Function at 0x100e30b0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10128d7d
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x20
cmp byte [0x101c9aaf], 0
push esi
push edi
je 0x100e3758
push 0
lea eax, [ebp - 0x18]
push eax
push 0
push 0x102b7794
call dword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
jne 0x100e310b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
cmp dword [ebp - 0x18], 0
mov edi, dword [ebx + 8]
je 0x100e3152
mov dword [ebp - 0x20], 0x102b7794
mov dword [ebp - 0x1c], 4
push edi
mov ecx, 0x101c9aa0
mov dword [ebp - 4], 0
call fcn.100e3bf0
push 0
push 0
push 0x102b7794
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x100e376d
mov eax, dword [edi]
push 0xffffffffffffffff
push 0xa8
push edi
call dword [eax + 0xe4]
mov eax, dword [edi]
push 4
push 1
push 0
push edi
call dword [eax + 0x10c]
mov eax, dword [edi]
push 4
push 4
push 0
push edi
call dword [eax + 0x10c]
mov eax, dword [edi]
push 0
push 0xc2
push edi
call dword [eax + 0xe4]
mov eax, dword fs:[0x2c]
mov ecx, dword [0x101cf110]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x102b9f44]
cmp eax, dword [ecx + 4]
jle 0x100e31e3
push 0x102b9f44
call fcn.10121ee8
add esp, 4
cmp dword [0x102b9f44], 0xffffffff
jne 0x100e31e3
push 0x102b9f44
mov dword [0x102b9f58], 0
mov dword [0x102b9f54], 0x102b7728
call fcn.10121e9e
add esp, 4
mov eax, dword [0x102b9f54]
cmp dword [0x102b9f58], 0
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
sete byte [ebp - 0x11]
mov eax, dword [eax]
test eax, eax
jne 0x100e320b
mov dword [0x102b9f58], 0
jmp 0x100e3223
push eax
call esi
shr eax, 0xf
and al, 1
movzx eax, al
mov dword [0x102b9f58], eax
je 0x100e3223
cmp byte [ebp - 0x11], 0
jne 0x100e322b
push 0x2d
call esi
test al, 1
je 0x100e325e
mov ecx, dword [0x102b7784]
cmp byte [0x101c9aae], 0
push 0
sete byte [0x101c9aae]
mov eax, dword [ecx]
call dword [eax + 0x50]
mov ecx, dword [0x101cf678]
movzx eax, byte [0x101c9aae]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xd0]
call eax
cmp byte [0x101c9aae], 0
je 0x100e32c9
cmp byte [0x102b772f], 0
je 0x100e32c9
cmp dword [0x102b777c], 0
jne 0x100e328f
push 0x10173818
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x102b777c], eax
test eax, eax
je 0x100e329d
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x102b777c]
je 0x100e32c9
mov ecx, dword [0x102b7784]
mov byte [0x101c9aae], 0
push 0
mov eax, dword [ecx]
call dword [eax + 0x50]
mov ecx, dword [0x101cf678]
movzx eax, byte [0x101c9aae]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xd0]
call eax
mov eax, dword [0x101cf7b8]
test eax, eax
je 0x100e32de
mov esi, dword [eax + 0xc8]
test esi, esi
jne 0x100e32fd
jmp 0x100e32e0
xor esi, esi
push 0x176
push str.D:_aFedorawareFedorawareFedorawareTeamFortress2TeamFortress2FeaturesMenuImGuiimgui_impl_dx9.cpp
push str.bd___0___Did_you_call_ImGui_ImplDX9_Init____
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x101cf7b8]
add esp, 0xc
cmp dword [esi + 0xc], 0
jne 0x100e331b
test eax, eax
je 0x100e331b
mov eax, dword [eax + 0xc8]
test eax, eax
je 0x100e331b
cmp dword [eax], 0
je 0x100e331b
call fcn.10096210
call fcn.10096af0
call fcn.10072db0
mov ecx, dword [0x101c9b44]
call fcn.1007bbc0
call fcn.100e2d70
cmp byte [0x102b7732], 0
je 0x100e3426
mov esi, dword [0x101cf7b8]
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x2c], 2
movups xmm0, xmmword [esi + 0x1610]
lea ecx, [esi + 0x1ce4]
movups xmmword [ebp - 0x28], xmm0
call fcn.10084cb0
mov eax, dword [0x101cf7b8]
xorps xmm0, xmm0
movups xmmword [esi + 0x1610], xmm0
mov ecx, 0x2020
movaps xmm0, xmmword [0x10197f50]
or dword [eax + 0x1c84], 0x10
movups xmmword [eax + 0x1cc0], xmm0
mov dword [eax + 0x1cd0], 0x100f1a10
mov dword [eax + 0x1cd4], 0
mov eax, 0x20a3
cmp byte [0x101c9aae], 0
cmovne eax, ecx
xor edx, edx
push eax
mov ecx, str.Radar
call fcn.100787e0
add esp, 4
test al, al
je 0x100e3417
mov edx, dword [0x101cf7b8]
mov eax, dword [edx + 0x1ba8]
cvttss2si eax, dword [eax + 0xc]
add eax, dword [0x101cd488]
mov dword [0x101cd4a8], eax
mov eax, dword [edx + 0x1ba8]
cvttss2si eax, dword [eax + 0x10]
add eax, dword [0x101cd488]
mov dword [0x101cd4ac], eax
mov eax, dword [edx + 0x1ba8]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x1019766c]
cvttss2si eax, xmm0
mov dword [0x101cd488], eax
call fcn.1007b000
mov ecx, 1
call fcn.1006fd70
cmp byte [0x101c9aae], 0
je 0x100e36fb
mov ecx, 0x101c9aa0
call fcn.100d0300
mov ecx, dword [0x101cf52c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x100e35d9
cmp dword [0x101cf63c], 0
je 0x100e35d9
mov esi, dword [0x101cf7b8]
xorps xmm2, xmm2
movd xmm0, dword [0x101c99f0]
movd xmm1, dword [0x101c99f4]
cvtdq2ps xmm0, xmm0
mov eax, dword [esi + 0x1c84]
lea ecx, [esi + 0x1ce4]
mov dword [esi + 0x1c8c], 4
or eax, 2
mov dword [esi + 0x1c84], eax
or eax, 1
mov dword [ebp - 0x2c], 2
cvtdq2ps xmm1, xmm1
movss dword [esi + 0x1ca4], xmm0
movss dword [esi + 0x1ca8], xmm1
movd xmm0, dword [0x101c99e8]
movd xmm1, dword [0x101c99ec]
cvtdq2ps xmm0, xmm0
mov dword [esi + 0x1c84], eax
lea eax, [ebp - 0x2c]
mov dword [esi + 0x1c88], 4
push eax
cvtdq2ps xmm1, xmm1
movss dword [esi + 0x1c94], xmm0
movss dword [esi + 0x1c98], xmm1
movss dword [esi + 0x1c9c], xmm2
movss dword [esi + 0x1ca0], xmm2
movups xmm0, xmmword [esi + 0x1610]
movups xmmword [ebp - 0x28], xmm0
call fcn.10084cb0
movaps xmm0, xmmword [0x10197bd0]
lea eax, [ebp - 0x24]
movups xmmword [esi + 0x1610], xmm0
mov esi, dword [0x101cf7b8]
push eax
mov dword [ebp - 0x24], 5
movss xmm1, dword [esi + 0x1540]
lea ecx, [esi + 0x1cf0]
movss xmm0, dword [esi + 0x1544]
movss dword [ebp - 0x20], xmm1
movss dword [ebp - 0x1c], xmm0
call fcn.10084bf0
push 0x2020
xor edx, edx
mov dword [esi + 0x1540], 0x42700000
mov ecx, str.Camera
mov dword [esi + 0x1544], 0x42700000
call fcn.100787e0
add esp, 4
test al, al
je 0x100e35c5
mov eax, dword [0x101cf7b8]
mov eax, dword [eax + 0x1ba8]
movss xmm2, dword [eax + 0x10]
movss xmm0, dword [eax + 0x14]
movss xmm1, dword [eax + 0x18]
cvttss2si eax, dword [eax + 0xc]
mov dword [0x101c99e8], eax
cvttss2si eax, xmm2
mov dword [0x101c99ec], eax
cvttss2si eax, xmm0
mov dword [0x101c99f0], eax
cvttss2si eax, xmm1
mov dword [0x101c99f4], eax
call fcn.1007b000
mov ecx, 1
call fcn.1006ff60
mov ecx, 1
call fcn.1006fd70
movzx eax, byte [0x102b76f9]
push ecx
push eax
push 0x101a7304
push str.Conditions
call fcn.100e2b80
movzx eax, byte [0x102b76ee]
push ecx
push eax
push 0x101a72e4
push str.Ping
call fcn.100e2b80
cmp dword [0x101a72a0], 0
push ecx
setne al
movzx eax, al
push eax
push 0x101c98fc
push str.DT_Bar
call fcn.100e2b80
movzx eax, byte [0x101cf650]
push ecx
push eax
push 0x101a7078
push str.Crits
call fcn.100e2b80
mov ecx, 0x101c9aa0
call fcn.100e0a50
mov esi, dword [0x101cf7b8]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], 2
movss xmm1, dword [esi + 0x1530]
lea ecx, [esi + 0x1cf0]
movss xmm0, dword [esi + 0x1534]
movss dword [ebp - 0x20], xmm1
movss dword [ebp - 0x1c], xmm0
call fcn.10084bf0
mov dword [esi + 0x1530], 0x41400000
lea eax, [ebp - 0x24]
mov dword [esi + 0x1534], 0x41400000
mov esi, dword [0x101cf7b8]
push eax
mov dword [ebp - 0x24], 5
movss xmm1, dword [esi + 0x1540]
lea ecx, [esi + 0x1cf0]
movss xmm0, dword [esi + 0x1544]
movss dword [ebp - 0x20], xmm1
movss dword [ebp - 0x1c], xmm0
call fcn.10084bf0
mov dword [esi + 0x1540], 0x41200000
mov dword [esi + 0x1544], 0x41200000
call fcn.100cccf0
call fcn.100cd800
mov ecx, 2
call fcn.1006ff60
call fcn.100e4940
call fcn.100e5f30
call fcn.1007bc90
call fcn.10074ff0
call fcn.10075410
mov esi, dword [0x101cf7b8]
cmp dword [esi + 0x1d48], 0
jg 0x100e3731
push 0x6b9
push str.D:_aFedorawareFedorawareFedorawareTeamFortress2TeamFortress2FeaturesMenuImGuiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x1d50]
mov ecx, dword [eax]
xor eax, eax
add ecx, 0x34
cmp byte [ecx], al
cmove ecx, eax
call fcn.10095d70
mov eax, dword [edi]
push 1
push 0xc2
push edi
call dword [eax + 0xe4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call sub.api_ms_win_crt_runtime_l1_1_0.dll_abort
int3