Function at 0x100ffa10
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10132b8d
push eax
mov dword fs:[0], esp
sub esp, 0x44
cmp byte [0x10289c4d], 0
je 0x100fff2c
cmp byte [0x101d6068], 0
je 0x100fff2c
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x100fff2c
mov ecx, dword [0x101d5f68]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test al, al
jne 0x100fff2c
mov ecx, dword [0x101d602c]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
test al, al
jne 0x100fff2c
mov eax, dword fs:[0x2c]
mov ecx, dword [0x101d5a74]
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x101d5f30]
cmp eax, dword [esi + 4]
jle 0x100ffaea
push 0x101d5f30
call fcn.1012b230
add esp, 4
cmp dword [0x101d5f30], 0xffffffff
jne 0x100ffaea
push str.m_iClass
push str.m_PlayerClass
push str.DT_TFPlayer
mov dword [ebp - 4], 0
call fcn.10018010
push 0x101d5f30
mov dword [0x101d5f40], eax
mov dword [ebp - 4], 0xffffffff
call fcn.1012b1df
add esp, 4
mov eax, dword [0x101d5f40]
push edi
mov edi, dword [ebp + 0xc]
cmp dword [eax + edi], 3
jne 0x100fff2a
mov ecx, edi
call fcn.10014740
test al, al
je 0x100fff2a
mov ecx, edi
call fcn.10014390
shr eax, 1
test al, 1
jne 0x100fff2a
mov eax, dword [0x101d6054]
cmp eax, dword [esi + 4]
jle 0x100ffb6f
push 0x101d6054
call fcn.1012b230
add esp, 4
cmp dword [0x101d6054], 0xffffffff
jne 0x100ffb6f
push str.m_iHealth
push str.DT_BasePlayer
mov dword [ebp - 4], 1
call fcn.10017f20
push 0x101d6054
mov dword [0x101d607c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.1012b1df
add esp, 4
mov eax, dword [0x101d607c]
cmp dword [eax + edi], 0x3c
jge 0x100ffb87
cmp byte [0x101cf2dc], 0
jne 0x100fff2a
mov eax, dword [0x101d3584]
mov dword [ebp + 0xc], eax
test eax, eax
je 0x100fff2a
mov ecx, eax
call fcn.100fc9e0
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 0x24]
test al, al
je 0x100ffbc0
or ecx, 1
pop edi
mov dword [esi + 0x24], ecx
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 1
je 0x100ffbcb
and ecx, 0xfffffffe
mov dword [esi + 0x24], ecx
mov eax, dword [0x101d5f04]
cmp eax, 0x2da
je 0x100fff2a
cmp eax, 0x1b9
je 0x100fff2a
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x528]
call eax
test eax, eax
jne 0x100fff2a
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
call fcn.10021c70
movss xmm0, dword [0x101bebc0]
movss xmm1, dword [eax + 8]
comiss xmm0, xmm1
mov eax, dword [esi + 0x24]
jbe 0x100fff24
or eax, 3
mov ecx, edi
mov dword [esi + 0x24], eax
lea eax, [ebp - 0x38]
push eax
call fcn.10014680
movss xmm1, dword [0x101bece4]
movss xmm2, dword [ebp - 0x38]
comiss xmm2, xmm1
jbe 0x100ffc77
movss xmm0, dword [0x101be950]
comiss xmm0, xmm2
jbe 0x100ffc77
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm1
jbe 0x100ffc77
comiss xmm0, xmm2
jbe 0x100ffc77
movss xmm2, dword [ebp - 0x30]
comiss xmm2, xmm1
jbe 0x100ffc77
comiss xmm0, xmm2
jbe 0x100ffc77
movss xmm0, dword [0x101bebdc]
jmp 0x100ffc7f
movss xmm0, dword [0x101beba4]
lea edx, [ebp - 0x38]
movss dword [ebp + 0xc], xmm0
lea ecx, [ebp - 0x50]
movss dword [ebp - 0x44], xmm0
call fcn.10011810
cmp dword [0x101d5f04], 0x201
mov dword [ebp - 0x3c], 0
movss xmm3, dword [eax + 4]
subss xmm3, dword [0x101bec0c]
movss dword [ebp - 0x40], xmm3
je 0x100ffee5
movss xmm1, dword [0x101bece4]
movss xmm2, dword [ebp - 0x38]
comiss xmm2, xmm1
jbe 0x100ffcfe
movss xmm0, dword [0x101be950]
comiss xmm0, xmm2
jbe 0x100ffcfe
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm1
jbe 0x100ffcfe
comiss xmm0, xmm2
jbe 0x100ffcfe
movss xmm2, dword [ebp - 0x30]
comiss xmm2, xmm1
jbe 0x100ffcfe
comiss xmm0, xmm2
ja 0x100ffee5
movss xmm1, dword [ebp + 0xc]
lea eax, [ebp - 0x10]
movss xmm0, dword [0x101be95c]
mulss xmm1, xmm0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], eax
movss dword [ebp + 0xc], xmm1
fld dword [ebp + 0xc]
fsincos
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
fstp dword [edx]
fstp dword [eax]
lea eax, [ebp + 8]
mulss xmm3, xmm0
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x20], eax
movss dword [ebp + 0xc], xmm3
fld dword [ebp + 0xc]
fsincos
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
fstp dword [edx]
fstp dword [eax]
lea eax, [ebp - 0x14]
mov dword [ebp + 0xc], 0
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x20], eax
fld dword [ebp + 0xc]
fsincos
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [ebp - 0x10]
mulss xmm0, dword [ebp + 8]
movss xmm3, dword [ebp - 0x1c]
movss xmm5, dword [0x101bf2a0]
movaps xmm6, xmm3
movss xmm4, dword [ebp - 0x28]
xorps xmm6, xmm5
movss xmm1, dword [ebp - 0x18]
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x10]
mulss xmm0, xmm3
movss xmm2, dword [ebp - 0x18]
mulss xmm2, dword [ebp - 0x14]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x18]
xorps xmm0, xmm5
mulss xmm1, xmm4
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x14]
mulss xmm0, dword [0x101bed00]
movss dword [ebp + 0xc], xmm0
movss xmm7, dword [ebp + 0xc]
mulss xmm7, dword [ebp + 8]
mulss xmm6, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [ebp + 8]
mulss xmm1, xmm3
movaps xmm3, xmm7
subss xmm6, xmm0
movaps xmm0, xmm4
xorps xmm0, xmm5
movss xmm5, dword [ebp - 0x20]
mulss xmm0, dword [ebp - 0x1c]
subss xmm3, xmm1
movaps xmm1, xmm4
mulss xmm4, dword [ebp + 8]
mulss xmm1, dword [0x101bed00]
movss dword [ebp + 0xc], xmm3
movaps xmm3, xmm2
mulss xmm2, dword [ebp - 0x1c]
mulss xmm3, dword [ebp + 8]
mulss xmm1, dword [ebp - 0x10]
subss xmm2, xmm4
movss xmm4, dword [ebp - 0x24]
subss xmm3, xmm0
movss xmm0, dword [ebp - 0x10]
mulss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x28], xmm1
movss xmm1, dword [0x101beb40]
movss dword [ebp + 8], xmm2
movss xmm2, dword [0x101beb80]
mulss xmm4, xmm2
mulss xmm6, xmm1
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x101beae4]
subss xmm4, xmm6
mulss xmm3, xmm0
subss xmm4, xmm3
movss dword [ebp - 0x50], xmm4
movss xmm3, dword [ebp + 0xc]
lea edx, [ebp - 0x44]
movss xmm4, dword [ebp + 8]
lea ecx, [ebp - 0x50]
mulss xmm3, xmm1
mulss xmm5, xmm2
mulss xmm4, xmm0
subss xmm5, xmm3
movss xmm3, dword [ebp - 0x2c]
mulss xmm3, xmm2
movss xmm2, dword [ebp - 0x28]
mulss xmm2, xmm1
movss xmm1, dword [ebp - 0x1c]
subss xmm5, xmm4
mulss xmm1, xmm0
subss xmm3, xmm2
movss dword [ebp - 0x4c], xmm5
subss xmm3, xmm1
movss dword [ebp - 0x48], xmm3
call fcn.10038f20
lea ecx, [ebp - 0x44]
call fcn.1003a830
movss xmm0, dword [ebp - 0x44]
movss dword [esi + 0xc], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [esi + 0x10], xmm0
movss xmm0, dword [ebp - 0x3c]
pop edi
movss dword [esi + 0x14], xmm0
mov byte [0x102899d1], 1
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
or eax, 4
mov dword [esi + 0x24], eax
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8