Function at 0x10012965
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001be99
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x10023040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, dword [0x100230b0]
mov ecx, dword [0x10023eb8]
mov esi, dword [0x100230a4]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x100230a8]
add eax, 4
mov dword [ebp - 0x38], esi
add edi, eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x40], edi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x10025154]
cmp eax, dword [esi + 4]
jle 0x10012785
push 0x10025154
call fcn.1001a56d
add esp, 4
cmp dword [0x10025154], 0xffffffff
jne 0x10012785
mov al, byte [0x1002415a]
push 0x10025154
mov byte [0x10025150], al
call fcn.1001a51c
add esp, 4
mov eax, dword [0x10025164]
cmp eax, dword [esi + 4]
jle 0x100127d6
push 0x10025164
call fcn.1001a56d
add esp, 4
cmp dword [0x10025164], 0xffffffff
jne 0x100127d6
mov dword [ebp - 4], 0
mov ecx, dword [0x10023f4c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
push 0x10025164
fstp dword [0x10024d3c]
mov dword [ebp - 4], 0xffffffff
call fcn.1001a51c
add esp, 4
mov ecx, dword [0x10023f4c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
fsub dword [0x10024d3c]
mov al, byte [0x1002415a]
fstp dword [ebp - 0x34]
cmp byte [0x10025150], al
je 0x10012816
mov ecx, dword [0x10023f4c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov al, byte [0x1002415a]
fstp dword [0x10024d3c]
mov byte [0x10025150], al
mov esi, dword [ebp - 0x38]
test al, al
jne 0x1001287f
movss xmm0, dword [ebp - 0x34]
comiss xmm0, dword [0x1001fc44]
jbe 0x10012915
cmp dword [0x10024d4c], 1
jne 0x10012915
mov ecx, dword [0x10025148]
cmp ecx, esi
jle 0x10012915
lea eax, [esi + 0x5a]
cmp ecx, eax
jge 0x10012915
mov ecx, dword [0x1002514c]
cmp ecx, edi
jle 0x10012915
lea eax, [edi + 0xe]
cmp ecx, eax
jge 0x10012915
mov byte [0x1002415a], 1
mov dword [0x10024d4c], 0
mov ecx, dword [0x10023f4c]
mov byte [0x100230d5], 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
fsub dword [0x1002415c]
fstp dword [ebp - 0x34]
movss xmm0, dword [ebp - 0x34]
comiss xmm0, dword [0x1001fc44]
jbe 0x10012a5d
mov edx, 0xa0
mov dword [ebp - 0x34], 0x100
xor eax, eax
lea ecx, [edx + 1]
nop
test ax, ax
jle 0x100128cb
cmp ax, 7
jl 0x100128f3
cmp ax, 0x40
jle 0x100128d7
cmp ax, 0x5b
jl 0x100128f3
cmp ax, dx
je 0x100128f3
cmp ax, cx
je 0x100128f3
cmp ax, 0x10
je 0x100128f3
cmp ax, 0x1b
je 0x100128f3
cmp ax, 0x2d
jne 0x10012909
movsx ecx, ax
cmp dword [ecx*4 + 0x10024d48], 1
je 0x10012a34
mov ecx, 0xa1
inc eax
cmp ax, word [ebp - 0x34]
jl 0x100128c0
jmp 0x10012a5d
mov ecx, dword [0x10023f4c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov eax, dword [ebp - 0x3c]
fstp dword [0x1002415c]
movzx eax, word [eax]
cwde
cmp eax, 6
ja case.0x10012934.3
jmp dword [eax*4 + 0x10012b20]
push str.LButton
jmp 0x100129a7
push str.RButton
jmp 0x100129a7
push str.MButton
jmp 0x100129a7
push str.XButton1
jmp 0x100129a7
push str.XButton2
jmp 0x100129a7
push str.None
jmp 0x100129a7
push 0x10
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push 0
push eax
movups xmmword [ebp - 0x2c], xmm0
movq qword [ebp - 0x1c], xmm0
call dword [sym.imp.USer32.dLl_MapVirtualKeyW]
shl eax, 0x10
push eax
call dword [sym.imp.USer32.dLl_GetKeyNameTextW]
test eax, eax
je 0x100129a2
lea eax, [ebp - 0x30]
push eax
jmp 0x100129a7
push str.VK2STR_FAILED
lea ecx, [ebp - 0x58]
call fcn.10013160
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 1
add edi, 7
cmp dword [ebp - 0x44], 7
mov dword [ebp - 0x34], 0xa
cmovbe eax, ecx
push eax
push 0x18
push 0x1002348c
push edi
lea eax, [esi + 0x2d]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x100242f8
call fcn.10015e00
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov ecx, dword [ebp - 0x44]
cmp ecx, 7
jbe 0x10012a89
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10012a28
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10012a28
call dword [sym.imp.Api_Ms_wIn_CRt_RUNtiME_L1_1_0.dLl__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1001a4c0
add esp, 8
jmp 0x10012a89
cmp ax, 0x2d
je 0x10012a56
cmp ax, 0x1b
jne 0x10012a51
cmp byte [ebp + 0xc], 0
je 0x10012a51
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0
jmp 0x10012a56
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
mov byte [0x1002415a], 0
push str.Press_a_Key
push 0x18
push 0x1002348c
add edi, 7
mov dword [ebp - 0x34], 0xa
push edi
lea eax, [esi + 0x2d]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x100242f8
call fcn.10015e00
add esp, 0x1c
mov eax, dword [ebp - 0x3c]
add esi, 0x5a
mov dword [ebp - 0x5c], 0xa
push dword [eax + 0x10]
lea eax, [esi + 4]
push 0x10
push 0x1002348c
push edi
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x100242f8
call fcn.10015e00
mov ecx, dword [0x10023f64]
add esp, 0x1c
mov eax, dword [ecx]
push dword [0x10023478]
call dword [eax + 0x28]
mov edi, dword [ebp - 0x40]
mov ecx, dword [0x10023f64]
lea eax, [edi + 0xe]
mov edx, dword [ecx]
push eax
push esi
mov esi, dword [ebp - 0x38]
push edi
push esi
call dword [edx + 0x38]
mov dword [0x100230a4], esi
xor al, al
mov dword [0x100230a8], edi
mov dword [0x100230ac], 0x5a
mov dword [0x100230b0], 0xe
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001a168
mov esp, ebp
pop ebp
ret 8