Function at 0x10001270
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov eax, dword [0x1006b00c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1006b018], 1
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
push edi
jne 0x1000181c
mov esi, dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
call esi
call esi
mov eax, dword [0x10071684]
cmp dword [eax + 0x40d8], 0
jg 0x100012ce
push 0x74d
push str.D:MyFilesDLLDLL_WITH_HWID_RANPINASImGui_StandaloneImGuiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x10071684]
add esp, 0xc
or dword [eax + 0x3fec], 2
mov dword [eax + 0x4010], 0x43af0000
mov dword [eax + 0x4014], 0x43480000
mov dword [eax + 0x3ff4], 1
movsd xmm0, qword [eax + 0x3e98]
push dword [eax + 0x3ea0]
mulsd xmm0, qword [0x100678f8]
cvttsd2si eax, xmm0
and eax, 3
movsx eax, byte [eax + 0x10058430]
push eax
lea eax, [ebp - 0x88]
push str._c__dAnimatedTitle
push eax
call fcn.100010b0
mov eax, dword [0x10071684]
lea ecx, [ebp - 0x88]
push 0x2b
mov edx, 0x1006b018
or dword [eax + 0x3fec], 0x40
mov dword [eax + 0x4044], 0x3f800000
call fcn.1000f4a0
add esp, 0x10
mov dword [ebp - 0x94], 0x42d00000
lea edx, [ebp - 0x94]
mov dword [ebp - 0x90], 0
mov ecx, str.Misc
call fcn.100424b0
mov ecx, dword [0x10071150]
xor edx, edx
movss xmm1, dword [0x100678f0]
add esp, 4
test al, al
xorps xmm0, xmm0
cmovne ecx, edx
mov dword [0x10071150], ecx
call fcn.10014ee0
push ecx
lea edx, [ebp - 0x94]
mov dword [ebp - 0x94], 0x42d00000
mov ecx, str.Visuals
mov dword [ebp - 0x90], 0
call fcn.100424b0
mov ecx, dword [0x10071150]
add esp, 4
movss xmm1, dword [0x100678f0]
test al, al
mov edx, 1
xorps xmm0, xmm0
cmovne ecx, edx
mov dword [0x10071150], ecx
call fcn.10014ee0
push ecx
lea edx, [ebp - 0x94]
mov dword [ebp - 0x94], 0x42d00000
mov ecx, str.Auto_Potion
mov dword [ebp - 0x90], 0
call fcn.100424b0
mov ecx, dword [0x10071150]
add esp, 4
test al, al
mov edx, 2
cmovne ecx, edx
mov dword [0x10071150], ecx
sub ecx, 0
je 0x10001717
sub ecx, 1
je 0x10001568
sub ecx, 1
jne 0x10001817
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x1000148e
movss xmm1, dword [0x100679bc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014b20
mov edx, 0x100716a6
mov ecx, str.AUTO_POTION_Q
call fcn.100439c0
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100014e6
movss xmm1, dword [0x100679bc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014b20
push ecx
push 0x100584f8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0x3e8
push eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xa0], 0
push eax
push 0x100716ac
mov edx, 4
mov ecx, str.AUTO_SP_W
call fcn.10045a70
add esp, 0x10
mov dword [ebp - 0x90], 0x3e8
lea eax, [ebp - 0x90]
mov dword [ebp - 0xa0], 0
mov edx, 4
mov ecx, str.AUTO_MP_E
push 0x100584f8
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x100716a8
call fcn.10045a70
add esp, 0x14
jmp 0x10001817
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100015b1
movss xmm1, dword [0x100679bc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014b20
sub esp, 0x10
call fcn.10044f30
mov eax, dword [0x100716a0]
add esp, 0x10
cmp eax, 3
ja case.default.0x100015c6
jmp dword [eax*4 + 0x10001ee0]
mov dword [0x10071148], 0x40000000
jmp 0x100015fb
mov dword [0x10071148], 0x41200000
jmp 0x100015fb
mov dword [0x10071148], 0x42200000
jmp 0x100015fb
mov dword [0x10071148], 0x42700000
push 0
push 4
push 0x10071148
push 0xc
push dword [0x1007169c]
call ebx
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x10001657
movss xmm1, dword [0x100679bc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014b20
push ecx
push str._.3f
lea eax, [ebp - 0x90]
mov dword [ebp - 0xa0], 0x3a83126f
push eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x90], 0x3f4ccccd
push eax
push 0x1007114c
mov edx, 8
mov ecx, 0x100584cc
call fcn.10045a70
add esp, 0x10
mov dword [ebp - 0xa0], 0x43480042
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0x44160000
mov edx, 8
mov ecx, str.DRONE
push str._.3f
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x10071140
call fcn.10045a70
add esp, 0x10
mov dword [ebp - 0xa0], 0x42a00083
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0x43960000
mov edx, 8
mov ecx, str.FASTZOOM_IN_OUT
push str._.3f
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x10071144
call fcn.10045a70
add esp, 0x14
jmp 0x10001817
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x10001760
movss xmm1, dword [0x100679bc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014b20
mov edx, 0x100716a5
mov ecx, str.HP_FREEZE
call fcn.100439c0
mov edx, 0x100716a7
mov ecx, str.WALL_NAME
call fcn.100439c0
mov edx, 0x100716a4
mov ecx, str.REMOVE_FOG
call fcn.100439c0
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100017d6
movss xmm1, dword [0x100679bc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014b20
movaps xmm0, xmmword [0x10067cf0]
lea eax, [ebp - 0x9c]
push str.F5_HOTKEY_SHOW__HIDE
push eax
movups xmmword [ebp - 0x9c], xmm0
call fcn.10041e90
movaps xmm0, xmmword [0x10067cf0]
lea eax, [ebp - 0x9c]
push str.Passive:_AntiChat_Block
push eax
movups xmmword [ebp - 0x9c], xmm0
call fcn.10041e90
add esp, 0x10
call fcn.10012720
push 0x74
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x10001836
cmp byte [0x1006b018], 0
sete byte [0x1006b018]
cmp byte [0x100716a6], 0
lea eax, [ebp - 0x8c]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 1
push 0x778b8b
je 0x1000188f
call edi
lea eax, [ebp - 0x8c]
mov byte [0x778b8b], 1
push eax
push dword [ebp - 0x8c]
push 1
push 0x778b8b
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x778b9f
call edi
mov byte [0x778b9f], 0
jmp 0x100018c7
call edi
lea eax, [ebp - 0x8c]
mov byte [0x778b8b], 2
push eax
push dword [ebp - 0x8c]
push 1
push 0x778b8b
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x778b9f
call edi
mov byte [0x778b9f], 2
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
push 1
push 0x778b9f
call edi
cmp byte [0x100716a5], 0
je 0x10001918
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0xbe2448
call edi
lea eax, [ebp - 0x8c]
mov dword [0xbe2448], 0x4f3f2f1f
push eax
push dword [ebp - 0x8c]
push 4
push 0xbe2448
call edi
cmp byte [0x100716a7], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x5e3151
je 0x1000193c
call edi
mov byte [0x5e3151], 0xeb
jmp 0x10001945
call edi
mov byte [0x5e3151], 0x74
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
push 1
push 0x5e3151
call edi
cmp byte [0x100716a4], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0x3049c40
je 0x100019c1
call edi
lea eax, [ebp - 0x8c]
mov dword [0x3049c40], 0x461c3c00
push eax
push dword [ebp - 0x8c]
push 4
push 0x3049c40
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0x3049c18
call edi
lea eax, [ebp - 0x8c]
mov dword [0x3049c18], 0x461c3c00
push eax
push dword [ebp - 0x8c]
jmp 0x10001a0c
call edi
lea eax, [ebp - 0x8c]
mov dword [0x3049c40], 0x442f0000
push eax
push dword [ebp - 0x8c]
push 4
push 0x3049c40
call edi
lea eax, [ebp - 0xa4]
push eax
push 0x40
push 4
push 0x3049c18
call edi
lea eax, [ebp - 0xa4]
mov dword [0x3049c18], 0x44fa0000
push eax
push dword [ebp - 0xa4]
push 4
push 0x3049c18
call edi
movzx eax, word [0x10071674]
cmp eax, dword [0x100716ac]
jge 0x10001a53
lea eax, [ebp - 0xa0]
push eax
push 0x40
push 1
push 0x304931d
call edi
lea eax, [ebp - 0xa0]
mov byte [0x304931d], 3
push eax
push dword [ebp - 0xa0]
push 1
push 0x304931d
call edi
movzx eax, word [0x1007167c]
cmp eax, dword [0x100716a8]
jge 0x10001a91
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x304931e
call edi
lea eax, [ebp - 0x90]
mov byte [0x304931e], 3
push eax
push dword [ebp - 0x90]
push 1
push 0x304931e
call edi
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 2
push 0x1007167c
push 0xbe244c
push dword [0x1007169c]
call esi
push 0
push 2
push 0x10071674
push 0xbe2450
push dword [0x1007169c]
call esi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x7edf70
call edi
lea eax, [ebp - 0x90]
mov byte [0x7edf70], 0xeb
push eax
push dword [ebp - 0x90]
push 1
push 0x7edf70
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x7ee0a3
call edi
lea eax, [ebp - 0x90]
mov byte [0x7ee0a3], 0xeb
push eax
push dword [ebp - 0x90]
push 1
push 0x7ee0a3
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b7457
call edi
mov eax, dword [0x10058514]
mov ecx, 0x4b7457
mov dword [ecx], eax
movzx eax, word [0x10058518]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b74d5
call edi
mov eax, dword [0x10058514]
mov ecx, 0x4b74d5
mov dword [ecx], eax
movzx eax, word [0x10058518]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b7567
call edi
mov eax, dword [0x10058514]
mov ecx, 0x4b7567
mov dword [ecx], eax
movzx eax, word [0x10058518]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b7649
call edi
mov eax, dword [0x10058514]
mov ecx, 0x4b7649
mov dword [ecx], eax
movzx eax, word [0x10058518]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b7683
call edi
mov eax, dword [0x10058514]
mov ecx, 0x4b7683
mov dword [ecx], eax
movzx eax, word [0x10058518]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x4b738a
call edi
lea eax, [ebp - 0x90]
mov byte [0x4b738a], 0
push eax
push dword [ebp - 0x90]
push 1
push 0x4b738a
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x5a94f0
call edi
mov eax, dword [0x10058514]
mov ecx, 0x5a94f0
mov dword [ecx], eax
movzx eax, word [0x10058518]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
push 0
push 4
push 0x10071140
push 0x30499a0
push dword [0x1007169c]
call ebx
push 0
push 4
push 0x10071144
push 0x30499ac
push dword [0x1007169c]
call ebx
push 0
push 4
push 0x1007114c
push 0xfd2023
push dword [0x1007169c]
call ebx
lea eax, [ebp - 0x90]
push eax
push 0x40
push 5
push 0x4a1e40
call edi
mov eax, dword [0x1005851c]
mov ecx, 0x4a1e40
mov dword [ecx], eax
mov al, byte [0x10058520]
mov byte [ecx + 4], al
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 5
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x4dee02
call edi
lea eax, [ebp - 0x90]
mov byte [0x4dee02], 0xd8
push eax
push dword [ebp - 0x90]
push 1
push 0x4dee02
call edi
lea eax, [ebp - 0x90]
mov dword [0x10071678], 0x5e7ec6
push eax
push 0x40
push 6
push 0x5e7ec0
call edi
mov eax, 0x5e7ec0
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov eax, 0x10001250
sub eax, 0x5e7ec5
mov byte [0x5e7ec0], 0xe9
mov dword [0x5e7ec1], eax
lea eax, [ebp - 0xa0]
push eax
push dword [ebp - 0x90]
push 6
push 0x5e7ec0
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57e4f4
call edi
lea eax, [ebp - 0x90]
mov byte [0x57e4f4], 0x8e
push eax
push dword [ebp - 0x90]
push 1
push 0x57e4f4
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57e66e
call edi
mov byte [0x57e66e], 0x8e
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 1
push 0x57e66e
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57dc71
call edi
lea eax, [ebp - 0x90]
mov byte [0x57dc71], 0x8e
push eax
push dword [ebp - 0x90]
push 1
push 0x57dc71
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57dd6e
call edi
lea eax, [ebp - 0x90]
mov byte [0x57dd6e], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57dd6e
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57d1c0
call edi
lea eax, [ebp - 0x90]
mov byte [0x57d1c0], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57d1c0
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57d2aa
call edi
lea eax, [ebp - 0x90]
mov byte [0x57d2aa], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57d2aa
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10055554
mov esp, ebp
pop ebp
ret