Function at 0x14000b9b0
Capabilities:
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rdi
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xa0
mov rax, qword [0x1400dd180]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov eax, dword [0x1400dd33c]
test eax, eax
jne 0x14000c138
mov rax, qword [0x1400e4ce8]
lea rcx, str.Clix_Private
mov qword [r11 + 8], rsi
xor edx, edx
mov r8d, 0x23
movaps xmmword [r11 - 0x18], xmm6
or dword [rax + 0x3fa0], 2
mov dword [rax + 0x3fc0], 0x43c80000
mov dword [rax + 0x3fc4], 0x43fa0000
mov dword [rax + 0x3fa8], 1
call fcn.14001fda0
lea rdx, [rbp - 9]
mov qword [rbp - 9], 0x42480000
lea rcx, [0x1400a0bc8]
call fcn.14001d270
mov rbx, qword [0x1400e4ce8]
lea rdx, [rbp - 9]
movdqa xmm6, xmmword [0x1400c5a10]
mov dword [rbp - 9], 0x18
movups xmm0, xmmword [rbx + 0x3a28]
lea rcx, [rbx + 0x4010]
movups xmmword [rbp - 5], xmm0
call fcn.14002ab00
movups xmmword [rbx + 0x3a28], xmm6
mov rbx, qword [0x1400e4ce8]
lea rdx, [rbp - 9]
movdqa xmm6, xmmword [0x1400c5a50]
mov dword [rbp - 9], 0x19
movups xmm0, xmmword [rbx + 0x3a38]
lea rcx, [rbx + 0x4010]
movups xmmword [rbp - 5], xmm0
call fcn.14002ab00
movups xmmword [rbx + 0x3a38], xmm6
mov rbx, qword [0x1400e4ce8]
lea rdx, [rbp - 9]
movdqa xmm6, xmmword [0x1400c5a60]
mov dword [rbp - 9], 0x1a
movups xmm0, xmmword [rbx + 0x3a48]
lea rcx, [rbx + 0x4010]
movups xmmword [rbp - 5], xmm0
call fcn.14002ab00
cmp dword [0x1400e4e18], 0
lea r9, [rbp - 9]
mov r8d, 1
mov dword [rbp - 9], 0x42200000
sete dl
mov dword [rbp - 5], 0x42200000
lea rcx, [0x1400a0bd0]
movups xmmword [rbx + 0x3a48], xmm6
call fcn.140042000
movaps xmm6, xmmword [rsp + 0x90]
xor esi, esi
test al, al
je 0x14000bb32
mov eax, esi
mov dword [0x1400e4e18], eax
jmp 0x14000bb38
mov eax, dword [0x1400e4e18]
cmp eax, 1
mov dword [rbp - 9], 0x42200000
lea r9, [rbp - 9]
mov dword [rbp - 5], 0x42200000
sete dl
lea rcx, [0x1400a0bd4]
mov r8d, 1
call fcn.140042000
test al, al
je 0x14000bb73
mov eax, 1
mov dword [0x1400e4e18], eax
jmp 0x14000bb79
mov eax, dword [0x1400e4e18]
cmp eax, 2
mov dword [rbp - 9], 0x42200000
lea r9, [rbp - 9]
mov dword [rbp - 5], 0x42200000
sete dl
lea rcx, [0x1400a0bd8]
mov r8d, 1
call fcn.140042000
test al, al
je 0x14000bbb4
mov eax, 2
mov dword [0x1400e4e18], eax
jmp 0x14000bbba
mov eax, dword [0x1400e4e18]
cmp eax, 3
mov dword [rbp - 9], 0x42200000
lea r9, [rbp - 9]
mov dword [rbp - 5], 0x42200000
sete dl
lea rcx, [0x1400a0bdc]
mov r8d, 1
call fcn.140042000
mov r9d, 3
test al, al
je 0x14000bbf5
mov dword [0x1400e4e18], r9d
mov r8, qword [0x1400e4ce8]
mov eax, dword [r8 + 0x4010]
cmp eax, r9d
jge 0x14000bc10
mov r9d, eax
test eax, eax
jle 0x14000bc49
nop
mov rcx, qword [r8 + 0x4018]
dec r9d
cdqe
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm1, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x38a8], xmm1
dec dword [r8 + 0x4010]
mov eax, dword [r8 + 0x4010]
test r9d, r9d
jg 0x14000bc10
call fcn.14001d350
movss xmm1, dword [0x1400c55f4]
xorps xmm0, xmm0
call fcn.140023d00
lea rbx, [0x1400a03ee]
mov qword [rbp - 9], rsi
mov rcx, rbx
lea rdx, [rbp - 9]
call fcn.14001d270
mov eax, dword [0x1400e4e18]
test eax, eax
jne 0x14000be21
mov rcx, rbx
call fcn.14003e660
lea rdx, [0x1400dd348]
lea rcx, str.Enable
call fcn.14003fef0
lea rdx, [0x1400dd352]
lea rcx, str.Visible
call fcn.14003fef0
lea rdx, [0x1400dd350]
lea rcx, str.Prediction
call fcn.14003fef0
lea rdx, [0x1400dd353]
lea rcx, str.Draw_Fov
call fcn.14003fef0
lea rdx, [0x1400dd354]
lea rcx, str.Ud_Draw_Fov
call fcn.14003fef0
lea rdx, [0x1400dd355]
lea rcx, str.Fov_Arrows
call fcn.14003fef0
lea rdx, [0x1400dd349]
lea rcx, str.Target_Line
call fcn.14003fef0
cmp byte [0x1400dd349], sil
je 0x14000bd2c
lea rdx, [0x1400dd34a]
lea rcx, [0x1400a0c1c]
call fcn.14003fef0
mov rcx, rbx
call fcn.14003e660
lea rax, [rbp + 0x17]
mov dword [rsp + 0x30], esi
lea rdi, [0x1400a09dc]
mov dword [rbp + 0x17], 0x15e
mov qword [rsp + 0x28], rdi
lea r9, [rbp - 9]
lea r8, [0x1400dd35c]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp - 9], 0xa
lea rcx, str.Fov_Value
call fcn.140041560
lea rax, [rbp - 9]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rdi
lea r9, [rbp + 0x17]
lea r8, reloc.WS2_32.dll_getsockname
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp - 9], 0x1e
lea rcx, str.Smooth_Value
mov dword [rbp + 0x17], 1
call fcn.140041560
lea rax, str.Head
mov qword [rbp + 0x1f], rax
lea r9, [rbp + 0x1f]
lea rax, str.Neck
mov qword [rbp + 0x27], rax
lea rdx, [0x1400dd368]
lea rax, str.Chest
mov qword [rbp + 0x2f], rax
lea rax, str.Pelvis
mov qword [rbp + 0x37], rax
call fcn.140041150
mov rcx, rbx
call fcn.14003e660
lea rcx, str.Aimbot_Key
call fcn.14003e660
mov r8d, dword [0x1400e4d54]
lea rdx, [0x140002720]
mov ecx, dword [0x1400dd36c]
call fcn.140002810
jmp 0x14000c105
cmp eax, 1
jne 0x14000bf5b
mov rcx, rbx
call fcn.14003e660
lea rdx, [0x1400dd290]
lea rcx, str.EnableVisuals
call fcn.14003fef0
lea rdx, [0x1400dd293]
lea rcx, [0x1400a08c0]
call fcn.14003fef0
lea rdx, [0x1400dd295]
lea rcx, str.Box_Filled
call fcn.14003fef0
lea rdx, [0x1400dd296]
lea rcx, str.Skeleton
call fcn.14003fef0
lea rdx, [0x1400dd297]
lea rcx, str.Distance
call fcn.14003fef0
lea rdx, [0x1400dd298]
lea rcx, str.Username
call fcn.14003fef0
lea rdx, [0x1400dd299]
lea rcx, str.Platform
call fcn.14003fef0
lea rdx, [0x1400dd29a]
lea rcx, str.Weapon
call fcn.14003fef0
lea rdx, [0x1400dd29b]
lea rcx, str.Rank
call fcn.14003fef0
mov rcx, rbx
call fcn.14003e660
lea rdx, [0x1400dd2ac]
lea rcx, str.Box_Outline
call fcn.14003fef0
lea rdx, [0x1400dd2ad]
lea rcx, str.Skeleton_Outline
call fcn.14003fef0
mov rcx, rbx
call fcn.14003e660
lea rax, [rbp - 9]
mov dword [rsp + 0x30], esi
lea rdi, [0x1400a09dc]
mov dword [rbp - 9], 0x1f4
mov qword [rsp + 0x28], rdi
lea r9, [rbp + 0x17]
lea r8, [0x1400dd2b0]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp + 0x17], 1
lea rcx, str.Render_Distance
call fcn.140041560
jmp 0x14000c105
cmp eax, 2
jne 0x14000bff9
mov rcx, rbx
call fcn.14003e660
mov r8d, dword [0x1400e4d58]
lea rdx, [0x1400027c0]
mov ecx, dword [0x1400dd324]
call fcn.140002810
mov rcx, rbx
call fcn.14003e660
lea rdx, [rbp - 9]
mov qword [rbp - 9], rsi
lea rcx, str.Save_Config
call fcn.14003ee50
test al, al
je 0x14000bfaa
call fcn.14000ac00
lea rdx, [rbp - 9]
mov qword [rbp - 9], rsi
lea rcx, str.Load_Config
call fcn.14003ee50
test al, al
je 0x14000bfc7
call fcn.14000b450
lea rdx, [rbp - 9]
mov qword [rbp - 9], rsi
lea rcx, str.____Exit
call fcn.14003ee50
test al, al
je 0x14000c105
lea rcx, str.taskkill__F__IM__Medal.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 3
jne 0x14000c105
mov rcx, rbx
call fcn.14003e660
lea rdx, [0x1400dd7c0]
lea rcx, str.Fov_Changer
call fcn.14003fef0
cmp byte [0x1400dd7c0], 1
jne 0x14000c065
mov dword [rsp + 0x30], esi
lea rax, [rbp - 9]
lea rdi, [0x1400a09dc]
mov dword [rbp - 9], 0xd2
mov qword [rsp + 0x28], rdi
lea r9, [rbp + 0x17]
lea r8, [0x1400dd7f0]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp + 0x17], esi
lea rcx, str.Fov_Value
call fcn.140041560
lea rdx, [0x1400dd7d5]
lea rcx, str.Big_Players_Value
call fcn.14003fef0
lea rdx, [0x1400dd7c1]
lea rcx, str.Spin_Bot
call fcn.14003fef0
lea rdx, [0x1400dd7c3]
lea rcx, str.Air_Stuck__Enemy_Players_
call fcn.14003fef0
cmp byte [0x1400dd7c3], 1
jne 0x14000c0cc
lea rcx, str.Keybind:
call fcn.14003e660
mov r8d, dword [0x1400e4d50]
lea rdx, [0x140002770]
mov ecx, dword [0x1400dd7f8]
call fcn.140002810
lea rdx, [0x1400dd7c6]
lea rcx, str.Air_Stuck__LocalPlayer_
call fcn.14003fef0
lea rdx, [0x1400dd7c5]
lea rcx, str.Aim_In_Air
call fcn.14003fef0
lea rdx, [0x1400dd29c]
lea rcx, str.StreamProof
call fcn.14003fef0
call fcn.14001d350
call fcn.140022340
mov rsi, qword [rsp + 0xb0]
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140090dc0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
cmp eax, 1
jne 0x14000c117
mov ecx, 0x28
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000c152
inc dword [0x1400dd2b4]
mov ecx, 0x26
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000c167
dec dword [0x1400dd2b4]
mov ecx, recv
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1400dd2b4]
test al, 1
je 0x14000c1a6
mov edx, ecx
sub edx, 1
je 0x14000c198
cmp edx, 1
jne 0x14000c1a6
cmp byte [0x1400dd293], 0
sete byte [0x1400dd293]
jmp 0x14000c1a6
cmp byte [0x1400dd290], 0
sete byte [0x1400dd290]
lea rbx, [0x1400a03ee]
mov rdi, rbx
sub ecx, 1
je 0x14000c1c3
cmp ecx, 1
jne 0x14000c1ca
lea rdi, [0x1400a0da4]
jmp 0x14000c1ca
lea rbx, [0x1400a0da4]
movzx eax, byte [0x1400dd290]
lea r9, [rbp - 9]
movdqa xmm0, xmmword [0x1400c5b20]
lea rcx, [0x1400e4d80]
mov byte [rsp + 0x30], al
mov edx, reloc.WS2_32.dll_send
lea rax, str.Enable
mov qword [rsp + 0x28], rbx
mov r8d, 0xc8
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 9], xmm0
call fcn.140009990
movzx eax, byte [0x1400dd293]
lea r9, [rbp - 9]
movdqa xmm0, xmmword [0x1400c5b20]
lea rcx, [0x1400e4d80]
mov byte [rsp + 0x30], al
mov edx, reloc.WS2_32.dll_send
lea rax, [0x1400a08c0]
mov qword [rsp + 0x28], rdi
mov r8d, 0xdc
mov qword [rsp + 0x20], rax
movdqa xmmword [rbp - 9], xmm0
call fcn.140009990
jmp 0x14000c117