Function at 0x140027a40
Capabilities:
Log keystrokes via polling
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x140071100]
xor rax, rsp
mov qword [rbp + 0x10], rax
xor r14d, r14d
lea rcx, str.cs2_external_esp
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rdx, str._info__Github_Repository:_https:__github.com_IMXNOOBX_cs2_external_esp
lea rsi, [0x140072d90]
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
lea rdx, str._info__Unknowncheats_thread:_https:__www.unknowncheats.me_forum_counter_strike_2_releases_600259_cs2_external_esp.html_n
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
lea rdx, str._config__Reading_configuration.
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
call fcn.140022ed0
mov rcx, rsi
test al, al
lea rdx, str._updater__Sucessfully_read_configuration_file_n
jne 0x140027ae9
lea rdx, str._updater__Error_reading_config_file__reseting_to_the_default_state_n
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
call fcn.1400049a0
lea rdx, str._updater__Reading_offsets_from_file_offsets.json.
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
call fcn.140005c50
mov rcx, rsi
test al, al
lea rdx, str._updater__Sucessfully_read_offsets_file_n
jne 0x140027b2c
lea rdx, str._updater__Error_reading_offsets_file__reseting_to_the_default_state_n
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
lea rcx, [0x140071fa0]
call fcn.1400295f0
movsxd rax, dword [0x140071e40]
mov rcx, rsi
cmp qword [0x140071fe0], rax
je 0x140027ba1
lea rdx, str._cs2__Build_number_doesnt_match__the_game_has_been_updated_and_this_esp_most_likely_wont_work.
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
lea rdx, str._warn__If_the_esp_doesnt_work__consider_updating_offsets_manually_in_the_file_offsets.json
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
lea rdx, str._cs2__Press_any_key_to_continue
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
call fcn.140028210
jmp 0x140027bb5
lea rdx, str._cs2__Offsets_seem_to_be_up_to_date__have_fun_
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
lea rdx, str._overlay__Waiting_to_focus_game_to_create_the_overlay...
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
lea rdx, str._overlay__Make_sure_your_game_is_in__Full_Screen_Windowed_
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
mov rbx, qword [0x140071fa0]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r12d, 0xff
movabs r15, 0x7fffffffffffffff
cmp rax, qword [rbx + 0x10]
je 0x140027c8f
movabs rdi, 0x7fffffffc46535ff
lea rcx, [rbp - 0x40]
call fcn.140025fc0
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x60], rax
cmp rax, rdi
je 0x140027c45
mov ecx, 1
cmovl ecx, r12d
test cl, cl
jns 0x140027c45
add rax, 0x3b9aca00
mov qword [rsp + 0x60], rax
jmp 0x140027c4a
mov qword [rsp + 0x60], r15
lea rcx, [rsp + 0x60]
call fcn.140028850
mov rbx, qword [0x140071fa0]
mov edx, dword [rbx]
call fcn.140029290
mov qword [rbx + 0x10], rax
mov edx, 1
mov rcx, qword [0x140071fa0]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rbx, qword [0x140071fa0]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [rbx + 0x10]
jne 0x140027c14
lea rdx, str._overlay__Creating_window_overlay...
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
mov qword [rbp - 0x80], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x48], r14
mov dword [rsp + 0x70], 0x50
lea rax, [0x1400277a0]
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x74], 3
mov qword [rbp - 0x60], r14
mov edx, 0xfffffffa
mov rcx, qword [0x140071fa0]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_GetWindowLongA]
movsxd rcx, eax
mov qword [rbp - 0x78], rcx
lea rbx, [0x140065ef8]
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x50], rbx
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea rdx, [0x1400748f8]
mov rcx, qword [0x140071fa0]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_GetClientRect]
mov r9d, dword [0x1400748f8]
mov ecx, dword [0x140074904]
add ecx, r9d
mov eax, dword [0x140074900]
sub eax, r9d
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], eax
mov eax, dword [0x1400748fc]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r9d
mov r9d, 0x80000000
lea r8, str.cs2_external_esp
mov rdx, rbx
mov ecx, 0x800a8
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, rax
test rax, rax
jne 0x140027db9
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.14002dfc0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 1
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 8
call fcn.14002dfe8
lea rcx, [0x140027990]
mov qword [rax], rcx
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140028ac0]
xor edx, edx
xor ecx, ecx
call fcn.14003c828
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14002815d
lea rdx, str._n_settings__In_Game_keybinds:_n_t_F4__enable_disable_Box_ESP_n_t_F5__enable_disable_Team_ESP_n_t_F6__enable_disable_automatic_updates_n_t_F7__enable_disable_extra_flags_n_t_F8__enable_disable_skeleton_esp_n_t_F9__enable_disable_head_tracker_n_t_end__Unload_esp._n
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
lea rdx, str._settings__Make_sure_you_check_the_config_for_additional_settings_
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x140028077
movabs rdi, 0x7ffffffffff0bdbf
nop word [rax + rax]
cmp byte [0x1400748f0], 0
jne 0x140028077
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140027eb4
mov byte [0x1400748f0], 1
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140027ee7
cmp byte [0x140071e84], 0
sete byte [0x140071e84]
call fcn.140024bd0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140027f1a
cmp byte [0x1400748ec], 0
sete byte [0x1400748ec]
call fcn.140024bd0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140027f4d
cmp byte [0x1400748ea], 0
sete byte [0x1400748ea]
call fcn.140024bd0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x76
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140027f80
cmp byte [0x1400748eb], 0
sete byte [0x1400748eb]
call fcn.140024bd0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140027fb3
cmp byte [0x1400748e8], 0
sete byte [0x1400748e8]
call fcn.140024bd0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x78
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14002800b
cmp byte [0x1400748e9], 0
sete byte [0x1400748e9]
call fcn.140024bd0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_DispatchMessageA]
lea rcx, [rsp + 0x60]
call fcn.140025fc0
mov rax, qword [rsp + 0x60]
jmp 0x140028032
lea rcx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_DispatchMessageA]
lea rcx, [rsp + 0x60]
call fcn.140025fc0
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x40], rax
cmp rax, rdi
je 0x140028050
mov ecx, 1
cmovl ecx, r12d
test cl, cl
jns 0x140028050
add rax, 0xf4240
mov qword [rbp - 0x40], rax
jmp 0x140028054
mov qword [rbp - 0x40], r15
lea rcx, [rbp - 0x40]
call fcn.140028850
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x140027e90
cmp dword [rbp - 0x28], 0
je 0x140028152
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.14002d844
test eax, eax
jne 0x140028152
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str._overlay__Destroying_overlay_window.
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
mov rcx, qword [0x140074970]
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [0x140074978]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, rbx
call qword [sym.imp.USER32.dll_DestroyWindow]
lea rdx, str._cs2__Deatachig_from_process
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
mov rcx, qword [0x140071fa0]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str._cs2__Press_any_key_to_close
mov rcx, rsi
call fcn.14000d140
mov rcx, rax
call fcn.14000d3f0
call fcn.140028210
nop
cmp dword [rbp - 0x28], 0
jne 0x14002816c
mov eax, 1
jmp 0x140027d8c
mov ecx, 1
call fcn.14002d700
nop
mov dword [rbp - 0x28], r14d
mov ecx, 6
call fcn.14002d700
nop
call fcn.14003c914
int3