Function at 0x1003a502
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb8
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, edx
push esi
push edi
test cl, cl
je 0x1003a4c8
mov edi, dword [sym.imp.MSVCR120.dll__wcsicmp]
xor esi, esi
mov dword [ebp - 0xb8], str.ABXY
mov dword [ebp - 0xb4], 0x100
mov dword [ebp - 0xb0], 0x100bdaec
mov dword [ebp - 0xac], 0x101
mov dword [ebp - 0xa8], 0x100bdaf0
mov dword [ebp - 0xa4], 0x102
mov dword [ebp - 0xa0], 0x100bdaf4
mov dword [ebp - 0x9c], 0x103
mov dword [ebp - 0x98], 0x100bdaf8
mov dword [ebp - 0x94], 0x104
mov dword [ebp - 0x90], 0x100bdb00
mov dword [ebp - 0x8c], 0x105
mov dword [ebp - 0x88], 0x100bdb08
mov dword [ebp - 0x84], 0x106
mov dword [ebp - 0x80], 0x100bdb10
mov dword [ebp - 0x7c], 0x107
mov dword [ebp - 0x78], str.BACK
mov dword [ebp - 0x74], 0x108
mov dword [ebp - 0x70], str.START
mov dword [ebp - 0x6c], 0x109
mov dword [ebp - 0x68], str.LThumb
mov dword [ebp - 0x64], 0x10a
mov dword [ebp - 0x60], str.RThumb
mov dword [ebp - 0x5c], 0x10b
mov dword [ebp - 0x58], 0x100bdb50
mov dword [ebp - 0x54], 0x10c
mov dword [ebp - 0x50], str.DOWN
mov dword [ebp - 0x4c], 0x10d
mov dword [ebp - 0x48], str.LEFT
mov dword [ebp - 0x44], 0x10e
mov dword [ebp - 0x40], str.RIGHT
mov dword [ebp - 0x3c], 0x10f
mov dword [ebp - 0x38], 0x100bdb7c
mov dword [ebp - 0x34], 0x110
mov dword [ebp - 0x30], 0x100bdb80
mov dword [ebp - 0x2c], 0x111
mov dword [ebp - 0x28], 0x100bdb84
mov dword [ebp - 0x24], 0x112
mov dword [ebp - 0x20], 0x100bdb8c
mov dword [ebp - 0x1c], 0x113
mov dword [ebp - 0x18], 0x100bdb94
mov dword [ebp - 0x14], 0x114
mov dword [ebp - 0x10], 0x100bdb9c
mov dword [ebp - 0xc], 0x115
push ebx
push dword [ebp + esi*8 - 0xb8]
call edi
add esp, 8
test eax, eax
je 0x1003a4b0
inc esi
cmp esi, 0x16
jb 0x1003a486
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ad688
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + esi*8 - 0xb4]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ad688
mov esp, ebp
pop ebp
ret
cmp byte [0x100f0834], 0
jne 0x1003a566
mov byte [0x100f0834], 1
xor edi, edi
mov esi, 0x100f1110
push 0
push edi
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
lea ecx, [edi - 0x21]
cmp ecx, 0x6f
ja case.0x1003a4fb.41
movzx ecx, byte [ecx + 0x1003a5ec]
jmp dword [ecx*4 + 0x1003a5e4]
or eax, 0x100
push 0x10
shl eax, 0x10
push esi
or eax, edi
push eax
call dword [sym.imp.USER32.dll_GetKeyNameTextW]
test eax, eax
jne 0x1003a51d
mov word [esi], ax
add esi, 0x20
inc edi
cmp esi, 0x100f3110
jl 0x1003a4e3
xor ecx, ecx
jmp 0x1003a530
movzx eax, word [ecx + str.lbutton]
lea ecx, [ecx + 2]
mov word [ecx + 0x100f112e], ax
test ax, ax
jne 0x1003a530
xor ecx, ecx
jmp 0x1003a550
movzx eax, word [ecx + str.rbutton]
lea ecx, [ecx + 2]
mov word [ecx + 0x100f114e], ax
test ax, ax
jne 0x1003a550
push 2
push 0x100bdbd0
push ebx
call dword [sym.imp.MSVCR120.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x1003a599
push 0x10
push eax
push ebx
call dword [sym.imp.MSVCR120.dll_wcstol]
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ad688
mov esp, ebp
pop ebp
ret
xor edi, edi
mov esi, 0x100f1110
push ebx
push esi
call dword [sym.imp.MSVCR120.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x1003a5ce
add esi, 0x20
inc edi
cmp esi, 0x100f3110
jl 0x1003a5a0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ad688
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100ad688
mov esp, ebp
pop ebp
ret