Function at 0x140032890
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4e0]
sub rsp, 0x5e0
mov rax, qword [0x140042040]
xor rax, rsp
mov qword [rbp + 0x438], rax
mov r12, rcx
xor r15d, r15d
lea rcx, [rbp + 0xc4]
xor edx, edx
mov r8d, 0x12c
mov esi, r15d
mov r13d, r15d
mov r14d, r9d
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov dword [rbp + 0xc0], 0x130
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rcx, rax
lea rdx, [rbp + 0xc0]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x140032982
nop
lea rax, [rbp + 0xec]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], sil
jne 0x140032920
mov r8d, 7
lea rdx, [rbp + 0xec]
cmp rbx, r8
lea rcx, str.cs2.exe
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140032953
cmp rbx, 7
je 0x140032969
lea rdx, [rbp + 0xc0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140032910
jmp 0x140032982
mov esi, dword [rbp + 0xc8]
xor edx, edx
mov r8d, esi
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r13, rax
test rdi, rdi
je 0x140032990
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
lea rcx, [rbp + 0xc4]
mov r8d, 0x234
call sub.VCRUNTIME140.dll_memset
mov edx, esi
mov dword [rbp + 0xc0], 0x238
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xc0]
mov qword [rbp - 0x50], r15
mov rcx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
je 0x140032a44
nop word [rax + rax]
lea rax, [rbp + 0xf0]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], r15b
jne 0x1400329f0
mov r8d, 0xa
lea rdx, [rbp + 0xf0]
cmp rbx, r8
lea rcx, str.client.dll
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140032a23
cmp rbx, 0xa
je 0x140032a39
lea rdx, [rbp + 0xc0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x1400329e0
jmp 0x140032a44
mov rax, qword [rbp + 0xd8]
mov qword [rbp - 0x50], rax
test rdi, rdi
je 0x140032a52
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movaps xmmword [rsp + 0x5d0], xmm6
lea rax, [0x1400327c0]
movaps xmmword [rsp + 0x5c0], xmm7
lea rcx, [rbp + 0x70]
movaps xmmword [rsp + 0x5b0], xmm8
xorps xmm0, xmm0
movaps xmmword [rsp + 0x5a0], xmm9
xorps xmm1, xmm1
movaps xmmword [rsp + 0x590], xmm10
movaps xmmword [rsp + 0x580], xmm11
movaps xmmword [rsp + 0x570], xmm12
movaps xmmword [rsp + 0x560], xmm13
mov qword [rbp + 0x78], rax
lea rax, str.5vg4zd51b5zd
movaps xmmword [rsp + 0x550], xmm14
movaps xmmword [rsp + 0x540], xmm15
mov qword [rbp + 0x80], r15
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmmword [rbp + 0xa0], xmm1
mov qword [rbp + 0xb8], r15
mov dword [rbp + 0x70], 0x50
mov dword [rbp + 0x74], 3
mov qword [rbp + 0x88], r12
mov qword [rbp + 0xb0], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov rax, qword [rbp + 0x88]
lea r8, str.58b4zdf84e6
mov rdx, qword [rbp + 0xb0]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r15
mov ecx, 0x80028
mov qword [rsp + 0x50], rax
mov eax, dword [0x140042794]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], eax
mov eax, dword [0x140042790]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r9d, 2
mov r8b, 0xff
mov rcx, rax
mov qword [rbp - 0x10], rax
xor edx, edx
mov r12, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
lea rdx, [rbp + 0x378]
mov rcx, r12
movups xmmword [rbp + 0x378], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
lea rdx, [rbp + 0x398]
mov rcx, r12
movups xmmword [rbp + 0x398], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [rbp + 0x310]
mov qword [rbp + 0x310], r15
mov rcx, r12
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x310]
lea rdx, [rbp + 0x368]
mov dword [rbp + 0x368], eax
mov rcx, r12
mov eax, dword [rbp + 0x314]
mov dword [rbp + 0x36c], eax
mov eax, dword [rbp + 0x380]
mov dword [rbp + 0x370], eax
mov eax, dword [rbp + 0x384]
mov dword [rbp + 0x374], eax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x34], r15
mov qword [rbp + 0x3c], 1
mov qword [rbp + 0x48], 2
mov qword [rbp + 0x60], 2
mov dword [rbp + 0x28], 0x4b
mov dword [rbp + 0x2c], 1
mov dword [rbp + 0x30], 0x1c
lea rax, [rbp - 8]
mov dword [rbp + 0x44], 0x20
mov qword [rsp + 0x58], rax
xor r9d, r9d
lea rax, [rbp + 0x388]
mov qword [rbp + 0x50], r12
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rbp + 8]
mov qword [rbp + 0x58], 1
mov qword [rsp + 0x48], rax
lea edx, [r9 + 1]
lea rax, [rbp]
mov dword [rbp + 0x420], 0xb000
mov qword [rsp + 0x40], rax
xor ecx, ecx
lea rax, [rbp + 0x20]
mov dword [rbp + 0x424], 0xa000
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x420]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
mov qword [rbp + 8], r15
mov qword [rbp - 8], r15
mov qword [rbp], r15
mov qword [rbp + 0x10], r15
mov dword [rbp + 0x388], r15d
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov rcx, qword [rbp]
lea r9, [rbp + 0x18]
mov qword [rbp + 0x18], r15
lea r8, [0x14003c990]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rdx, qword [rbp + 0x18]
test rdx, rdx
je 0x140034241
mov rcx, qword [rbp + 8]
lea r9, [rbp + 0x10]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov edx, r14d
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140042778]
mov ecx, 0x6198
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [0x140042778]
mov r9, rax
test r8, r8
je 0x140032dae
movsx rdx, word [r8 + 0x6048]
lea rcx, [r8 + 0x604c]
mov r10d, dword [r8 + 0x3f60]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r10d
je 0x140032da3
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rcx, [r8 + 0x604c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r10d
mov dword [rcx + 4], r15d
inc word [rcx + 4]
inc dword [r8 + 0x6040]
test r9, r9
je 0x140032dbf
xor edx, edx
mov rcx, r9
call fcn.1400014a0
jmp 0x140032dc2
mov rax, r15
mov qword [0x140042778], rax
call fcn.140004fa0
test rbx, rbx
je 0x140032dda
mov qword [0x140042778], rbx
xor ecx, ecx
call fcn.140022720
mov rcx, r12
call fcn.14002cc30
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp + 8]
call fcn.14002ca70
mov sil, 1
mov byte [rsp + 0x62], r15b
mov dword [rsp + 0x68], esi
mov byte [rbp + 0x300], sil
mov byte [rsp + 0x61], sil
mov byte [rsp + 0x60], sil
mov byte [rsp + 0x63], r15b
mov byte [rsp + 0x64], r15b
movsd xmm6, qword [0x14003ca90]
lea rcx, [rbp - 0x28]
movabs r12, 0x112e0be826d694b3
movabs r14, 0x311cdad160000
movabs rdi, 0x7fffffffffffffff
movabs rbx, 0x7ffffffffeced2fe
call fcn.140032520
mov rax, qword [rbp - 0x28]
cmp rax, rbx
jg 0x140032e66
lea rdi, [rax + 0x1312d00]
lea rcx, [rbp - 0x20]
call fcn.140032520
mov rbx, qword [rbp - 0x20]
cmp rdi, rbx
je 0x140032ed8
jl 0x140032ed8
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rcx, rax, 0x64
xorps xmm0, xmm0
mov rax, rdi
sub rax, rbx
cvtsi2sd xmm0, rax
comisd xmm0, xmm6
jbe 0x140032e9d
add rcx, r14
jmp 0x140032ea0
add rcx, rax
mov rax, r12
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul eax, edx, 0x3b9aca00
mov qword [rbp + 0x398], rdx
sub ecx, eax
mov dword [rbp + 0x3a0], ecx
lea rcx, [rbp + 0x398]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x140032e66
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x3f0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140032f4e
nop dword [rax]
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x3f8], 0x12
lea rcx, [rbp + 0x3f0]
movzx esi, sil
cmove esi, r15d
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140032f00
mov dword [rsp + 0x68], esi
test sil, sil
je 0x140033fca
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140032f74
cmp byte [rbp + 0x300], r15b
sete byte [rbp + 0x300]
mov rbx, qword [rbp - 0x50]
lea r8, [rbp + 0x308]
mov r9d, 8
mov qword [rbp + 0x308], r15
mov rcx, r13
mov qword [rsp + 0x20], r15
lea rdx, [rbx + 0x1811c98]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x308]
lea r8, [rbp + 0x368]
mov r9d, 0xc
mov qword [rbp - 0x18], r14
mov rcx, r13
mov qword [rbp + 0x368], r15
mov dword [rbp + 0x370], r15d
lea rdx, [r14 + 0x1224]
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
mov qword [rsp + 0x20], r15
lea rdx, [rbx + 0x1820ea0]
mov r9d, 0x40
lea r8, [rbp + 0x3b0]
mov rcx, r13
movups xmmword [rbp + 0x3b0], xmm0
movups xmmword [rbp + 0x3c0], xmm0
movups xmmword [rbp + 0x3d0], xmm0
movups xmmword [rbp + 0x3e0], xmm0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbx + 0x17c26a0]
mov qword [rbp + 0x390], r15
mov r9d, 8
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x390]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x390]
lea rdx, [r14 + 0x3bf]
mov r9d, 4
mov qword [rbp + 0x310], rsi
lea r8, [rbp + 0x330]
mov dword [rbp + 0x330], r15d
mov rcx, r13
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140042778]
test rax, rax
je 0x140033092
mov rax, qword [rax + 0x98]
jmp 0x140033095
mov rax, r15
cmp qword [rax + 0x48], r15
jne 0x1400330a0
call fcn.14002c410
call fcn.14002d640
call fcn.1400074a0
cmp byte [rbp + 0x300], r15b
je 0x1400330e9
mov r8d, 0x127
lea rdx, [rbp + 0x300]
lea rcx, str.Project_Ninja
call fcn.14000c7c0
lea rcx, str.CS2_ESP_BY_41ul
call fcn.140030570
lea rcx, str.Box_esp__f1__nHeaddot__f2__nsnapline__f3__nhealthbar__f4__nweaponID__f5
call fcn.140030570
call fcn.14000eb10
mov r12d, 1
nop
mov edx, r12d
mov qword [rbp + 0x308], r15
and edx, 0x7fff
mov qword [rsp + 0x20], r15
shl edx, 3
lea r8, [rbp + 0x308]
sar edx, 9
mov r9d, 8
add rdx, 0x10
mov rcx, r13
add rdx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x308]
test rcx, rcx
je 0x140033f3b
mov eax, r12d
mov qword [rbp + 0x318], r15
and eax, 0x1ff
mov qword [rsp + 0x20], r15
imul edx, eax, 0x78
lea r8, [rbp + 0x318]
mov r9d, 8
add rdx, rcx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x318]
test rbx, rbx
je 0x140033f3b
lea rdx, [rbx + 0x3bf]
mov dword [rbp + 0x304], r15d
mov r9d, 4
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x304]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x330]
cmp dword [rbp + 0x304], eax
je 0x140033f3b
lea rdx, [rbx + 0x7ec]
mov dword [rbp + 0x304], r15d
mov r9d, 4
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x304]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0x304]
lea r8, [rbp + 0x318]
mov edx, edi
mov qword [rbp + 0x318], r15
shr edx, 9
mov r9d, 8
and edx, 0x3f
mov qword [rsp + 0x20], r15
shl edx, 3
mov rcx, r13
add rdx, 0x10
add rdx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x318]
test rcx, rcx
je 0x140033f3b
mov eax, edi
mov qword [rbp + 0x320], r15
and eax, 0x1ff
mov qword [rsp + 0x20], r15
imul edx, eax, 0x78
lea r8, [rbp + 0x320]
mov r9d, 8
add rdx, rcx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x320]
test rbx, rbx
je 0x140033f3b
lea rdx, [rbx + 0x32c]
mov dword [rbp + 0x308], r15d
mov r9d, 4
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x308]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rbp + 0x308]
lea eax, [rsi - 1]
cmp eax, 0x63
ja 0x140033f34
cmp rbx, r14
je 0x140033f34
lea rdx, [rdi + 0x12a8]
mov qword [rbp + 0x318], r15
mov r9d, 8
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x318]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x318]
lea r8, [rbp + 0x304]
add rdx, 0x130a
mov word [rbp + 0x304], r15w
mov r9d, 2
mov qword [rsp + 0x20], r15
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbx + 0x1224]
mov qword [rbp + 0x358], r15
mov r9d, 0xc
mov dword [rbp + 0x360], r15d
lea r8, [rbp + 0x358]
mov qword [rsp + 0x20], r15
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x3e4]
movss xmm9, dword [rbp + 0x360]
movss xmm7, dword [rbp + 0x3e0]
movaps xmm8, xmm9
movss xmm10, dword [rbp + 0x358]
movss xmm11, dword [rbp + 0x35c]
movss xmm5, dword [rbp + 0x3e8]
movss xmm14, dword [rbp + 0x3ec]
movaps xmm6, xmm5
addss xmm8, dword [0x14003ca80]
mov eax, dword [0x140042794]
movss xmm15, dword [rbp + 0x3cc]
movss xmm12, dword [rbp + 0x3c8]
movss xmm13, dword [rbp + 0x3c4]
movss xmm4, dword [rbp + 0x3c0]
mulss xmm0, xmm11
mulss xmm6, xmm9
mulss xmm7, xmm10
addss xmm7, xmm0
movss xmm0, dword [0x14003c9b0]
addss xmm6, xmm7
addss xmm6, xmm14
comiss xmm0, xmm6
jbe 0x1400333df
movss xmm1, dword [0x14003ca18]
xorps xmm9, xmm9
jmp 0x14003345d
xorps xmm2, xmm2
movaps xmm1, xmm12
mulss xmm1, xmm9
movaps xmm3, xmm4
mulss xmm3, xmm10
cvtsi2ss xmm2, eax
movaps xmm0, xmm2
mulss xmm0, dword [0x14003c9e0]
movss dword [rbp + 0x308], xmm0
movaps xmm0, xmm13
movss xmm9, dword [rbp + 0x308]
mulss xmm0, xmm11
addss xmm3, xmm0
addss xmm3, xmm1
movss xmm1, dword [0x14003ca18]
movaps xmm0, xmm1
divss xmm0, xmm6
addss xmm3, xmm15
mulss xmm3, xmm0
movss xmm0, dword [0x14003c9b0]
mulss xmm3, dword [0x14003c9e0]
mulss xmm3, xmm2
addss xmm3, dword [0x14003c9e0]
subss xmm9, xmm3
mulss xmm5, xmm8
addss xmm5, xmm7
movss xmm7, dword [0x14003c9e0]
addss xmm5, xmm14
comiss xmm0, xmm5
jbe 0x140033484
xorps xmm14, xmm14
xorps xmm6, xmm6
jmp 0x14003352e
movss xmm0, dword [rbp + 0x3b4]
movaps xmm3, xmm1
movss xmm14, dword [rbp + 0x3b0]
xorps xmm2, xmm2
cvtsi2ss xmm2, dword [0x140042790]
movss xmm1, dword [rbp + 0x3b8]
mulss xmm14, xmm10
mulss xmm4, xmm10
mulss xmm0, xmm11
divss xmm3, xmm5
addss xmm14, xmm0
mulss xmm13, xmm11
xorps xmm0, xmm0
mulss xmm1, xmm8
addss xmm4, xmm13
mulss xmm12, xmm8
addss xmm14, xmm1
cvtsi2ss xmm0, eax
addss xmm14, dword [rbp + 0x3bc]
addss xmm4, xmm12
movaps xmm6, xmm0
mulss xmm6, xmm7
mulss xmm14, xmm3
addss xmm4, xmm15
mulss xmm14, xmm7
mulss xmm4, xmm3
mulss xmm14, xmm2
mulss xmm4, xmm7
addss xmm14, xmm7
mulss xmm2, xmm7
mulss xmm4, xmm0
addss xmm14, xmm2
addss xmm4, xmm7
subss xmm6, xmm4
movaps xmm10, xmm9
movss dword [rbp + 0x308], xmm6
subss xmm10, xmm6
mov ecx, 0x70
xorps xmm11, xmm11
movaps xmm8, xmm10
divss xmm8, dword [0x14003ca2c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003356d
cmp byte [rsp + 0x60], r15b
sete al
mov byte [rsp + 0x60], al
jmp 0x140033572
movzx eax, byte [rsp + 0x60]
test al, al
je 0x14003361e
mov rax, qword [0x140042778]
lea r8, str.Background
movaps xmm1, xmm8
movaps xmm0, xmm14
mulss xmm1, xmm7
xor edx, edx
mov rcx, qword [rax + 0x4ad0]
cvttss2si edi, xmm6
mov rcx, qword [rcx]
subss xmm0, xmm1
cvttss2si ebx, xmm0
call fcn.140006b50
lea r8, [rbp - 0x30]
mov rcx, rax
lea rdx, [rbp - 0x58]
mov r9d, 0xff0000ff
movss xmm12, dword [0x14003ca28]
cvttss2si eax, xmm8
movd xmm1, ebx
add eax, ebx
movss dword [rsp + 0x30], xmm12
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm10
movss dword [rbp - 0x30], xmm0
add eax, edi
movss dword [rbp - 0x58], xmm1
movss dword [rsp + 0x20], xmm11
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x2c], xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x54], xmm0
call fcn.140025ef0
jmp 0x140033627
movss xmm12, dword [0x14003ca28]
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140033646
cmp byte [rsp + 0x61], r15b
sete dil
mov byte [rsp + 0x61], dil
jmp 0x14003364b
movzx edi, byte [rsp + 0x61]
test dil, dil
je 0x1400336c6
mov rax, qword [0x140042778]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4ad0]
mov rcx, qword [rcx]
call fcn.140006b50
movaps xmm0, xmmword [0x14003cb80]
lea rcx, [rbp + 0x320]
movups xmmword [rbp + 0x320], xmm0
mov r10, rax
mov dword [rbp - 0x40], 0x44228000
movss dword [rbp - 0x38], xmm14
movss dword [rbp - 0x34], xmm6
mov dword [rbp - 0x3c], 0x44610000
call fcn.140003700
movss xmm0, dword [0x14003ca30]
lea r8, [rbp - 0x38]
mov r9d, eax
movss dword [rsp + 0x20], xmm0
lea rdx, [rbp - 0x40]
mov rcx, r10
call fcn.140025d90
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400336e5
cmp byte [rsp + 0x62], r15b
sete dil
mov byte [rsp + 0x62], dil
jmp 0x1400336ea
movzx edi, byte [rsp + 0x62]
test dil, dil
je 0x140033779
mov rax, qword [0x140042778]
lea r8, str.Background
movaps xmm0, xmmword [0x14003cb80]
xor edx, edx
movaps xmmword [rbp + 0x320], xmm0
mov rcx, qword [rax + 0x4ad0]
mov rcx, qword [rcx]
call fcn.140006b50
mov r8, rax
lea rcx, [rbp + 0x320]
cvttss2si eax, xmm14
movd xmm0, eax
cvttss2si eax, xmm6
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x48], xmm0
movss dword [rbp - 0x44], xmm1
call fcn.140003700
movss xmm0, dword [0x14003ca24]
lea rdx, [rbp - 0x48]
movaps xmm2, xmm8
movss dword [rsp + 0x28], xmm0
divss xmm2, dword [0x14003ca40]
mov r9d, eax
mov rcx, r8
call fcn.140026300
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140033798
cmp byte [rsp + 0x63], r15b
sete dil
mov byte [rsp + 0x63], dil
jmp 0x14003379d
movzx edi, byte [rsp + 0x63]
test dil, dil
je 0x140033916
mov rax, qword [0x140042778]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4ad0]
mov rcx, qword [rcx]
call fcn.140006b50
movaps xmm0, xmmword [0x14003cb70]
lea rcx, [rbp + 0x320]
movaps xmm1, xmm8
movss dword [rbp - 0x5c], xmm9
addss xmm1, dword [0x14003ca50]
movups xmmword [rbp + 0x320], xmm0
mov r10, rax
movaps xmm0, xmm9
addss xmm8, xmm12
subss xmm0, xmm10
movaps xmm7, xmm14
subss xmm7, xmm1
movaps xmm6, xmm14
subss xmm6, xmm8
movss dword [rbp - 0x64], xmm0
movss dword [rbp - 0x60], xmm7
movss dword [rbp - 0x68], xmm6
call fcn.140003700
mov r9d, eax
mov dword [rsp + 0x28], r15d
lea rdx, [rbp - 0x68]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp - 0x60]
mov rcx, r10
call fcn.140026000
mov rax, qword [0x140042778]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4ad0]
mov rcx, qword [rcx]
call fcn.140006b50
movss xmm0, dword [0x14003ca9c]
lea rcx, [rbp + 0x378]
movd xmm2, esi
mov r10, rax
cvtdq2ps xmm2, xmm2
mov dword [rbp + 0x380], r15d
mov dword [rbp + 0x384], 0x3f800000
movss dword [rsp + 0x7c], xmm9
movaps xmm1, xmm2
movss dword [rsp + 0x78], xmm7
mulss xmm1, dword [0x14003ca34]
movss dword [rbp - 0x70], xmm6
subss xmm0, xmm1
divss xmm1, dword [0x14003ca84]
subss xmm0, dword [0x14003ca84]
movss dword [rbp + 0x37c], xmm1
movss dword [rbp + 0x378], xmm0
movaps xmm0, xmm10
mulss xmm0, xmm2
mulss xmm0, dword [0x14003c9b0]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm9, xmm0
movss dword [rbp - 0x6c], xmm9
call fcn.140003700
mov r9d, eax
mov dword [rsp + 0x28], r15d
lea rdx, [rbp - 0x70]
movss dword [rsp + 0x20], xmm11
lea r8, [rsp + 0x78]
mov rcx, r10
call fcn.140026000
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140033933
cmp byte [rsp + 0x64], r15b
sete bl
mov byte [rsp + 0x64], bl
jmp 0x140033938
movzx ebx, byte [rsp + 0x64]
test bl, bl
je 0x140033f34
movzx eax, word [rbp + 0x304]
cmp eax, 0x1f4
ja 0x140033b3d
je case.0x140033b5a.505
dec eax
cmp eax, 0x3f
ja case.0x140033b5a.510
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x342e8]
add rcx, rdx
jmp rcx
lea rdi, str.Desert_Eagle
jmp 0x140033b6c
lea rdi, str.Dual_Elites
jmp 0x140033b6c
lea rdi, str.Five_Seven
jmp 0x140033b6c
lea rdi, str.Glock
jmp 0x140033b6c
lea rdi, str.AK_47
jmp 0x140033b6c
lea rdi, [0x14003c79c]
jmp 0x140033b6c
lea rdi, [0x14003c7a0]
jmp 0x140033b6c
lea rdi, str.Famas
jmp 0x140033b6c
lea rdi, str.G3SG1
jmp 0x140033b6c
lea rdi, str.Galil
jmp 0x140033b6c
lea rdi, str.M249
jmp 0x140033b6c
lea rdi, str.M4A4
jmp 0x140033b6c
lea rdi, str.MAC_10
jmp 0x140033b6c
lea rdi, [0x14003c7d4]
jmp 0x140033b6c
lea rdi, [0x14003c7d8]
jmp 0x140033b6c
lea rdi, str.XM1014
jmp 0x140033b6c
lea rdi, str.PP_Bizon
jmp 0x140033b6c
lea rdi, str.Mag7
jmp 0x140033b6c
lea rdi, str.Negev
jmp 0x140033b6c
lea rdi, str.Sawed_off
jmp 0x140033b6c
lea rdi, str.Tec9
jmp 0x140033b6c
lea rdi, str.Zeus
jmp 0x140033b6c
lea rdi, str.P2000
jmp 0x140033b6c
lea rdi, [0x14003c82c]
jmp 0x140033b6c
lea rdi, [0x14003c830]
jmp 0x140033b6c
lea rdi, str.Nova
jmp 0x140033b6c
lea rdi, str.P_250
jmp 0x140033b6c
lea rdi, str.Scar20
jmp 0x140033b6c
lea rdi, str.SG556
jmp 0x140033b6c
lea rdi, str.SSG_08
jmp 0x140033b6c
lea rdi, str.Flashbang
jmp 0x140033b6c
lea rdi, str.HE_Granade
jmp 0x140033b6c
lea rdi, str.Smoke
jmp 0x140033b6c
lea rdi, str.Molotov
jmp 0x140033b6c
lea rdi, str.Decoy
jmp 0x140033b6c
lea rdi, [0x14003c898]
jmp 0x140033b6c
lea rdi, str.M4A1_S
jmp 0x140033b6c
lea rdi, str.USP_S
jmp 0x140033b6c
lea rdi, str.CZ_75a
jmp 0x140033b6c
lea rdi, str.Revolver
jmp 0x140033b6c
sub eax, 0x1f9
cmp eax, 0xb
ja case.0x140033b5a.510
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x343e8]
add rcx, rdx
jmp rcx
lea rdi, str.Knife
jmp 0x140033b6c
lea rdi, str.Unknown
xorps xmm0, xmm0
mov qword [rbp + 0x348], r15
movups xmmword [rbp + 0x338], xmm0
mov qword [rbp + 0x350], r15
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rdi + rbx], r15b
jne 0x140033b90
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x1400342da
mov qword [rbp + 0x350], 0xf
cmp rbx, 0xf
ja 0x140033be3
mov r8, rbx
mov qword [rbp + 0x348], rbx
mov rdx, rdi
lea rcx, [rbp + 0x338]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x338], r15b
jmp 0x140033c85
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
jbe 0x140033c02
mov rsi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140033c29
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140033c48
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400342e0
mov rcx, rax
call fcn.140034814
test rax, rax
je 0x140033fc3
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140033c5a
test rcx, rcx
je 0x140033c57
call fcn.140034814
mov r14, rax
jmp 0x140033c5a
mov r14, r15
mov r8, rbx
mov qword [rbp + 0x338], r14
mov rdx, rdi
mov qword [rbp + 0x348], rbx
mov rcx, r14
mov qword [rbp + 0x350], rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rbx], r15b
mov r14, qword [rbp - 0x18]
cmp qword [rbp + 0x350], 0xf
lea rax, [rbp + 0x338]
mov rbx, qword [0x140042778]
cmova rax, qword [rbp + 0x338]
movss xmm7, dword [rbx + 0x3d40]
test rax, rax
jne 0x140033cb6
movaps xmm6, xmm11
jmp 0x140033d0f
movss xmm0, dword [0x14003cacc]
lea rdx, [rsp + 0x70]
movss xmm3, dword [0x14003cabc]
movaps xmm2, xmm7
mov rcx, qword [rbx + 0x3d38]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.14002a220
movss xmm0, dword [rsp + 0x70]
addss xmm0, dword [0x14003ca10]
movss xmm7, dword [rsp + 0x74]
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss dword [rsp + 0x70], xmm6
addss xmm10, dword [0x14003ca68]
mov rax, qword [rbx + 0x4ad0]
lea r8, str.Background
mulss xmm6, dword [0x14003c9e0]
xor edx, edx
mov rcx, qword [rax]
subss xmm7, xmm10
call fcn.140006b50
movaps xmm0, xmmword [0x14003cb90]
lea r8, [rbp + 0x338]
cmp qword [rbp + 0x350], 0xf
lea rcx, [rbp + 0x320]
mov r10, rax
cmova r8, qword [rbp + 0x338]
movups xmmword [rbp + 0x320], xmm0
call fcn.140003700
subss xmm14, xmm6
mov r9d, eax
movss xmm6, dword [rbp + 0x308]
subss xmm6, xmm7
movaps xmm0, xmm14
addss xmm0, dword [0x14003ca18]
movss dword [rbp - 0x78], xmm0
movaps xmm0, xmm6
addss xmm0, dword [0x14003ca18]
movss dword [rbp - 0x74], xmm0
and r9d, 0xff000000
je 0x140033e16
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r8 + rcx], r15b
jne 0x140033db6
add rcx, r8
cmp r8, rcx
je 0x140033e16
mov rax, qword [r10 + 0x38]
mov rdx, r10
movups xmm0, xmmword [r10 + 0x88]
mov byte [rsp + 0x48], r15b
movss dword [rsp + 0x40], xmm11
movss xmm2, dword [rax + 0x10]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x320]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov rcx, qword [rax + 8]
mov dword [rsp + 0x20], r9d
lea r9, [rbp - 0x78]
movups xmmword [rbp + 0x320], xmm0
call fcn.14002a440
mov rax, qword [0x140042778]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4ad0]
mov rcx, qword [rcx]
call fcn.140006b50
movaps xmm0, xmmword [0x14003cb90]
lea r8, [rbp + 0x338]
mov r10, qword [rbp + 0x350]
lea rcx, [rbp + 0x320]
mov r9, qword [rbp + 0x338]
cmp r10, 0xf
mov r11, rax
cmova r8, r9
movups xmmword [rbp + 0x320], xmm0
call fcn.140003700
movss dword [rbp - 0x80], xmm14
mov edx, eax
movss dword [rbp - 0x7c], xmm6
test eax, 0xff000000
je 0x140033efd
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [r8 + rcx], r15b
jne 0x140033e90
add rcx, r8
cmp r8, rcx
je 0x140033efd
mov rax, qword [r11 + 0x38]
lea r9, [rbp - 0x80]
movups xmm0, xmmword [r11 + 0x88]
mov byte [rsp + 0x48], r15b
movss dword [rsp + 0x40], xmm11
movss xmm2, dword [rax + 0x10]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x320]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov rcx, qword [rax + 8]
mov dword [rsp + 0x20], edx
mov rdx, r11
movups xmmword [rbp + 0x320], xmm0
call fcn.14002a440
mov r10, qword [rbp + 0x350]
mov r9, qword [rbp + 0x338]
cmp r10, 0xf
jbe 0x140033f34
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x140033f2c
mov r9, qword [r9 - 8]
add rdx, 0x27
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033fc3
mov rcx, r9
call fcn.1400345cc
mov rsi, qword [rbp + 0x310]
inc r12d
cmp r12d, 0x20
jl 0x1400330f0
call fcn.140009480
mov rcx, qword [rbp - 8]
lea r8, [rbp + 0x10]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x428], xmm0
mov rax, qword [rcx]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [rbp - 8]
lea r8, [rbp + 0x428]
mov rdx, qword [rbp + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x140042778]
mov rcx, qword [rax + 0x4ad0]
mov rax, qword [rcx]
mov rcx, r15
add rax, 0x48
cmp byte [rax], r15b
cmovne rcx, rax
call fcn.14002b9b0
mov rcx, qword [rbp]
xor r8d, r8d
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x40]
mov esi, dword [rsp + 0x68]
jmp 0x140032e1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [0x140042778]
test rbx, rbx
je 0x140033fdf
mov rdi, qword [rbx + 0x98]
jmp 0x140033fe2
mov rdi, r15
call fcn.14002c950
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140033ff6
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140034004
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140034013
mov rax, qword [rcx]
call qword [rax + 0x10]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x140042778]
mov qword [rbx + 0x88], r15
mov qword [rbx + 0x98], r15
test r8, r8
je 0x140034091
movsx rdx, word [r8 + 0x6048]
lea rcx, [r8 + 0x604c]
mov r9d, dword [r8 + 0x3f60]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x140034086
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rcx, [r8 + 0x604c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r15d
inc word [rcx + 6]
inc dword [r8 + 0x6044]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x140042778]
test r8, r8
je 0x1400340af
mov rdi, qword [r8 + 0x90]
jmp 0x1400340b2
mov rdi, r15
mov rcx, qword [rdi + 0x38]
lea rbx, [r8 + 8]
test rcx, rcx
je 0x1400340cc
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x140042778]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x78], r15
mov qword [rbx + 0x88], r15
test r8, r8
je 0x140034140
movsx rdx, word [r8 + 0x6048]
mov r9d, dword [r8 + 0x3f60]
lea rcx, [rdx*8 + 0x604c]
add rcx, r8
cmp dword [rcx], r9d
je 0x140034135
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rcx, [rax*8 + 0x604c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], r15d
inc word [rcx + 6]
inc dword [r8 + 0x6044]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140042778]
mov qword [0x140042778], rbx
call fcn.140005420
mov qword [0x140042778], r15
test rbx, rbx
je 0x1400341e5
mov rcx, rbx
call fcn.14001aa80
mov r8, qword [0x140042778]
test r8, r8
je 0x1400341dc
movsx rdx, word [r8 + 0x6048]
lea rcx, [r8 + 0x604c]
mov r9d, dword [r8 + 0x3f60]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x1400341d1
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rcx, [r8 + 0x604c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r15d
inc word [rcx + 6]
inc dword [r8 + 0x6044]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400341f4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140034203
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x140034212
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140034221
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rbp + 0xb0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
jmp 0x140034247
mov r15d, 1
test r13, r13
je 0x140034255
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movaps xmm15, xmmword [rsp + 0x540]
mov eax, r15d
movaps xmm14, xmmword [rsp + 0x550]
movaps xmm13, xmmword [rsp + 0x560]
movaps xmm12, xmmword [rsp + 0x570]
movaps xmm11, xmmword [rsp + 0x580]
movaps xmm10, xmmword [rsp + 0x590]
movaps xmm9, xmmword [rsp + 0x5a0]
movaps xmm8, xmmword [rsp + 0x5b0]
movaps xmm7, xmmword [rsp + 0x5c0]
movaps xmm6, xmmword [rsp + 0x5d0]
mov rcx, qword [rbp + 0x438]
xor rcx, rsp
call fcn.140034430
mov rbx, qword [rsp + 0x628]
add rsp, 0x5e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400327a0
int3
call fcn.140032700
int3