Function at 0x10041083
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10079d39
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x1008f040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, dword [0x100917dc]
mov esi, dword [edx + 0x74]
test esi, esi
je 0x1004123e
cmp dword [edx + 0x78], 0
je 0x1004123e
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100900d8]
mov edi, dword [eax + ecx*4]
mov eax, dword [0x100902a4]
cmp eax, dword [edi + 4]
jle 0x10041036
push 0x100902a4
call fcn.10074b0a
add esp, 4
cmp dword [0x100902a4], 0xffffffff
jne 0x10041030
push str.m_fFlags
push str.CBasePlayer
mov dword [ebp - 4], 0
call fcn.10070660
push 0x100902a4
mov dword [0x100902a0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10074ab9
add esp, 4
mov edx, dword [0x100917dc]
mov eax, dword [0x100902a0]
test byte [eax + esi], 1
jne 0x10041053
mov eax, dword [0x100917fc]
cmp byte [eax + 0x28e], 0
je 0x1004123e
mov esi, dword [edx + 0x78]
mov ecx, esi
call fcn.10011390
test al, al
jne case.0x1004107c.25
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x5f4]
call eax
add eax, 0xffffffe7
cmp eax, 0x42
ja case.0x1004107c.26
movzx eax, byte [eax + 0x1004125c]
jmp dword [eax*4 + 0x10041254]
mov eax, dword [0x100917fc]
cmp byte [eax + 0x272], 0
je 0x1004123e
mov ecx, dword [0x100917dc]
cmp byte [ecx + 0x193], 0
je 0x100410be
mov eax, dword [ebp + 8]
and dword [eax + 0x24], 0xfffffffe
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
cmp byte [ecx + 0x191], 0
jne 0x100410e0
cmp byte [ecx + 0x192], 0
jne 0x100410e0
mov eax, dword [ecx + 0x78]
cmp dword [0x10090324], eax
je 0x100410e0
mov dword [0x10090324], eax
mov eax, dword [ebp + 8]
test byte [eax + 0x24], 1
je 0x1004123e
mov ecx, dword [ecx + 0x78]
call fcn.100633b0
test al, al
je 0x1004123e
mov eax, dword [0x100917fc]
movzx eax, word [eax + 0x14]
test ax, ax
je 0x1004123e
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1004123e
cmp dword [0x10090218], 0
jne 0x1004114d
push 0x1007e9a4
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x10090218], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x10090218]
jne 0x1004123e
mov eax, dword [0x100917dc]
mov ecx, dword [0x10090168]
mov esi, dword [eax + 0x78]
cmp ecx, dword [edi + 4]
jle 0x100411c2
push 0x10090168
call fcn.10074b0a
mov ecx, dword [0x10090168]
add esp, 4
cmp ecx, 0xffffffff
jne 0x100411c2
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov dword [ebp - 4], 1
call fcn.10070660
push 0x10090168
mov dword [0x100900f0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10074ab9
mov ecx, dword [0x10090168]
add esp, 4
mov eax, dword [0x100900f0]
cmp dword [eax + esi], 0x2d
jne 0x100411d4
mov ecx, 0x15
jmp 0x1004121f
cmp ecx, dword [edi + 4]
jle 0x1004121a
push 0x10090168
call fcn.10074b0a
add esp, 4
cmp dword [0x10090168], 0xffffffff
jne 0x1004121a
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov dword [ebp - 4], 2
call fcn.10070660
push 0x10090168
mov dword [0x100900f0], eax
call fcn.10074ab9
add esp, 4
mov ecx, 0x16
mov eax, dword [0x100917dc]
cmp dword [eax + 0x198], ecx
jl 0x1004123e
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
mov eax, dword [0x100917dc]
mov byte [eax + 0x191], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8