Function at 0x100c3da0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ee579
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x10112040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x101160d0]
mov ebx, dword [0x101178c8]
mov edi, dword [ebp + 0xc]
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x100c3dec
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
test al, al
jne 0x100c3e85
mov ecx, dword [0x10115ffc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x100c3e85
mov eax, dword [0x101160d0]
push edi
vmovss xmm0, dword [eax + 0x4b20]
mov eax, dword [0x101160a4]
vmovss dword [ebp - 0x10], xmm0
vmovss xmm0, dword [eax + 0x10]
mov esi, dword [eax + 0x18]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [eax + 0xc]
vmovss dword [ebp - 0x18], xmm0
call dword [sym.ateris.dll_void____cdecl___bool__CL_ReadPackets::OriginalFunction]
mov ecx, dword [0x101160a4]
add esp, 4
mov edx, dword [0x101160d0]
vmovss xmm0, dword [ebp - 0x10]
mov eax, dword [edx + 0x4b20]
mov dword [ebx], eax
mov eax, dword [ecx + 0x10]
mov dword [ebx + 4], eax
mov eax, dword [ecx + 0xc]
mov dword [ebx + 8], eax
mov eax, dword [ecx + 0x18]
mov dword [ebx + 0xc], eax
vmovss dword [edx + 0x4b20], xmm0
vmovss xmm0, dword [ebp - 0x14]
vmovss dword [ecx + 0x10], xmm0
vmovss xmm0, dword [ebp - 0x18]
vmovss dword [ecx + 0xc], xmm0
mov dword [ecx + 0x18], esi
jmp 0x100c3e8b
mov edx, dword [0x101160d0]
mov esi, dword [0x101178c8]
test edx, edx
je 0x100c3f11
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x100c3f11
mov eax, dword [ecx]
push 0
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x18], eax
call dword [ebp - 0x18]
fmul dword [0x10100e58]
mov eax, dword [esi + 0x14]
fstp dword [ebp - 0x18]
vcvttss2si ebx, dword [ebp - 0x18]
sub eax, ebx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x14
jg 0x100c3eef
mov eax, dword [0x101160d0]
push 1
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x18], eax
call dword [ebp - 0x18]
mov eax, dword [0x101160a4]
fstp dword [ebp - 0x18]
vmovss xmm0, dword [ebp - 0x18]
vcomiss xmm0, dword [eax + 0x1c]
jbe 0x100c3f09
mov ecx, dword [0x10115ffc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x18], eax
call dword [ebp - 0x18]
fadd dword [0x10100bf8]
fstp dword [esi + 0x1c]
cmp dword [esi + 0x14], ebx
je 0x100c3f11
mov dword [esi + 0x14], ebx
mov ecx, dword [0x10115ffc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x100c4308
mov esi, dword [0x10116080]
test esi, esi
je 0x100c4308
mov ebx, dword fs:[0x2c]
mov ecx, dword [0x10115fb4]
mov eax, dword [0x10116050]
mov ecx, dword [ebx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x100c3f96
push 0x10116050
call fcn.100e1f99
add esp, 4
cmp dword [0x10116050], 0xffffffff
jne 0x100c3f96
push str.m_lifeState
push str.CBasePlayer
mov dword [ebp - 4], 0
call fcn.100e1150
push 0x10116050
mov dword [0x10116010], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e1f48
add esp, 4
mov eax, dword [0x10116010]
cmp byte [eax + esi], 0
jne 0x100c4308
mov ecx, dword [0x10117880]
mov eax, dword [ecx + 0xa8]
cmp byte [eax], 0
jne 0x100c430e
mov eax, dword [0x101178b0]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x30]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
test ax, ax
jns 0x100c4051
cmp dword [0x10116228], 0
jne 0x100c3ff6
push str.Team_Fortress_2
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x10116228], eax
jmp 0x100c4051
call esi
cmp eax, dword [0x10116228]
jne 0x100c4051
mov ecx, dword [0x10116098]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
test al, al
jne 0x100c4051
mov ecx, dword [0x10117880]
cmp byte [ecx + 0x14], al
jne 0x100c4057
cmp byte [ecx + 0x15], al
jne 0x100c4061
cmp dword [ecx + 8], 0
jne 0x100c4057
cmp dword [ecx], 0x16
jge 0x100c4057
mov eax, dword [0x101178b0]
mov edx, dword [eax + 0x14]
mov eax, dword [edx + 0x24]
cmp byte [eax], 0
jne 0x100c404d
mov eax, dword [edx + 0x28]
cmp byte [eax], 0
jne 0x100c404d
mov byte [ecx + 0x14], 1
jmp 0x100c4051
mov byte [ecx + 0x15], 1
mov ecx, dword [0x10117880]
cmp byte [ecx + 0x15], 0
je 0x100c413e
mov eax, dword [ecx + 0x84]
cmp byte [eax + 1], 0
jne 0x100c413e
mov byte [ecx + 0x14], 1
mov eax, dword [0x10117880]
mov byte [eax + 0x15], 0
vmovss xmm0, dword [ebp + 8]
push edi
push ecx
vmovss dword [esp], xmm0
call dword [sym.ateris.dll_void____cdecl___float__bool__CL_Move::OriginalFunction]
mov eax, dword [0x101178b0]
add esp, 8
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x30]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x100c40cb
cmp dword [0x10116228], 0
jne 0x100c4273
push str.Team_Fortress_2
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x10116228], eax
sub esp, 0x28
mov ecx, esp
mov dword [ecx + 0x24], 0
cmp dword [sym.ateris.dll_void____cdecl___float__bool__CL_Move::OriginalFunction], 0
je 0x100c40f1
mov dword [ecx], vtable.std::_Func_impl_no_alloc_void____cdecl___float__bool___void__float__bool_.0
mov eax, dword [sym.ateris.dll_void____cdecl___float__bool__CL_Move::OriginalFunction]
mov dword [ecx + 4], eax
mov dword [ecx + 0x24], ecx
vmovss xmm1, dword [ebp + 8]
push edi
call fcn.1009c400
mov ecx, dword [0x10117880]
cmp byte [ecx + 0x16], 0
jne 0x100c433e
mov eax, dword [ecx + 0x10]
test eax, eax
jle 0x100c411d
dec eax
mov dword [ecx + 0x10], eax
mov ecx, dword [0x10117880]
mov eax, dword [ecx + 0xc]
test eax, eax
jle 0x100c42a4
dec eax
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ecx + 0x14], 0
je 0x100c407e
inc dword [ecx]
mov eax, dword [0x10117880]
dec dword [eax + 4]
mov eax, dword [0x10117880]
cmp dword [eax], 0x16
jl 0x100c4160
mov byte [eax + 0x14], 0
mov eax, dword [0x10117880]
cmp byte [eax + 0x14], 0
je 0x100c433e
mov eax, dword [0x10115fb4]
mov edi, dword [0x10116080]
mov esi, dword [ebx + eax*4]
mov eax, dword [0x1011609c]
cmp eax, dword [esi + 4]
jle 0x100c41cf
push 0x1011609c
call fcn.100e1f99
add esp, 4
cmp dword [0x1011609c], 0xffffffff
jne 0x100c41cf
push str.m_iClass
push str.CTFPlayer
mov dword [ebp - 4], 1
call fcn.100e1150
push 0x1011609c
mov dword [0x1011608c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e1f48
add esp, 4
mov eax, dword [0x1011608c]
cmp dword [eax + edi], 4
jne 0x100c41f7
mov ecx, dword [0x10116000]
test ecx, ecx
je 0x100c41f7
mov eax, dword [ecx]
mov eax, dword [eax + 0x528]
call eax
cmp eax, 1
je 0x100c433e
mov eax, dword [0x1011609c]
mov edi, dword [0x10116080]
cmp eax, dword [esi + 4]
jle 0x100c4248
push 0x1011609c
call fcn.100e1f99
add esp, 4
cmp dword [0x1011609c], 0xffffffff
jne 0x100c4248
push str.m_iClass
push str.CTFPlayer
mov dword [ebp - 4], 2
call fcn.100e1150
push 0x1011609c
mov dword [0x1011608c], eax
call fcn.100e1f48
add esp, 4
mov eax, dword [0x1011608c]
xor ecx, ecx
cmp dword [eax + edi], 6
mov eax, dword [0x10117880]
setne cl
add ecx, 3
mov dword [eax + 0xc], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call esi
cmp eax, dword [0x10116228]
jne 0x100c40cb
mov ecx, dword [0x10116098]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
test al, al
jne 0x100c40cb
mov ecx, dword [0x10117880]
jmp 0x100c410c
cmp dword [ecx + 8], 0
jle 0x100c433e
nop
mov eax, dword [ecx]
test eax, eax
jle 0x100c433e
vmovss xmm0, dword [ebp + 8]
dec eax
mov dword [ecx], eax
mov eax, dword [0x10117880]
push edi
push ecx
vmovss dword [esp], xmm0
dec dword [eax + 8]
mov eax, dword [0x10117880]
dec dword [eax + 0x10]
mov eax, dword [0x10117880]
inc dword [eax + 4]
call dword [sym.ateris.dll_void____cdecl___float__bool__CL_Move::OriginalFunction]
mov ecx, dword [0x10117880]
add esp, 8
cmp dword [ecx + 8], 0
jg 0x100c42b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x10117880]
vmovss xmm0, dword [ebp + 8]
mov dword [ecx], 0
mov eax, dword [0x10117880]
push edi
push ecx
vmovss dword [esp], xmm0
mov dword [eax + 4], 0x16
mov eax, dword [0x10117880]
mov byte [eax + 0x14], 0
call dword [sym.ateris.dll_void____cdecl___float__bool__CL_Move::OriginalFunction]
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret