Function at 0x140028400
Capabilities:
Check for time delay via gettickcount
Log keystrokes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x14006b3d0]
xor rax, rsp
mov qword [rbp + 0x40], rax
lea rcx, [rsp + 0x50]
xor edx, edx
mov r8d, 0xf0
call fcn.140032580
mov r14d, 0x11
xor edx, edx
mov ecx, r14d
mov dword [rsp + 0x50], 1
mov word [rsp + 0x58], r14w
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov word [rsp + 0x5a], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, 0x10
xor edi, edi
mov ecx, esi
xor edx, edx
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x78], 1
mov word [rbp - 0x80], si
mov dword [rsp + 0x5c], edi
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov word [rbp - 0x7e], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, 0x53
mov ecx, ebx
xor edx, edx
mov dword [rbp - 0x7c], edi
mov dword [rbp - 0x78], eax
mov dword [rbp - 0x60], 1
mov word [rbp - 0x58], bx
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov word [rbp - 0x56], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, ebx
mov dword [rbp - 0x54], edi
mov dword [rbp - 0x38], 1
mov dword [rbp - 0x50], eax
mov word [rbp - 0x30], bx
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov word [rbp - 0x2e], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, esi
mov dword [rbp - 0x2c], 2
mov dword [rbp - 0x10], 1
mov dword [rbp - 0x28], eax
mov word [rbp - 8], si
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov word [rbp - 6], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, r14d
mov dword [rbp - 4], 2
mov dword [rbp + 0x18], 1
mov dword [rbp], eax
mov word [rbp + 0x20], r14w
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov word [rbp + 0x22], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea r8d, [r14 + 0x17]
lea rdx, [rsp + 0x50]
lea ecx, [rdi + 6]
mov dword [rbp + 0x24], 2
mov dword [rbp + 0x28], eax
call qword [sym.imp.USER32.dll_SendInput]
mov r14d, eax
cmp eax, 6
je 0x1400285bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x140028573
movzx eax, ax
or eax, 0x80070000
lea rbx, str.HotkeyPhoneIFPhoneForDesktopTeams.cpp
lea rdi, str.__CPhoneForDesktopTeams::SendCtrlShiftS_
lea rsi, [0x14004b4ac]
lea rdx, str.SendInput_Ctrl__Shift__S_failed:_0x_x
lea rcx, [rsp + 0x20]
mov r8d, eax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x28], 0x191
mov dword [rsp + 0x40], 3
call fcn.1400028a0
jmp 0x140028602
lea rbx, str.HotkeyPhoneIFPhoneForDesktopTeams.cpp
lea rdi, str.__CPhoneForDesktopTeams::SendCtrlShiftS_
lea rsi, [0x14004b4ac]
lea rdx, str.SendInput_Ctrl__Shift__S_successfully
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x28], 0x195
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x40], 3
call fcn.1400028a0
lea r8, str.uSent
lea rdx, str._s___d
lea rcx, [rsp + 0x20]
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x28], 0x198
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x40], 3
call fcn.1400028a0
mov eax, r14d
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.14002f400
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret