Function at 0x14003136f
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x140078410
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x3a8
lea rbp, [rsp + 0x20]
lea rcx, [0x1400bf109]
call fcn.140031ca2
lea rax, str.cs2.exe
mov qword [rbp + 8], rax
lea rax, str.client.dll
mov qword [rbp + 0x28], rax
mov rcx, qword [rbp + 8]
call fcn.1400311a8
mov dword [rbp + 0x44], eax
cmp dword [rbp + 0x44], 0
jne 0x140078475
mov rdx, qword [rbp + 8]
lea rcx, str._s_not_found__n
call fcn.140030d39
mov eax, 1
jmp 0x14007881a
mov r8d, dword [rbp + 0x44]
mov rdx, qword [rbp + 8]
lea rcx, str._s_has_pid:__lu_n
call fcn.140030d39
mov r8d, dword [rbp + 0x44]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x1400784bf
mov rdx, qword [rbp + 8]
lea rcx, str.Failed_to_open__s_process__n
call fcn.140030d39
mov eax, 1
jmp 0x14007881a
mov r8, qword [rbp + 0x68]
mov rdx, qword [rbp + 8]
lea rcx, str._s_process_handle:_0x_p_n
call fcn.140030d39
mov rdx, qword [rbp + 0x28]
mov ecx, dword [rbp + 0x44]
call fcn.1400312a2
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x140078518
mov r8, qword [rbp + 8]
mov rdx, qword [rbp + 0x28]
lea rcx, str._s_not_found_in__s__n
call fcn.140030d39
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
jmp 0x14007881a
mov r8d, dword [rbp + 0x88]
mov rdx, qword [rbp + 0x28]
lea rcx, str._s_base_address:_0x_lx_n
call fcn.140030d39
lea rcx, str.Fetching_offsets..._n
call fcn.140030d39
call fcn.140030857
lea rcx, str.Glow___Press_F1_to_toggle_n
call fcn.140030d39
xor eax, eax
cmp eax, 1
je 0x140078801
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x1400785fa
movzx eax, byte [0x1400b1b38]
test eax, eax
jne 0x140078582
mov dword [rbp + 0x374], 1
jmp 0x14007858c
mov dword [rbp + 0x374], 0
movzx eax, byte [rbp + 0x374]
mov byte [0x1400b1b38], al
mov dword [rbp + 0x324], 0x96
lea rdx, [rbp + 0x324]
lea rcx, [rbp + 0x308]
call fcn.1400314f0
mov rcx, rax
call fcn.14003175c
movzx eax, byte [0x1400b1b38]
test eax, eax
je 0x1400785d9
lea rax, str.true
mov qword [rbp + 0x378], rax
jmp 0x1400785e7
lea rax, str.false
mov qword [rbp + 0x378], rax
mov rdx, qword [rbp + 0x378]
lea rcx, str.Enabled:__s_n
call fcn.140030d39
mov dword [rbp + 0xa4], 1
jmp 0x140078614
mov eax, dword [rbp + 0xa4]
inc eax
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0x40
jge 0x1400787d7
mov rax, qword [0x1400b1b20]
mov rcx, qword [rbp + 0x88]
add rcx, rax
mov rax, rcx
mov rdx, rax
mov rcx, qword [rbp + 0x68]
call fcn.140031d97
mov qword [rbp + 0xc8], rax
cmp qword [rbp + 0xc8], 0
jne 0x140078654
jmp 0x140078606
mov eax, dword [rbp + 0xa4]
and eax, 0x7fff
shl eax, 3
sar eax, 9
cdqe
mov rcx, qword [rbp + 0xc8]
lea rax, [rcx + rax + 0x10]
mov rdx, rax
mov rcx, qword [rbp + 0x68]
call fcn.140031d97
mov qword [rbp + 0xe8], rax
cmp qword [rbp + 0xe8], 0
jne 0x140078695
jmp 0x140078606
mov eax, dword [rbp + 0xa4]
and eax, 0x1ff
imul eax, eax, 0x78
cdqe
mov rcx, qword [rbp + 0xe8]
add rcx, rax
mov rax, rcx
mov rdx, rax
mov rcx, qword [rbp + 0x68]
call fcn.140031d97
mov qword [rbp + 0x108], rax
cmp qword [rbp + 0x108], 0
jne 0x1400786d4
jmp 0x140078606
mov rax, qword [0x1400b1b28]
mov rcx, qword [rbp + 0x108]
add rcx, rax
mov rax, rcx
mov rdx, rax
mov rcx, qword [rbp + 0x68]
call fcn.140030ad2
mov dword [rbp + 0x124], eax
mov eax, dword [rbp + 0x124]
and eax, 0x7fff
shr eax, 9
shl eax, 3
mov eax, eax
mov rcx, qword [rbp + 0xc8]
lea rax, [rcx + rax + 0x10]
mov rdx, rax
mov rcx, qword [rbp + 0x68]
call fcn.140031d97
mov qword [rbp + 0x148], rax
cmp qword [rbp + 0x148], 0
jne 0x14007873b
jmp 0x140078606
mov eax, dword [rbp + 0x124]
and eax, 0x1ff
imul eax, eax, 0x78
mov eax, eax
mov rcx, qword [rbp + 0x148]
add rcx, rax
mov rax, rcx
mov rdx, rax
mov rcx, qword [rbp + 0x68]
call fcn.140031d97
mov qword [rbp + 0x168], rax
cmp qword [rbp + 0x168], 0
jne 0x14007877a
jmp 0x140078606
movzx eax, byte [0x1400b1b38]
test eax, eax
jne 0x1400787aa
mov rax, qword [0x1400b1b30]
mov rcx, qword [rbp + 0x168]
add rcx, rax
mov rax, rcx
xorps xmm2, xmm2
mov rdx, rax
mov rcx, qword [rbp + 0x68]
call fcn.140030fc3
jmp 0x1400787d2
mov rax, qword [0x1400b1b30]
mov rcx, qword [rbp + 0x168]
add rcx, rax
mov rax, rcx
movss xmm2, dword [0x1400a2afc]
mov rdx, rax
mov rcx, qword [rbp + 0x68]
call fcn.140030fc3
jmp 0x140078606
mov dword [rbp + 0x364], 0x32
lea rdx, [rbp + 0x364]
lea rcx, [rbp + 0x348]
call fcn.1400314f0
mov rcx, rax
call fcn.14003175c
jmp 0x14007854c
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140D.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
xor eax, eax
lea rsp, [rbp + 0x388]
pop rdi
pop rbp
ret