Function at 0x10039570
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb8
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, edx
push esi
push edi
test cl, cl
je 0x10039738
mov edi, dword [sym.imp.MSVCR120.dll__wcsicmp]
xor esi, esi
mov dword [ebp - 0xb8], str.ABXY
mov dword [ebp - 0xb4], 0x100
mov dword [ebp - 0xb0], 0x100bca80
mov dword [ebp - 0xac], 0x101
mov dword [ebp - 0xa8], 0x100bca84
mov dword [ebp - 0xa4], 0x102
mov dword [ebp - 0xa0], 0x100bca88
mov dword [ebp - 0x9c], 0x103
mov dword [ebp - 0x98], 0x100bca8c
mov dword [ebp - 0x94], 0x104
mov dword [ebp - 0x90], 0x100bca94
mov dword [ebp - 0x8c], 0x105
mov dword [ebp - 0x88], 0x100bca9c
mov dword [ebp - 0x84], 0x106
mov dword [ebp - 0x80], 0x100bcaa4
mov dword [ebp - 0x7c], 0x107
mov dword [ebp - 0x78], str.BACK
mov dword [ebp - 0x74], 0x108
mov dword [ebp - 0x70], str.START
mov dword [ebp - 0x6c], 0x109
mov dword [ebp - 0x68], str.LThumb
mov dword [ebp - 0x64], 0x10a
mov dword [ebp - 0x60], str.RThumb
mov dword [ebp - 0x5c], 0x10b
mov dword [ebp - 0x58], 0x100bcae4
mov dword [ebp - 0x54], 0x10c
mov dword [ebp - 0x50], str.DOWN
mov dword [ebp - 0x4c], 0x10d
mov dword [ebp - 0x48], str.LEFT
mov dword [ebp - 0x44], 0x10e
mov dword [ebp - 0x40], str.RIGHT
mov dword [ebp - 0x3c], 0x10f
mov dword [ebp - 0x38], 0x100bcb10
mov dword [ebp - 0x34], 0x110
mov dword [ebp - 0x30], 0x100bcb14
mov dword [ebp - 0x2c], 0x111
mov dword [ebp - 0x28], 0x100bcb18
mov dword [ebp - 0x24], 0x112
mov dword [ebp - 0x20], 0x100bcb20
mov dword [ebp - 0x1c], 0x113
mov dword [ebp - 0x18], 0x100bcb28
mov dword [ebp - 0x14], 0x114
mov dword [ebp - 0x10], 0x100bcb30
mov dword [ebp - 0xc], 0x115
push ebx
push dword [ebp + esi*8 - 0xb8]
call edi
add esp, 8
test eax, eax
je 0x10039720
inc esi
cmp esi, 0x16
jb 0x100396f6
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ab974
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + esi*8 - 0xb4]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ab974
mov esp, ebp
pop ebp
ret
cmp byte [0x100ec5a8], 0
jne 0x100397d6
mov byte [0x100ec5a8], 1
xor edi, edi
mov esi, 0x100ece80
push 0
push edi
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
lea ecx, [edi - 0x21]
cmp ecx, 0x6f
ja case.0x1003976b.41
movzx ecx, byte [ecx + 0x1003985c]
jmp dword [ecx*4 + 0x10039854]
or eax, 0x100
push 0x10
shl eax, 0x10
push esi
or eax, edi
push eax
call dword [sym.imp.USER32.dll_GetKeyNameTextW]
test eax, eax
jne 0x1003978d
mov word [esi], ax
add esi, 0x20
inc edi
cmp esi, 0x100eee80
jl 0x10039753
xor ecx, ecx
jmp 0x100397a0
movzx eax, word [ecx + str.lbutton]
lea ecx, [ecx + 2]
mov word [ecx + 0x100ece9e], ax
test ax, ax
jne 0x100397a0
xor ecx, ecx
jmp 0x100397c0
movzx eax, word [ecx + str.rbutton]
lea ecx, [ecx + 2]
mov word [ecx + 0x100ecebe], ax
test ax, ax
jne 0x100397c0
push 2
push 0x100bcb60
push ebx
call dword [sym.imp.MSVCR120.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x10039809
push 0x10
push eax
push ebx
call dword [sym.imp.MSVCR120.dll_wcstol]
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ab974
mov esp, ebp
pop ebp
ret
xor edi, edi
mov esi, 0x100ece80
push ebx
push esi
call dword [sym.imp.MSVCR120.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x1003983e
add esi, 0x20
inc edi
cmp esi, 0x100eee80
jl 0x10039810
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ab974
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100ab974
mov esp, ebp
pop ebp
ret