Function at 0x1016a810
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x101a085d
push eax
mov dword fs:[0], esp
sub esp, 0x44
cmp byte [0x1031cb1c], 0
je 0x1016ad2c
cmp byte [0x10316864], 0
je 0x1016ad2c
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1016ad2c
mov ecx, dword [0x10316784]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test al, al
jne 0x1016ad2c
mov ecx, dword [0x10316830]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
test al, al
jne 0x1016ad2c
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10255374]
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x103166f4]
cmp eax, dword [esi + 4]
jle 0x1016a8ea
push 0x103166f4
call fcn.101987e8
add esp, 4
cmp dword [0x103166f4], 0xffffffff
jne 0x1016a8ea
push str.m_iClass
push str.m_PlayerClass
push str.DT_TFPlayer
mov dword [ebp - 4], 0
call fcn.1007c680
push 0x103166f4
mov dword [0x10316704], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10198797
add esp, 4
mov eax, dword [0x10316704]
push edi
mov edi, dword [ebp + 0xc]
cmp dword [eax + edi], 3
jne 0x1016ad2a
mov ecx, edi
call fcn.10079030
test al, al
je 0x1016ad2a
mov ecx, edi
call fcn.10078c70
shr eax, 1
test al, 1
jne 0x1016ad2a
mov eax, dword [0x10316850]
cmp eax, dword [esi + 4]
jle 0x1016a96f
push 0x10316850
call fcn.101987e8
add esp, 4
cmp dword [0x10316850], 0xffffffff
jne 0x1016a96f
push str.m_iHealth
push str.DT_BasePlayer
mov dword [ebp - 4], 1
call fcn.1007c590
push 0x10316850
mov dword [0x10316874], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10198797
add esp, 4
mov eax, dword [0x10316874]
cmp dword [eax + edi], 0x3c
jge 0x1016a987
cmp byte [0x1031d224], 0
jne 0x1016ad2a
mov eax, dword [0x10253214]
mov dword [ebp + 0xc], eax
test eax, eax
je 0x1016ad2a
mov ecx, eax
call fcn.101677e0
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 0x24]
test al, al
je 0x1016a9c0
or ecx, 1
pop edi
mov dword [esi + 0x24], ecx
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 1
je 0x1016a9cb
and ecx, 0xfffffffe
mov dword [esi + 0x24], ecx
mov eax, dword [0x10316700]
cmp eax, 0x2da
je 0x1016ad2a
cmp eax, 0x1b9
je 0x1016ad2a
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x528]
call eax
test eax, eax
jne 0x1016ad2a
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
call fcn.10086020
movss xmm0, dword [0x1023d2d0]
movss xmm1, dword [eax + 8]
comiss xmm0, xmm1
mov eax, dword [esi + 0x24]
jbe 0x1016ad24
or eax, 3
mov ecx, edi
mov dword [esi + 0x24], eax
lea eax, [ebp - 0x38]
push eax
call fcn.10078f70
movss xmm1, dword [0x1023d424]
movss xmm2, dword [ebp - 0x38]
comiss xmm2, xmm1
jbe 0x1016aa77
movss xmm0, dword [0x1023d03c]
comiss xmm0, xmm2
jbe 0x1016aa77
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm1
jbe 0x1016aa77
comiss xmm0, xmm2
jbe 0x1016aa77
movss xmm2, dword [ebp - 0x30]
comiss xmm2, xmm1
jbe 0x1016aa77
comiss xmm0, xmm2
jbe 0x1016aa77
movss xmm0, dword [0x1023d2e8]
jmp 0x1016aa7f
movss xmm0, dword [0x1023d2b4]
lea edx, [ebp - 0x38]
movss dword [ebp + 0xc], xmm0
lea ecx, [ebp - 0x50]
movss dword [ebp - 0x44], xmm0
call fcn.100760f0
cmp dword [0x10316700], 0x201
mov dword [ebp - 0x3c], 0
movss xmm3, dword [eax + 4]
subss xmm3, dword [0x1023d318]
movss dword [ebp - 0x40], xmm3
je 0x1016ace5
movss xmm1, dword [0x1023d424]
movss xmm2, dword [ebp - 0x38]
comiss xmm2, xmm1
jbe 0x1016aafe
movss xmm0, dword [0x1023d03c]
comiss xmm0, xmm2
jbe 0x1016aafe
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm1
jbe 0x1016aafe
comiss xmm0, xmm2
jbe 0x1016aafe
movss xmm2, dword [ebp - 0x30]
comiss xmm2, xmm1
jbe 0x1016aafe
comiss xmm0, xmm2
ja 0x1016ace5
movss xmm1, dword [ebp + 0xc]
lea eax, [ebp - 0x10]
movss xmm0, dword [0x1023d058]
mulss xmm1, xmm0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], eax
movss dword [ebp + 0xc], xmm1
fld dword [ebp + 0xc]
fsincos
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
fstp dword [edx]
fstp dword [eax]
lea eax, [ebp + 8]
mulss xmm3, xmm0
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x20], eax
movss dword [ebp + 0xc], xmm3
fld dword [ebp + 0xc]
fsincos
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
fstp dword [edx]
fstp dword [eax]
lea eax, [ebp - 0x14]
mov dword [ebp + 0xc], 0
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x20], eax
fld dword [ebp + 0xc]
fsincos
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [ebp - 0x10]
mulss xmm0, dword [ebp + 8]
movss xmm3, dword [ebp - 0x1c]
movss xmm5, dword [0x1023da60]
movaps xmm6, xmm3
movss xmm4, dword [ebp - 0x28]
xorps xmm6, xmm5
movss xmm1, dword [ebp - 0x18]
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x10]
mulss xmm0, xmm3
movss xmm2, dword [ebp - 0x18]
mulss xmm2, dword [ebp - 0x14]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x18]
xorps xmm0, xmm5
mulss xmm1, xmm4
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x14]
mulss xmm0, dword [0x1023d440]
movss dword [ebp + 0xc], xmm0
movss xmm7, dword [ebp + 0xc]
mulss xmm7, dword [ebp + 8]
mulss xmm6, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [ebp + 8]
mulss xmm1, xmm3
movaps xmm3, xmm7
subss xmm6, xmm0
movaps xmm0, xmm4
xorps xmm0, xmm5
movss xmm5, dword [ebp - 0x20]
mulss xmm0, dword [ebp - 0x1c]
subss xmm3, xmm1
movaps xmm1, xmm4
mulss xmm4, dword [ebp + 8]
mulss xmm1, dword [0x1023d440]
movss dword [ebp + 0xc], xmm3
movaps xmm3, xmm2
mulss xmm2, dword [ebp - 0x1c]
mulss xmm3, dword [ebp + 8]
mulss xmm1, dword [ebp - 0x10]
subss xmm2, xmm4
movss xmm4, dword [ebp - 0x24]
subss xmm3, xmm0
movss xmm0, dword [ebp - 0x10]
mulss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x28], xmm1
movss xmm1, dword [0x1023d248]
movss dword [ebp + 8], xmm2
movss xmm2, dword [0x1023d28c]
mulss xmm4, xmm2
mulss xmm6, xmm1
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x1023d1ec]
subss xmm4, xmm6
mulss xmm3, xmm0
subss xmm4, xmm3
movss dword [ebp - 0x50], xmm4
movss xmm3, dword [ebp + 0xc]
lea edx, [ebp - 0x44]
movss xmm4, dword [ebp + 8]
lea ecx, [ebp - 0x50]
mulss xmm3, xmm1
mulss xmm5, xmm2
mulss xmm4, xmm0
subss xmm5, xmm3
movss xmm3, dword [ebp - 0x2c]
mulss xmm3, xmm2
movss xmm2, dword [ebp - 0x28]
mulss xmm2, xmm1
movss xmm1, dword [ebp - 0x1c]
subss xmm5, xmm4
mulss xmm1, xmm0
subss xmm3, xmm2
movss dword [ebp - 0x4c], xmm5
subss xmm3, xmm1
movss dword [ebp - 0x48], xmm3
call fcn.10085e60
lea ecx, [ebp - 0x44]
call fcn.1009b0f0
movss xmm0, dword [ebp - 0x44]
movss dword [esi + 0xc], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [esi + 0x10], xmm0
movss xmm0, dword [ebp - 0x3c]
pop edi
movss dword [esi + 0x14], xmm0
mov byte [0x103168e5], 1
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
or eax, 4
mov dword [esi + 0x24], eax
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8