Function at 0x180001ab0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0x90
mov rax, qword [0x180078040]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180001af0
cmp byte [0x18007ab48], 0
sete cl
mov byte [0x18007ab48], cl
jmp 0x180001af7
movzx ecx, byte [0x18007ab48]
mov rax, qword [0x18007a868]
xor edx, edx
movaps xmm0, xmmword [0x18006adf0]
movaps xmm1, xmmword [0x18006ad90]
movups xmmword [rax + 0x1644], xmm0
movaps xmm0, xmmword [0x18006ae30]
movups xmmword [rax + 0x1694], xmm0
movaps xmm0, xmmword [0x18006ada0]
movups xmmword [rax + 0x1654], xmm1
movaps xmm1, xmmword [0x18006ae00]
movups xmmword [rax + 0x1674], xmm0
movups xmmword [rax + 0x16b4], xmm1
movaps xmm1, xmmword [0x18006ad90]
movaps xmm0, xmm1
movaps xmm0, xmmword [0x18006add0]
movups xmmword [rax + 0x1744], xmm1
movups xmmword [rax + 0x1754], xmm1
movups xmmword [rax + 0x1764], xmm1
movaps xmm1, xmmword [0x18006ad80]
movups xmmword [rax + 0x1804], xmm0
movaps xmm0, xmm1
movaps xmm0, xmmword [0x18006ae30]
movups xmmword [rax + 0x16c4], xmm1
movups xmmword [rax + 0x16e4], xmm1
movups xmmword [rax + 0x16d4], xmm1
movups xmmword [rax + 0x1704], xmm1
movups xmmword [rax + 0x16a4], xmm0
mov dword [rax + 0x1714], 0x3f4ccccd
mov dword [rax + 0x1718], 0x3f4ccccd
mov dword [rax + 0x171c], 0x3f547ae1
mov dword [rax + 0x1720], 0x3e9eb852
mov dword [rax + 0x1724], 0x3f0f5c29
mov dword [rax + 0x1728], 0x3f0f5c29
mov dword [rax + 0x172c], 0x3f147ae1
mov dword [rax + 0x1730], 0x3f800000
mov dword [rax + 0x1734], 0x3d75c28f
mov dword [rax + 0x1738], 0x3d4ccccd
mov dword [rax + 0x173c], 0x3d8f5c29
mov dword [rax + 0x1740], 0x3f800000
movaps xmm1, xmmword [0x18006ae20]
movaps xmm0, xmmword [0x18006ae10]
mov byte [rax + 0x161a], 1
mov byte [rax + 0x1618], 1
mov dword [rax + 0x1588], edx
mov dword [rax + 0x15a4], 0x3f800000
mov dword [rax + 0x15a0], edx
mov dword [rax + 0x1590], edx
mov qword [rax + 0x15d0], rdx
mov dword [rax + 0x15e4], edx
mov dword [rax + 0x156c], edx
movups xmmword [rax + 0x17b4], xmm1
movups xmmword [rax + 0x17c4], xmm1
movups xmmword [rax + 0x17a4], xmm0
movaps xmm0, xmm1
movaps xmm1, xmmword [0x18006adc0]
movaps xmm0, xmmword [0x18006ade0]
movups xmmword [rax + 0x1664], xmm1
movaps xmm1, xmm0
movaps xmm1, xmmword [0x18006ae40]
movups xmmword [rax + 0x1624], xmm1
movups xmmword [rax + 0x1774], xmm0
movups xmmword [rax + 0x1784], xmm0
movups xmmword [rax + 0x1794], xmm0
mov dword [rax + 8], 0x20
test cl, cl
je 0x180001e48
xor r8d, r8d
lea rcx, str.PetyaTap
call fcn.18000cd60
movss xmm1, dword [0x18006abf8]
xorps xmm0, xmm0
call fcn.18000fa70
lea rdx, [rbp - 9]
mov qword [rbp - 9], 0x42a00000
call fcn.18002a490
lea rdx, [0x180078ee2]
lea rcx, str.Names
call fcn.18002b180
lea rdx, [0x180078ee1]
lea rcx, str.Health
call fcn.18002b180
lea rdx, [0x180078ee3]
lea rcx, str.Bone
call fcn.18002b180
lea rdx, [0x18007aa9a]
lea rcx, str.AimBot
call fcn.18002b180
mov rcx, qword [0x18007a868]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c10]
cmp byte [rax + 0x93], 0
jne 0x180001d86
movss xmm1, dword [0x18006accc]
lea rcx, [rbp - 9]
mov qword [rbp - 9], 0
call fcn.18000f690
lea rdx, [0x18007aa99]
lea rcx, str.NoColison
call fcn.18002b180
mov rcx, qword [0x18007a868]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c10]
cmp byte [rax + 0x93], 0
jne 0x180001dd7
movss xmm1, dword [0x18006accc]
lea rcx, [rbp - 9]
mov qword [rbp - 9], 0
call fcn.18000f690
lea rdx, [0x18007aa98]
lea rcx, str.SpeedHack
call fcn.18002b180
mov rcx, qword [0x18007a868]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c10]
cmp byte [rax + 0x93], 0
jne 0x180001e28
movss xmm1, dword [0x18006accc]
lea rcx, [rbp - 9]
mov qword [rbp - 9], 0
call fcn.18000f690
lea rax, [rbp + 0x2f]
mov dword [rbp + 0x2f], 0x432a0000
lea r9, [rbp - 9]
mov qword [rsp + 0x20], rax
mov dword [rbp - 9], 0
call fcn.18002b9d0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r15, rax
lea rsi, [rax + 0x9387c78]
test rsi, rsi
je 0x180002523
mov rcx, qword [rsi]
test rcx, rcx
je 0x180002523
mov rcx, qword [rcx + 0x1d8]
mov qword [rsp + 0xb0], rbx
mov rdx, qword [rcx + 0x38]
mov rbx, qword [rdx]
test rbx, rbx
je 0x18000251b
mov rbx, qword [rbx + 0x30]
test rbx, rbx
je 0x18000251b
cmp byte [0x18007a850], 0
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], r14
je 0x18000227e
mov ecx, 0x31
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180001f42
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x180001f08
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [0x18006ae70]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [0x18006acd8]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180001fcc
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x180001f92
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [0x18006ae90]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [str.33333gx]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x33
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002056
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x18000201c
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [0x18006ae50]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [0x18006ac28]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x34
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800020e0
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x1800020a6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [0x18006af00]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [0x18006ac30]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000216a
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x180002130
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [0x18006aef0]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [0x18006ac38]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x36
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800021f4
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x1800021ba
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [0x18006ae80]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [0x18006abf0]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x37
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000227e
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x180002244
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [0x18006aea0]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [0x18006ace0]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002308
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x1800022ce
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [0x18006ae60]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [0x18006acd0]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002392
mov r14, qword [rbx + 0x2d0]
test r14, r14
je 0x18000250b
mov rdi, qword [0x18007ab58]
test rdi, rdi
jne 0x180002358
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.Actor.K2_SetActorLocation
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab58], rax
movaps xmm0, xmmword [str._np]
xor ecx, ecx
movups xmmword [rbp + 7], xmm0
mov byte [rbp + 0x1f], 0
movsd xmm0, qword [0x18006ac58]
movsd qword [rbp + 0x17], xmm0
mov byte [rbp + 0x28], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp + 7]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, r14
call rax
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002405
mov rdi, qword [0x18007ab38]
test rdi, rdi
jne 0x1800023d2
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.PlayerController.ServerExecRPC
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab38], rax
lea rax, [0x180065ef0]
mov dword [rbp - 1], 6
xor ecx, ecx
mov qword [rbp - 9], rax
mov dword [rbp + 3], 6
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp - 9]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, rbx
call rax
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002478
mov rdi, qword [0x18007ab38]
test rdi, rdi
jne 0x180002445
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, str.Engine.PlayerController.ServerExecRPC
xor edx, edx
add rax, 0x13c2740
xor ecx, ecx
call rax
mov rdi, rax
mov qword [0x18007ab38], rax
lea rax, str.restartlevel
mov dword [rbp - 1], 0xd
xor ecx, ecx
mov qword [rbp - 9], rax
mov dword [rbp + 3], 0xd
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r8, [rbp - 9]
mov rdx, rdi
add rax, 0x1394a60
mov rcx, rbx
call rax
cmp byte [0x180078ee3], 0
je 0x18000250b
lea r14, [r15 + 0x372bb00]
test r14, r14
je 0x18000250b
mov rax, qword [rsi]
mov rcx, qword [rax + 0x160]
test rcx, rcx
je 0x18000250b
mov eax, dword [rcx + 0x2b0]
movups xmm1, xmmword [rcx + 0x2a8]
test eax, eax
jle 0x18000250b
movq rdi, xmm1
mov esi, eax
nop dword [rax + rax]
mov rax, qword [rdi]
mov r8, qword [rax + 0x308]
test r8, r8
je 0x180002501
mov rax, qword [rbx + 0x338]
test rax, rax
je 0x1800024e0
cmp r8, rax
je 0x180002501
movaps xmm0, xmmword [0x18006adb0]
lea r9, [rbp - 9]
mov r8, qword [r8 + 0x318]
mov rdx, r14
mov rcx, rbx
movups xmmword [rbp - 9], xmm0
call fcn.1800016a0
add rdi, 8
sub rsi, 1
jne 0x1800024c0
mov rdi, qword [rsp + 0xb8]
mov r14, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xb0]
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.180035350
add rsp, 0x90
pop r15
pop rsi
pop rbp
ret