Function at 0x1400115b4
Capabilities:
Log keystrokes via polling
Parse pe header

Disassembly:
jmp 0x14001adf0
push rbp
push rdi
sub rsp, 0x258
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x5e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002b040]
xor rax, rbp
mov qword [rbp + 0x228], rax
lea rcx, [0x1400320f5]
call fcn.140011834
call qword [sym.imp.KERNEL32.dll_FreeConsole]
lea rcx, [rbp + 8]
call fcn.140011820
nop
xor eax, eax
cmp eax, 1
je 0x14001b818
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001ae86
lea rdx, str.abcdefghijklmnopqrstuvwxyz_.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, str.abcdefghijklmnopqrstuvwxyz_.
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001aec4
lea rdx, [0x140026da0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026da0]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x43
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001af02
lea rdx, [0x140026da4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026da4]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001af40
lea rdx, [0x140026da8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026da8]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001af7e
lea rdx, [0x140026dac]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dac]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001afbc
lea rdx, [0x140026db0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026db0]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x47
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001affa
lea rdx, [0x140026db4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026db4]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x48
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b038
lea rdx, [0x140026db8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026db8]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x49
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b076
lea rdx, [0x140026dbc]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dbc]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b0b4
lea rdx, [0x140026dc0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dc0]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b0f2
lea rdx, [0x140026dc4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dc4]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4c
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b130
lea rdx, [0x140026dc8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dc8]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b16e
lea rdx, [0x140026dcc]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dcc]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b1ac
lea rdx, [0x140026dd0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dd0]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4f
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b1ea
lea rdx, [0x140026dd4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dd4]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b228
lea rdx, [0x140026dd8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dd8]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x51
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b266
lea rdx, [0x140026ddc]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026ddc]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b2a4
lea rdx, [0x140026de0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026de0]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b2e2
lea rdx, [0x140026de4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026de4]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x54
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b320
lea rdx, [0x140026de8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026de8]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x55
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b35e
lea rdx, [0x140026dec]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dec]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b39c
lea rdx, [0x140026df0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026df0]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b3da
lea rdx, [0x140026df4]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026df4]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b418
lea rdx, [0x140026df8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026df8]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b456
lea rdx, [0x140026dfc]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026dfc]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b494
lea rdx, [0x140026e00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e00]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b4d2
lea rdx, [0x140026e04]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e04]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x6e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b510
lea rdx, [0x140026e08]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e08]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xd
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b54e
lea rdx, [0x140026e0c]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e10]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x30
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b58c
lea rdx, str.0123456789
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, str.0123456789
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x31
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b5ca
lea rdx, [0x140026e1c]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e1c]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b608
lea rdx, [0x140026e20]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e20]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x33
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b646
lea rdx, [0x140026e24]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e24]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x34
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b684
lea rdx, [0x140026e28]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e28]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b6c2
lea rdx, [0x140026e2c]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e2c]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x36
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b700
lea rdx, [0x140026e30]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e30]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x37
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b73e
lea rdx, [0x140026e34]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e34]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x38
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b77c
lea rdx, [0x140026e38]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e38]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x39
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001b7ba
lea rdx, [0x140026e3c]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011104
lea rdx, [0x140026e3c]
lea rcx, [rbp + 8]
call fcn.1400110b4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x108
lea rcx, [rbp + 0x50]
call fcn.140011343
mov edx, 1
lea rcx, [rbp + 0x50]
call fcn.1400116b8
nop
mov r9d, 0x40
mov r8d, 2
lea rdx, [0x140026e40]
lea rcx, [rbp + 0x50]
call fcn.14001119a
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x50]
call fcn.140011767
lea rcx, [rbp + 0x50]
call fcn.14001144c
nop
lea rcx, [rbp + 0x50]
call fcn.14001121c
jmp 0x14001ae3d
lea rcx, [rbp + 8]
call fcn.140011190
lea rcx, [rbp - 0x20]
lea rdx, [0x140025f50]
call fcn.1400116e0
mov rcx, qword [rbp + 0x228]
xor rcx, rbp
call fcn.140011401
lea rsp, [rbp + 0x238]
pop rdi
pop rbp
ret