Function at 0x1009de10
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
cmp byte [0x10129d7e], 0
push esi
push edi
je 0x1009de58
mov eax, dword [0x10129d7f]
mov dword [0x1010e588], eax
mov eax, dword [0x10129d83]
mov dword [0x1010e584], eax
mov byte [0x1010e58b], 0xff
mov byte [0x1010e587], 0xff
jmp 0x1009deb2
mov dword [ebp - 4], 0xffff9b55
mov eax, dword [ebp - 4]
mov dword [0x1010e588], eax
mov dword [ebp - 4], 0xffff6464
mov eax, dword [ebp - 4]
mov dword [0x1010e580], 0xffffffff
mov dword [0x1010e598], 0xff969696
mov dword [0x1010e590], 0xff282828
mov dword [0x1010e58c], 0xff282828
mov dword [0x1010e584], eax
mov dword [0x1010e594], 0xff202020
mov dword [0x1010e5a8], 0xff202020
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
xor esi, esi
nop word [eax + eax]
mov al, byte [esi + 0x10133420]
push esi
mov byte [esi + 0x10133520], al
call edi
test ax, ax
setne cl
mov byte [esi + 0x10133420], cl
test ax, ax
je 0x1009def9
cmp byte [esi + 0x10133520], 0
jne 0x1009def9
cmp byte [esi + 0x10133320], 0
sete al
mov byte [esi + 0x10133320], al
inc esi
cmp esi, 0xff
jle 0x1009dec0
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x10]
push eax
push 0
push str.Valve001
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
movd xmm0, dword [ebp - 0x10]
lea edx, [ebp - 8]
movd xmm1, dword [ebp - 0xc]
mov ecx, dword [0x1012a59c]
mov eax, dword [0x1012a598]
cvtdq2ps xmm0, xmm0
mov dword [0x1012a588], ecx
mov ecx, dword [0x1010ffb0]
mov dword [0x1012a584], eax
push edx
cvtdq2ps xmm1, xmm1
lea edx, [ebp - 4]
push edx
movss dword [0x1012a598], xmm0
movss dword [0x1012a59c], xmm1
mov eax, dword [ecx]
call dword [eax + 0x14]
mov al, byte [0x1012a460]
mov edx, 1
movd xmm0, dword [ebp - 4]
test al, al
movd xmm1, dword [ebp - 8]
movzx ecx, al
mov eax, dword [0x101109b8]
cmove ecx, edx
sub esp, 8
mov dword [ebp - 0xc], eax
mov eax, esp
mov dword [ebp - 0x38], str.Legit
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x34], 5
sub esp, 8
mov dword [ebp - 0x30], str.Players
lea edx, [ebp - 0x38]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x28], str.Visuals
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x20], str.Misc
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x18], str.Skins
movss dword [0x1012a58c], xmm0
movss dword [0x1012a590], xmm1
mov dword [ebp - 0x14], 5
mov dword [eax], 0x44228000
mov dword [eax + 4], 0x43e60000
mov eax, esp
mov byte [0x1012a460], cl
lea ecx, [ebp - 0x10]
push 0x1012a450
sub ecx, edx
sub esp, 0xc
mov dword [eax], str.plaguecheat.cc
mov edi, esp
mov dword [eax + 4], 0xe
mov eax, ecx
sar eax, 3
mov dword [ebp - 8], ecx
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [ebp - 4], eax
test eax, eax
je 0x1009e06f
push eax
mov ecx, edi
call fcn.1009dd80
push dword [ebp - 8]
mov esi, dword [edi]
lea eax, [ebp - 0x38]
push eax
push esi
call fcn.100b3840
mov eax, dword [ebp - 4]
add esp, 0xc
lea eax, [esi + eax*8]
mov dword [edi + 4], eax
mov ecx, dword [ebp - 0xc]
call fcn.1009cb30
add esp, 0x20
mov byte [0x1010ffd0], al
test al, al
je 0x1009e17c
mov eax, dword [0x1012a524]
xor edx, edx
sub dword [0x1012a528], 1
mov ecx, dword [0x101109c0]
cmove eax, edx
mov dword [0x1012a524], eax
call fcn.1009c4f0
mov ecx, dword [0x100f25ec]
movss xmm3, dword [0x1012a540]
subss xmm3, dword [0x100f8708]
movss xmm2, dword [0x1012a544]
subss xmm2, dword [0x100f8708]
lea eax, [ecx*4]
movd xmm0, eax
lea eax, [ecx + ecx]
cvtdq2ps xmm0, xmm0
subss xmm3, xmm0
movd xmm0, eax
mov eax, dword [0x1012a450]
cvtdq2ps xmm0, xmm0
mulss xmm3, dword [0x100f86c4]
subss xmm2, xmm0
movd xmm0, dword [0x100f25f4]
cvtdq2ps xmm0, xmm0
movss dword [0x1012a4f0], xmm3
subss xmm2, xmm0
movss dword [0x1012a4f4], xmm2
cmp eax, 4
ja case.default.0x1009e11f
jmp dword [eax*4 + 0x1009e188]
call fcn.1009e1a0
call fcn.1009d260
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.1009f2a0
call fcn.1009d260
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100a14a0
call fcn.1009d260
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100a4210
call fcn.1009d260
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100a2d70
call fcn.1009d260
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret