Function at 0x14015d160
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x20
test rcx, rcx
mov ebx, edx
mov rsi, rcx
jne 0x14015d192
mov rcx, qword [0x14020e538]
test rcx, rcx
je 0x14015d192
mov rcx, qword [rcx]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.1400e16b0
mov qword [rsp + 0x30], rbp
xor ebp, ebp
test edx, edx
mov qword [rsp + 0x38], rdi
js 0x14015d1a7
cmp edx, 0x12
jl 0x14015d1a9
mov ebx, ebp
mov ecx, 0x368
call fcn.1400cf700
xor edx, edx
mov r8d, 0x368
mov rcx, rax
mov rdi, rax
call fcn.1401a9240
mov rcx, qword [0x14020e538]
test rsi, rsi
cmove rcx, rdi
cmp qword [0x14020e528], rbp
mov dword [rdi + 0x180], 1
mov qword [0x14020e538], rcx
mov dword [rdi + 0x184], 1
mov dword [rdi + 0x188], ebx
mov qword [rdi + 8], rsi
je 0x14015d219
mov rax, qword [0x14020e530]
mov qword [rax + 0x230], rdi
mov qword [rdi + 0x238], rax
jmp 0x14015d227
mov qword [0x14020e528], rdi
mov qword [rdi + 0x238], rbp
test rsi, rsi
mov qword [rdi + 0x230], rbp
mov qword [0x14020e530], rdi
jne 0x14015d243
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rsi, rax
lea r8, [0x14015d070]
mov r9, rdi
xor edx, edx
mov rcx, rsi
call fcn.1400d59d0
mov r11, qword [0x14020e538]
mov rcx, qword [rdi + 0x10]
cmp r11, rdi
cmove r11, rbp
test rcx, rcx
mov qword [0x14020e538], r11
je 0x14015d27b
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rcx, qword [rdi + 0x238]
test rcx, rcx
je 0x14015d297
mov rax, qword [rdi + 0x230]
mov qword [rcx + 0x230], rax
jmp 0x14015d2a5
mov rax, qword [rdi + 0x230]
mov qword [0x14020e528], rax
mov rcx, qword [rdi + 0x230]
test rcx, rcx
je 0x14015d2c1
mov rax, qword [rdi + 0x238]
mov qword [rcx + 0x238], rax
jmp 0x14015d2cf
mov rax, qword [rdi + 0x238]
mov qword [0x14020e530], rax
mov rsi, qword [rdi + 0x138]
test rsi, rsi
je 0x14015d318
nop
nop
mov rcx, qword [rsi + 0x48]
mov rbx, qword [rsi + 0x58]
call fcn.1400cf780
mov rcx, qword [rsi + 0x20]
call fcn.1400cf780
mov rcx, qword [rsi + 0x18]
call fcn.1400cf780
mov rcx, qword [rsi + 0x10]
call fcn.1400cf780
mov rcx, rsi
call fcn.1400cf780
test rbx, rbx
mov rsi, rbx
jne 0x14015d2e0
mov rsi, qword [rdi + 0x150]
test rsi, rsi
je 0x14015d368
nop
nop
nop
mov rcx, qword [rsi + 0x48]
mov rbx, qword [rsi + 0x58]
call fcn.1400cf780
mov rcx, qword [rsi + 0x20]
call fcn.1400cf780
mov rcx, qword [rsi + 0x18]
call fcn.1400cf780
mov rcx, qword [rsi + 0x10]
call fcn.1400cf780
mov rcx, rsi
call fcn.1400cf780
test rbx, rbx
mov rsi, rbx
jne 0x14015d330
lea rdx, [rdi + 0x270]
lea rcx, [rdi + 0x268]
call fcn.14000a940
lea rdx, [rdi + 0x280]
lea rcx, [rdi + 0x278]
call fcn.14000a940
lea rdx, [rdi + 0x290]
lea rcx, [rdi + 0x288]
call fcn.14000ab30
mov rcx, qword [rdi + 0x168]
test rcx, rcx
je 0x14015d3ca
call fcn.1400cf780
mov rcx, qword [rdi + 0x170]
call fcn.1400cf780
mov rcx, qword [rdi + 0x178]
call fcn.1400cf780
mov eax, dword [rdi + 0x358]
test eax, eax
je 0x14015d41e
test eax, eax
je 0x14015d412
mov rbx, rbp
nop
nop
mov rax, qword [rdi + 0x360]
mov rcx, qword [rbx + rax]
mov rcx, qword [rcx]
call fcn.1400cf780
mov rcx, qword [rdi + 0x360]
mov rcx, qword [rbx + rcx]
call fcn.1400cf780
add ebp, 1
add rbx, 8
cmp ebp, dword [rdi + 0x358]
jb 0x14015d3e0
mov rcx, qword [rdi + 0x360]
call fcn.1400cf780
lea rdx, [rdi + 0x198]
lea rcx, [rdi + 0x190]
call fcn.140007f70
mov rcx, qword [rdi + 0x240]
mov rbp, qword [rsp + 0x30]
test rcx, rcx
je 0x14015d448
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rdi + 0x248]
test rcx, rcx
je 0x14015d45a
call qword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [rdi + 0x258], 0
je 0x14015d468
call fcn.1400f3c50
mov rcx, qword [rdi + 0x298]
test rcx, rcx
je 0x14015d479
call fcn.1400cf780
mov rcx, qword [rdi + 0x2a8]
test rcx, rcx
je 0x14015d48a
call fcn.1400cf780
mov rcx, qword [rdi + 0x2a0]
test rcx, rcx
je 0x14015d49b
call fcn.1400cf780
lea rbx, [rdi + 0x2d8]
mov esi, 8
mov rcx, qword [rbx]
test rcx, rcx
je 0x14015d4b4
call fcn.1400cf780
add rbx, 0x10
sub rsi, 1
jne 0x14015d4a7
mov rcx, rdi
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.1400cf780