Function at 0x180028900
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x98
mov rax, qword [0x180090040]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov rsi, qword [0x180092d60]
xor r10d, r10d
mov qword [rbp - 1], r8
mov r12, r9
mov edi, edx
mov r13, rcx
test rsi, rsi
je 0x1800290aa
mov r14, qword [rsi + 0x98]
test r14, r14
je 0x1800290aa
add rsi, 8
lea r15d, [r10 + 2]
mov eax, 0x203
cmp edx, eax
ja 0x180028e73
je 0x180028fa2
mov eax, 0x101
lea ebx, [r10 + 1]
cmp edx, eax
ja 0x180028b13
je 0x180028c1e
mov eax, edx
sub eax, r15d
je 0x180028ad0
sub eax, 5
je 0x180028a38
sub eax, ebx
je 0x180028a38
sub eax, 0x18
je 0x180028a19
sub eax, 0x31
je 0x180028a0f
sub eax, 0x4f
je 0x180028b4d
cmp eax, 0x60
jne 0x1800290aa
mov dil, bl
cmp r8, 0x100
jae 0x1800290aa
call fcn.180027a9c
mov rsi, qword [rbp - 1]
mov rdx, r12
mov rcx, rsi
call fcn.18002827c
mov r14d, eax
mov eax, 0x262
cmp r14d, eax
jne 0x180028c26
test dil, dil
jne 0x180028c2b
mov r8d, esi
mov dl, bl
mov ecx, eax
call fcn.180027a48
jmp 0x180028c2b
call fcn.1800277cc
jmp 0x1800290aa
cmp r12w, bx
jne 0x1800290aa
call fcn.18002799c
test al, al
je 0x1800290aa
mov rax, rbx
jmp 0x1800290ac
mov rcx, qword [rsi + 0xd0]
cmp edi, 7
sete r8b
lea r9, [rcx + 0x4018]
mov eax, dword [r9]
sub eax, ebx
js 0x180028a70
movsxd rdx, eax
imul rax, rdx, 0x1c
add rax, qword [rcx + 0x4020]
cmp dword [rax], 6
je 0x180028ac6
sub rax, 0x1c
sub rdx, rbx
jns 0x180028a62
cmp byte [rcx + 0x2b70], r10b
sete dl
cmp dl, r8b
je 0x1800290aa
cmp byte [rsi + 0x7c], r10b
je 0x180028a92
cmp edi, 7
jne 0x1800290aa
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
mov qword [rbp - 0x31], rax
mov dword [rbp - 0x29], eax
mov eax, dword [rcx + 0x403c]
mov dword [rbp - 0x39], eax
inc eax
mov dword [rcx + 0x403c], eax
mov rcx, r9
mov dword [rbp - 0x41], 6
mov byte [rbp - 0x35], r8b
jmp 0x180028e65
test rax, rax
je 0x180028a70
mov dl, byte [rax + 0xc]
jmp 0x180028a7a
cmp qword [r14 + 8], r13
jne 0x1800290aa
cmp dword [r14 + 0x10], r10d
je 0x1800290aa
lea rcx, [rbp - 0x21]
mov dword [rbp - 0x21], 0x18
mov dword [rbp - 0x1d], 0x80000000
mov qword [rbp - 0x19], r13
mov dword [rbp - 0x11], r10d
call qword [sym.imp.USER32.dll_TrackMouseEvent]
xor ecx, ecx
mov qword [r14 + 8], rcx
mov dword [r14 + 0x10], ecx
jmp 0x180029097
mov eax, edi
sub eax, 0x102
je 0x180028d3d
sub eax, r15d
je 0x180028c12
sub eax, ebx
je 0x180028c12
sub eax, 0xfb
je 0x180028b4d
sub eax, ebx
je 0x180028fa7
cmp eax, ebx
je 0x180028ecb
jmp 0x1800290aa
call fcn.1800288c8
xor ecx, ecx
mov dword [rbp - 0x49], eax
mov eax, ecx
mov qword [r14 + 8], r13
mov edx, 0x200
cmp edi, edx
setne al
add eax, ebx
mov dword [rbp - 9], eax
cmp dword [r14 + 0x10], eax
je 0x180028bbe
lea eax, [rcx + 0x18]
mov dword [rbp - 0x1d], 0x80000000
cmp edi, edx
mov dword [rbp - 0x21], eax
mov dword [rbp - 0x41], eax
lea eax, [rcx + 0x12]
cmovne r15d, eax
mov qword [rbp - 0x19], r13
mov dword [rbp - 0x3d], r15d
mov dword [rbp - 0x11], ecx
mov qword [rbp - 0x39], r13
mov dword [rbp - 0x31], ecx
cmp dword [r14 + 0x10], ecx
je 0x180028bad
lea rcx, [rbp - 0x21]
call qword [sym.imp.USER32.dll_TrackMouseEvent]
lea rcx, [rbp - 0x41]
call qword [sym.imp.USER32.dll_TrackMouseEvent]
mov eax, dword [rbp - 9]
mov dword [r14 + 0x10], eax
movsx eax, r12w
shr r12, 0x10
mov dword [rbp + 7], eax
movsx eax, r12w
mov dword [rbp + 0xb], eax
cmp edi, 0xa0
jne 0x180028bed
lea rdx, [rbp + 7]
mov rcx, r13
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x1800290aa
mov rax, qword [rsi + 0xd0]
mov ecx, dword [rbp - 0x49]
mov dword [rax + 0x4038], ecx
movd xmm2, dword [rbp + 0xb]
movd xmm1, dword [rbp + 7]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
jmp 0x1800290a2
cmp edi, 0x104
je 0x1800289c0
mov dil, r10b
jmp 0x1800289c3
test r14d, r14d
je 0x180028c39
mov r8d, esi
mov dl, dil
mov ecx, r14d
call fcn.180027a48
cmp esi, 0x10
jne 0x180028c8b
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x180028c66
mov r8d, 0xa0
mov dl, dil
mov ecx, 0x210
call fcn.180027a48
mov esi, 0xa1
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x1800290aa
mov ecx, 0x214
jmp 0x180028d2d
cmp esi, 0x11
jne 0x180028cd9
mov esi, 0xa2
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x180028cb7
mov r8d, esi
mov dl, dil
mov ecx, 0x20f
call fcn.180027a48
mov esi, 0xa3
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x1800290aa
mov ecx, 0x213
jmp 0x180028d2d
mov eax, 0x12
cmp esi, eax
jne 0x1800290aa
mov esi, 0xa4
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x180028d0d
mov r8d, esi
mov dl, dil
mov ecx, 0x211
call fcn.180027a48
mov esi, 0xa5
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x1800290aa
mov ecx, 0x215
mov r8d, esi
mov dl, dil
call fcn.180027a48
jmp 0x1800290aa
call qword [sym.imp.USER32.dll_IsWindowUnicode]
xor edi, edi
test eax, eax
je 0x180028df4
mov rbx, qword [rbp - 1]
lea rax, [rbx - 1]
cmp rax, 0xfffe
ja 0x1800290aa
test bx, bx
jne 0x180028d73
cmp word [rsi + 0x2b6c], di
je 0x1800290aa
cmp byte [rsi + 0x2b69], dil
je 0x1800290aa
mov ecx, 0xfc00
movzx eax, bx
and ax, cx
mov edx, 0xd800
movzx ecx, word [rsi + 0x2b6c]
cmp ax, dx
jne 0x180028dba
test cx, cx
je 0x180028dae
mov edx, 0xfffd
mov rcx, rsi
call fcn.18000228c
mov word [rsi + 0x2b6c], bx
jmp 0x1800290aa
test cx, cx
je 0x180028de4
mov ecx, 0xdc00
cmp ax, cx
je 0x180028dd8
mov edx, 0xfffd
mov rcx, rsi
call fcn.18000228c
jmp 0x180028ddd
mov ebx, 0xfffd
mov word [rsi + 0x2b6c], di
movzx edx, bx
mov rcx, rsi
call fcn.18000228c
jmp 0x1800290aa
mov ecx, dword [r14 + 0x2c]
lea rax, [rbp - 9]
mov dword [rsp + 0x28], ebx
lea r8, [rbp - 1]
mov r9d, ebx
mov qword [rsp + 0x20], rax
mov edx, ebx
mov word [rbp - 9], di
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movzx edx, word [rbp - 9]
mov rcx, qword [rsi + 0xd0]
test edx, edx
je 0x1800290aa
cmp byte [rsi + 0x2b69], dil
je 0x1800290aa
mov eax, dword [rcx + 0x403c]
mov dword [rbp - 0x39], eax
inc eax
mov dword [rcx + 0x403c], eax
add rcx, 0x4018
mov qword [rbp - 0x31], rdi
mov dword [rbp - 0x29], edi
mov dword [rbp - 0x41], 5
mov dword [rbp - 0x3d], r15d
mov dword [rbp - 0x35], edx
lea rdx, [rbp - 0x41]
call fcn.1800197b8
jmp 0x1800290aa
mov eax, 0x219
cmp edi, eax
ja 0x180029062
je 0x180029055
mov eax, 0x209
cmp edi, eax
ja 0x180028f4b
je 0x180028fa2
mov eax, edi
sub eax, 0x204
je 0x180028fa2
sub eax, 1
je 0x180028ec6
sub eax, 1
je 0x180028fa2
sub eax, 1
je 0x180028fa2
cmp eax, 1
jne 0x1800290aa
mov ebx, 1
call fcn.1800288c8
xor edx, edx
mov r12d, eax
cmp edi, 0x205
mov ecx, edx
sete cl
cmp edi, 0x208
je 0x180028f09
mov r15d, ecx
cmp edi, 0x20c
jne 0x180028f09
mov rax, qword [rbp - 1]
mov r15d, edx
shr rax, 0x10
cmp ax, bx
setne r15b
add r15d, 3
mov eax, dword [r14 + 0x14]
btr eax, r15d
mov dword [r14 + 0x14], eax
test eax, eax
jne 0x180028f2a
call qword [sym.imp.USER32.dll_GetCapture]
cmp rax, r13
jne 0x180028f2a
call qword [sym.imp.USER32.dll_ReleaseCapture]
mov rax, qword [rsi + 0xd0]
xor r8d, r8d
mov edx, r15d
mov dword [rax + 0x4038], r12d
mov rcx, rsi
call fcn.18000264c
jmp 0x1800290aa
mov eax, edi
sub eax, 0x20a
je 0x180029036
sub eax, 1
je 0x180028fa2
sub eax, 1
je 0x180028ec6
sub eax, 1
je 0x180028fa2
cmp eax, 1
jne 0x1800290aa
shr r8, 0x10
xorps xmm2, xmm2
movsx eax, r8w
movd xmm1, eax
cvtdq2ps xmm1, xmm1
xorps xmm1, xmmword [0x1800879e0]
divss xmm1, dword [0x1800875cc]
mov rcx, rsi
call fcn.180002804
jmp 0x1800290aa
mov ebx, 1
call fcn.1800288c8
mov edx, 0xfffffffd
mov dword [rbp - 0x49], eax
lea ecx, [rdi - 0x204]
mov r8d, 0
test edx, ecx
lea eax, [rdi - 0x20b]
mov r12d, r8d
lea ecx, [rdi - 0x207]
cmove r12d, ebx
test edx, ecx
cmove r12d, r15d
test edx, eax
jne 0x180028ff5
mov rax, qword [rbp - 1]
mov r12d, r8d
shr rax, 0x10
cmp ax, bx
setne r12b
add r12d, 3
cmp dword [r14 + 0x14], r8d
jne 0x18002900f
call qword [sym.imp.USER32.dll_GetCapture]
test rax, rax
jne 0x18002900f
mov rcx, r13
call qword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [r14 + 0x14]
mov r8b, bl
mov ecx, dword [rbp - 0x49]
bts eax, r12d
mov dword [r14 + 0x14], eax
mov edx, r12d
mov rax, qword [rsi + 0xd0]
mov dword [rax + 0x4038], ecx
jmp 0x180028f3e
shr r8, 0x10
xorps xmm1, xmm1
movsx eax, r8w
movd xmm2, eax
cvtdq2ps xmm2, xmm2
divss xmm2, dword [0x1800875cc]
jmp 0x180028f95
cmp r8d, 7
jne 0x1800290aa
mov byte [r14 + 0x31], 1
jmp 0x1800290aa
mov eax, edi
sub eax, 0x2a2
je 0x180029070
cmp eax, 1
jne 0x1800290aa
cmp edi, 0x2a3
mov eax, r10d
mov ebx, 1
setne al
add eax, ebx
cmp dword [r14 + 0x10], eax
jne 0x1800290aa
cmp qword [r14 + 8], r13
jne 0x180029093
mov qword [r14 + 8], r10
mov dword [r14 + 0x10], r10d
movss xmm1, dword [0x1800876e8]
movaps xmm2, xmm1
mov rcx, rsi
call fcn.180002514
xor eax, eax
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1800487d0
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret