Function at 0x1400583a4
Capabilities:
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0x288
mov rax, qword [0x14017c140]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov eax, dword [0x14017ccf4]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x1400583de
cmp dword [rsp + 0x40], 1
je 0x1400583ea
cmp dword [rsp + 0x40], 2
je 0x1400583f6
jmp 0x140058400
mov dword [reloc.WS2_32.dll_closesocket], 1
jmp 0x140058400
mov dword [reloc.WS2_32.dll_closesocket], 0
jmp 0x140058400
mov dword [reloc.WS2_32.dll_closesocket], 2
cmp dword [reloc.WS2_32.dll_connect], 0
jne 0x140058425
mov byte [0x14017cd21], 0
mov byte [0x14017cd0b], 0
mov byte [reloc.WS2_32.dll_accept], 1
mov byte [0x14017cd0f], 0
cmp dword [reloc.WS2_32.dll_connect], 1
jne 0x14005844a
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017cd21], 0
mov byte [0x14017cd0b], 1
mov byte [0x14017cd0f], 0
cmp dword [reloc.WS2_32.dll_connect], 2
jne 0x14005846f
mov byte [0x14017cd0b], 0
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017cd21], 1
mov byte [0x14017cd0f], 0
cmp dword [reloc.WS2_32.dll_connect], 3
jne 0x140058494
mov byte [0x14017cd0b], 0
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017cd21], 0
mov byte [0x14017cd0f], 1
call fcn.14001ddc4
call fcn.14001e754
call fcn.14000d0f0
call fcn.140044cfc
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400584e3
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x1400584d1
mov dword [rsp + 0x44], 1
jmp 0x1400584d9
mov dword [rsp + 0x44], 0
mov al, byte [rsp + 0x44]
mov byte [reloc.WS2_32.dll_accept], al
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x140059127
lea rdx, str.Betaware_Cheats
lea rcx, [rsp + 0x1c8]
call fcn.14003daf4
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d410], eax
jle 0x14005858a
lea rcx, [0x14017d410]
call fcn.1400b698c
cmp dword [0x14017d410], 0xffffffff
jne 0x14005858a
mov dword [rsp + 0x20], 0xff
mov r9d, 0xf9
mov r8d, 0x7d
mov edx, reloc.WLDAP32.dll_Ordinal_79
lea rcx, [rsp + 0x178]
call fcn.14003fa1c
mov qword [rsp + 0x50], rax
lea rdx, [0x14017d400]
mov rcx, qword [rsp + 0x50]
call fcn.1400420f4
nop
lea rcx, [0x14017d410]
call fcn.1400b6920
nop
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d428], eax
jle 0x14005860e
lea rcx, [0x14017d428]
call fcn.1400b698c
cmp dword [0x14017d428], 0xffffffff
jne 0x14005860e
mov dword [rsp + 0x20], 0xff
mov r9d, 0xff
mov r8d, 0xff
mov edx, 0xff
lea rcx, [rsp + 0x188]
call fcn.14003fa1c
mov qword [rsp + 0x58], rax
lea rdx, [0x14017d418]
mov rcx, qword [rsp + 0x58]
call fcn.1400420f4
nop
lea rcx, [0x14017d428]
call fcn.1400b6920
nop
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d440], eax
jle 0x14005868c
lea rcx, [0x14017d440]
call fcn.1400b698c
cmp dword [0x14017d440], 0xffffffff
jne 0x14005868c
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
xor r8d, r8d
mov edx, 0xff
lea rcx, [rsp + 0x198]
call fcn.14003fa1c
mov qword [rsp + 0x60], rax
lea rdx, [0x14017d430]
mov rcx, qword [rsp + 0x60]
call fcn.1400420f4
nop
lea rcx, [0x14017d440]
call fcn.1400b6920
nop
xor ecx, ecx
call fcn.14001720c
lea rcx, [rsp + 0x1e0]
call fcn.140011c9c
mov byte [rsp + 0x228], 1
mov byte [rsp + 0x200], 1
mov dword [rsp + 0x1f8], 3
mov dword [rsp + 0x1fc], 3
call fcn.140008a04
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x98]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x14012a824]
lea rdx, str.C:WindowsFontscourbi.ttf
mov rcx, qword [rsp + 0x70]
call fcn.1400126b8
call fcn.140008e98
mov qword [rsp + 0xc0], rax
movss xmm2, dword [0x14012a870]
movss xmm1, dword [0x14012a87c]
lea rcx, [rsp + 0x78]
call fcn.14003fab0
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.14000f484
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_27
xor edx, edx
lea rcx, [0x1400c02aa]
call fcn.140002f3c
nop
xorps xmm2, xmm2
movss xmm1, dword [0x1400bc21c]
lea rcx, [rsp + 0xc8]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
movss xmm2, dword [0x14012a874]
movss xmm1, dword [0x14012a840]
lea rcx, [rsp + 0xd0]
call fcn.14003fab0
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.tabs
call fcn.140005490
nop
movss xmm2, dword [0x14012a828]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0xd8]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
movss xmm2, dword [0x14012a830]
movss xmm1, dword [0x14012a83c]
lea rcx, [rsp + 0xe0]
call fcn.14003fab0
mov rdx, rax
lea rcx, str.Aimbot
call fcn.140022718
nop
xor ecx, ecx
call fcn.140009bb0
movzx eax, al
test eax, eax
je 0x14005880e
mov dword [0x14017ccf8], 0
call fcn.140027a68
call fcn.140027a68
nop
movss xmm2, dword [0x14012a838]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0xe8]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
movss xmm2, dword [0x14012a830]
movss xmm1, dword [0x14012a83c]
lea rcx, [rsp + 0xf0]
call fcn.14003fab0
mov rdx, rax
lea rcx, str.Visuals
call fcn.140022718
nop
xor ecx, ecx
call fcn.140009bb0
movzx eax, al
test eax, eax
je 0x140058884
mov dword [0x14017ccf8], 1
call fcn.140027a68
call fcn.140027a68
nop
movss xmm2, dword [0x14012a844]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0xf8]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
movss xmm2, dword [0x14012a830]
movss xmm1, dword [0x14012a83c]
lea rcx, [rsp + 0x100]
call fcn.14003fab0
mov rdx, rax
lea rcx, str.Exploits
call fcn.140022718
nop
xor ecx, ecx
call fcn.140009bb0
movzx eax, al
test eax, eax
je 0x1400588fa
mov dword [0x14017ccf8], 2
call fcn.140027a68
call fcn.140027a68
nop
movss xmm2, dword [0x14012a850]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0x108]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
movss xmm2, dword [0x14012a830]
movss xmm1, dword [0x14012a83c]
lea rcx, [rsp + 0x110]
call fcn.14003fab0
mov rdx, rax
lea rcx, str.Settings
call fcn.140022718
nop
xor ecx, ecx
call fcn.140009bb0
movzx eax, al
test eax, eax
je 0x140058970
mov dword [0x14017ccf8], 3
call fcn.140027a68
call fcn.140027a68
nop
movss xmm2, dword [0x14012a86c]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0x118]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
movss xmm2, dword [0x14012a830]
movss xmm1, dword [0x14012a83c]
lea rcx, [rsp + 0x120]
call fcn.14003fab0
mov rdx, rax
lea rcx, str.Exit
call fcn.140022718
nop
xor ecx, ecx
call fcn.140009bb0
movzx eax, al
test eax, eax
je 0x1400589e5
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140006f9c
nop
movss xmm2, dword [0x1400bc1e8]
movss xmm1, dword [0x1400bc1f8]
lea rcx, [rsp + 0x128]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
movss xmm2, dword [0x14012a868]
movss xmm1, dword [0x14012a85c]
lea rcx, [rsp + 0x130]
call fcn.14003fab0
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.menu
call fcn.140005490
nop
cmp dword [0x14017ccf8], 0
jne 0x140058ae7
lea rcx, str._________Aim_Assistance
call fcn.140027aa8
call fcn.140027100
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027aa8
lea rdx, [0x14015617f]
lea rcx, str.Aimbot_Enable
call fcn.140022e10
lea rdx, [0x140168eb1]
lea rcx, str.Memory_Aimbot_Enable
call fcn.140022e10
lea rdx, [0x140168eb2]
lea rcx, str.FOV_Circle
call fcn.140022e10
movss xmm1, dword [0x1400bc21c]
xorps xmm0, xmm0
call fcn.14000eccc
call fcn.140027a68
mov r9d, 0xffffffff
lea r8, str.Circle
lea rdx, [0x140168edc]
lea rcx, [0x1400c02ab]
call fcn.14002354c
call fcn.140027a68
call fcn.140027a68
nop
cmp dword [0x14017ccf8], 1
jne 0x140058c09
lea rcx, str.________Visual_Assistance
call fcn.140027aa8
call fcn.140027100
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027aa8
lea rdx, [0x14017cd19]
lea rcx, str.Cornered_Box
call fcn.140022e10
lea rdx, [0x14017cd09]
lea rcx, str.2D_Box_Esp
call fcn.140022e10
lea rdx, [0x14017cd22]
lea rcx, str.Filled_Box_Esp
call fcn.140022e10
lea rdx, [0x14017cd04]
lea rcx, str.3D_Box_Esp
call fcn.140022e10
lea rdx, [0x14017cd06]
lea rcx, str.Dynamic_Esp
call fcn.140022e10
lea rdx, [0x14017cd1c]
lea rcx, str.Snaplines
call fcn.140022e10
lea rdx, [0x14017cd08]
lea rcx, str.Crosshair_Snapline
call fcn.140022e10
lea rdx, [0x14017cd03]
lea rcx, str.Headdot_Esp
call fcn.140022e10
lea rdx, [0x14017cd15]
lea rcx, str.Germany_Croshair
call fcn.140022e10
lea rdx, [0x14017ccff]
lea rcx, str.Head_Esp
call fcn.140022e10
lea rdx, [0x14017cd14]
lea rcx, str.Triangle_Esp
call fcn.140022e10
lea rdx, [0x14017cd10]
lea rcx, str.Skeleton_Esp
call fcn.140022e10
lea rdx, [0x14017ccfe]
lea rcx, str.Reload_Check
call fcn.140022e10
nop
cmp dword [0x14017ccf8], 2
jne 0x140058cdb
lea rcx, str.___________Exploits
call fcn.140027aa8
call fcn.140027100
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027aa8
lea rdx, [0x14017ccf3]
lea rcx, str.Slowmotion__Hold_Shift_
call fcn.140022e10
lea rdx, [0x14017cd02]
lea rcx, str.Big_Player
call fcn.140022e10
lea rdx, [0x14017cd07]
lea rcx, str.Tiny_Player
call fcn.140022e10
lea rdx, [0x14017ccf1]
lea rcx, str.infinite_Car_Fuel
call fcn.140022e10
lea rdx, [0x14017ccfc]
lea rcx, str.AirStuck__Hold_Shift_
call fcn.140022e10
lea rdx, [0x14017cd00]
lea rcx, str.Spinbot
call fcn.140022e10
lea rdx, [0x14017cd0c]
lea rcx, str.No_Recoil
call fcn.140022e10
call fcn.140027a68
lea rcx, str.NOTE_:
call fcn.140027aa8
call fcn.140027a68
lea rcx, str.__EXPLOITS_HAVE_A_HIGH_BAN_RISK__
call fcn.140027aa8
nop
cmp dword [0x14017ccf8], 3
jne 0x140058d56
lea rcx, str.___________Information
call fcn.140027aa8
call fcn.140027100
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027aa8
call fcn.140027a68
mov rdx, qword [0x14017ce30]
lea rcx, str.__Base_ID_:__p__
call fcn.140027aa8
lea rcx, str.__Updated_to_latest_Patch_28.06.2023__
call fcn.140027aa8
lea rcx, str.__Discord__discord.gg_dbtARh6TJR__
call fcn.140027aa8
lea rcx, str.__Working_on_Windows_10___11_50_50__
call fcn.140027aa8
lea rcx, str.__If_the_menu_or_cheat_has_any_issues__
call fcn.140027aa8
lea rcx, str.please_report_it_the_server___
call fcn.140027aa8
nop
call fcn.140006f9c
nop
movss xmm2, dword [0x1400bc1e8]
movss xmm1, dword [0x14012a864]
lea rcx, [rsp + 0x138]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
movss xmm2, dword [0x14012a868]
movss xmm1, dword [0x14012a85c]
lea rcx, [rsp + 0x140]
call fcn.14003fab0
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.menu2
call fcn.140005490
nop
cmp dword [0x14017ccf8], 0
jne 0x140058f3d
lea rcx, str.__________Aim_Settings
call fcn.140027aa8
call fcn.140027100
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027aa8
nop
movss xmm2, dword [0x1400c01f4]
movss xmm1, dword [0x14012a864]
lea rcx, [rsp + 0x148]
call fcn.14003fab0
mov rcx, rax
call fcn.14000f1c8
nop
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
call fcn.140027a68
lea rcx, str.Aimbot_FOV_Value
call fcn.140027aa8
movss xmm0, dword [0x1400bc1c4]
movss dword [rsp + 0x28], xmm0
lea rax, [0x1401094ec]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14012a878]
movss xmm2, dword [0x14012a84c]
lea rdx, [0x140168ed8]
lea rcx, [0x1401094f8]
call fcn.1400273a4
call fcn.140027a68
lea rcx, str.Aimbot_Smoothness
call fcn.140027aa8
movss xmm0, dword [0x1400bc1c4]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14012a834]
movss xmm2, dword [0x1400bc1cc]
lea rdx, [0x140168ed0]
lea rcx, [0x140109530]
call fcn.1400273a4
call fcn.140027a68
lea rcx, str.Aimbot_Key
call fcn.140027aa8
mov r8d, dword [0x14017d330]
lea rdx, [0x140043be8]
mov ecx, dword [0x14017ce90]
call fcn.14004c558
call fcn.140027a68
lea rcx, str.Aimbot_Bone
call fcn.140027aa8
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, str.Head
lea rdx, [0x14017d364]
lea rcx, [0x140109560]
call fcn.1400236c8
call fcn.140027a68
nop
cmp dword [0x14017ccf8], 1
jne 0x140058fb8
lea rcx, str._________Visual_Settings
call fcn.140027aa8
call fcn.140027100
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027aa8
call fcn.140027a68
lea rcx, str.Max_Esp_Distance
call fcn.140027aa8
lea rax, [0x1401095a4]
mov qword [rsp + 0x20], rax
mov r9d, 0x3e8
mov r8d, 0x1f4
lea rdx, [0x14017c044]
lea rcx, str.MaxDistance
call fcn.1400273ec
call fcn.140027a68
lea rdx, [0x140168ec3]
lea rcx, str.Distance_Esp
call fcn.140022e10
nop
cmp dword [0x14017ccf8], 2
jne 0x140059018
lea rcx, str._________Misc_Settings
call fcn.140027aa8
call fcn.140027100
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027aa8
lea rdx, [0x14015617d]
lea rcx, str.watermarket
call fcn.140022e10
lea rdx, [0x14017cd12]
lea rcx, str.FPS_Counter
call fcn.140022e10
lea rdx, [0x14017cd1d]
lea rcx, str.Stream_Proof
call fcn.140022e10
nop
cmp dword [0x14017ccf8], 3
jne 0x140059127
lea rcx, str.___________Other_Information
call fcn.140027aa8
call fcn.140027100
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027aa8
nop
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
mov r8d, 0xff
mov edx, reloc.WLDAP32.dll_Ordinal_26
lea rcx, [rsp + 0x1a8]
call fcn.14003fa1c
mov qword [rsp + 0x80], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x80]
call fcn.1400420f4
lea rdx, str.__Currently_Undetected_on_EAC__
lea rcx, [rsp + 0x158]
call fcn.140027ad0
nop
mov dword [rsp + 0x20], 0xff
mov r9d, reloc.WS2_32.dll_recv
mov r8d, 0xa7
mov edx, 0xe8
lea rcx, [rsp + 0x1b8]
call fcn.14003fa1c
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x168]
mov rcx, qword [rsp + 0x88]
call fcn.1400420f4
lea rdx, str.__Currently_Semi_Detected_on_BE__
lea rcx, [rsp + 0x168]
call fcn.140027ad0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x150]
call fcn.14003fab0
mov rdx, rax
lea rcx, str.Discord_Server__Click_me_
call fcn.140022718
movzx eax, al
test eax, eax
je 0x140059127
lea rcx, str.start_https:__discord.gg_dbtARh6TJR
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
call fcn.140044cfc
call fcn.14000749c
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x90], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x14017d370]
call qword [rsp + 0x90]
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x98], rax
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov rcx, qword [0x14017d370]
call qword [rsp + 0x98]
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xa0], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x14017d370]
call qword [rsp + 0xa0]
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x1400bc1c4]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14017d370]
call qword [rsp + 0xa8]
nop
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rcx, qword [0x14017d370]
call qword [rax + 0x148]
test eax, eax
jl 0x140059254
call fcn.14000de48
call fcn.14000889c
mov rcx, rax
call fcn.14001dddc
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rcx, qword [0x14017d370]
call qword [rax + 0x150]
nop
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14017d370]
call qword [rsp + 0xb0]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x88760868
jne 0x1400592ee
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rcx, qword [0x14017d370]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400592ee
call fcn.14001dd4c
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0xb8], rax
lea rdx, [0x14017cda0]
mov rcx, qword [0x14017d370]
call qword [rsp + 0xb8]
call fcn.14001dbe4
nop
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.1400b6a90
add rsp, 0x288
ret