Function at 0x1015c240
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1019183d
push eax
mov dword fs:[0], esp
sub esp, 0x40
cmp byte [0x10303394], 0
je 0x1015c754
cmp byte [0x102fd99c], 0
je 0x1015c754
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1015c754
mov ecx, dword [0x102fd8c0]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test al, al
jne 0x1015c754
mov ecx, dword [0x102fd964]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
test al, al
jne 0x1015c754
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10243ad0]
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x102fd824]
cmp eax, dword [esi + 4]
jle 0x1015c31a
push 0x102fd824
call fcn.10189be4
add esp, 4
cmp dword [0x102fd824], 0xffffffff
jne 0x1015c31a
push str.m_iClass
push str.m_PlayerClass
push str.DT_TFPlayer
mov dword [ebp - 4], 0
call fcn.1006e8a0
push 0x102fd824
mov dword [0x102fd834], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10189b93
add esp, 4
mov eax, dword [0x102fd834]
push edi
mov edi, dword [ebp + 0xc]
cmp dword [eax + edi], 3
jne 0x1015c752
mov ecx, edi
call fcn.1006b0c0
test al, al
je 0x1015c752
mov ecx, edi
call fcn.1006ad00
shr eax, 1
test al, 1
jne 0x1015c752
mov eax, dword [0x102fd984]
cmp eax, dword [esi + 4]
jle 0x1015c39f
push 0x102fd984
call fcn.10189be4
add esp, 4
cmp dword [0x102fd984], 0xffffffff
jne 0x1015c39f
push str.m_iHealth
push str.DT_BasePlayer
mov dword [ebp - 4], 1
call fcn.1006e7b0
push 0x102fd984
mov dword [0x102fd9a8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10189b93
add esp, 4
mov eax, dword [0x102fd9a8]
cmp dword [eax + edi], 0x3c
jge 0x1015c3b7
cmp byte [0x10303a9c], 0
jne 0x1015c752
mov eax, dword [0x102412a4]
mov dword [ebp + 0xc], eax
test eax, eax
je 0x1015c752
mov ecx, eax
call fcn.101591a0
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 0x24]
test al, al
je 0x1015c3f0
or ecx, 1
pop edi
mov dword [esi + 0x24], ecx
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 1
je 0x1015c3fb
and ecx, 0xfffffffe
mov dword [esi + 0x24], ecx
mov eax, dword [0x102fd830]
cmp eax, 0x2da
je 0x1015c752
cmp eax, 0x1b9
je 0x1015c752
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x528]
call eax
test eax, eax
jne 0x1015c752
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.100786b0
movss xmm0, dword [0x1022b8a0]
movss xmm1, dword [eax + 8]
comiss xmm0, xmm1
mov eax, dword [esi + 0x24]
jbe 0x1015c74c
or eax, 3
mov ecx, edi
mov dword [esi + 0x24], eax
lea eax, [ebp - 0x34]
push eax
call fcn.1006b000
movss xmm1, dword [0x1022b9ec]
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm1
jbe 0x1015c4a1
movss xmm0, dword [0x1022b614]
comiss xmm0, xmm2
jbe 0x1015c4a1
movss xmm2, dword [ebp - 0x30]
comiss xmm2, xmm1
jbe 0x1015c4a1
comiss xmm0, xmm2
jbe 0x1015c4a1
movss xmm2, dword [ebp - 0x2c]
comiss xmm2, xmm1
jbe 0x1015c4a1
comiss xmm0, xmm2
jbe 0x1015c4a1
mov al, 1
jmp 0x1015c4a3
xor al, al
test al, al
je 0x1015c4b1
movss xmm0, dword [0x1022b8b8]
jmp 0x1015c4b9
movss xmm0, dword [0x1022b884]
lea edx, [ebp - 0x34]
movss dword [ebp + 0xc], xmm0
lea ecx, [ebp - 0x4c]
movss dword [ebp - 0x40], xmm0
call fcn.100683e0
cmp dword [0x102fd830], 0x201
mov dword [ebp - 0x38], 0
movss xmm3, dword [eax + 4]
subss xmm3, dword [0x1022b8ec]
movss dword [ebp - 0x3c], xmm3
je 0x1015c70d
movss xmm1, dword [0x1022b9ec]
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm1
jbe 0x1015c538
movss xmm0, dword [0x1022b614]
comiss xmm0, xmm2
jbe 0x1015c538
movss xmm2, dword [ebp - 0x30]
comiss xmm2, xmm1
jbe 0x1015c538
comiss xmm0, xmm2
jbe 0x1015c538
movss xmm2, dword [ebp - 0x2c]
comiss xmm2, xmm1
jbe 0x1015c538
comiss xmm0, xmm2
jbe 0x1015c538
mov al, 1
jmp 0x1015c53a
xor al, al
test al, al
jne 0x1015c70d
movss xmm0, dword [0x1022b630]
lea eax, [ebp - 0x14]
movss xmm1, dword [ebp + 0xc]
mulss xmm1, xmm0
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], eax
movss dword [ebp + 8], xmm1
fld dword [ebp + 8]
fsincos
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
fstp dword [edx]
fstp dword [eax]
lea eax, [ebp + 0xc]
mulss xmm3, xmm0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
movss dword [ebp + 8], xmm3
fld dword [ebp + 8]
fsincos
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
fstp dword [edx]
fstp dword [eax]
lea eax, [ebp - 0x10]
mov dword [ebp + 8], 0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x1c], eax
fld dword [ebp + 8]
fsincos
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [ebp - 0x14]
movss xmm5, dword [ebp - 0x24]
movaps xmm1, xmm0
mulss xmm1, dword [ebp + 0xc]
movss xmm4, dword [ebp - 0x28]
movss xmm6, dword [ebp - 0x18]
movss dword [ebp - 0x20], xmm1
movaps xmm3, xmm6
xorps xmm3, xmmword [0x1022bdc0]
movaps xmm1, xmm5
xorps xmm1, xmmword [0x1022bdc0]
movaps xmm7, xmm3
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [ebp - 0x10]
mulss xmm1, dword [0x1022ba08]
mulss xmm0, xmm6
movss dword [ebp + 8], xmm1
movaps xmm1, xmm4
mulss xmm7, dword [ebp + 8]
movss dword [ebp - 0x1c], xmm0
mulss xmm1, xmm5
mulss xmm3, xmm4
movaps xmm0, xmm1
mulss xmm1, xmm6
mulss xmm0, dword [ebp + 0xc]
movss xmm6, dword [ebp - 0x10]
mulss xmm6, xmm5
subss xmm7, xmm0
movss xmm5, dword [ebp - 0x10]
movss xmm0, dword [ebp + 8]
mulss xmm0, dword [ebp + 0xc]
movaps xmm2, xmm6
mulss xmm2, dword [ebp + 0xc]
mulss xmm6, dword [ebp - 0x18]
subss xmm0, xmm1
movss xmm1, dword [0x1022b818]
subss xmm2, xmm3
movss xmm3, dword [0x1022b85c]
mulss xmm5, dword [ebp - 0x14]
movss dword [ebp + 8], xmm0
movaps xmm0, xmm4
mulss xmm4, dword [ebp + 0xc]
mulss xmm0, dword [0x1022ba08]
subss xmm6, xmm4
mulss xmm7, xmm1
mulss xmm0, dword [ebp - 0x14]
movss xmm4, dword [ebp - 0x20]
mulss xmm4, xmm3
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [0x1022b7b0]
subss xmm4, xmm7
mulss xmm2, xmm0
subss xmm4, xmm2
movss xmm2, dword [ebp + 8]
mulss xmm2, xmm1
movss dword [ebp - 0x4c], xmm4
movss xmm4, dword [ebp - 0x1c]
mulss xmm4, xmm3
subss xmm4, xmm2
movss xmm2, dword [ebp - 0x28]
lea edx, [ebp - 0x40]
mulss xmm6, xmm0
lea ecx, [ebp - 0x4c]
mulss xmm2, xmm1
subss xmm4, xmm6
mulss xmm5, xmm0
movss dword [ebp - 0x48], xmm4
movss xmm4, dword [ebp - 0x24]
mulss xmm4, xmm3
subss xmm4, xmm2
subss xmm4, xmm5
movss dword [ebp - 0x44], xmm4
call fcn.10078570
lea ecx, [ebp - 0x40]
call fcn.1008da50
movss xmm0, dword [ebp - 0x40]
movss dword [esi + 0xc], xmm0
movss xmm0, dword [ebp - 0x3c]
movss dword [esi + 0x10], xmm0
movss xmm0, dword [ebp - 0x38]
pop edi
movss dword [esi + 0x14], xmm0
mov byte [0x102fda18], 1
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
or eax, 4
mov dword [esi + 0x24], eax
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8