Function at 0x10011737
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10019599
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x1002000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ecx, dword [0x10020038]
mov esi, dword [0x10020034]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x10020040]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x38], esi
lea edi, [eax + 4]
mov eax, dword fs:[0x2c]
add edi, ecx
mov ecx, dword [0x10020d68]
mov esi, dword [eax + ecx*4]
mov eax, dword [0x10021fbc]
cmp eax, dword [esi + 4]
jle 0x10011558
push 0x10021fbc
call fcn.10017d6d
add esp, 4
cmp dword [0x10021fbc], 0xffffffff
jne 0x10011558
mov al, byte [0x10020fd2]
push 0x10021fbc
mov byte [0x10021fb8], al
call fcn.10017d1c
add esp, 4
mov eax, dword [0x10021fcc]
cmp eax, dword [esi + 4]
jle 0x100115a9
push 0x10021fcc
call fcn.10017d6d
add esp, 4
cmp dword [0x10021fcc], 0xffffffff
jne 0x100115a9
mov dword [ebp - 4], 0
mov ecx, dword [0x10020dfc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
push 0x10021fcc
fstp dword [0x10021ba4]
mov dword [ebp - 4], 0xffffffff
call fcn.10017d1c
add esp, 4
mov ecx, dword [0x10020dfc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
fsub dword [0x10021ba4]
mov al, byte [0x10020fd2]
fstp dword [ebp - 0x34]
cmp byte [0x10021fb8], al
je 0x100115e9
mov ecx, dword [0x10020dfc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov al, byte [0x10020fd2]
fstp dword [0x10021ba4]
mov byte [0x10021fb8], al
mov esi, dword [ebp - 0x38]
test al, al
jne 0x10011652
movss xmm0, dword [ebp - 0x34]
comiss xmm0, dword [0x1001c7dc]
jbe 0x100116e7
cmp dword [0x10021bb4], 1
jne 0x100116e7
mov ecx, dword [0x10021fb0]
cmp ecx, esi
jle 0x100116e7
lea eax, [esi + 0x5a]
cmp ecx, eax
jge 0x100116e7
mov ecx, dword [0x10021fb4]
cmp ecx, edi
jle 0x100116e7
lea eax, [edi + 0xe]
cmp ecx, eax
jge 0x100116e7
mov byte [0x10020fd2], 1
mov dword [0x10021bb4], 0
mov ecx, dword [0x10020dfc]
mov byte [0x10020065], 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
fsub dword [0x10020fd4]
fstp dword [ebp - 0x34]
movss xmm0, dword [ebp - 0x34]
comiss xmm0, dword [0x1001c7dc]
jbe 0x10011837
mov edx, 0xa0
mov dword [ebp - 0x34], 0x100
xor eax, eax
lea ecx, [edx + 1]
test ax, ax
jle 0x1001169d
cmp ax, 7
jl 0x100116c5
cmp ax, 0x40
jle 0x100116a9
cmp ax, 0x5b
jl 0x100116c5
cmp ax, dx
je 0x100116c5
cmp ax, cx
je 0x100116c5
cmp ax, 0x10
je 0x100116c5
cmp ax, 0x1b
je 0x100116c5
cmp ax, 0x2d
jne 0x100116db
movsx ecx, ax
cmp dword [ecx*4 + 0x10021bb0], 1
je 0x1001180e
mov ecx, 0xa1
inc eax
cmp ax, word [ebp - 0x34]
jl 0x10011692
jmp 0x10011837
mov ecx, dword [0x10020dfc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov eax, dword [ebp - 0x3c]
fstp dword [0x10020fd4]
movzx eax, word [eax]
cwde
cmp eax, 6
ja case.0x10011706.3
jmp dword [eax*4 + 0x10011908]
push str.LButton
jmp 0x10011779
push str.RButton
jmp 0x10011779
push str.MButton
jmp 0x10011779
push str.XButton1
jmp 0x10011779
push str.XButton2
jmp 0x10011779
push str.None
jmp 0x10011779
push 0x10
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push 0
push eax
movups xmmword [ebp - 0x2c], xmm0
movq qword [ebp - 0x1c], xmm0
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
shl eax, 0x10
push eax
call dword [sym.imp.USER32.dll_GetKeyNameTextW]
test eax, eax
je 0x10011774
lea eax, [ebp - 0x30]
push eax
jmp 0x10011779
push str.VK2STR_FAILED
lea ecx, [ebp - 0x60]
call fcn.10011f50
mov edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x60]
mov eax, dword [ebp - 0x60]
add edx, 0xb
mov edi, dword [ebp - 0x40]
mov dword [ebp - 4], 1
add edi, edx
cmp dword [ebp - 0x4c], 8
mov dword [ebp - 0x34], 0xa
cmovb eax, ecx
push eax
push 0x18
push 0x10020410
push edi
lea eax, [esi + 0x2d]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x10021150
call fcn.10014270
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov ecx, dword [ebp - 0x4c]
cmp ecx, 8
jb 0x10011863
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10011802
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10011802
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10017cc0
add esp, 8
jmp 0x10011863
cmp ax, 0x2d
je 0x10011830
cmp ax, 0x1b
jne 0x1001182b
cmp byte [ebp + 0xc], 0
je 0x1001182b
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0
jmp 0x10011830
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
mov byte [0x10020fd2], 0
push str.Press_a_Key
push 0x18
push 0x10020410
add edi, 7
mov dword [ebp - 0x34], 0xa
push edi
lea eax, [esi + 0x2d]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x10021150
call fcn.10014270
add esp, 0x1c
mov eax, dword [ebp - 0x3c]
add esi, 0x5a
mov dword [ebp - 0x48], 0xa
push dword [eax + 0x10]
lea eax, [esi + 4]
push 0x10
push 0x10020410
push edi
push eax
lea eax, [ebp - 0x48]
push eax
push 0x10021150
call fcn.10014270
mov ecx, dword [0x10020e14]
add esp, 0x1c
mov eax, dword [ecx]
push dword [0x100203fc]
call dword [eax + 0x28]
mov edi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
add edi, 0x12
mov ecx, dword [0x10020e14]
add eax, edi
push eax
mov eax, dword [ebp - 0x40]
push esi
mov edx, dword [ecx]
mov esi, dword [ebp - 0x38]
lea edi, [eax + 4]
add edi, dword [ebp - 0x44]
push edi
push esi
call dword [edx + 0x38]
mov dword [0x10020034], esi
xor al, al
mov dword [0x10020038], edi
mov dword [0x1002003c], 0x5a
mov dword [0x10020040], 0xe
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10017968
mov esp, ebp
pop ebp
ret 8