Function at 0x100173fe
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x100c7e40
call fcn.1009a804
sub esp, 0x4c
push ebx
mov ebx, ecx
mov dword [ebp - 0x10], ebx
call fcn.1001665e
test al, al
je 0x1001769c
push esi
mov esi, dword [ebp + 8]
cmp esi, 0x102
jne 0x10017437
push dword [ebp + 0xc]
lea ecx, [ebx + 0x4c]
call fcn.100169a7
jmp 0x1001745c
cmp esi, 0x100
jne 0x1001746e
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
lea ecx, [ebx + 0x4c]
sets al
movzx eax, al
push eax
push dword [ebp + 0xc]
call fcn.10016b48
test al, al
je 0x10017467
mov al, 1
jmp 0x1001769b
xor al, al
jmp 0x1001769b
push edi
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
push dword [ebp + 0x10]
test ax, ax
mov ecx, ebx
lea eax, [ebp - 0x18]
push eax
sets byte [ebp + 0xb]
call sym.SAMPFUNCS.asi_public:_unsigned_char____thiscall_BitStream::GetData_void_const
mov ecx, eax
call fcn.1001cc84
mov eax, dword [ebp - 0x18]
xor ecx, ecx
test eax, eax
cmovs eax, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x18], eax
test ecx, ecx
cmovs ecx, edx
mov dword [ebp - 0x14], ecx
sub esi, 0x200
je 0x100175c1
sub esi, 1
je 0x100174e4
sub esi, 1
je 0x100174d9
sub esi, 1
jne 0x10017698
lea ecx, [ebx + 0x4c]
call fcn.10016c08
jmp 0x100175ba
mov byte [ebx + 0xa0], dl
jmp 0x10017698
push ecx
push eax
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
call fcn.1001660c
mov ecx, eax
call fcn.100173d1
test al, al
je 0x100175ba
mov eax, dword [ebx]
mov ecx, ebx
mov esi, dword [ebx + 0xa4]
call dword [eax + 0x10]
and dword [ebp - 0x48], 0
lea ecx, [ebp - 0x58]
push 0xffffffffffffffff
push esi
push eax
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.1000b580
and dword [ebp - 4], 0
lea eax, [ebp - 0x20]
push eax
mov ecx, ebx
call fcn.100179f7
mov edi, eax
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x30]
mov ebx, dword [ebp - 0x18]
push eax
mov byte [ebp - 4], 1
call fcn.10016632
mov edx, dword [ebp - 0x10]
push 1
mov ecx, dword [eax]
sub ebx, dword [edx + 0x94]
mov eax, dword [edx + 0x98]
sub ebx, ecx
mov ecx, dword [edi]
mov esi, dword [edx + 0xa4]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x58]
push ebx
push eax
call fcn.100167eb
mov ecx, dword [ebp - 0x1c]
lea ebx, [esi + eax]
test ecx, ecx
je 0x10017585
call fcn.10011141
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.1000b31a
mov esi, dword [ebp - 0x10]
push ebx
lea edi, [esi + 0x4c]
mov ecx, edi
call fcn.10016996
cmp byte [ebp + 0xb], 0
mov byte [esi + 0xa0], 1
jne 0x100175b3
mov ecx, edi
call fcn.10016c01
mov ecx, edi
call fcn.10016bf0
mov al, 1
jmp 0x1001769a
cmp byte [ebx + 0xa0], dl
je 0x10017698
mov eax, dword [ebx]
mov ecx, ebx
mov esi, dword [ebx + 0xa4]
call dword [eax + 0x10]
xor ecx, ecx
mov dword [ebp - 0x44], 0xf
push esi
push ecx
mov dword [ebp - 0x48], ecx
mov byte [ebp - 0x58], cl
lea ecx, [ebp - 0x58]
push eax
call fcn.1000b580
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 2
push eax
mov ecx, ebx
call fcn.100179f7
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 3
push ecx
mov ecx, dword [eax]
call fcn.10016863
mov ecx, dword [ebp - 0x1c]
mov dword [ebp + 8], eax
test ecx, ecx
je 0x10017626
call fcn.10011141
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.1000b31a
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.100179f7
mov esi, eax
mov edi, dword [ebp - 0x18]
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov dword [ebp - 4], 4
call fcn.10016632
sub edi, dword [ebx + 0x94]
mov ecx, ebx
mov esi, dword [esi]
push 1
mov edx, dword [eax]
sub edi, edx
mov eax, dword [ebx]
add edi, dword [ebp + 8]
push edi
call dword [eax + 0x10]
push eax
mov ecx, esi
call fcn.100167eb
or dword [ebp - 4], 0xffffffff
mov edi, eax
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x10017687
call fcn.10011141
push edi
lea ecx, [ebx + 0x4c]
call fcn.10016996
lea ecx, [ebx + 0x4c]
call fcn.10016bf0
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc