Function at 0x140028904
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x140141480]
xor rax, rsp
mov qword [rbp - 0x10], rax
call fcn.14000b7cc
mov r15, rax
call fcn.14000b5d8
test rax, rax
je 0x14002894d
call fcn.14000b7cc
mov rsi, qword [rax + 0x90]
jmp 0x14002894f
xor esi, esi
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
movdqu xmmword [rbp - 0x20], xmm0
mov rcx, qword [rsi]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 0x18]
lea rcx, [rbp - 0x28]
sub eax, dword [rbp - 0x20]
movd xmm1, eax
mov eax, dword [rbp - 0x14]
sub eax, dword [rbp - 0x1c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r15 + 8], xmm1
movss dword [r15 + 0xc], xmm0
and qword [rbp - 0x28], 0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbp - 0x28]
xorps xmm1, xmm1
sub rax, qword [rsi + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [rsi + 0x20]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [r15 + 0x10], xmm1
mov rax, qword [rbp - 0x28]
mov qword [rsi + 0x18], rax
call fcn.14000b5d8
test rax, rax
je 0x1400289dc
call fcn.14000b7cc
mov rdi, qword [rax + 0x90]
jmp 0x1400289de
xor edi, edi
call fcn.14000b7cc
mov r14, qword [rdi]
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, r14
jne 0x140028a7a
cmp byte [rbx + 0xd3], 0
je 0x140028a3d
cvttss2si ecx, dword [rbx + 0xdf4]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], ecx
cvttss2si ecx, dword [rbx + 0xdf8]
mov dword [rbp - 0x2c], ecx
mov rcx, r14
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x140028a34
mov edx, dword [rbp - 0x2c]
mov ecx, dword [rbp - 0x30]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rbx + 0xd3], 0
jne 0x140028a7a
cmp byte [rdi + 0x10], 0
jne 0x140028a7a
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x140028a7a
mov rcx, qword [rdi]
lea rdx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x140028a7a
movd xmm2, dword [rbp - 0x2c]
mov rcx, rbx
movd xmm1, dword [rbp - 0x30]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.1400055a0
mov r14d, 0x210
mov ecx, r14d
call fcn.14000d300
or ebx, 0xffffffff
mov dil, 1
test al, al
je 0x140028ab8
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test dil, al
jne 0x140028ab8
mov r9d, ebx
xor edx, edx
mov r8d, 0xa0
mov ecx, r14d
call fcn.140028734
mov r14d, 0x214
mov ecx, r14d
call fcn.14000d300
test al, al
je 0x140028af0
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test dil, al
jne 0x140028af0
mov r9d, ebx
xor edx, edx
mov r8d, 0xa1
mov ecx, r14d
call fcn.140028734
mov r14d, 0x212
mov ecx, r14d
call fcn.14000d300
test al, al
je 0x140028b26
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test dil, al
jne 0x140028b26
xor edx, edx
mov r9d, ebx
mov ecx, r14d
lea r8d, [rdx + 0x5b]
call fcn.140028734
mov r14d, 0x216
mov ecx, r14d
call fcn.14000d300
test al, al
je 0x140028b5c
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test dil, al
jne 0x140028b5c
xor edx, edx
mov r9d, ebx
mov ecx, r14d
lea r8d, [rdx + 0x5c]
call fcn.140028734
cmp byte [r15 + 0x70], 0
jne 0x140028b6a
call fcn.14000b908
mov ebx, eax
cmp dword [rsi + 0x28], ebx
je 0x140028b77
mov dword [rsi + 0x28], ebx
call fcn.14002905c
call fcn.140028ba4
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400c1f80
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret