Function at 0x1400116e0
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x14001c1d0
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x3e8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x8e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x408]
mov rax, qword [0x14002e040]
xor rax, rbp
mov qword [rbp + 0x3a8], rax
lea rcx, [0x1400350fd]
call fcn.1400119c4
mov edx, 0x108
lea rcx, [rbp + 0x10]
call fcn.1400113e3
mov rax, qword [rbp + 0x3d0]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400119f6
nop
lea rcx, [rbp + 0x10]
call fcn.1400116ef
movzx eax, al
test eax, eax
jne 0x14001c291
lea rdx, str.Failed_to_open_file_for_recording.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140011122
lea rdx, [0x140011064]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x10]
call fcn.14001128f
jmp 0x14001c415
lea rdx, str.Recording_keyboard_inputs._Press_ESC_to_stop_recording.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011122
lea rdx, [0x140011064]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x138]
call fcn.140011686
xor eax, eax
cmp eax, 1
je 0x14001c40c
mov byte [rbp + 0x154], 0
jmp 0x14001c2e3
movzx eax, byte [rbp + 0x154]
inc al
mov byte [rbp + 0x154], al
movzx eax, byte [rbp + 0x154]
cmp eax, 0x100
jge 0x14001c3e2
movzx eax, byte [rbp + 0x154]
mov ecx, eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x14001c3dd
lea rcx, [rbp + 0x178]
call fcn.140011686
lea r8, [rbp + 0x138]
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x358]
call fcn.1400111db
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.14001130c
lea rcx, [rbp + 0x198]
call fcn.140011131
mov qword [rbp + 0x1b8], rax
movzx edx, byte [rbp + 0x154]
lea rcx, [rbp + 0x10]
call fcn.140011113
lea rdx, [0x140029604]
mov rcx, rax
call fcn.140011122
mov rdx, qword [rbp + 0x1b8]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_long___int64_____ptr64]
lea rdx, [0x140011064]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movzx eax, byte [rbp + 0x154]
cmp eax, 0x1b
jne 0x14001c3dd
lea rcx, [rbp + 0x10]
call fcn.14001151e
lea rdx, str.Recording_stopped.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011122
lea rdx, [0x140011064]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x10]
call fcn.14001128f
jmp 0x14001c415
jmp 0x14001c2d4
mov dword [rbp + 0x394], 0xa
lea rdx, [rbp + 0x394]
lea rcx, [rbp + 0x378]
call fcn.140011762
mov rcx, rax
call fcn.140011820
jmp 0x14001c2c0
lea rcx, [rbp + 0x10]
call fcn.14001128f
lea rcx, [rbp - 0x30]
lea rdx, [0x140028000]
call fcn.140011839
mov rcx, qword [rbp + 0x3a8]
xor rcx, rbp
call fcn.1400114bf
lea rsp, [rbp + 0x3b8]
pop rdi
pop rbp
ret