Function at 0x14015d4f0
Capabilities:
Log keystrokes

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x20
test rcx, rcx
mov ebx, edx
mov rsi, rcx
jne 0x14015d522
mov rcx, qword [0x14020e4f8]
test rcx, rcx
je 0x14015d522
mov rcx, qword [rcx]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.1400e1650
mov qword [rsp + 0x30], rbp
xor ebp, ebp
test edx, edx
mov qword [rsp + 0x38], rdi
js 0x14015d537
cmp edx, 0x12
jl 0x14015d539
mov ebx, ebp
mov ecx, 0x368
call fcn.1400cf3f0
xor edx, edx
mov r8d, 0x368
mov rcx, rax
mov rdi, rax
call fcn.1401a9350
mov rcx, qword [0x14020e4f8]
test rsi, rsi
cmove rcx, rdi
cmp qword [0x14020e4e8], rbp
mov dword [rdi + 0x180], 1
mov qword [0x14020e4f8], rcx
mov dword [rdi + 0x184], 1
mov dword [rdi + 0x188], ebx
mov qword [rdi + 8], rsi
je 0x14015d5a9
mov rax, qword [0x14020e4f0]
mov qword [rax + 0x230], rdi
mov qword [rdi + 0x238], rax
jmp 0x14015d5b7
mov qword [0x14020e4e8], rdi
mov qword [rdi + 0x238], rbp
test rsi, rsi
mov qword [rdi + 0x230], rbp
mov qword [0x14020e4f0], rdi
jne 0x14015d5d3
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rsi, rax
lea r8, [0x14015d400]
mov r9, rdi
xor edx, edx
mov rcx, rsi
call fcn.1400d5b60
mov r11, qword [0x14020e4f8]
mov rcx, qword [rdi + 0x10]
cmp r11, rdi
cmove r11, rbp
test rcx, rcx
mov qword [0x14020e4f8], r11
je 0x14015d60b
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rcx, qword [rdi + 0x238]
test rcx, rcx
je 0x14015d627
mov rax, qword [rdi + 0x230]
mov qword [rcx + 0x230], rax
jmp 0x14015d635
mov rax, qword [rdi + 0x230]
mov qword [0x14020e4e8], rax
mov rcx, qword [rdi + 0x230]
test rcx, rcx
je 0x14015d651
mov rax, qword [rdi + 0x238]
mov qword [rcx + 0x238], rax
jmp 0x14015d65f
mov rax, qword [rdi + 0x238]
mov qword [0x14020e4f0], rax
mov rsi, qword [rdi + 0x138]
test rsi, rsi
je 0x14015d6a8
nop
nop
mov rcx, qword [rsi + 0x48]
mov rbx, qword [rsi + 0x58]
call fcn.1400cf470
mov rcx, qword [rsi + 0x20]
call fcn.1400cf470
mov rcx, qword [rsi + 0x18]
call fcn.1400cf470
mov rcx, qword [rsi + 0x10]
call fcn.1400cf470
mov rcx, rsi
call fcn.1400cf470
test rbx, rbx
mov rsi, rbx
jne 0x14015d670
mov rsi, qword [rdi + 0x150]
test rsi, rsi
je 0x14015d6f8
nop
nop
nop
mov rcx, qword [rsi + 0x48]
mov rbx, qword [rsi + 0x58]
call fcn.1400cf470
mov rcx, qword [rsi + 0x20]
call fcn.1400cf470
mov rcx, qword [rsi + 0x18]
call fcn.1400cf470
mov rcx, qword [rsi + 0x10]
call fcn.1400cf470
mov rcx, rsi
call fcn.1400cf470
test rbx, rbx
mov rsi, rbx
jne 0x14015d6c0
lea rdx, [rdi + 0x270]
lea rcx, [rdi + 0x268]
call fcn.14000a800
lea rdx, [rdi + 0x280]
lea rcx, [rdi + 0x278]
call fcn.14000a800
lea rdx, [rdi + 0x290]
lea rcx, [rdi + 0x288]
call fcn.14000ab20
mov rcx, qword [rdi + 0x168]
test rcx, rcx
je 0x14015d75a
call fcn.1400cf470
mov rcx, qword [rdi + 0x170]
call fcn.1400cf470
mov rcx, qword [rdi + 0x178]
call fcn.1400cf470
mov eax, dword [rdi + 0x358]
test eax, eax
je 0x14015d7ae
test eax, eax
je 0x14015d7a2
mov rbx, rbp
nop
nop
mov rax, qword [rdi + 0x360]
mov rcx, qword [rbx + rax]
mov rcx, qword [rcx]
call fcn.1400cf470
mov rcx, qword [rdi + 0x360]
mov rcx, qword [rbx + rcx]
call fcn.1400cf470
add ebp, 1
add rbx, 8
cmp ebp, dword [rdi + 0x358]
jb 0x14015d770
mov rcx, qword [rdi + 0x360]
call fcn.1400cf470
lea rdx, [rdi + 0x198]
lea rcx, [rdi + 0x190]
call fcn.140007f60
mov rcx, qword [rdi + 0x240]
mov rbp, qword [rsp + 0x30]
test rcx, rcx
je 0x14015d7d8
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rdi + 0x248]
test rcx, rcx
je 0x14015d7ea
call qword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [rdi + 0x258], 0
je 0x14015d7f8
call fcn.1400f3fc0
mov rcx, qword [rdi + 0x298]
test rcx, rcx
je 0x14015d809
call fcn.1400cf470
mov rcx, qword [rdi + 0x2a8]
test rcx, rcx
je 0x14015d81a
call fcn.1400cf470
mov rcx, qword [rdi + 0x2a0]
test rcx, rcx
je 0x14015d82b
call fcn.1400cf470
lea rbx, [rdi + 0x2d8]
mov esi, 8
mov rcx, qword [rbx]
test rcx, rcx
je 0x14015d844
call fcn.1400cf470
add rbx, 0x10
sub rsi, 1
jne 0x14015d837
mov rcx, rdi
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.1400cf470