Function at 0x100231a0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x101245cd
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
push edi
mov edi, dword [0x101c93a8]
test edi, edi
je 0x100235a1
mov eax, dword fs:[0x2c]
mov ecx, dword [0x101cf110]
mov ebx, dword [eax + ecx*4]
mov eax, dword [0x102b943c]
cmp eax, dword [ebx + 4]
jle 0x1002321f
push 0x102b943c
call fcn.10121ee8
add esp, 4
cmp dword [0x102b943c], 0xffffffff
jne 0x1002321f
push 0x102b943c
mov dword [0x102b9434], 0
mov dword [0x102b9430], 0x101a7090
call fcn.10121e9e
add esp, 4
mov eax, dword [0x102b9430]
mov eax, dword [eax]
test eax, eax
jne 0x10023231
mov dword [0x102b9434], eax
jmp 0x1002324b
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x102b9434], eax
jne 0x10023616
mov eax, dword [0x101cf6b4]
cmp eax, 3
jne 0x10023262
cmp byte [0x101cf654], 0
jne 0x10023616
cmp byte [0x101cf651], 0
je 0x100235a1
cmp eax, 3
jne 0x100235a1
mov eax, dword [0x101cf580]
cmp eax, dword [ebx + 4]
jle 0x100232cf
push 0x101cf580
call fcn.10121ee8
add esp, 4
cmp dword [0x101cf580], 0xffffffff
jne 0x100232cf
push str.m_iClass
push str.m_PlayerClass
push str.DT_TFPlayer
mov dword [ebp - 4], 0
call fcn.10014980
push 0x101cf580
mov dword [0x101cf590], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10121e9e
add esp, 4
mov eax, dword [0x101cf590]
mov esi, 0x41
mov ecx, 0x23
cmp dword [eax + edi], 1
mov eax, dword [0x101cf554]
cmove esi, ecx
cmp eax, 0x191
jg 0x10023475
je 0x100233f4
add eax, 0xffffff80
cmp eax, 0xe3
ja case.0x10023310.129
movzx eax, byte [eax + 0x10023654]
jmp dword [eax*4 + 0x1002362c]
mov esi, 0x1a
jmp case.0x10023310.129
mov esi, 9
jmp case.0x10023310.129
mov eax, dword [0x101cf69c]
cmp eax, dword [ebx + 4]
jle 0x1002337d
push 0x101cf69c
call fcn.10121ee8
add esp, 4
cmp dword [0x101cf69c], 0xffffffff
jne 0x1002337d
push str.m_iHealth
push str.DT_BasePlayer
mov dword [ebp - 4], 1
call fcn.10014890
push 0x101cf69c
mov dword [0x101cf6c4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10121e9e
add esp, 4
mov eax, dword [0x101cf6c4]
sub esp, 8
movsd xmm0, qword [0x101977c8]
movd xmm1, dword [eax + edi]
cvtdq2pd xmm1, xmm1
mulsd xmm1, qword [0x10197718]
subsd xmm0, xmm1
movsd qword [ebp - 0x18], xmm0
fld qword [ebp - 0x18]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp qword [ebp - 0x18]
cvttsd2si esi, qword [ebp - 0x18]
add esp, 8
jmp case.0x10023310.129
mov esi, 0x34
jmp case.0x10023310.129
mov esi, 0x51
jmp case.0x10023310.129
mov esi, 0x4e
jmp case.0x10023310.129
mov esi, 0x55
jmp case.0x10023310.129
mov esi, 0x25
jmp case.0x10023310.129
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x1ac]
call eax
mov ecx, dword [0x101cf69c]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x14], eax
cmp ecx, dword [ebx + 4]
jle 0x1002345b
push 0x101cf69c
call fcn.10121ee8
add esp, 4
cmp dword [0x101cf69c], 0xffffffff
jne 0x1002345b
push str.m_iHealth
push str.DT_BasePlayer
mov dword [ebp - 4], 2
call fcn.10014890
push 0x101cf69c
mov dword [0x101cf6c4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10121e9e
add esp, 4
mov eax, dword [0x101cf6c4]
mov esi, 0x51
mov ecx, dword [ebp - 0x14]
mov edx, 0x31
cmp dword [eax + edi], ecx
cmovg esi, edx
jmp case.0x10023310.129
cmp eax, 0x1bf
je case.0x10023310.329
cmp eax, 0x288
je 0x10023491
cmp eax, 0x49d
jne case.0x10023310.129
mov esi, 0x38
jmp case.0x10023310.129
mov esi, 0xc
jmp case.0x10023310.129
mov esi, 0x31
mov ecx, dword [0x101cf528]
push dword [0x101cf6ac]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov edi, eax
test edi, edi
je 0x100235a1
cmp dword [0x101cf554], 0x290
mov eax, dword [ebx + 4]
jne 0x100235b4
cmp dword [0x101cf69c], eax
jle 0x1002351d
push 0x101cf69c
call fcn.10121ee8
add esp, 4
cmp dword [0x101cf69c], 0xffffffff
jne 0x1002351d
push str.m_iHealth
push str.DT_BasePlayer
mov dword [ebp - 4], 3
call fcn.10014890
push 0x101cf69c
mov dword [0x101cf6c4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10121e9e
add esp, 4
mov eax, dword [0x101cf6c4]
cmp esi, dword [eax + edi]
jl 0x10023532
mov ecx, edi
call fcn.10022b00
test al, al
jne 0x100235a1
mov ecx, edi
call fcn.10010d70
test al, al
je 0x100235a1
mov ecx, edi
call fcn.10016710
shr eax, 7
test al, 1
jne 0x100235a1
mov eax, dword [0x101cf64c]
cmp eax, dword [ebx + 4]
jle 0x10023596
push 0x101cf64c
call fcn.10121ee8
add esp, 4
cmp dword [0x101cf64c], 0xffffffff
jne 0x10023596
push str.m_bViewingCYOAPDA
push str.DT_TFPlayer
mov dword [ebp - 4], 4
call fcn.10014890
push 0x101cf64c
mov dword [0x101cf664], eax
call fcn.10121e9e
add esp, 4
mov eax, dword [0x101cf664]
cmp byte [eax + edi], 0
je 0x10023616
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x101cf69c], eax
jle 0x100235fa
push 0x101cf69c
call fcn.10121ee8
add esp, 4
cmp dword [0x101cf69c], 0xffffffff
jne 0x100235fa
push str.m_iHealth
push str.DT_BasePlayer
mov dword [ebp - 4], 5
call fcn.10014890
push 0x101cf69c
mov dword [0x101cf6c4], eax
call fcn.10121e9e
add esp, 4
mov eax, dword [0x101cf6c4]
cmp esi, dword [eax + edi]
setle al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
mov al, 1
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret