Function at 0x140037250
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x1400ca040]
xor rax, rsp
mov qword [rbp + 7], rax
mov rdi, rcx
mov qword [rbp - 0x29], rcx
xor esi, esi
xorps xmm8, xmm8
mov ecx, dword [0x1401365b4]
test ecx, ecx
jne 0x1400372a9
cmp byte [0x1401365b0], sil
je 0x14003741b
cmp dword [rdi + 0x14], esi
je 0x14003741b
mov edx, dword [0x140136bc0]
add rdx, qword [rdi + 0x68]
mov rax, qword [0x140136a58]
test rax, rax
je 0x1400372f5
cmp dword [0x140136a60], esi
je 0x1400372f5
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp - 0x31]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [0x1401365b4]
mov rax, qword [0x140136a58]
mov edx, dword [0x140136bd4]
add rdx, qword [rbp - 0x31]
test rax, rax
je 0x14003732a
cmp dword [0x140136a60], esi
je 0x14003732a
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp - 0x59]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [0x1401365b4]
mov eax, dword [0x1401365fc]
mov edx, dword [rbp - 0x59]
cmp edx, eax
je 0x14003739b
test edx, edx
jne 0x14003733f
test eax, eax
jne 0x14003739b
test ecx, ecx
je 0x14003736b
sub ecx, 1
je 0x140037356
cmp ecx, 1
jne 0x14003736b
lea rcx, str.RIFF
jmp 0x14003735d
lea rcx, [0x140100050]
mov r8d, 5
xor edx, edx
call qword [sym.imp.WINMM.dll_PlaySoundA]
cmp byte [0x1401365b0], sil
je 0x14003739b
mov dword [rbp - 0x41], 0x437f0000
lea rcx, [rbp - 0x51]
call fcn.1400260f0
mov rcx, qword [rax]
mov qword [rbp - 0x39], rcx
movups xmm0, xmmword [rbp - 0x41]
movups xmmword [0x140136718], xmm0
call fcn.14003aea0
movss xmm0, dword [0x140136718]
comiss xmm0, xmm8
jbe 0x140037412
lea rcx, [rbp - 0x51]
call fcn.1400260f0
mov rcx, qword [rbp - 0x51]
sub rcx, qword [0x140136720]
movabs rax, 0x431bde82d7b634db
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
movss xmm0, dword [0x1400b7c94]
comiss xmm1, xmm0
jb 0x1400373f5
mov dword [0x140136718], esi
jmp 0x14003740d
divss xmm1, xmm0
movss xmm0, dword [0x1400b7a30]
subss xmm0, xmm1
movss dword [0x140136718], xmm0
call fcn.14003aea0
mov eax, dword [rbp - 0x59]
mov dword [0x1401365fc], eax
cmp byte [0x1401365b2], 0
je 0x1400374a0
lea rdx, str.Counter_Strike_2
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
jne 0x14003744d
lea rdx, str.Counter_Strike_2
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ecx, byte [rdi + 0x120]
and cl, 1
test ax, ax
je 0x140037489
test cl, cl
je 0x140037489
xor r9d, r9d
mov edx, 0x101
mov r8d, 0x20
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x100
jmp 0x14003748e
mov edx, 0x101
xor r9d, r9d
mov r8d, 0x20
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x1401365b8], 0
je 0x1400375cc
cmp dword [rdi + 0x14], 0
je 0x1400375cc
mov rax, qword [0x140136690]
movss xmm0, dword [rax + 0x14]
mulss xmm0, dword [0x1400b79f4]
subss xmm0, dword [0x1400b7c78]
mov dword [rax + 0x47e0], 0x41200000
movss dword [rax + 0x47e4], xmm0
mov qword [rax + 0x47e8], rsi
mov dword [rax + 0x47d4], 2
or dword [rax + 0x47d0], 3
mov qword [rax + 0x47f0], 0x42f00000
mov dword [rax + 0x47d8], 2
xor edx, edx
mov r8d, 0x22
lea rcx, str.Spectators
call fcn.140053d60
test al, al
je 0x1400375cc
mov r14, qword [rdi + 0x58]
mov rbx, qword [rdi + 0x50]
cmp rbx, r14
je 0x1400375c7
movdqa xmm0, xmmword [0x1400b8330]
movups xmmword [rbp - 0x41], xmm0
movss xmm6, dword [0x1400b7ba0]
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140037560
mov rdx, qword [rbx]
lea rcx, [rbp - 0x41]
call fcn.14007dae0
mov rcx, qword [0x140136690]
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
subss xmm1, xmm6
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
add rbx, 0x20
cmp rbx, r14
jne 0x140037553
call fcn.140055fa0
mov ecx, dword [rdi + 0x14]
call fcn.140033ed0
nop
cmp byte [0x1401365b1], 0
je 0x140037754
cmp dword [rdi + 0x14], 0
je 0x140037754
mov rax, qword [0x140136690]
or dword [rax + 0x47d0], 0x40
mov dword [rax + 0x4830], 0x3f19999a
xor edx, edx
mov r8d, 0x63
lea rcx, str.Watermark
call fcn.140053d60
mov rax, qword [0x140136690]
movss xmm0, dword [rax + 0xe0]
movss dword [0x14010004c], xmm0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rbp - 0x51], rax
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x21]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
mov rdx, qword [rdi]
add rdx, 0x718
mov rcx, qword [0x140136a58]
test rcx, rcx
je 0x14003767d
cmp dword [0x140136a60], 0
je 0x14003767d
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rdi + 0x98]
movsd qword [rbp - 0x51], xmm0
mov ebx, dword [rdi + 0xa0]
movss xmm6, dword [rdi + 0x90]
movss xmm7, dword [rdi + 0x94]
lea rcx, [0x1400ad0a0]
call fcn.14007d9a0
movss xmm0, dword [0x14010004c]
ucomiss xmm0, xmm8
jp 0x1400376bc
je 0x1400376c0
cvttss2si esi, xmm0
mov eax, dword [rbp - 0x21]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x1d]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp - 0x19]
mov r8d, dword [rbp - 0x59]
mov edx, esi
lea rcx, str._d_FPS___d_ms___02d:_02d:_02d
call fcn.14007d9a0
movd xmm0, ebx
cvtps2pd xmm3, xmm0
movss xmm2, dword [rbp - 0x4d]
cvtps2pd xmm2, xmm2
movss xmm1, dword [rbp - 0x51]
cvtps2pd xmm1, xmm1
movq r9, xmm3
movq r8, xmm2
movq rdx, xmm1
lea rcx, str.Pos:__.2f___.2f___.2f
call fcn.14007d9a0
cvtps2pd xmm2, xmm7
cvtps2pd xmm1, xmm6
movq r8, xmm2
movq rdx, xmm1
lea rcx, str.Angle:__.2f___.2f
call fcn.14007d9a0
movss xmm1, dword [rdi + 0xb8]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
lea rcx, str.Vel:__.2f
call fcn.14007d9a0
call fcn.140055fa0
nop
mov rcx, rdi
call fcn.1400366f0
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1400a4500
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret