Function at 0x14004161c
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
sub rsp, 0x1f8
call fcn.14001f600
call fcn.14001ff90
call fcn.14000dce4
nop
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x140041676
movzx eax, byte [0x140055164]
test eax, eax
jne 0x140041658
mov dword [rsp + 0x40], 1
jmp 0x140041660
mov dword [rsp + 0x40], 0
mov al, byte [rsp + 0x40]
mov byte [0x140055164], al
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
movzx eax, byte [0x140055164]
test eax, eax
je 0x1400422b5
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047a94]
movss xmm2, dword [0x140047a84]
movss xmm1, dword [0x140047a84]
lea rcx, [rsp + 0xa0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 2
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aa4]
movss xmm2, dword [0x140047a88]
movss xmm1, dword [0x140047a94]
lea rcx, [rsp + 0xb0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0xa
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aa8]
movss xmm2, dword [0x140047a94]
movss xmm1, dword [0x140047a9c]
lea rcx, [rsp + 0xc0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0xb
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aa8]
movss xmm2, dword [0x140047a94]
movss xmm1, dword [0x140047aa0]
lea rcx, [rsp + 0xd0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 5
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047a9c]
movss xmm2, dword [0x140047a88]
movss xmm1, dword [0x140047a88]
lea rcx, [rsp + 0xe0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 7
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aa0]
movss xmm2, dword [0x140047a94]
movss xmm1, dword [0x140047a94]
lea rcx, [rsp + 0xf0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 8
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aa4]
movss xmm2, dword [0x140047a9c]
movss xmm1, dword [0x140047a9c]
lea rcx, [rsp + 0x100]
call fcn.1400358a4
mov rdx, rax
mov ecx, 9
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aa8]
movss xmm2, dword [0x140047abc]
movss xmm1, dword [0x140047aa0]
lea rcx, [rsp + 0x110]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x12
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047abc]
movss xmm2, dword [0x140047aa0]
movss xmm1, dword [0x140047aa0]
lea rcx, [rsp + 0x120]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x13
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b658]
movss xmm2, dword [0x140047aa8]
movss xmm1, dword [0x140047aa8]
lea rcx, [rsp + 0x130]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x14
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab4]
movss xmm2, dword [0x140047a94]
movss xmm1, dword [0x140047a9c]
lea rcx, [rsp + 0x140]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x15
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047abc]
movss xmm2, dword [0x140047a9c]
movss xmm1, dword [0x140047aa0]
lea rcx, [rsp + 0x150]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x16
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b658]
movss xmm2, dword [0x140047aa0]
movss xmm1, dword [0x140047aa4]
lea rcx, [rsp + 0x160]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x17
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047abc]
movss xmm2, dword [0x140047a94]
movss xmm1, dword [0x140047aa4]
lea rcx, [rsp + 0x170]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x1b
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b658]
movss xmm2, dword [0x140047a9c]
movss xmm1, dword [0x140047aa8]
lea rcx, [rsp + 0x180]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x1c
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ac8]
movss xmm2, dword [0x140047aa0]
movss xmm1, dword [0x140047ab4]
lea rcx, [rsp + 0x190]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x1d
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab4]
movss xmm2, dword [0x140047a94]
movss xmm1, dword [0x140047a9c]
lea rcx, [rsp + 0x1a0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x18
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047abc]
movss xmm2, dword [0x140047a9c]
movss xmm1, dword [0x140047aa0]
lea rcx, [rsp + 0x1b0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x19
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b658]
movss xmm2, dword [0x140047aa0]
movss xmm1, dword [0x140047aa4]
lea rcx, [rsp + 0x1c0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 0x1a
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b658]
movss xmm2, dword [0x14004b658]
movss xmm1, dword [0x14004b658]
lea rcx, [rsp + 0x1d0]
call fcn.1400358a4
mov rdx, rax
xor ecx, ecx
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aa4]
movss xmm2, dword [0x140047aa4]
movss xmm1, dword [0x140047aa4]
lea rcx, [rsp + 0x1e0]
call fcn.1400358a4
mov rdx, rax
mov ecx, 1
call fcn.14000eae0
nop
movss xmm1, dword [0x14004b668]
mov ecx, 2
call fcn.14000ebc8
movss xmm1, dword [0x140047af0]
mov ecx, 0xb
call fcn.14000ebc8
nop
movss xmm2, dword [0x14004c010]
movss xmm1, dword [0x14004c010]
lea rcx, [rsp + 0x78]
call fcn.14003586c
mov rdx, rax
mov ecx, 1
call fcn.14000eb3c
nop
movss xmm2, dword [0x140047aec]
movss xmm1, dword [0x14004b668]
lea rcx, [rsp + 0x80]
call fcn.14003586c
mov rdx, rax
mov ecx, 0xa
call fcn.14000eb3c
nop
movss xmm2, dword [0x14004e4bc]
movss xmm1, dword [0x14004c010]
lea rcx, [rsp + 0x88]
call fcn.14003586c
mov rdx, rax
mov ecx, 0xd
call fcn.14000eb3c
nop
movss xmm2, dword [0x140047b08]
movss xmm1, dword [0x140047b08]
lea rcx, [rsp + 0x90]
call fcn.14003586c
xor edx, edx
mov rcx, rax
call fcn.14001038c
nop
mov r8d, 0x22
xor edx, edx
lea rcx, str.__________________________________________________________________________CHEETO_FREE
call fcn.1400031a4
nop
xor edx, edx
lea rcx, [0x14004d10c]
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x140041de7
lea rdx, [0x140056f7c]
lea rcx, str.Aimbot
call fcn.1400257b4
lea rdx, [0x140056f7d]
lea rcx, str.Aim_Prediction
call fcn.1400257b4
lea rdx, [0x14005534c]
lea rcx, str.Cercle
call fcn.1400257b4
lea rdx, [0x140056f7e]
lea rcx, str.Triggerbot
call fcn.1400257b4
lea rdx, [0x140056f48]
lea rcx, str.Visible_Check
call fcn.1400257b4
lea rcx, str.Vitesse_Aimbot
call fcn.14002e2b0
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d168]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14004e4bc]
movss xmm2, dword [0x140047ac8]
lea rdx, [0x14005536c]
lea rcx, str.Vitesse
call fcn.14002dd80
lea rcx, str.Taille_du_cercle
call fcn.14002e2b0
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d18c]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047b10]
movss xmm2, dword [0x14004c014]
lea rdx, [0x140055374]
lea rcx, str.Taille
call fcn.14002dd80
lea rcx, str.Touche_Aimbot
call fcn.14002e2b0
mov r8d, dword [0x140057554]
lea rdx, [0x1400375b4]
mov ecx, dword [0x140056f24]
call fcn.14003b39c
nop
xor edx, edx
lea rcx, [0x14004d1b0]
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x140041f2a
lea rdx, [0x140057970]
lea rcx, [0x14004d1b4]
call fcn.1400257b4
lea rdx, [0x140057971]
lea rcx, [0x14004d1b8]
call fcn.1400257b4
lea rdx, [0x140057972]
lea rcx, [0x14004d1c0]
call fcn.1400257b4
lea rdx, [0x140056f47]
lea rcx, str.Voir_les_bots
call fcn.1400257b4
lea rdx, [0x140056f51]
lea rcx, str.Crosshair_Lines
call fcn.1400257b4
lea rdx, [0x140056f7f]
lea rcx, str.Skeleton
call fcn.1400257b4
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d1fc]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047ad8]
movss xmm2, dword [0x140047ac8]
lea rdx, [0x1400553b0]
lea rcx, str.Epaisseur_Box
call fcn.14002dd80
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d218]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047ad8]
movss xmm2, dword [0x140047ac8]
lea rdx, [0x14005537c]
lea rcx, str.Epaisseur_Skeleton
call fcn.14002dd80
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d234]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047af0]
movss xmm2, dword [0x140047a88]
lea rdx, [0x140056864]
lea rcx, str.Epaisseur_Crosshair_lignes
call fcn.14002dd80
nop
xor edx, edx
lea rcx, str.Exploits
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x140041fe0
lea rdx, [0x140056f5c]
lea rcx, str.Fov_Changer
call fcn.1400257b4
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047b00]
movss xmm2, dword [0x14004e4c0]
lea rdx, [0x14005535c]
lea rcx, [0x14004c329]
call fcn.14002dd80
lea rdx, [0x140056f59]
lea rcx, str.Big_Player
call fcn.1400257b4
lea rdx, [0x140056f5b]
lea rcx, str.SpinBot
call fcn.1400257b4
lea rdx, [0x140056f5a]
lea rcx, str.AirStuck___left_shift__
call fcn.1400257b4
lea rdx, [0x140056f5d]
lea rcx, str.First_Personne__En_dev_mais_marche_
call fcn.1400257b4
nop
xor edx, edx
lea rcx, str.Couleurs
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x1400421a0
xor r8d, r8d
lea rdx, [0x140055458]
lea rcx, str.Couleur_cercle_1
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055468]
lea rcx, str.Couleur_cercle_2
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055478]
lea rcx, str.Couleur_cercle_3
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055408]
lea rcx, str.Skeleton_Color__Haut_
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055418]
lea rcx, str.Skeleton_Alternate_Color__Bas_
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400554d8]
lea rcx, str.Crosshair_Color
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055488]
lea rcx, str.FPS_couleur_1
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055498]
lea rcx, str.FPS_couleur_2
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400554a8]
lea rcx, str.FPS_couleur_3
call fcn.140026480
lea rcx, [0x14004c32a]
call fcn.14002e2b0
lea rcx, str.Visible
call fcn.14002e2b0
xor r8d, r8d
lea rdx, [0x1400553e8]
lea rcx, [0x14004d3b8]
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400553f8]
lea rcx, str.Corner
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400553d8]
lea rcx, str.BoxEsp2DFilled
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400554b8]
lea rcx, str.Crosshair_lignes
call fcn.140026480
lea rcx, [0x14004c32b]
call fcn.14002e2b0
lea rcx, str._Non_visible
call fcn.14002e2b0
xor r8d, r8d
lea rdx, [0x140055428]
lea rcx, str._Box
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055438]
lea rcx, str._Corner
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055448]
lea rcx, str._BoxEsp2DFilled
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400554c8]
lea rcx, str._Crosshair_lignes
call fcn.140026480
nop
xor edx, edx
lea rcx, str.Autre
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x14004225a
lea rdx, [0x14005534d]
lea rcx, [0x14004d44c]
call fcn.1400257b4
lea rdx, [0x140056f53]
lea rcx, str.Crosshair
call fcn.1400257b4
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d45c]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14004e4c0]
movss xmm2, dword [0x140047ac8]
lea rdx, [0x1400554fc]
lea rcx, str.Taille_Crosshair
call fcn.14002dd80
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
lea rax, str.__.1f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047af0]
movss xmm2, dword [0x140047a88]
lea rdx, [0x140056860]
lea rcx, str.Epaisseur_Crosshair
call fcn.14002dd80
nop
call fcn.14002dadc
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x98]
call fcn.14003586c
mov rdx, rax
lea rcx, str.Rejoindre_notre_discord
call fcn.140025104
movzx eax, al
test eax, eax
je 0x1400422af
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.https:__discord.gg_yFuDr8jpqn
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
call fcn.14000762c
nop
call fcn.140037da4
call fcn.140007c28
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x48], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x140057960]
call qword [rsp + 0x48]
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x50], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x140057960]
call qword [rsp + 0x50]
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x140057960]
call qword [rsp + 0x58]
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x140047ac8]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140057960]
call qword [rsp + 0x60]
nop
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rcx, qword [0x140057960]
call qword [rax + 0x148]
test eax, eax
jl 0x1400423ca
call fcn.14000ec40
call fcn.140009050
mov rcx, rax
call fcn.14001f618
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rcx, qword [0x140057960]
call qword [rax + 0x150]
nop
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140057960]
call qword [rsp + 0x68]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x88760868
jne 0x140042458
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rcx, qword [0x140057960]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140042458
call fcn.14001f588
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x70], rax
lea rdx, [0x140056ed0]
mov rcx, qword [0x140057960]
call qword [rsp + 0x70]
call fcn.14001f420
nop
add rsp, 0x1f8
ret