Function at 0x10005220
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x84
cmp byte [0x101f5618], 0
push ebx
push ebp
push esi
mov ebp, ecx
push edi
mov dword [esp + 0x14], ebp
je 0x10005ab2
mov edi, dword [0x101f565c]
test edi, edi
je 0x10005ab2
mov eax, dword [0x101f5658]
test eax, eax
jne 0x10005282
mov edx, 0xe80c2f78
mov ecx, 0x1014a9e5
call fcn.10003700
mov edx, 0xc10bf213
mov ecx, 0x1014a90d
mov esi, eax
call fcn.10003700
mov edx, esi
mov ecx, eax
call fcn.100aa660
mov dword [0x101f5658], eax
cmp dword [eax + edi], 0
jle 0x10005ab2
push dword [0x101f561c]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x10005ab2
mov edi, dword [0x101f565c]
mov edx, 0xe80c2f78
mov ecx, 0x1014aa1d
call fcn.10003700
mov edx, 0xc10bf213
mov ecx, 0x1014a90d
mov esi, eax
call fcn.10003700
mov edx, esi
mov ecx, eax
call fcn.100aa660
mov ecx, dword [0x101f55e0]
mov edx, dword [eax + edi]
mov eax, dword [ecx]
and edx, 0xfff
push edx
mov eax, dword [eax + 0xc]
call eax
mov esi, eax
mov ecx, esi
mov dword [esp + 0x40], esi
call fcn.10004100
test al, al
jne 0x10005349
mov ecx, esi
call fcn.10003e20
test al, al
jne 0x10005349
mov ecx, esi
call fcn.10003d30
test al, al
jne 0x10005349
mov ecx, esi
call fcn.100042f0
test al, al
jne 0x10005349
mov ecx, esi
call fcn.10003c40
test al, al
jne 0x10005349
mov ecx, esi
call fcn.10004200
test al, al
jne 0x10005349
mov ecx, esi
call fcn.10004000
test al, al
jne 0x10005349
mov ecx, esi
call fcn.10003f10
test al, al
je 0x10005ab2
mov ecx, esi
call fcn.10003c40
test al, al
je 0x10005379
mov eax, dword [0x101f560c]
mov ecx, dword [0x101f5628]
mov dword [0x101bf790], eax
mov eax, dword [0x101bc0a4]
mov dword [0x101f5e54], ecx
mov dword [0x101bf798], eax
jmp 0x100054c6
mov ecx, esi
call fcn.10003d30
test al, al
je 0x100053a9
mov eax, dword [0x101f562c]
mov ecx, dword [0x101f564c]
mov dword [0x101bf790], eax
mov eax, dword [0x101bc0ac]
mov dword [0x101f5e54], ecx
mov dword [0x101bf798], eax
jmp 0x100054c6
mov ecx, esi
call fcn.10003e20
test al, al
je 0x100053d9
mov eax, dword [0x101f5634]
mov ecx, dword [0x101f5640]
mov dword [0x101bf790], eax
mov eax, dword [0x101bc0b0]
mov dword [0x101f5e54], ecx
mov dword [0x101bf798], eax
jmp 0x100054c6
mov ecx, esi
call fcn.10003f10
test al, al
je 0x10005409
mov eax, dword [0x101f5608]
mov ecx, dword [0x101f5644]
mov dword [0x101bf790], eax
mov eax, dword [0x101bc0a0]
mov dword [0x101f5e54], ecx
mov dword [0x101bf798], eax
jmp 0x100054c6
mov ecx, esi
call fcn.10004000
test al, al
je 0x10005439
mov eax, dword [0x101f55fc]
mov ecx, dword [0x101f5630]
mov dword [0x101bf790], eax
mov eax, dword [0x101bc094]
mov dword [0x101f5e54], ecx
mov dword [0x101bf798], eax
jmp 0x100054c6
mov ecx, esi
call fcn.10004100
test al, al
je 0x10005466
mov eax, dword [0x101f5610]
mov ecx, dword [0x101f5614]
mov dword [0x101bf790], eax
mov eax, dword [0x101bc0a8]
mov dword [0x101f5e54], ecx
mov dword [0x101bf798], eax
jmp 0x100054c6
mov ecx, esi
call fcn.10004200
test al, al
je 0x10005493
mov eax, dword [0x101f563c]
mov ecx, dword [0x101f5620]
mov dword [0x101bf790], eax
mov eax, dword [0x101bc09c]
mov dword [0x101f5e54], ecx
mov dword [0x101bf798], eax
jmp 0x100054c6
mov ecx, esi
call fcn.100042f0
test al, al
je 0x100054c0
mov eax, dword [0x101f5604]
mov ecx, dword [0x101f5600]
mov dword [0x101bf790], eax
mov eax, dword [0x101bc098]
mov dword [0x101f5e54], ecx
mov dword [0x101bf798], eax
jmp 0x100054c6
mov ecx, dword [0x101f5e54]
cmp ecx, 3
ja case.default.0x100054cb
jmp dword [ecx*4 + 0x10005ac0]
mov dword [0x101bf794], 0
jmp case.default.0x100054cb
mov dword [0x101bf794], 1
jmp case.default.0x100054cb
mov dword [0x101bf794], 6
jmp case.default.0x100054cb
mov dword [0x101bf794], 3
mov ecx, ebp
call fcn.10004df0
mov ecx, dword fs:[0x2c]
mov ebx, eax
mov edx, dword [0x101bf740]
mov dword [esp + 0x44], ebx
mov edx, dword [ecx + edx*4]
mov ecx, dword [0x101f5e24]
cmp ecx, dword [edx + 4]
jle 0x10005573
push 0x101f5e24
call fcn.1010e5e4
add esp, 4
cmp dword [0x101f5e24], 0xffffffff
jne 0x10005573
mov ecx, dword [0x101bf778]
push str.weapon_recoil_scale
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x30]
mov dword [esp + 0x20], ecx
mov ecx, eax
call dword [esp + 0x20]
push 0x101f5e24
fstp dword [0x101f5e70]
call fcn.1010e593
add esp, 4
test ebx, ebx
je 0x10005ab2
mov ecx, dword [0x101f565c]
lea eax, [esp + 0x68]
push eax
call fcn.10003730
cmp byte [0x101f5650], 0
je 0x1000586a
cmp byte [0x101f5624], 0
je 0x1000586a
mov eax, dword [ebx + 8]
lea ecx, [ebx + 8]
mov edi, 8
mov eax, dword [eax + 0x28]
call eax
mov dword [esp + 0x24], eax
mov ecx, 0x101f0e70
lea eax, [esp + 0x24]
push eax
call fcn.10005ad0
mov edx, dword [ebx + 4]
lea ecx, [ebx + 4]
mov ebp, eax
mov edx, dword [edx + 0x20]
call edx
mov ecx, dword [0x101f55ec]
push eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x80]
call edx
test eax, eax
je 0x10005618
cmp dword [eax + 0xac], 0
jl 0x10005618
mov edx, dword [eax + 0xb0]
add edx, eax
je 0x10005618
mov ecx, dword [0x101bf794]
mov eax, dword [edx + 8]
shl ecx, 4
add ecx, dword [0x101bf794]
lea eax, [eax + ecx*4]
add eax, edx
je 0x10005618
mov edi, dword [eax]
mov eax, dword [ebp + 0x10]
xor ebx, ebx
movss xmm0, dword [0x101b65fc]
sub eax, 2
movss dword [esp + 0x1c], xmm0
test eax, eax
jle 0x1000583f
lea edx, [edi + edi*2]
mov dword [esp + 0x34], ebp
mov edi, dword [esp + 0x14]
shl edx, 4
add edi, 0xc
mov dword [esp + 0x20], edx
or esi, 0xffffffff
nop
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
add ecx, ebx
dec eax
and ecx, eax
mov eax, dword [ebp + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x101f565c]
movss xmm0, dword [eax + edx + 0x24]
movss dword [esp + 0x18], xmm0
movss xmm0, dword [eax + edx + 0x34]
movss dword [esp + 0x28], xmm0
movss xmm0, dword [eax + edx + 0x44]
lea eax, [esp + 0x74]
push eax
movss dword [esp + 0x30], xmm0
call fcn.10003730
movq xmm0, qword [eax]
movq qword [esp + 0x5c], xmm0
movss xmm0, dword [esp + 0x5c]
subss xmm0, dword [esp + 0x18]
mov eax, dword [eax + 8]
mov dword [esp + 0x64], eax
movss dword [esp + 0x30], xmm0
fld dword [esp + 0x30]
movss dword [esp + 0x18], xmm0
movss xmm0, dword [esp + 0x60]
subss xmm0, dword [esp + 0x28]
fstp dword [esp + 0x30]
movss xmm2, dword [esp + 0x30]
mulss xmm2, xmm2
movss dword [esp + 0x28], xmm0
fld dword [esp + 0x28]
fstp dword [esp + 0x30]
movss xmm1, dword [esp + 0x30]
mulss xmm1, xmm1
movss dword [esp + 0x34], xmm0
movss xmm0, dword [esp + 0x64]
addss xmm2, xmm1
xorps xmm1, xmm1
subss xmm0, dword [esp + 0x2c]
sqrtss xmm1, xmm2
movss dword [esp + 0x30], xmm1
fld dword [esp + 0x30]
fstp dword [esp + 0x30]
divss xmm0, dword [esp + 0x30]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atanf
mulss xmm0, dword [0x101b6518]
subss xmm0, dword [edi]
movss dword [esp + 0x50], xmm0
movss xmm0, dword [esp + 0x34]
divss xmm0, dword [esp + 0x18]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atanf
movaps xmm1, xmm0
mov dword [esp + 0x58], 0
mulss xmm1, dword [0x101b6518]
movss xmm0, dword [esp + 0x18]
comiss xmm0, dword [0x101b626c]
subss xmm1, dword [edi + 4]
movss dword [esp + 0x54], xmm1
jb 0x10005788
addss xmm1, dword [0x101b6558]
movss dword [esp + 0x54], xmm1
lea ecx, [esp + 0x50]
call fcn.100aa490
movss xmm1, dword [esp + 0x50]
movss xmm0, dword [esp + 0x54]
mulss xmm1, xmm1
mov dword [esp + 0x80], 0
mulss xmm0, xmm0
addss xmm1, xmm0
movss dword [esp + 0x34], xmm1
sqrtss xmm0, dword [esp + 0x34]
movss dword [esp + 0x80], xmm0
movss xmm1, dword [esp + 0x1c]
mov eax, ebx
movss xmm0, dword [esp + 0x80]
mov edx, dword [esp + 0x20]
comiss xmm1, xmm0
minss xmm0, xmm1
cmovbe eax, esi
inc ebx
mov esi, eax
mov eax, dword [ebp + 0x10]
sub eax, 2
movaps xmm1, xmm0
movss dword [esp + 0x1c], xmm1
cmp ebx, eax
jl 0x10005650
mov dword [esp + 0x34], esi
cmp esi, 0xffffffff
mov esi, dword [esp + 0x40]
je 0x10005846
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
add ecx, dword [esp + 0x34]
dec eax
and ecx, eax
mov dword [esp + 0x44], ebp
mov eax, dword [ebp + 4]
mov ebp, dword [esp + 0x14]
mov eax, dword [eax + ecx*4]
mov ecx, edx
movss xmm0, dword [eax + ecx + 0x34]
movss xmm4, dword [eax + ecx + 0x44]
add eax, 0x24
add eax, ecx
jmp 0x10005889
mov edi, dword [esp + 0x14]
add edi, 0xc
push dword [0x101bf794]
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x78]
push eax
call fcn.100039a0
mov ebp, dword [esp + 0x14]
movss xmm0, dword [eax + 4]
movss xmm4, dword [eax + 8]
jmp 0x10005889
push dword [0x101bf794]
lea eax, [esp + 0x78]
mov ecx, ebx
push eax
call fcn.100039a0
lea edi, [ebp + 0xc]
movss xmm0, dword [eax + 4]
movss xmm4, dword [eax + 8]
movss xmm1, dword [esp + 0x6c]
movss xmm3, dword [esp + 0x68]
subss xmm1, xmm0
subss xmm3, dword [eax]
movss xmm2, dword [esp + 0x70]
subss xmm2, xmm4
movaps xmm0, xmm1
movss dword [esp + 0x44], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm3
mulss xmm1, xmm3
movss dword [esp + 0x20], xmm3
addss xmm0, xmm1
call fcn.100035f0
divss xmm2, xmm0
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atanf
mulss xmm0, dword [0x101b6518]
movss dword [esp + 0x34], xmm0
movss xmm0, dword [esp + 0x44]
divss xmm0, dword [esp + 0x20]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atanf
movaps xmm1, xmm0
mov dword [esp + 0x3c], 0
mulss xmm1, dword [0x101b6518]
movss xmm0, dword [esp + 0x20]
comiss xmm0, dword [0x101b626c]
movss dword [esp + 0x38], xmm1
jb 0x1000592b
addss xmm1, dword [0x101b6558]
movss dword [esp + 0x38], xmm1
lea ecx, [esp + 0x34]
call fcn.100aa3a0
movss xmm0, dword [edi]
lea ecx, [esp + 0x50]
subss xmm0, dword [esp + 0x34]
movss dword [esp + 0x50], xmm0
movss xmm0, dword [edi + 4]
subss xmm0, dword [esp + 0x38]
movss dword [esp + 0x54], xmm0
movss xmm0, dword [edi + 8]
subss xmm0, dword [esp + 0x3c]
movss dword [esp + 0x58], xmm0
call fcn.100aa3a0
movss xmm0, dword [edi]
lea ecx, [esp + 0x44]
subss xmm0, dword [esp + 0x50]
movss dword [esp + 0x44], xmm0
movss xmm0, dword [edi + 4]
subss xmm0, dword [esp + 0x54]
movss dword [esp + 0x48], xmm0
movss xmm0, dword [edi + 8]
subss xmm0, dword [esp + 0x58]
movss dword [esp + 0x4c], xmm0
call fcn.100aa3a0
mov ecx, esi
call fcn.100043e0
mov ebx, dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, al
je 0x100059d9
push dword [0x101f561c]
call ebx
test ax, ax
je 0x100059d9
cmp byte [0x101f5638], 0
mov ebx, edi
je 0x10005a13
mov ebx, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, esi
call fcn.100043e0
test al, al
je 0x10005ab2
push dword [0x101f561c]
call ebx
test ax, ax
je 0x10005ab2
cmp byte [0x101f5638], 0
je 0x10005ab2
test byte [ebp + 0x30], 1
je 0x10005ab2
lea ebx, [ebp + 0xc]
mov eax, dword [0x101f5654]
mov ebp, dword [0x101f565c]
test eax, eax
jne 0x10005a50
mov edx, 0xe80c2f78
mov ecx, 0x1014a9f1
call fcn.10003700
mov edx, 0xc10bf213
mov ecx, 0x1014a935
mov esi, eax
call fcn.10003700
mov edx, esi
mov ecx, eax
call fcn.100aa660
mov dword [0x101f5654], eax
movss xmm2, dword [0x101f5e70]
movss xmm3, dword [esp + 0x44]
movaps xmm0, xmm2
mulss xmm0, dword [eax + ebp]
movss xmm1, dword [esp + 0x48]
subss xmm3, xmm0
movaps xmm0, xmm2
mulss xmm0, dword [eax + ebp + 4]
mulss xmm2, dword [eax + ebp + 8]
subss xmm1, xmm0
movss dword [ebx], xmm3
movss xmm0, dword [esp + 0x4c]
subss xmm0, xmm2
movss dword [ebx + 4], xmm1
movss dword [ebx + 8], xmm0
cmp byte [0x101f5648], 0
jne 0x10005ab2
mov ecx, dword [0x101bf77c]
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x4c]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret