Function at 0x101646b0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1019a70d
push eax
mov dword fs:[0], esp
sub esp, 0x40
cmp byte [0x10316b24], 0
je 0x10164bc4
cmp byte [0x10310868], 0
je 0x10164bc4
push 2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x10164bc4
mov ecx, dword [0x10310784]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test al, al
jne 0x10164bc4
mov ecx, dword [0x10310830]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
test al, al
jne 0x10164bc4
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1024f340]
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x103106f4]
cmp eax, dword [esi + 4]
jle 0x1016478a
push 0x103106f4
call fcn.101928b8
add esp, 4
cmp dword [0x103106f4], 0xffffffff
jne 0x1016478a
push str.m_iClass
push str.m_PlayerClass
push str.DT_TFPlayer
mov dword [ebp - 4], 0
call fcn.100757e0
push 0x103106f4
mov dword [0x10310704], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10192867
add esp, 4
mov eax, dword [0x10310704]
push edi
mov edi, dword [ebp + 0xc]
cmp dword [eax + edi], 3
jne 0x10164bc2
mov ecx, edi
call fcn.10071fe0
test al, al
je 0x10164bc2
mov ecx, edi
call fcn.10071c20
shr eax, 1
test al, 1
jne 0x10164bc2
mov eax, dword [0x10310850]
cmp eax, dword [esi + 4]
jle 0x1016480f
push 0x10310850
call fcn.101928b8
add esp, 4
cmp dword [0x10310850], 0xffffffff
jne 0x1016480f
push str.m_iHealth
push str.DT_BasePlayer
mov dword [ebp - 4], 1
call fcn.100756f0
push 0x10310850
mov dword [0x10310874], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10192867
add esp, 4
mov eax, dword [0x10310874]
cmp dword [eax + edi], 0x3c
jge 0x10164827
cmp byte [0x1031722c], 0
jne 0x10164bc2
mov eax, dword [0x1024d1e4]
mov dword [ebp + 0xc], eax
test eax, eax
je 0x10164bc2
mov ecx, eax
call fcn.10161610
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 0x24]
test al, al
je 0x10164860
or ecx, 1
pop edi
mov dword [esi + 0x24], ecx
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 1
je 0x1016486b
and ecx, 0xfffffffe
mov dword [esi + 0x24], ecx
mov eax, dword [0x10310700]
cmp eax, 0x2da
je 0x10164bc2
cmp eax, 0x1b9
je 0x10164bc2
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x528]
call eax
test eax, eax
jne 0x10164bc2
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.1007f640
movss xmm0, dword [0x10237948]
movss xmm1, dword [eax + 8]
comiss xmm0, xmm1
mov eax, dword [esi + 0x24]
jbe 0x10164bbc
or eax, 3
mov ecx, edi
mov dword [esi + 0x24], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10071f20
movss xmm1, dword [0x10237a9c]
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm1
jbe 0x10164911
movss xmm0, dword [0x102376b4]
comiss xmm0, xmm2
jbe 0x10164911
movss xmm2, dword [ebp - 0x30]
comiss xmm2, xmm1
jbe 0x10164911
comiss xmm0, xmm2
jbe 0x10164911
movss xmm2, dword [ebp - 0x2c]
comiss xmm2, xmm1
jbe 0x10164911
comiss xmm0, xmm2
jbe 0x10164911
mov al, 1
jmp 0x10164913
xor al, al
test al, al
je 0x10164921
movss xmm0, dword [0x10237960]
jmp 0x10164929
movss xmm0, dword [0x1023792c]
lea edx, [ebp - 0x34]
movss dword [ebp + 0xc], xmm0
lea ecx, [ebp - 0x4c]
movss dword [ebp - 0x40], xmm0
call fcn.1006f300
cmp dword [0x10310700], 0x201
mov dword [ebp - 0x38], 0
movss xmm3, dword [eax + 4]
subss xmm3, dword [0x10237990]
movss dword [ebp - 0x3c], xmm3
je 0x10164b7d
movss xmm1, dword [0x10237a9c]
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm1
jbe 0x101649a8
movss xmm0, dword [0x102376b4]
comiss xmm0, xmm2
jbe 0x101649a8
movss xmm2, dword [ebp - 0x30]
comiss xmm2, xmm1
jbe 0x101649a8
comiss xmm0, xmm2
jbe 0x101649a8
movss xmm2, dword [ebp - 0x2c]
comiss xmm2, xmm1
jbe 0x101649a8
comiss xmm0, xmm2
jbe 0x101649a8
mov al, 1
jmp 0x101649aa
xor al, al
test al, al
jne 0x10164b7d
movss xmm0, dword [0x102376d0]
lea eax, [ebp - 0x14]
movss xmm1, dword [ebp + 0xc]
mulss xmm1, xmm0
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], eax
movss dword [ebp + 8], xmm1
fld dword [ebp + 8]
fsincos
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
fstp dword [edx]
fstp dword [eax]
lea eax, [ebp + 0xc]
mulss xmm3, xmm0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
movss dword [ebp + 8], xmm3
fld dword [ebp + 8]
fsincos
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
fstp dword [edx]
fstp dword [eax]
lea eax, [ebp - 0x10]
mov dword [ebp + 8], 0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x1c], eax
fld dword [ebp + 8]
fsincos
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [ebp - 0x14]
movss xmm5, dword [ebp - 0x24]
movaps xmm1, xmm0
mulss xmm1, dword [ebp + 0xc]
movss xmm4, dword [ebp - 0x28]
movss xmm6, dword [ebp - 0x18]
movss dword [ebp - 0x20], xmm1
movaps xmm3, xmm6
xorps xmm3, xmmword [0x10237e40]
movaps xmm1, xmm5
xorps xmm1, xmmword [0x10237e40]
movaps xmm7, xmm3
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [ebp - 0x10]
mulss xmm1, dword [0x10237ab8]
mulss xmm0, xmm6
movss dword [ebp + 8], xmm1
movaps xmm1, xmm4
mulss xmm7, dword [ebp + 8]
movss dword [ebp - 0x1c], xmm0
mulss xmm1, xmm5
mulss xmm3, xmm4
movaps xmm0, xmm1
mulss xmm1, xmm6
mulss xmm0, dword [ebp + 0xc]
movss xmm6, dword [ebp - 0x10]
mulss xmm6, xmm5
subss xmm7, xmm0
movss xmm5, dword [ebp - 0x10]
movss xmm0, dword [ebp + 8]
mulss xmm0, dword [ebp + 0xc]
movaps xmm2, xmm6
mulss xmm2, dword [ebp + 0xc]
mulss xmm6, dword [ebp - 0x18]
subss xmm0, xmm1
movss xmm1, dword [0x102378c0]
subss xmm2, xmm3
movss xmm3, dword [0x10237904]
mulss xmm5, dword [ebp - 0x14]
movss dword [ebp + 8], xmm0
movaps xmm0, xmm4
mulss xmm4, dword [ebp + 0xc]
mulss xmm0, dword [0x10237ab8]
subss xmm6, xmm4
mulss xmm7, xmm1
mulss xmm0, dword [ebp - 0x14]
movss xmm4, dword [ebp - 0x20]
mulss xmm4, xmm3
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [0x10237864]
subss xmm4, xmm7
mulss xmm2, xmm0
subss xmm4, xmm2
movss xmm2, dword [ebp + 8]
mulss xmm2, xmm1
movss dword [ebp - 0x4c], xmm4
movss xmm4, dword [ebp - 0x1c]
mulss xmm4, xmm3
subss xmm4, xmm2
movss xmm2, dword [ebp - 0x28]
lea edx, [ebp - 0x40]
mulss xmm6, xmm0
lea ecx, [ebp - 0x4c]
mulss xmm2, xmm1
subss xmm4, xmm6
mulss xmm5, xmm0
movss dword [ebp - 0x48], xmm4
movss xmm4, dword [ebp - 0x24]
mulss xmm4, xmm3
subss xmm4, xmm2
subss xmm4, xmm5
movss dword [ebp - 0x44], xmm4
call fcn.1007f480
lea ecx, [ebp - 0x40]
call fcn.10094780
movss xmm0, dword [ebp - 0x40]
movss dword [esi + 0xc], xmm0
movss xmm0, dword [ebp - 0x3c]
movss dword [esi + 0x10], xmm0
movss xmm0, dword [ebp - 0x38]
pop edi
movss dword [esi + 0x14], xmm0
mov byte [0x103108e5], 1
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
or eax, 4
mov dword [esi + 0x24], eax
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8