Function at 0x1011b580
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101e6a35
mov eax, dword fs:[0]
push eax
sub esp, 0x30
push esi
push edi
mov eax, dword [0x102924c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [ebp + 8], 5
jne 0x1011b80a
cmp byte [0x103c3e24], 0
je 0x1011b80a
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push str.left
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x10], 0
or esi, 0xffffffff
movups xmmword [ebp - 0x24], xmm0
call fcn.10019250
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
push eax
mov ecx, 0x103bd828
call fcn.10015b90
push dword [eax]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 0x10]
movzx edi, ax
cmp ecx, 0xf
jbe 0x1011b63c
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1011b632
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1011b81d
push ecx
push edx
call fcn.101ab3ee
add esp, 8
test di, di
je 0x1011b64b
mov esi, 1
jmp 0x1011b7e0
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push str.right
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x10], 0
movups xmmword [ebp - 0x24], xmm0
call fcn.10019250
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 1
push eax
mov ecx, 0x103bd828
call fcn.10015b90
push dword [eax]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
movzx edi, ax
cmp ecx, 0xf
jbe 0x1011b6ca
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1011b6c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1011b822
push ecx
push edx
call fcn.101ab3ee
add esp, 8
test di, di
je 0x1011b6d9
mov esi, 2
jmp 0x1011b7e0
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push str.back
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x10], 0
movups xmmword [ebp - 0x24], xmm0
call fcn.10019250
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x103bd828
call fcn.10015b90
push dword [eax]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
movzx edi, ax
cmp ecx, 0xf
jbe 0x1011b758
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1011b74e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1011b827
push ecx
push edx
call fcn.101ab3ee
add esp, 8
test di, di
je 0x1011b761
xor esi, esi
jmp 0x1011b7e0
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
push str.forward
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x28], 0
movups xmmword [ebp - 0x3c], xmm0
call fcn.10019250
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 3
push eax
mov ecx, 0x103bd828
call fcn.10015b90
push dword [eax]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [ebp - 0x28]
movzx edi, ax
cmp ecx, 0xf
jbe 0x1011b7d5
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1011b7cb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1011b82c
push ecx
push edx
call fcn.101ab3ee
add esp, 8
test di, di
mov eax, 3
cmovne esi, eax
mov eax, esi
shr eax, 0x1f
xor al, 1
cmp byte [0x103c9464], al
je 0x1011b80a
test al, al
je 0x1011b805
or ecx, 0xffffffff
cmp esi, dword [0x103b72a8]
cmove esi, ecx
mov dword [0x103b72a8], esi
mov byte [0x103c9464], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
call fcn.101b237e
call fcn.101b237e
call fcn.101b237e
call fcn.101b237e
int3