rdi + 0x150]
test rsi, rsi
je 0x140148078
nop
nop
nop
mov rcx, qword [rsi + 0x48]
mov rbx, qword [rsi + 0x58]
call fcn.1400be6d0
mov rcx, qword [rsi + 0x20]
call fcn.1400be6d0
mov rcx, qword [rsi + 0x18]
call fcn.1400be6d0
mov rcx, qword [rsi + 0x10]
call fcn.1400be6d0
mov rcx, rsi
call fcn.1400be6d0
test rbx, rbx
mov rsi, rbx
jne 0x140148040
lea rdx, [rdi + 0x270]
lea rcx, [rdi + 0x268]
call fcn.14000a6a0
lea rdx, [rdi + 0x280]
lea rcx, [rdi + 0x278]
call fcn.14000a6a0
lea rdx, [rdi + 0x290]
lea rcx, [rdi + 0x288]
call fcn.14000a9c0
mov rcx, qword [rdi + 0x168]
test rcx, rcx
je 0x1401480da
call fcn.1400be6d0
mov rcx, qword [rdi + 0x170]
call fcn.1400be6d0
mov rcx, qword [rdi + 0x178]
call fcn.1400be6d0
mov eax, dword [rdi + 0x358]
test eax, eax
je 0x14014812e
test eax, eax
je 0x140148122
mov rbx, rbp
nop
nop
mov rax, qword [rdi + 0x360]
mov rcx, qword [rbx + rax]
mov rcx, qword [rcx]
call fcn.1400be6d0
mov rcx, qword [rdi + 0x360]
mov rcx, qword [rbx + rcx]
call fcn.1400be6d0
add ebp, 1
add rbx, 8
cmp ebp, dword [rdi + 0x358]
jb 0x1401480f0
mov rcx, qword [rdi + 0x360]
call fcn.1400be6d0
lea rdx, [rdi + 0x198]
lea rcx, [rdi + 0x190]
call fcn.140007e00
mov rcx, qword [rdi + 0x240]
mov rbp, qword [rsp + 0x30]
test rcx, rcx
je 0x140148158
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rdi + 0x248]
test rcx, rcx
je 0x14014816a
call qword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [rdi + 0x258], 0
je 0x140148178
call fcn.1400e2a50
mov rcx, qword [rdi + 0x298]
test rcx, rcx
je 0x140148189
call fcn.1400be6d0
mov rcx, qword [rdi + 0x2a8]
test rcx, rcx
je 0x14014819a
call fcn.1400be6d0
mov rcx, qword [rdi + 0x2a0]
test rcx, rcx
je 0x1401481ab
call fcn.1400be6d0
lea rbx, [rdi + 0x2d8]
mov esi, 8
mov rcx, qword [rbx]
test rcx, rcx
je 0x1401481c4
call fcn.1400be6d0
add rbx, 0x10
sub rsi, 1
jne 0x1401481b7
mov rcx, rdi
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.1400be6d0