Function at 0x140033950
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
sub rsp, 0x50
movaps xmmword [rsp + 0x40], xmm6
mov rdi, rcx
mov r8d, dword [0x140139240]
test r8d, r8d
jne 0x14003397b
cmp byte [0x14013923c], r8b
je 0x140033b1f
cmp dword [rcx + 0x14], 0
je 0x140033b1f
cmp byte [0x1400cc0d7], 0
jne 0x140033b1f
cmp dword [rcx + 0x1c], 1
jne 0x140033b1f
cmp dword [rcx + 0x100], 0
jle 0x140033b1f
mov edx, dword [0x140139690]
add rdx, qword [rcx + 0x68]
xor ebx, ebx
mov rcx, qword [0x140139478]
test rcx, rcx
je 0x1400339ed
cmp dword [0x140139480], ebx
je 0x1400339ed
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8d, dword [0x140139240]
mov rcx, qword [0x140139478]
mov edx, dword [0x1401396a4]
add rdx, qword [rsp + 0x68]
test rcx, rcx
je 0x140033a22
cmp dword [0x140139480], ebx
je 0x140033a22
mov qword [rsp + 0x20], rbx
mov r9d, 4
lea r8, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8d, dword [0x140139240]
mov eax, dword [0x14013928c]
mov ecx, dword [rsp + 0x60]
cmp ecx, eax
je 0x140033a9a
test ecx, ecx
jne 0x140033a38
test eax, eax
jne 0x140033a9a
test r8d, r8d
je 0x140033a67
sub r8d, 1
je 0x140033a52
cmp r8d, 1
jne 0x140033a67
lea rcx, str.RIFF
jmp 0x140033a59
lea rcx, str.RIFF_R
mov r8d, 5
xor edx, edx
call qword [sym.imp.WINMM.dll_PlaySoundA]
cmp byte [0x14013923c], bl
je 0x140033a9a
mov dword [rsp + 0x30], 0x437f0000
lea rcx, [rsp + 0x70]
call fcn.140024270
mov rcx, qword [rax]
mov qword [rsp + 0x38], rcx
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [0x1401393a8], xmm0
call fcn.140037340
xorps xmm1, xmm1
movss xmm0, dword [0x1401393a8]
comiss xmm0, xmm1
jbe 0x140033b15
lea rcx, [rsp + 0x70]
call fcn.140024270
mov rcx, qword [rsp + 0x70]
sub rcx, qword [0x1401393b0]
movabs rax, 0x431bde82d7b634db
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
movss xmm0, dword [0x1400b96b0]
comiss xmm1, xmm0
jb 0x140033af8
mov dword [0x1401393a8], ebx
jmp 0x140033b10
divss xmm1, xmm0
movss xmm0, dword [0x1400b9448]
subss xmm0, xmm1
movss dword [0x1401393a8], xmm0
call fcn.140037340
mov eax, dword [rsp + 0x60]
mov dword [0x14013928c], eax
cmp byte [0x14013923d], 0
je 0x140033bbb
cmp byte [0x1400cc0d7], 0
jne 0x140033bbb
cmp dword [rdi + 0x14], 0
je 0x140033bbb
lea rdx, str.Counter_Strike_2
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
jne 0x140033b68
lea rdx, str.Counter_Strike_2
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ecx, byte [rdi + 0x120]
and cl, 1
test ax, ax
je 0x140033ba4
test cl, cl
je 0x140033ba4
xor r9d, r9d
mov edx, 0x101
mov r8d, 0x20
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, pe_nt_image_headers64
jmp 0x140033ba9
mov edx, 0x101
xor r9d, r9d
mov r8d, 0x20
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.140030b40
mov ecx, dword [rdi + 0x14]
call fcn.140030430
nop
cmp byte [0x1400cc115], 0
je 0x140033cad
cmp dword [rdi + 0x14], 0
jne 0x140033bec
cmp byte [0x1400cc0d7], 0
je 0x140033cad
mov rax, qword [0x140139320]
or dword [rax + 0x47d0], 0x40
mov dword [rax + 0x4830], 0x3f4ccccd
mov dword [rax + 0x37e0], 0x41000000
xor edx, edx
mov r8d, 0x63
lea rcx, str.Watermark
call fcn.1400570d0
movsd xmm6, qword [rdi + 0x98]
mov ebx, dword [rdi + 0xa0]
lea rcx, str.__DragonBurn
call fcn.140080410
lea rcx, str.__External_CS2_cheat
call fcn.140080410
movss xmm1, dword [rdi + 0xb8]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
lea rcx, str.__Vel:__.2f
call fcn.140080410
movd xmm0, ebx
cvtps2pd xmm3, xmm0
movaps xmm1, xmm6
shufps xmm1, xmm1, 0x55
xorps xmm2, xmm2
cvtss2sd xmm2, xmm1
xorps xmm1, xmm1
cvtss2sd xmm1, xmm6
movq r9, xmm3
movq r8, xmm2
movq rdx, xmm1
lea rcx, str.__Pos:__.1f___.1f___.1f
call fcn.140080410
lea rcx, [0x1400b0ef8]
call fcn.140080410
call fcn.140059310
nop
mov rbx, qword [rsp + 0x78]
movaps xmm6, xmmword [rsp + 0x40]
add rsp, 0x50
pop rdi
ret