Function at 0x101cf67
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x48
mov eax, 0x10d7cf7
call fcn.0100c4d0
mov esi, ecx
push 0
lea ecx, [ebp - 0x34]
call dword [sym.imp.mmcbase.DLL_public:_void___thiscall_mmcerror::SC::constructor_long_int_]
and dword [ebp - 4], 0
push 0x101d018
lea ecx, [ebp - 0x34]
call dword [sym.imp.mmcbase.DLL_public:_void___thiscall_mmcerror::SC::SetFunctionName_unsigned_short_int_const__]
mov eax, dword [0x10f52cc]
cmp eax, 0x10f52cc
je 0x101cfa8
cmp byte [eax + 0x19], 5
jae 0x105bb06
mov edi, dword [ebp + 8]
mov ecx, dword [edi + 8]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x18], ebx
cmp ecx, 0xffffff8f
jbe 0x1054fa1
cmp ecx, 0xffffff98
je 0x101d076
cmp ecx, 0xffffff9b
je 0x105be87
cmp ecx, 0xfffffff4
je 0x1056f79
cmp ecx, 0xfffffffb
je 0x105be35
cmp ecx, 0xfffffffd
je 0x105be29
cmp ecx, 0xfffffffe
je 0x105be39
and dword [ebp - 0x18], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call dword [sym.imp.mmcbase.DLL_public:_void___thiscall_mmcerror::SC::destructor_void_]
mov eax, dword [ebp - 0x18]
lea esp, [ebp - 0x64]
call fcn.0100c50d
ret 8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call dword [sym.imp.mmcbase.DLL_public:_void___thiscall_mmcerror::SC::destructor_void_]
mov eax, ebx
jmp 0x101d007
je 0x105be14
mov edx, 0xffffff4d
cmp ecx, edx
je 0x105bda8
cmp ecx, 0xffffff4f
jne 0x1055014
mov eax, dword [esi + 0x178]
test eax, eax
je 0x1054fd9
push dword [edi + 0x14]
mov ecx, dword [eax + 0x4c]
call fcn.01056f17
test al, al
jne 0x101cff7
lea ebx, [esi + 0x44]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x78]
test eax, eax
je 0x101cff3
lea ecx, [esi + 0xd8]
call fcn.0100a5cf
mov esi, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx]
add edi, 0xc
push edi
mov ecx, ebx
add esi, 0x1c
call dword [eax + 0x78]
push eax
push dword [ebp - 0x14]
call dword [esi]
jmp 0x101cff7
lea ebx, [edx + 3]
cmp ecx, ebx
je 0x105bd1e
cmp ecx, 0xffffff51
je 0x105bce4
cmp ecx, 0xffffff65
je 0x105bb31
cmp ecx, 0xffffff8d
jne 0x101cff3
jmp 0x105bb22
mov ecx, dword [esi + 0x178]
push edi
call fcn.01056f94
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x101cff7
push 0x100c4b0
push 0x36
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0106f7c2
mov eax, dword [0x10f52cc]
jmp 0x101cfa8
push edi
mov ecx, esi
call fcn.0108541d
mov esi, eax
jmp 0x105be73
movzx ecx, word [edi + 0xc]
movzx eax, cx
sub eax, 8
je 0x105bccb
dec eax
je 0x105bca8
sub eax, 4
je 0x105bbea
sub eax, 0x21
je 0x105bb63
push ecx
mov ecx, esi
call fcn.0108c397
jmp 0x105be92
push 0x8003
mov ecx, esi
call fcn.0108ae35
test eax, eax
je 0x101cff7
mov edi, dword [esi + 0xd8]
test edi, edi
je 0x101cff7
lea ecx, [esi + 0x44]
mov eax, dword [ecx]
call dword [eax + 0x78]
mov ebx, eax
test ebx, ebx
je 0x101cff7
mov eax, dword [esi + 0x178]
mov ecx, dword [eax + 0x4c]
call fcn.01054b78
test eax, eax
je 0x101cff7
cmp eax, 1
jne 0x105bbc7
lea eax, [ebp - 0x14]
push eax
mov ecx, esi
call fcn.01086250
cmp eax, 0xffffffff
jne 0x105bbd4
jmp 0x101cff7
jle 0x101cff7
mov dword [ebp - 0x14], 0xfffffffb
push dword [ebp - 0x14]
mov eax, dword [edi]
push 0
push 0x9008
push ebx
push edi
call dword [eax + 0x78]
jmp 0x101cff7
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, esi
test ax, ax
jge 0x105be2b
push 0x8004
call fcn.0108ae35
test eax, eax
je 0x101cff7
mov eax, dword [esi + 0x270]
test eax, eax
jne 0x105bc6c
mov ecx, esi
call fcn.0101d08c
mov eax, dword [esi + 0x178]
mov ecx, dword [eax + 0x4c]
call fcn.01054b78
push 0xfffffffffffffff6
pop edi
mov dword [ebp - 0x14], edi
test eax, eax
je 0x101cff7
cmp eax, 1
jne 0x105bc51
lea eax, [ebp - 0x14]
push eax
mov ecx, esi
call fcn.01086250
mov ebx, dword [ebp - 0x14]
jmp 0x105bc5a
jle 0x101cff7
push 0xfffffffffffffffb
pop ebx
cmp ebx, edi
je 0x101cff7
cmp ebx, 0xfffffffe
jne 0x105bc77
jmp 0x101cff7
xor ebx, ebx
cmp eax, 2
sete bl
add ebx, 0xfffffffc
mov edi, dword [esi + 0xd8]
test edi, edi
je 0x101cff7
add esi, 0x44
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x78]
test eax, eax
je 0x101cff7
mov ecx, dword [edi]
push ebx
push 0
push 0x9012
push eax
push edi
jmp 0x105be0c
mov ecx, esi
call fcn.0101d08c
test eax, eax
je 0x101cff7
push 1
push dword [esi + 0x174]
mov ecx, eax
call sub.MFC42u.dll_CFrameWnd::SetActiveView
jmp 0x101cff7
lea eax, [ebp - 0x44]
push eax
mov ecx, esi
call fcn.010833c1
lea ecx, [ebp - 0x44]
call dword [sym.imp.mmcbase.DLL_public:_void___thiscall_mmcerror::SC::destructor_void_]
jmp 0x101cff7
call fcn.0100aba9
mov edi, eax
test edi, edi
je 0x105bd16
push 0x8005
mov ecx, esi
call fcn.0108ae35
test eax, eax
jne 0x105bd08
cmp byte [esi + 0x1d4], 1
jne 0x105bd16
mov byte [edi + 0x168], 1
xor esi, esi
jmp 0x105be73
xor esi, esi
inc esi
jmp 0x105be73
call fcn.0100aba9
test eax, eax
je 0x105bd2e
mov byte [eax + 0x168], 0
mov eax, dword [edi + 0x10]
cmp dword [edi + 8], ebx
mov ebx, dword [edi + 0x20]
mov edi, dword [edi + 0x2c]
mov dword [ebp - 0x14], eax
lea eax, [esi + 0x1f8]
cmp dword [eax + 0x78], 0
mov eax, dword [eax]
sete cl
shr eax, 4
and cl, al
test cl, 1
je 0x105bd69
lea ecx, [esi + 0x44]
mov eax, dword [ecx]
call dword [eax + 0x78]
push dword [ebp + 0xc]
push ebx
push dword [ebp - 0x14]
push 0
jmp 0x105bd9b
push edi
call fcn.01054c16
test eax, eax
je 0x101cff7
cmp dword [eax + 0xc], 0x3951589
push dword [ebp + 0xc]
push ebx
jne 0x105bd8d
push 0
push 1
push dword [eax + 0x14]
jmp 0x105bd9c
mov eax, dword [eax + 0x14]
push eax
lea ecx, [esi + 0x44]
mov eax, dword [ecx]
push 0
call dword [eax + 0x78]
push eax
mov ecx, esi
call fcn.0108cac7
jmp 0x101cff7
mov ebx, dword [edi + 0x14]
cmp eax, 0x10f52cc
je 0x105bdcb
cmp byte [eax + 0x19], 5
jb 0x105bdcb
push ebx
push 0x100c4b0
push 0x37
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0106f7e8
mov eax, dword [edi + 0xc]
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x24], ebx
test al, 0xc
je 0x105bde6
mov dword [ebp - 0x1c], 1
test al, 0x20
je 0x105bdee
or dword [ebp - 0x1c], 2
lea ecx, [esi + 0x44]
mov eax, dword [ecx]
call dword [eax + 0x78]
push dword [ebp + 0xc]
lea edx, [ebp - 0x24]
push edx
push 0x900b
mov esi, dword [esi + 0xd8]
mov ecx, dword [esi]
push eax
push esi
call dword [ecx + 0x78]
jmp 0x101cff7
lea ecx, [esi + 0x44]
mov eax, dword [ecx]
call dword [eax + 0x78]
push dword [edi + 0x10]
push dword [edi + 0xc]
push 0x9002
jmp 0x105be02
mov ecx, esi
call fcn.01087475
jmp 0x101cff7
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x54]
push eax
mov ecx, esi
call fcn.0108cc07
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call dword [sym.imp.mmcbase.DLL_public:_class_mmcerror::SC____thiscall_mmcerror::SC::operator_class_mmcerror::SC_const__]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0
call dword [sym.imp.mmcbase.DLL_public:_void___thiscall_mmcerror::SC::destructor_void_]
lea ecx, [ebp - 0x34]
call dword [sym.imp.mmcbase.DLL_public:_bool___thiscall_mmcerror::SC::operator_bool_void_const]
test al, al
je 0x101cff7
mov esi, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call dword [sym.imp.mmcbase.DLL_public:_void___thiscall_mmcerror::SC::destructor_void_]
mov eax, esi
jmp 0x101d007
push edi
mov ecx, esi
call fcn.0108ce81
movzx eax, al
mov dword [ebp - 0x18], eax
jmp 0x101cff7