Function at 0x1006f670
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100adcfd
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x100df00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x100df5c8], 0
je 0x1006f9bf
mov esi, dword [ebp + 8]
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 0x210]
call eax
test al, al
je 0x1006f9bf
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100e1a08]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x100e7770]
mov dword [ebp - 0x18], ecx
cmp eax, dword [ecx + 4]
jle 0x1006f715
push 0x100e7770
call fcn.100a68e6
add esp, 4
cmp dword [0x100e7770], 0xffffffff
jne 0x1006f715
push 0x100e7770
mov dword [0x100e77b4], 0
mov dword [0x100e77b0], 0x100df680
call fcn.100a689c
add esp, 4
mov eax, dword [0x100e77b0]
mov eax, dword [eax]
test eax, eax
jne 0x1006f727
mov dword [0x100e77b4], eax
jmp 0x1006f76b
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x100e77b4], eax
je 0x1006f76b
mov ecx, dword [0x100e4750]
mov eax, dword [ecx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
jne 0x1006f76b
mov ecx, dword [0x100e4750]
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
call eax
test al, al
je 0x1006f76b
push dword [0x100df670]
push esi
call fcn.1006f9e0
cmp byte [0x100df7cc], 0
je 0x1006f791
mov edi, dword [ebp + 0xc]
mov eax, dword [0x100e4eb4]
cmp eax, dword [edi + 0x2c]
je 0x1006f789
push 0x64
push esi
call fcn.1006f9e0
mov eax, dword [edi + 0x2c]
mov dword [0x100e4eb4], eax
cmp byte [0x100df7c4], 0
je 0x1006f9bf
mov ecx, dword [0x100e4790]
mov edi, 1
mov eax, dword [ecx]
call dword [eax + 0x18]
cmp eax, edi
jle 0x1006f9bf
mov ecx, dword [0x100e4790]
push edi
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebx, eax
mov dword [ebp - 0x14], ebx
test ebx, ebx
je 0x1006f9ab
mov esi, dword [ebp - 0x18]
mov ecx, dword [0x100e4858]
cmp ecx, dword [esi + 4]
jle 0x1006f82d
push 0x100e4858
call fcn.100a68e6
mov ecx, dword [0x100e4858]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1006f82d
mov edx, str.m_iTeamNum
mov dword [ebp - 4], 0
mov ecx, str.CBaseEntity
call fcn.100083c0
push 0x100e4858
mov dword [0x100e4860], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100a689c
mov ecx, dword [0x100e4858]
add esp, 4
mov eax, dword [ebp - 0x18]
mov esi, dword [0x100e4860]
cmp ecx, dword [eax + 4]
jle 0x1006f883
push 0x100e4858
call fcn.100a68e6
add esp, 4
cmp dword [0x100e4858], 0xffffffff
jne 0x1006f883
mov edx, str.m_iTeamNum
mov dword [ebp - 4], 1
mov ecx, str.CBaseEntity
call fcn.100083c0
push 0x100e4858
mov dword [0x100e4860], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100a689c
add esp, 4
mov eax, dword [0x100e4860]
mov edx, dword [ebp + 8]
mov ecx, dword [esi + ebx]
cmp ecx, dword [eax + edx]
je 0x1006f9ab
mov eax, dword [0x100e4788]
lea ecx, [ebx + 4]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x24]
mov ecx, dword [0x100e4788]
push eax
call esi
mov ecx, eax
mov edx, str.models_props_trainyard_bomb_cart.mdl
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [edx]
jne 0x1006f8e0
test bl, bl
je 0x1006f8dc
mov bl, byte [eax + 1]
cmp bl, byte [edx + 1]
jne 0x1006f8e0
add eax, 2
add edx, 2
test bl, bl
jne 0x1006f8c0
xor eax, eax
jmp 0x1006f8e5
sbb eax, eax
or eax, 1
test eax, eax
je 0x1006f91d
mov eax, str.models_props_trainyard_bomb_cart_red.mdl
nop
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x1006f910
test dl, dl
je 0x1006f90c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x1006f910
add ecx, 2
add eax, 2
test dl, dl
jne 0x1006f8f0
xor eax, eax
jmp 0x1006f915
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1006f9ab
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx]
call dword [eax + 0x24]
mov esi, dword [ebp + 8]
mov ecx, esi
movss xmm0, dword [eax]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [esi]
movss dword [ebp - 0x20], xmm0
call dword [eax + 0x24]
movss xmm2, dword [eax]
movss xmm0, dword [eax + 4]
subss xmm0, dword [ebp - 0x1c]
subss xmm2, dword [ebp - 0x14]
movss xmm1, dword [eax + 8]
subss xmm1, dword [ebp - 0x20]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.10009890
call fcn.10009890
movss xmm1, dword [0x100d3a6c]
maxss xmm1, xmm0
movss xmm0, dword [0x100d3acc]
comiss xmm0, xmm1
jbe 0x1006f9ab
push 0x9c4
push esi
call fcn.1006f9e0
mov ecx, dword [0x100e4790]
inc edi
mov eax, dword [ecx]
call dword [eax + 0x18]
cmp edi, eax
jl 0x1006f7b6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100a6425
mov esp, ebp
pop ebp
ret 8