Function at 0x14015d1a0
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x20
test rcx, rcx
mov ebx, edx
mov rsi, rcx
jne 0x14015d1d2
mov rcx, qword [0x14020e538]
test rcx, rcx
je 0x14015d1d2
mov rcx, qword [rcx]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.1400e16e0
mov qword [rsp + 0x30], rbp
xor ebp, ebp
test edx, edx
mov qword [rsp + 0x38], rdi
js 0x14015d1e7
cmp edx, 0x12
jl 0x14015d1e9
mov ebx, ebp
mov ecx, 0x368
call fcn.1400cf700
xor edx, edx
mov r8d, 0x368
mov rcx, rax
mov rdi, rax
call fcn.1401a9330
mov rcx, qword [0x14020e538]
test rsi, rsi
cmove rcx, rdi
cmp qword [0x14020e528], rbp
mov dword [rdi + 0x180], 1
mov qword [0x14020e538], rcx
mov dword [rdi + 0x184], 1
mov dword [rdi + 0x188], ebx
mov qword [rdi + 8], rsi
je 0x14015d259
mov rax, qword [0x14020e530]
mov qword [rax + 0x230], rdi
mov qword [rdi + 0x238], rax
jmp 0x14015d267
mov qword [0x14020e528], rdi
mov qword [rdi + 0x238], rbp
test rsi, rsi
mov qword [rdi + 0x230], rbp
mov qword [0x14020e530], rdi
jne 0x14015d283
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rsi, rax
lea r8, [0x14015d0b0]
mov r9, rdi
xor edx, edx
mov rcx, rsi
call fcn.1400d59e0
mov r11, qword [0x14020e538]
mov rcx, qword [rdi + 0x10]
cmp r11, rdi
cmove r11, rbp
test rcx, rcx
mov qword [0x14020e538], r11
je 0x14015d2bb
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rcx, qword [rdi + 0x238]
test rcx, rcx
je 0x14015d2d7
mov rax, qword [rdi + 0x230]
mov qword [rcx + 0x230], rax
jmp 0x14015d2e5
mov rax, qword [rdi + 0x230]
mov qword [0x14020e528], rax
mov rcx, qword [rdi + 0x230]
test rcx, rcx
je 0x14015d301
mov rax, qword [rdi + 0x238]
mov qword [rcx + 0x238], rax
jmp 0x14015d30f
mov rax, qword [rdi + 0x238]
mov qword [0x14020e530], rax
mov rsi, qword [rdi + 0x138]
test rsi, rsi
je 0x14015d358
nop
nop
mov rcx, qword [rsi + 0x48]
mov rbx, qword [rsi + 0x58]
call fcn.1400cf780
mov rcx, qword [rsi + 0x20]
call fcn.1400cf780
mov rcx, qword [rsi + 0x18]
call fcn.1400cf780
mov rcx, qword [rsi + 0x10]
call fcn.1400cf780
mov rcx, rsi
call fcn.1400cf780
test rbx, rbx
mov rsi, rbx
jne 0x14015d320
mov rsi, qword [rdi + 0x150]
test rsi, rsi
je 0x14015d3a8
nop
nop
nop
mov rcx, qword [rsi + 0x48]
mov rbx, qword [rsi + 0x58]
call fcn.1400cf780
mov rcx, qword [rsi + 0x20]
call fcn.1400cf780
mov rcx, qword [rsi + 0x18]
call fcn.1400cf780
mov rcx, qword [rsi + 0x10]
call fcn.1400cf780
mov rcx, rsi
call fcn.1400cf780
test rbx, rbx
mov rsi, rbx
jne 0x14015d370
lea rdx, [rdi + 0x270]
lea rcx, [rdi + 0x268]
call fcn.14000a7f0
lea rdx, [rdi + 0x280]
lea rcx, [rdi + 0x278]
call fcn.14000a7f0
lea rdx, [rdi + 0x290]
lea rcx, [rdi + 0x288]
call fcn.14000ab10
mov rcx, qword [rdi + 0x168]
test rcx, rcx
je 0x14015d40a
call fcn.1400cf780
mov rcx, qword [rdi + 0x170]
call fcn.1400cf780
mov rcx, qword [rdi + 0x178]
call fcn.1400cf780
mov eax, dword [rdi + 0x358]
test eax, eax
je 0x14015d45e
test eax, eax
je 0x14015d452
mov rbx, rbp
nop
nop
mov rax, qword [rdi + 0x360]
mov rcx, qword [rbx + rax]
mov rcx, qword [rcx]
call fcn.1400cf780
mov rcx, qword [rdi + 0x360]
mov rcx, qword [rbx + rcx]
call fcn.1400cf780
add ebp, 1
add rbx, 8
cmp ebp, dword [rdi + 0x358]
jb 0x14015d420
mov rcx, qword [rdi + 0x360]
call fcn.1400cf780
lea rdx, [rdi + 0x198]
lea rcx, [rdi + 0x190]
call fcn.140007f50
mov rcx, qword [rdi + 0x240]
mov rbp, qword [rsp + 0x30]
test rcx, rcx
je 0x14015d488
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rdi + 0x248]
test rcx, rcx
je 0x14015d49a
call qword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [rdi + 0x258], 0
je 0x14015d4a8
call fcn.1400f3c80
mov rcx, qword [rdi + 0x298]
test rcx, rcx
je 0x14015d4b9
call fcn.1400cf780
mov rcx, qword [rdi + 0x2a8]
test rcx, rcx
je 0x14015d4ca
call fcn.1400cf780
mov rcx, qword [rdi + 0x2a0]
test rcx, rcx
je 0x14015d4db
call fcn.1400cf780
lea rbx, [rdi + 0x2d8]
mov esi, 8
mov rcx, qword [rbx]
test rcx, rcx
je 0x14015d4f4
call fcn.1400cf780
add rbx, 0x10
sub rsi, 1
jne 0x14015d4e7
mov rcx, rdi
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.1400cf780