Function at 0x100f9da0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1014efbf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x70
push esi
mov dword [ebp - 0x20], 0
mov eax, dword [0x10248ad8]
push edi
mov edi, ecx
mov dword [ebp - 0x18], edx
push ecx
mov ecx, dword [eax + 0x3e58]
push edi
mov dword [ebp - 0x1c], edi
call fcn.10047cb0
mov ecx, dword [0x10248ad8]
push ecx
push edi
mov dword [ebp - 0x24], eax
mov esi, dword [ecx + 0x3e58]
mov ecx, esi
call fcn.10047cb0
mov ecx, dword [esi + 0xe4]
add esi, 0xe4
mov dword [ebp - 0x20], eax
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x100f9e42
inc ecx
test edi, edi
je 0x100f9e30
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x100f9e35
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.1005e7b0
mov ecx, dword [esi]
mov eax, dword [esi + 8]
mov edx, dword [ebp - 0x20]
mov byte [0x102f0190], 0
mov dword [eax + ecx*4], edx
mov eax, dword [0x10248ad8]
inc dword [esi]
mov esi, dword [ebp - 0x24]
cmp dword [eax + 0x3ea4], esi
jne 0x100f9f9e
push 7
push str.:_...
lea edx, [ebp - 0x1c]
mov byte [0x102f0190], 1
lea ecx, [ebp - 0x80]
call fcn.10107740
add esp, 8
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 0x10
jb 0x100f9e95
mov eax, dword [eax]
mov edx, 0x20
mov ecx, eax
call fcn.100f3dd0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x100f9ede
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100f9ed4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100f9ed4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10148478
add esp, 8
xor ecx, ecx
call fcn.10048190
mov byte [ebp - 0x11], al
test al, al
je 0x100f9f07
push 0
xor edx, edx
xor ecx, ecx
call fcn.10052ba0
add esp, 4
test al, al
je 0x100f9f07
mov byte [0x102f0174], 1
jmp 0x100f9f84
mov edx, dword [0x10248ad8]
mov ecx, esi
mov eax, dword [edx + 0x3e58]
mov byte [eax + 0xac], 1
mov edx, dword [edx + 0x3e58]
call fcn.10047f50
xor esi, esi
mov eax, 0xff
nop
cmp si, 0x2d
je 0x100f9f5c
cmp si, 0x72
je 0x100f9f5c
cmp byte [ebp - 0x11], 0
je 0x100f9f48
cmp si, 1
je 0x100f9f5c
movsx edi, si
push edi
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x100f9f73
mov eax, 0xff
inc esi
cmp si, ax
jl 0x100f9f30
mov eax, dword [0x10248ad8]
mov byte [eax + 0x3eb1], 1
jmp 0x100fa101
mov eax, dword [ebp - 0x18]
mov dword [eax], edi
cmp si, 0x1b
jne 0x100f9f84
mov dword [eax], 0
xor edx, edx
xor ecx, ecx
call fcn.10047f50
mov eax, dword [0x10248ad8]
mov byte [eax + 0x3eb1], 1
jmp 0x100fa101
mov eax, dword [ebp - 0x18]
movzx eax, word [eax]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.100fa1a0
mov dword [ebp - 4], 1
cmp dword [eax + 0x14], 0x10
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], ecx
mov ecx, eax
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x38], 0xb0000000
jb 0x100f9fd3
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
sub esp, 8
mov dword [ebp - 0x28], eax
mov eax, esp
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x34], 0xc0000004
push 6
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x50]
push str.:_
mov dword [eax], 2
call fcn.100c6bf0
add esp, 0x10
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x50]
cmp dword [ebp - 0x3c], 0x10
mov edx, 0x20
mov dword [ebp - 0x20], 0xb
cmovae ecx, dword [ebp - 0x50]
call fcn.100f3dd0
test al, al
je 0x100fa03a
cmp byte [0x102f0174], 0
mov byte [ebp - 0x11], 1
je 0x100fa03e
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0x10
jb 0x100fa075
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100fa06b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100fa0b4
push ecx
push edx
call fcn.10148478
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp ecx, 0x10
jb 0x100fa0c4
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100fa0ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100fa0ba
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10148478
add esp, 8
cmp byte [ebp - 0x11], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
je 0x100fa0fc
mov edx, dword [0x10248ad8]
mov ecx, esi
mov eax, dword [edx + 0x3e58]
mov byte [eax + 0xac], 1
mov edx, dword [edx + 0x3e58]
call fcn.10047f50
mov eax, dword [0x10248ad8]
cmp byte [0x102f0174], 0
je 0x100fa135
cmp byte [eax + 0xdc0], 0
je 0x100fa11c
cmp byte [eax + 0x44f4], 0
je 0x100fa135
cmp byte [eax + 0x3716], 0
je 0x100fa12e
cmp byte [eax + 0x44f4], 0
je 0x100fa135
mov byte [0x102f0174], 0
mov esi, dword [eax + 0x3e58]
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp dword [esi + 0xe4], 1
jg 0x100fa15e
push 0x1e80
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.cpp
push str.window__IDStack.Size___1
call edi
add esp, 0xc
cmp dword [esi + 0xe4], 0
jg 0x100fa17b
push 0x747
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.h
push str.Size___0
call edi
add esp, 0xc
dec dword [esi + 0xe4]
mov al, 1
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret