Function at 0x140004f60
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x798]
sub rsp, 0x870
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14000a040]
xor rax, rsp
mov qword [rbp + 0x6c8], rax
mov rcx, qword [0x14000a828]
call fcn.1400024c0
test al, al
jne 0x140004ffc
lea rcx, str._x__Failed_to_initialize_memory_system_n
call fcn.140002460
mov eax, 0xffffffff
jmp 0x140005631
mov rax, qword [0x14000a828]
mov ebx, dword [rax + 8]
lea rdx, str.Counter_Strike_2
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140005030
lea rcx, str._x__Failed_to_get_game_window_n
call fcn.140002460
mov eax, 0xffffffff
jmp 0x140005631
lea rdx, [rsp + 0x70]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x78]
mov dword [0x14000a800], eax
mov eax, dword [rsp + 0x7c]
mov dword [0x14000a7fc], eax
lea rcx, str.___All_is_fine._Starting..._n
call fcn.140002460
lea rcx, str.____Panic_key____DELETE_n
call fcn.140002460
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x140004f50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x38], rax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memset
mov edx, ebx
lea rcx, [rbp - 0x80]
call fcn.140002ec0
nop
mov ecx, 0x2e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140005608
movss xmm15, dword [0x1400079e0]
movss xmm14, dword [0x140007994]
movss xmm11, dword [0x140007998]
movss xmm12, dword [0x14000799c]
movss xmm13, dword [0x1400079a0]
nop dword [rax]
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x6b0], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x6b8], rax
mov rax, qword [rbp - 0x78]
mov qword [rbp + 0x6c0], rax
mov r9d, dword [rbp - 0x10]
mov r8d, 1
lea rdx, [rbp + 0x6b0]
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1400055f5
cmp byte [rbp + 0x71], al
je 0x14000515c
lea rcx, [rbp + 0x18]
call fcn.140004e40
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x1400055f5
mov dword [rbp + 0x34], r14d
mov rbx, qword [0x14000a830]
lea rcx, [rbx + 0x28]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
jne 0x1400056ac
cmp dword [rbx + 0x74], 0x7fffffff
je 0x140005699
mov r8, qword [rbx + 0x20]
cmp r8, 1
ja 0x1400051bc
lea rcx, [rbx + 0x28]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
lea rcx, [rbp + 0x18]
call fcn.140004e40
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x1400055f5
mov r9, qword [rbx + 0x18]
lea rax, [r9 - 2]
add rax, r8
mov rcx, qword [rbx + 0x10]
dec rcx
and rcx, rax
mov rax, qword [rbx + 8]
mov rsi, qword [rax + rcx*8]
cmp r8, 5
jbe 0x140005226
mov rdx, qword [rbx]
lea rax, [r8 - 3]
add rax, r9
mov qword [rbp + 0x6b8], r14
mov qword [rbp + 0x6b0], rdx
mov qword [rbp + 0x6c0], rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x50], r9
lea r9, [rbp + 0x6b0]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.140001b00
lea rcx, [rbx + 0x28]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
test rsi, rsi
jne 0x140005257
lea rcx, [rbp + 0x18]
call fcn.140004e40
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x1400055f5
lea rcx, [rbp + 0x90]
mov rdx, rsi
mov r8d, 0x618
call sub.VCRUNTIME140.dll_memcpy
lea r13, [rbp + 0x90]
cmp byte [r13], 0
je 0x1400055c1
movups xmm8, xmmword [r13 + 4]
movaps xmm9, xmm8
shufps xmm9, xmm8, 0xff
movaps xmm0, xmm9
addss xmm0, xmm14
cvttss2si r12d, xmm0
movaps xmm6, xmm8
shufps xmm6, xmm8, 0xaa
movaps xmm0, xmm6
addss xmm0, xmm14
cvttss2si esi, xmm0
movaps xmm7, xmm8
shufps xmm7, xmm8, 0x55
movaps xmm0, xmm7
subss xmm0, xmm14
cvttss2si r14d, xmm0
mov dword [rsp + 0x30], r14d
movaps xmm0, xmm8
subss xmm0, xmm14
cvttss2si edi, xmm0
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], r12d
lea r9d, [rdi + 1]
mov r8d, r14d
mov edx, edi
lea rcx, [rbp - 0x80]
call fcn.140003460
lea r8d, [r12 - 1]
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], r12d
mov r9d, esi
lea edx, [rdi + 1]
lea rcx, [rbp - 0x80]
call fcn.140003460
lea r9d, [rsi + 1]
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], r12d
mov r8d, r14d
mov edx, esi
lea rcx, [rbp - 0x80]
call fcn.140003460
lea eax, [r14 + 1]
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], eax
mov r9d, esi
mov r8d, r14d
mov edx, edi
lea rcx, [rbp - 0x80]
call fcn.140003460
cvttss2si edi, xmm9
cvttss2si r14d, xmm6
cvttss2si r15d, xmm7
cvttss2si esi, xmm8
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], edi
lea r9d, [rsi + 1]
mov r8d, r15d
mov edx, esi
lea rcx, [rbp - 0x80]
call fcn.140003460
lea r8d, [rdi - 1]
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], edi
mov r9d, r14d
lea edx, [rsi + 1]
lea rcx, [rbp - 0x80]
call fcn.140003460
lea r9d, [r14 + 1]
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], edi
mov r8d, r15d
mov edx, r14d
lea rcx, [rbp - 0x80]
call fcn.140003460
lea eax, [r15 + 1]
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], eax
mov r9d, r14d
mov r8d, r15d
mov edx, esi
lea rcx, [rbp - 0x80]
call fcn.140003460
movaps xmm0, xmm9
subss xmm0, xmm14
cvttss2si edi, xmm0
subss xmm6, xmm14
cvttss2si r15d, xmm6
movaps xmm0, xmm7
addss xmm0, xmm14
cvttss2si r14d, xmm0
movaps xmm1, xmm8
addss xmm1, xmm14
cvttss2si esi, xmm1
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], edi
lea r9d, [rsi + 1]
mov r8d, r14d
mov edx, esi
lea rcx, [rbp - 0x80]
call fcn.140003460
lea r8d, [rdi - 1]
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], edi
mov r9d, r15d
lea edx, [rsi + 1]
lea rcx, [rbp - 0x80]
call fcn.140003460
lea r9d, [r15 + 1]
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], edi
mov r8d, r14d
mov edx, r15d
lea rcx, [rbp - 0x80]
call fcn.140003460
lea eax, [r14 + 1]
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], eax
mov r9d, r15d
mov r8d, r14d
mov edx, esi
lea rcx, [rbp - 0x80]
call fcn.140003460
mov eax, dword [r13 + 0x14]
movd xmm10, eax
cvtdq2ps xmm10, xmm10
divss xmm10, dword [0x1400079a4]
movaps xmm6, xmm9
subss xmm6, xmm7
andps xmm6, xmm15
cmp eax, 0x19
jl 0x1400054cf
mov edi, 0xa050ff50
cmp eax, 0x32
mov eax, 0xa0d7c850
cmovl edi, eax
jmp 0x1400054d4
mov edi, 0xa0ff3250
movaps xmm0, xmm8
subss xmm0, xmm11
cvttss2si esi, xmm0
movaps xmm1, xmm8
subss xmm1, xmm12
cvttss2si ebx, xmm1
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], r12d
mov r9d, esi
mov r14d, dword [rsp + 0x30]
mov r8d, r14d
mov edx, ebx
lea rcx, [rbp - 0x80]
call fcn.140003460
mulss xmm6, xmm10
subss xmm9, xmm6
cvttss2si r8d, xmm9
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r12d
mov r9d, esi
mov edx, ebx
lea rcx, [rbp - 0x80]
call fcn.140003460
subss xmm8, xmm13
cvttss2si edi, xmm8
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], r12d
lea r9d, [rdi + 1]
mov r8d, r14d
mov edx, edi
lea rcx, [rbp - 0x80]
call fcn.140003460
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], r12d
mov r9d, esi
lea r8d, [r12 - 1]
lea edx, [rdi + 1]
lea rcx, [rbp - 0x80]
call fcn.140003460
lea r9d, [rsi + 1]
mov dword [rsp + 0x28], 0xff000000
mov dword [rsp + 0x20], r12d
mov r8d, r14d
mov edx, esi
lea rcx, [rbp - 0x80]
call fcn.140003460
mov dword [rsp + 0x28], 0xff000000
lea eax, [r14 + 1]
mov dword [rsp + 0x20], eax
mov r9d, esi
mov r8d, r14d
mov edx, edi
lea rcx, [rbp - 0x80]
call fcn.140003460
add r13, 0x18
lea rax, [rbp + 0x6a8]
cmp r13, rax
jne 0x140005273
lea rcx, [rbp + 0x18]
call fcn.140004e40
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r14d, r14d
mov ecx, 0x2e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400050f0
mov byte [0x14000a7f8], 1
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x80]
call fcn.140003220
xor eax, eax
mov rcx, qword [rbp + 0x6c8]
xor rcx, rsp
call fcn.1400056d0
lea r11, [rsp + 0x870]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbx + 0x74], 0x7ffffffe
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3