Function at 0x14000f350
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov edx, 0xfffffff0
mov rbx, rcx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
bt rax, 0x1d
jae 0x14000f38b
mov edx, 9
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_UpdateWindow]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call qword [sym.imp.USER32.dll_AllowSetForegroundWindow]
mov ecx, 2
call qword [sym.imp.USER32.dll_LockSetForegroundWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
test rax, rax
jne 0x14000f3b7
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetTopWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
cmp edi, eax
je 0x14000f3e0
mov r8d, 1
mov edx, eax
mov ecx, edi
call qword [sym.imp.USER32.dll_AttachThreadInput]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetActiveWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_BringWindowToTop]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetFocus]
cmp edi, esi
je case.default.0x14000f42d
xor r8d, r8d
mov edx, esi
mov ecx, edi
call qword [sym.imp.USER32.dll_AttachThreadInput]
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 1]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp qword [sym.imp.USER32.dll_InvalidateRect]
invalid
invalid
add edi, dword [rax + 0x16ff558c]
adc bh, bh
loop 0x1400def51
insd dword [rdi], dx
out dx, al
invalid
clc
invalid
stc
push rdi
call qword [rsi]
lea ecx, [rcx + 0x66]
xchg edi, eax
adc dword [rcx], esi
nop
nop
pmulhuw mm6, qword [rdi]
invalid
cmp al, 6
xor al, 0x85
or ebx, dword [rax - 0x49]
jo 0x1400df025
cmp dword [rcx], esi
xor byte [rbp - 0xbd4d73f], dh
mov ch, 0xc1
sub byte [rbx], ch
hlt
push rdx
invalid
mov ch, 0xc1
sub byte [rbx], ch
hlt
or word [rdx - 0x54c4834f], 0xe
stosq qword [rdi], rax
popfq
xor ah, byte [rbx - 0x55]
pop rax
jmp 0x1400defc8
js 0x1400def94
pop rbp
xor al, 0x30
jns 0x1400df055
invalid
invalid
invalid
not rax
invalid
imul dword [rax - 0x542eef66]
xor dl, 0xc8
push 0xffffffffffffffd9
invalid
enter 0xffffffffffffd96a, 0xffffffffffffffd4
retf
xor eax, 0x90f31bb
invalid
or dword [rdi], edx
invalid
movabs byte [0xdd7fefc779eecbfb], al
out dx, al
jns case.0x14000f42d.35
out dx, eax
jg 0x1400df03b
jl 0x1400df01c
invalid
out dx, eax
ja 0x1400df042
iretd
and eax, 0xc3059c25
sub dword [rcx + 0xdb81210], 0x765cba45
invalid
mul byte [rdx]
pop rax
invalid
adc al, 0x1b
invalid
or ebp, dword [rbx + 0x74f9dfdb]
invalid
mov al, 0xbc
push rbx
stosd dword [rdi], eax
jno 0x1400df0e1
ror edi, cl
out 0x2b, eax
xchg esi, ebx
pop r15
xchg ebx, eax
loope 0x1400df13a
invalid
invalid
invalid
invalid
cwde
xchg byte [rcx + 0x29], r8b
sub dword [r11 - 0x31fa9bf6], esi
xor al, 0xd
invalid
invalid
sub dword [r11 - 0x31fa9bf6], esi
xor al, 0xd
fiadd word [rdx + 0x5e28eb0a]
jmp 0x1400df11a
pop rsi
std
sbb eax, 0x4fb77e32
invalid
jmp 0x1400df11a
sbb eax, 0x97ffac89
stosb byte [rdi], al
in al, dx
pop rdi
invalid
xchg esp, eax
mov edi, ss
xlatb
invalid
jmp [rdi - 0x3077ef4c]
push qword [rbx + 0x6597ffcf]
in eax, dx
in eax, dx
invalid
fstp dword [rcx]
sub ebx, dword [rbx + 0x30]
retf
cmp cl, dh
and byte [rax + 0x49], cl
idiv ebp
stc
pop rbp
pop rdi
invalid
invalid
out dx, al
mov esp, 0x4faa0daf
scasq rax, qword [rdi]
cmp al, 9
loop 0x1400df1e7
ror byte [rbp - 0x62d3f1e7], cl
pop rbp
pop rdx
sbb dword [rdi - 0x3f3d0f24], 0xffffffff
invalid
adc ecx, dword [rdi + rcx*4 - 0x36]
invalid
pop rbx
invalid
or bl, dl
mov eax, 0x41a15c4a
or eax, 0x82307cc8
pop rsi
mov ch, 0x47
shl ch, 1
xchg r10, rax
xchg r10, rax
xchg byte [rsi], ah
loop 0x1400df19f
cld
out 0xbe, eax
call rsi
invalid
test byte [0x1562b4a9c], al
movabs byte [0x903f922f07e2a478], al
invalid
nop
clc
invalid
invalid
invalid
cli
mov al, byte [rdi - 0x62]
mov edx, 0x1c78f9b6
sbb al, 0x57
sbb al, 0x57
sub dl, byte [0x180952c93]
jbe 0x1400df1ef
invalid
movsb byte [rdi], byte [rsi]
mov cl, 0x76
cmp dh, ch
invalid
in al, 0xff
xchg edx, eax
dec byte ds:[rdx]
or ah, al
invalid
or ah, al
sbb bl, dl
cld
sar esp, cl
movabs dword [0xeb5adbfb391e2f76], eax
push rax
xor al, 0xf2
mov edi, 0x67734de5
int1
and eax, 0x7967a32b
sub esp, dword [rbx - 0x565f8699]
sahf
add byte [rdx + 0xe77bfde], 0x63
sub esp, dword [rbx - 0x565f8699]
sahf
add byte [rdx + 0xe77bfde], 0x63
shr dword [rcx + 0x4781132f], cl
jns 0x1400df1b1
test eax, 0xde82809e
mov edi, 0xd3630e77
test eax, 0x4781132f
invalid
movsd dword [rdi], dword [rsi]
outsw dx, word gs:[rsi]
retf
invalid
or eax, 0x9b3b3efd
jmp 0x182a6f1b0
sti
invalid
out dx, eax
invalid