Function at 0x140004dd0
Capabilities:
Execute command
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
lea rcx, [0x140065704]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x258
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14006533c]
call fcn.140007a00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14006533c]
call fcn.140007a00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14006533c]
call fcn.140007a00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14006533c]
call fcn.140007a00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14006533c]
call fcn.140007a00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._______________e_37m_Settings_Hotkeys_e_32mON_e_37m_:
call fcn.140007a00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rsp + 0x40]
call fcn.140007f50
movsx ebx, byte [rsp + 0x40]
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov ecx, ebx
mov ebp, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14006533c]
mov r14d, eax
xor bl, bl
xor dil, dil
call fcn.140007a00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.__________________Key_Set_:_e_32m
call fcn.140007a00
mov rcx, rax
movzx edx, bpl
call fcn.140007bd0
mov rcx, rax
lea rdx, [0x140007da0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._______________e_37m___e_32mSuccessfully_e_37mHide_Program_in_4_seconds
call fcn.140007a00
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 0xfa0
call fcn.140007de0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x4000
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
nop dword [rax]
mov ecx, ebp
movzx esi, dil
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140004f5e
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140004f5e
xor bl, bl
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004f30
test bl, bl
jne 0x140004f9f
test dil, dil
mov edx, 0x32
sete dil
test sil, sil
jne 0x140004f92
mov ecx, 0xbe
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140003620
mov ecx, 0x32
mov bl, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004f30
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_Beep]
mov bl, 1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004f30