Function at 0x1004c000
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e808d
mov eax, dword fs:[0]
push eax
mov eax, 0x1a64
call fcn.100e4d20
mov eax, dword [0x10114008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1a3c], ebx
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
je 0x1004c044
mov dword [ebx + 4], eax
cmp dword [0x10117fa0], 0
je 0x1004c5ad
mov eax, dword [0x1011984c]
mov dword [ebp - 0x1a54], 0
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x30]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1004c0d4
cmp dword [0x101181c8], 0
jne 0x1004c093
push str.Team_Fortress_2
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x101181c8], eax
jmp 0x1004c0d4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x101181c8]
jne 0x1004c0d4
mov ecx, dword [0x10118038]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
test al, al
jne 0x1004c0d4
mov eax, dword [0x1011984c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x10]
cmp byte [eax + 2], 0
je 0x1004c0d4
mov eax, dword [0x1011981c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x1a54], eax
mov esi, dword [0x10118020]
mov ecx, esi
call fcn.10021800
mov ecx, esi
mov edi, eax
call fcn.10021af0
vmovss xmm0, dword [edi]
mov ecx, dword [0x10117f54]
mov esi, dword [0x10118020]
vaddss xmm0, xmm0, dword [eax]
vmovss dword [ebp - 0x1a44], xmm0
vmovss xmm0, dword [edi + 4]
vaddss xmm0, xmm0, dword [eax + 4]
vmovss dword [ebp - 0x1a48], xmm0
vmovss xmm0, dword [edi + 8]
vaddss xmm0, xmm0, dword [eax + 8]
mov eax, dword fs:[0x2c]
vmovss dword [ebp - 0x1a4c], xmm0
mov edi, dword [eax + ecx*4]
mov eax, dword [0x1011803c]
mov dword [ebp - 0x1a5c], edi
cmp eax, dword [edi + 4]
jle 0x1004c18b
push 0x1011803c
call fcn.100e3eef
add esp, 4
cmp dword [0x1011803c], 0xffffffff
jne 0x1004c18b
push str.m_iClass
push str.CTFPlayer
mov dword [ebp - 4], 0
call fcn.100e2fc0
push 0x1011803c
mov dword [0x1011802c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
mov eax, dword [0x1011802c]
cmp dword [esi + eax], 8
je 0x1004c3ec
mov ecx, dword [0x10118020]
call fcn.10021c30
test byte [eax], 1
jne 0x1004c1bf
mov eax, dword [0x10118020]
mov byte [ebp - 0x1a35], 1
cmp dword [eax + 0x1a4], 2
je 0x1004c1c6
mov byte [ebp - 0x1a35], 0
mov eax, dword [0x10117fb4]
mov esi, dword [0x10117fa0]
cmp eax, dword [edi + 4]
jle 0x1004c21e
push 0x10117fb4
call fcn.100e3eef
add esp, 4
cmp dword [0x10117fb4], 0xffffffff
jne 0x1004c21e
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov dword [ebp - 4], 1
call fcn.100e2fc0
push 0x10117fb4
mov dword [0x10117fd0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
mov eax, dword [0x10117fd0]
xor ebx, ebx
cmp dword [esi + eax], 0x1a0
movzx eax, byte [ebp - 0x1a35]
sete bl
add ebx, 3
add ebx, eax
call fcn.1002b1c0
test al, al
mov ecx, 2
mov eax, dword [0x10118044]
cmovne ebx, ecx
vxorps xmm7, xmm7, xmm7
vcvtsi2ss xmm7, xmm7, ebx
vmulss xmm0, xmm7, dword [eax + 0x1c]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [ebp - 0x1a54]
vxorps xmm2, xmm2, xmm2
vaddss xmm0, xmm0, xmm1
vcomiss xmm0, xmm2
vxorps xmm3, xmm3, xmm3
vmovss dword [ebp - 0x1a40], xmm3
vmovss dword [ebp - 0x1a58], xmm7
vmovss dword [ebp - 0x1a34], xmm1
jbe 0x1004c3e6
nop word [eax + eax]
mov eax, dword [0x10118084]
mov esi, dword [0x10118020]
cmp eax, dword [edi + 4]
jle 0x1004c314
push 0x10118084
call fcn.100e3eef
add esp, 4
cmp dword [0x10118084], 0xffffffff
jne 0x1004c2f8
push str.m_vecVelocity_0_
push str.CBasePlayer
mov dword [ebp - 4], 2
call fcn.100e2fc0
push 0x10118084
mov dword [0x10118098], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
vmovss xmm1, dword [ebp - 0x1a34]
vmovss xmm7, dword [ebp - 0x1a58]
vmovss xmm3, dword [ebp - 0x1a40]
vxorps xmm2, xmm2, xmm2
cmp byte [ebp - 0x1a35], 0
mov eax, dword [0x10118098]
vmulss xmm4, xmm3, dword [esi + eax]
vmulss xmm5, xmm3, dword [esi + eax + 4]
vmulss xmm6, xmm3, dword [esi + eax + 8]
je 0x1004c38d
vmulss xmm1, xmm3, dword [0x10102e78]
vmulss xmm0, xmm3, xmm2
vmulss xmm2, xmm0, xmm3
vmulss xmm0, xmm1, xmm3
vsubss xmm1, xmm4, xmm2
vaddss xmm4, xmm1, dword [ebp - 0x1a44]
vsubss xmm2, xmm5, xmm2
vaddss xmm1, xmm2, dword [ebp - 0x1a48]
vsubss xmm0, xmm6, xmm0
vmovss dword [ebp - 0x1a48], xmm1
vaddss xmm1, xmm0, dword [ebp - 0x1a4c]
vmovss dword [ebp - 0x1a4c], xmm1
vmovss xmm1, dword [ebp - 0x1a34]
vmovss dword [ebp - 0x1a44], xmm4
jmp 0x1004c3bd
vaddss xmm0, xmm4, dword [ebp - 0x1a44]
vmovss dword [ebp - 0x1a44], xmm0
vaddss xmm0, xmm5, dword [ebp - 0x1a48]
vmovss dword [ebp - 0x1a48], xmm0
vaddss xmm0, xmm6, dword [ebp - 0x1a4c]
vmovss dword [ebp - 0x1a4c], xmm0
mov eax, dword [0x10118044]
vxorps xmm2, xmm2, xmm2
vmulss xmm0, xmm7, dword [eax + 0x1c]
vaddss xmm3, xmm3, dword [eax + 0x1c]
vaddss xmm0, xmm0, xmm1
vcomiss xmm0, xmm3
vmovss dword [ebp - 0x1a40], xmm3
ja 0x1004c2a0
mov ebx, dword [ebp - 0x1a3c]
mov esi, dword [0x10116d84]
mov eax, dword [0x10116d88]
mov dword [ebp - 0x1a54], esi
mov dword [ebp - 0x1a68], eax
cmp esi, eax
je 0x1004c592
nop dword [eax + eax]
mov esi, dword [esi]
mov dword [ebp - 0x1a40], esi
test esi, esi
je 0x1004c571
cmp esi, dword [0x10118020]
je 0x1004c571
lea ebx, [esi + 8]
test ebx, ebx
je 0x1004c444
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x1004c56b
mov eax, dword [0x10117ff0]
cmp eax, dword [edi + 4]
jle 0x1004c496
push 0x10117ff0
call fcn.100e3eef
add esp, 4
cmp dword [0x10117ff0], 0xffffffff
jne 0x1004c496
push str.m_lifeState
push str.CBasePlayer
mov dword [ebp - 4], 3
call fcn.100e2fc0
push 0x10117ff0
mov dword [0x10117fb0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
mov eax, dword [0x10117fb0]
cmp byte [eax + esi], 0
jne 0x1004c56b
test ebx, ebx
je 0x1004c4d3
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x1004c4c8
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
je 0x1004c4eb
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
jmp 0x1004c4d5
xor eax, eax
mov eax, dword [eax + 0x14]
sub eax, 0x56
je 0x1004c4eb
sub eax, 2
je 0x1004c4eb
sub eax, 1
jne 0x1004c56b
mov eax, dword [0x10117fa0]
mov dword [ebp - 0x1a58], eax
mov eax, dword [0x10117fb4]
cmp eax, dword [edi + 4]
jle 0x1004c548
push 0x10117fb4
call fcn.100e3eef
add esp, 4
cmp dword [0x10117fb4], 0xffffffff
jne 0x1004c548
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov dword [ebp - 4], 4
call fcn.100e2fc0
push 0x10117fb4
mov dword [0x10117fd0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
mov eax, dword [0x10117fd0]
mov ecx, dword [ebp - 0x1a58]
cmp dword [ecx + eax], 0x1bf
je 0x1004c5c9
mov ecx, esi
call fcn.100dbc90
test al, al
jne 0x1004c62a
mov ebx, dword [ebp - 0x1a3c]
mov esi, dword [ebp - 0x1a54]
mov edi, dword [ebp - 0x1a5c]
add esi, 4
mov dword [ebp - 0x1a54], esi
cmp esi, dword [ebp - 0x1a68]
jne 0x1004c410
mov edx, dword [ebx + 4]
mov eax, edx
mov ecx, dword [ebx]
sub eax, ecx
push dword [ebp - 0x1a68]
sar eax, 3
push eax
call fcn.1004b4e0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100e38ea
mov esp, ebp
pop ebp
ret
mov eax, dword [0x10117fc0]
cmp eax, dword [edi + 4]
jle 0x1004c61b
push 0x10117fc0
call fcn.100e3eef
add esp, 4
cmp dword [0x10117fc0], 0xffffffff
jne 0x1004c61b
push str.m_nPlayerCond
push str.CTFPlayer
mov dword [ebp - 4], 5
call fcn.100e2fc0
push 0x10117fc0
mov dword [0x10117fe4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
mov eax, dword [0x10117fe4]
test byte [eax + esi], 0x20
jne 0x1004c56b
mov edi, dword [0x10118020]
mov ecx, edi
call fcn.10021800
mov ecx, edi
vmovss xmm0, dword [eax]
vmovss dword [ebp - 0x1a58], xmm0
vmovss xmm0, dword [eax + 4]
vmovss dword [ebp - 0x1a34], xmm0
vmovss xmm0, dword [eax + 8]
vmovss dword [ebp - 0x1a64], xmm0
call fcn.10021760
mov ecx, edi
mov esi, eax
call fcn.100216c0
vmovss xmm0, dword [esi + 8]
mov edi, dword [ebp - 0x1a40]
mov ecx, edi
vmovss dword [ebp - 0x1a60], xmm0
vmovss xmm0, dword [eax + 8]
vmovss dword [ebp - 0x1a70], xmm0
call fcn.10021800
mov ecx, edi
vmovss xmm0, dword [eax]
vmovss dword [ebp - 0x1a40], xmm0
vmovss xmm0, dword [eax + 4]
vmovss dword [ebp - 0x1a6c], xmm0
vmovss xmm0, dword [eax + 8]
vmovss dword [ebp - 0x1a50], xmm0
call fcn.10021760
mov ecx, edi
mov esi, eax
call fcn.100216c0
vmovss xmm0, dword [ebp - 0x1a58]
vsubss xmm4, xmm0, dword [ebp - 0x1a40]
vmovss xmm0, dword [ebp - 0x1a34]
vsubss xmm3, xmm0, dword [ebp - 0x1a6c]
vmovss xmm0, dword [ebp - 0x1a70]
vaddss xmm0, xmm0, dword [ebp - 0x1a60]
vmulss xmm0, xmm0, dword [0x10102c68]
vaddss xmm1, xmm0, dword [ebp - 0x1a64]
vmovss xmm0, dword [eax + 8]
vaddss xmm0, xmm0, dword [esi + 8]
vmulss xmm0, xmm0, dword [0x10102c68]
vaddss xmm0, xmm0, dword [ebp - 0x1a50]
vsubss xmm2, xmm1, xmm0
vmulss xmm0, xmm4, xmm4
vmulss xmm1, xmm3, xmm3
vaddss xmm1, xmm1, xmm0
vmulss xmm0, xmm2, xmm2
vaddss xmm0, xmm1, xmm0
call fcn.10021260
vmovss dword [ebp - 0x1a34], xmm0
test ebx, ebx
je 0x1004c9d2
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x1004c9ca
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1004c9ca
mov ecx, edi
call fcn.10021800
mov ecx, edi
vmovss xmm0, dword [eax]
vmovss dword [ebp - 0x1a64], xmm0
vmovss xmm0, dword [eax + 4]
vmovss dword [ebp - 0x1a60], xmm0
vmovss xmm0, dword [eax + 8]
vmovss dword [ebp - 0x1a50], xmm0
call fcn.10021760
mov ecx, edi
mov esi, eax
call fcn.100216c0
vmovss xmm0, dword [esi + 8]
mov ecx, edi
vaddss xmm0, xmm0, dword [eax + 8]
vmulss xmm0, xmm0, dword [0x10102c68]
vaddss xmm0, xmm0, dword [ebp - 0x1a50]
vmovss dword [ebp - 0x1a50], xmm0
call fcn.100dbc90
test al, al
je 0x1004c969
mov eax, dword [ebp - 0x1a54]
mov ecx, dword [eax]
test ecx, ecx
je 0x1004c800
add ecx, 8
je 0x1004c800
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
jmp 0x1004c802
xor eax, eax
push eax
lea eax, [ebp - 0x1a28]
push eax
call fcn.100468f0
mov eax, 0x1a14
call fcn.100e4d20
lea eax, [ebp - 0x1a28]
mov ecx, esp
push eax
call fcn.10046780
call fcn.100449b0
test al, al
je 0x1004c56b
mov esi, dword [ebp - 0x1a5c]
mov eax, dword [0x10118020]
mov dword [ebp - 0x1a50], eax
mov eax, dword [0x1011803c]
cmp eax, dword [esi + 4]
jle 0x1004c897
push 0x1011803c
call fcn.100e3eef
add esp, 4
cmp dword [0x1011803c], 0xffffffff
jne 0x1004c897
push str.m_iClass
push str.CTFPlayer
mov dword [ebp - 4], 6
call fcn.100e2fc0
push 0x1011803c
mov dword [0x1011802c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
vmovss xmm0, dword [ebp - 0x1a44]
vsubss xmm3, xmm0, dword [ebp - 0x19ec]
vmovss xmm0, dword [ebp - 0x1a48]
vsubss xmm0, xmm0, dword [ebp - 0x19e8]
vmovss xmm1, dword [ebp - 0x1a4c]
vsubss xmm2, xmm1, dword [ebp - 0x19e4]
mov eax, dword [0x1011802c]
mov ecx, dword [ebp - 0x1a50]
vmulss xmm1, xmm0, xmm0
vmulss xmm0, xmm3, xmm3
vaddss xmm1, xmm1, xmm0
cmp dword [ecx + eax], 8
vmulss xmm0, xmm2, xmm2
vaddss xmm0, xmm1, xmm0
je 0x1004c949
call fcn.10021260
mov eax, dword [0x1011981c]
vmovss dword [ebp - 0x1a34], xmm0
cmp dword [eax + 0x74], 0x40
jne 0x1004c936
call fcn.1002b1c0
test al, al
je 0x1004c917
vmovss xmm1, dword [0x10102dd8]
jmp 0x1004c91f
vmovss xmm1, dword [0x10102df8]
vmovss xmm0, dword [ebp - 0x1a34]
vcomiss xmm0, xmm1
ja 0x1004c56b
jmp 0x1004c9ee
vcomiss xmm0, dword [0x10102dd8]
ja 0x1004c56b
jmp 0x1004c9ee
call fcn.10021260
vcomiss xmm0, dword [0x10102ddc]
vmovss dword [ebp - 0x1a34], xmm0
jbe 0x1004c9ee
jmp 0x1004c56b
vmovss xmm0, dword [ebp - 0x1a44]
vsubss xmm3, xmm0, dword [ebp - 0x1a64]
vmovss xmm0, dword [ebp - 0x1a48]
vsubss xmm0, xmm0, dword [ebp - 0x1a60]
vmovss xmm1, dword [ebp - 0x1a4c]
vsubss xmm2, xmm1, dword [ebp - 0x1a50]
vmulss xmm1, xmm0, xmm0
vmulss xmm0, xmm3, xmm3
vaddss xmm1, xmm1, xmm0
vmulss xmm0, xmm2, xmm2
vaddss xmm0, xmm1, xmm0
call fcn.10021260
vcomiss xmm0, dword [0x10102ddc]
vmovss dword [ebp - 0x1a34], xmm0
ja 0x1004c56b
jmp 0x1004c9e8
vmovss xmm0, dword [ebp - 0x1a34]
vcomiss xmm0, dword [0x10102dd8]
ja 0x1004c56b
test ebx, ebx
je 0x1004cbb4
mov esi, dword [ebp - 0x1a5c]
mov eax, dword [ebx]
mov ecx, ebx
vmovss dword [ebp - 0x1a40], xmm0
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x1004cbac
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1004cbac
mov eax, dword [0x10117fc0]
cmp eax, dword [esi + 4]
jle 0x1004ca6f
push 0x10117fc0
call fcn.100e3eef
add esp, 4
cmp dword [0x10117fc0], 0xffffffff
jne 0x1004ca6f
push str.m_nPlayerCond
push str.CTFPlayer
mov dword [ebp - 4], 7
call fcn.100e2fc0
push 0x10117fc0
mov dword [0x10117fe4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
mov eax, dword [0x10117fe4]
test dword [eax + edi], 0x4000
je 0x1004ca92
mov eax, dword [0x1011984c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
cmp byte [eax + 1], 0
je 0x1004c56b
mov ecx, edi
call fcn.10022090
test al, al
je 0x1004cab2
mov eax, dword [0x1011984c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
cmp byte [eax + 2], 0
je 0x1004c56b
mov eax, dword [0x10117fd4]
cmp eax, dword [esi + 4]
jle 0x1004cb00
push 0x10117fd4
call fcn.100e3eef
add esp, 4
cmp dword [0x10117fd4], 0xffffffff
jne 0x1004cb00
push str.55_8B_EC_81_EC_________E8_________85_C0_74_7E_8B_4D_08_85_C9_74_77_A1_________83_78_08_00_74_6C_83_78_0C_00_74_66_A1_________83_C1_08_56_8B_30_8D_85_________50_8B_01
push ecx
mov dword [ebp - 4], 8
call fcn.100283f0
push 0x10117fd4
mov dword [0x10118004], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
vmovss xmm0, dword [ebp - 0x1a40]
mov eax, dword [0x10118004]
push edi
vmovss dword [ebp - 0x1a34], xmm0
call eax
test al, al
je 0x1004cbac
mov eax, dword [0x1011984c]
vmovss xmm0, dword [ebp - 0x1a40]
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
cmp byte [eax + 6], 0
jne 0x1004cbb4
mov eax, dword [0x10117fb4]
mov ebx, dword [0x10117fa0]
cmp eax, dword [esi + 4]
jle 0x1004cb91
push 0x10117fb4
call fcn.100e3eef
add esp, 4
cmp dword [0x10117fb4], 0xffffffff
jne 0x1004cb91
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov dword [ebp - 4], 9
call fcn.100e2fc0
push 0x10117fb4
mov dword [0x10117fd0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100e3ea5
add esp, 4
mov eax, dword [0x10117fd0]
vmovss xmm0, dword [ebp - 0x1a40]
cmp dword [ebx + eax], 0x1bf
je 0x1004cbb4
jmp 0x1004c56b
vmovss xmm0, dword [ebp - 0x1a34]
mov ebx, dword [ebp - 0x1a3c]
vmovss dword [ebp - 0x1a30], xmm0
mov dword [ebp - 0x1a2c], edi
mov ecx, dword [ebx + 4]
cmp ecx, dword [ebx + 8]
je 0x1004cbe4
mov eax, dword [ebp - 0x1a30]
mov dword [ecx], eax
mov dword [ecx + 4], edi
add dword [ebx + 4], 8
jmp 0x1004c571
lea eax, [ebp - 0x1a30]
push eax
push ecx
mov ecx, ebx
call fcn.1004b380
jmp 0x1004c571