Function at 0x10152ff0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1019117d
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x20
cmp byte [0x1023d9a7], 0
push esi
push edi
je 0x101536ff
push 0
lea eax, [ebp - 0x18]
push eax
push 0
push 0x102fdc00
call dword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
jne 0x1015304b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
cmp dword [ebp - 0x18], 0
mov edi, dword [ebx + 8]
je 0x10153092
mov dword [ebp - 0x24], 0x102fdc00
mov dword [ebp - 0x20], 4
push edi
mov ecx, 0x1023d998
mov dword [ebp - 4], 0
call fcn.10153bb0
push 0
push 0
push 0x102fdc00
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x10153714
mov eax, dword [edi]
push 0xffffffffffffffff
push 0xa8
push edi
call dword [eax + 0xe4]
mov eax, dword [edi]
push 4
push 1
push 0
push edi
call dword [eax + 0x10c]
mov eax, dword [edi]
push 4
push 4
push 0
push edi
call dword [eax + 0x10c]
mov eax, dword [edi]
push 0
push 0xc2
push edi
call dword [eax + 0xe4]
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10243ad0]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x103072b8]
cmp eax, dword [ecx + 4]
jle 0x10153123
push 0x103072b8
call fcn.10189be4
add esp, 4
cmp dword [0x103072b8], 0xffffffff
jne 0x10153123
push 0x103072b8
mov dword [0x103072cc], 0
mov dword [0x103072c8], 0x102fff6c
call fcn.10189b93
add esp, 4
mov eax, dword [0x103072c8]
cmp dword [0x103072cc], 0
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
sete byte [ebp - 0x11]
mov eax, dword [eax]
test eax, eax
jne 0x1015314b
mov dword [0x103072cc], 0
jmp 0x10153163
push eax
call esi
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x103072cc], eax
je 0x10153163
cmp byte [ebp - 0x11], 0
jne 0x1015316b
push 0x2d
call esi
test al, 1
je 0x1015319e
mov ecx, dword [0x102fdbc0]
cmp byte [0x1023d9a6], 0
push 0
sete byte [0x1023d9a6]
mov eax, dword [ecx]
call dword [eax + 0x50]
mov ecx, dword [0x102fd964]
movzx eax, byte [0x1023d9a6]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xd0]
call eax
cmp byte [0x1023d9a6], 0
je 0x10153209
cmp byte [0x102ffec8], 0
je 0x10153209
cmp dword [0x102fdbb4], 0
jne 0x101531cf
push 0x1020f4bc
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x102fdbb4], eax
test eax, eax
je 0x101531dd
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x102fdbb4]
je 0x10153209
mov ecx, dword [0x102fdbc0]
mov byte [0x1023d9a6], 0
push 0
mov eax, dword [ecx]
call dword [eax + 0x50]
mov ecx, dword [0x102fd964]
movzx eax, byte [0x1023d9a6]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xd0]
call eax
mov eax, dword [0x10243f84]
mov ecx, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov dword [ebp - 0x18], ecx
test eax, eax
je 0x10153224
mov esi, dword [eax + 0x74]
test esi, esi
jne 0x1015323f
jmp 0x10153226
xor esi, esi
push 0x179
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_impl_dx9.cpp
push str.bd___nullptr___Did_you_call_ImGui_ImplDX9_Init____
call ecx
mov eax, dword [0x10243f84]
add esp, 0xc
cmp dword [esi + 0xc], 0
jne 0x1015325a
test eax, eax
je 0x1015325a
mov eax, dword [eax + 0x74]
test eax, eax
je 0x1015325a
cmp dword [eax], 0
je 0x1015325a
call fcn.10106b20
call fcn.10107a00
call fcn.100df5c0
mov ecx, dword [0x1023da3c]
call fcn.100e8260
call fcn.10152c60
cmp byte [0x102ffdcc], 0
je 0x101533ac
mov esi, dword [0x10243f84]
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x30], 2
movups xmm0, xmmword [esi + 0x387c]
lea ecx, [esi + 0x476c]
movups xmmword [ebp - 0x2c], xmm0
call fcn.100f4ee0
mov dword [esi + 0x387c], 0
mov ecx, 0x2020
mov dword [esi + 0x3880], 0
mov dword [esi + 0x3884], 0
mov dword [esi + 0x3888], 0
mov eax, dword [0x10243f84]
movss xmm0, dword [0x1022b850]
movss xmm1, dword [0x1022b92c]
movss dword [ebp - 0x28], xmm0
or dword [eax + 0x470c], 0x10
mov dword [eax + 0x4748], 0x41a00000
movss dword [eax + 0x474c], xmm0
movss dword [eax + 0x4750], xmm1
movss dword [eax + 0x4754], xmm1
mov dword [eax + 0x4758], 0x101618c0
mov dword [eax + 0x475c], 0
mov eax, 0x20a3
cmp byte [0x1023d9a6], 0
cmovne eax, ecx
xor edx, edx
push eax
mov ecx, str.Radar
call fcn.100e4cf0
add esp, 4
test al, al
je 0x1015339d
mov edx, dword [0x10243f84]
mov eax, dword [edx + 0x3e58]
cvttss2si eax, dword [eax + 0x14]
add eax, dword [0x102418e4]
mov dword [0x10241904], eax
mov eax, dword [edx + 0x3e58]
cvttss2si eax, dword [eax + 0x18]
add eax, dword [0x102418e4]
mov dword [0x10241908], eax
mov eax, dword [edx + 0x3e58]
movss xmm0, dword [eax + 0x1c]
mulss xmm0, dword [0x1022b69c]
cvttss2si eax, xmm0
mov dword [0x102418e4], eax
call fcn.100e75a0
mov ecx, 1
call fcn.100dc690
cmp byte [0x1023d9a6], 0
je 0x101536a5
mov ecx, 0x1023d998
call fcn.1013f120
mov ecx, dword [0x10243e1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x10153579
cmp dword [0x103008a0], 0
je 0x10153579
mov esi, dword [0x10243f84]
movd xmm0, dword [0x10241638]
movd xmm1, dword [0x1024163c]
cvtdq2ps xmm0, xmm0
mov eax, dword [esi + 0x470c]
lea ecx, [esi + 0x476c]
mov dword [esi + 0x4714], 4
or eax, 2
mov dword [esi + 0x470c], eax
or eax, 1
mov dword [ebp - 0x30], 2
cvtdq2ps xmm1, xmm1
movss dword [esi + 0x472c], xmm0
movss dword [esi + 0x4730], xmm1
movd xmm0, dword [0x10241630]
movd xmm1, dword [0x10241634]
cvtdq2ps xmm0, xmm0
mov dword [esi + 0x470c], eax
lea eax, [ebp - 0x30]
mov dword [esi + 0x4710], 4
push eax
cvtdq2ps xmm1, xmm1
movss dword [esi + 0x471c], xmm0
xorps xmm0, xmm0
movss dword [esi + 0x4720], xmm1
movss dword [esi + 0x4724], xmm0
movss dword [esi + 0x4728], xmm0
movups xmm0, xmmword [esi + 0x387c]
movups xmmword [ebp - 0x2c], xmm0
call fcn.100f4ee0
mov dword [esi + 0x387c], 0
lea eax, [ebp - 0x28]
mov dword [esi + 0x3880], 0
mov dword [esi + 0x3884], 0
mov dword [esi + 0x3888], 0x3dcccccd
mov esi, dword [0x10243f84]
push eax
mov dword [ebp - 0x28], 5
movss xmm1, dword [esi + 0x3798]
lea ecx, [esi + 0x4778]
movss xmm0, dword [esi + 0x379c]
movss dword [ebp - 0x24], xmm1
movss dword [ebp - 0x20], xmm0
call fcn.100f4e20
push 0x2020
xor edx, edx
mov dword [esi + 0x3798], 0x42700000
mov ecx, str.Camera
mov dword [esi + 0x379c], 0x42700000
call fcn.100e4cf0
add esp, 4
test al, al
je 0x10153565
mov eax, dword [0x10243f84]
mov eax, dword [eax + 0x3e58]
movss xmm2, dword [eax + 0x18]
movss xmm0, dword [eax + 0x1c]
movss xmm1, dword [eax + 0x20]
cvttss2si eax, dword [eax + 0x14]
mov dword [0x10241630], eax
cvttss2si eax, xmm2
mov dword [0x10241634], eax
cvttss2si eax, xmm0
mov dword [0x10241638], eax
cvttss2si eax, xmm1
mov dword [0x1024163c], eax
call fcn.100e75a0
mov ecx, 1
call fcn.100dc740
mov ecx, 1
call fcn.100dc690
movzx eax, byte [0x10300ec0]
push ecx
push eax
push 0x103016bc
push str.Conditions
call fcn.10152a60
movzx eax, byte [0x10301070]
push ecx
push eax
push 0x10301880
push str.Ping
call fcn.10152a60
cmp dword [0x10303cb8], 0
push ecx
setne al
movzx eax, al
push eax
push 0x10303f64
push str.DT_Bar
call fcn.10152a60
movzx eax, byte [0x10302748]
push ecx
push eax
push 0x103026ec
push str.Crits
call fcn.10152a60
mov ecx, 0x1023d998
call fcn.10150680
mov ecx, 0x1023d998
call fcn.10152780
mov esi, dword [0x10243f84]
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x28], 2
movss xmm1, dword [esi + 0x3788]
lea ecx, [esi + 0x4778]
movss xmm0, dword [esi + 0x378c]
movss dword [ebp - 0x24], xmm1
movss dword [ebp - 0x20], xmm0
call fcn.100f4e20
mov dword [esi + 0x3788], 0x41400000
lea eax, [ebp - 0x28]
mov dword [esi + 0x378c], 0x41400000
mov esi, dword [0x10243f84]
push eax
mov dword [ebp - 0x28], 5
movss xmm1, dword [esi + 0x3798]
lea ecx, [esi + 0x4778]
movss xmm0, dword [esi + 0x379c]
movss dword [ebp - 0x24], xmm1
movss dword [ebp - 0x20], xmm0
call fcn.100f4e20
mov dword [esi + 0x3798], 0x41200000
mov dword [esi + 0x379c], 0x41200000
call fcn.1013b7b0
call fcn.1013c230
mov ecx, 2
call fcn.100dc740
call fcn.10154730
call fcn.10155df0
call fcn.100e8320
call fcn.100e14a0
call fcn.100e1910
mov esi, dword [0x10243f84]
cmp dword [esi + 0x47d0], 0
jg 0x101536d8
push 0x730
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.h
push str.i___0__i___Size
call dword [ebp - 0x18]
add esp, 0xc
mov eax, dword [esi + 0x47d8]
mov ecx, dword [eax]
xor eax, eax
add ecx, 0x38
cmp byte [ecx], al
cmove ecx, eax
call fcn.10106630
mov eax, dword [edi]
push 1
push 0xc2
push edi
call dword [eax + 0xe4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call sub.api_ms_win_crt_runtime_l1_1_0.dll_abort
int3