Function at 0x180009f20
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
movaps xmmword [rsp + 0x70], xmm13
mov rax, qword [0x18001a158]
xor rax, rsp
mov qword [rbp - 0x39], rax
mov ebx, 1
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm1, dword [0x180015c8c]
lea rdx, [0x18001a008]
movss xmm0, dword [0x180015c90]
lea rcx, str.Goldfish_FREE_V4
movzx r9d, byte [0x18001d0b8]
test ax, ax
unpcklps xmm0, xmm1
movq r8, xmm0
setne byte [0x18001a4d0]
call fcn.18000c1e0
movss xmm13, dword [0x180015bf0]
movss xmm12, dword [0x180015c30]
movss xmm10, dword [0x180015b74]
test al, al
je 0x18000a744
cmp dword [0x18001d118], 0
lea rcx, str.Aimbot
movss xmm6, dword [0x180015c64]
movss xmm8, dword [0x180015c14]
movaps xmm0, xmm6
unpcklps xmm0, xmm8
sete r8b
movq rdx, xmm0
call fcn.1800073f0
mov ecx, dword [0x18001d118]
xor edx, edx
test al, al
movaps xmm0, xmm6
unpcklps xmm0, xmm8
cmovne ecx, edx
movq rdx, xmm0
cmp ecx, ebx
mov dword [0x18001d118], ecx
lea rcx, [0x180015514]
sete r8b
call fcn.1800073f0
mov ecx, dword [0x18001d118]
test al, al
movaps xmm0, xmm6
cmovne ecx, ebx
unpcklps xmm0, xmm8
cmp ecx, 2
mov dword [0x18001d118], ecx
movq rdx, xmm0
lea rcx, str.MISC
sete r8b
call fcn.1800073f0
mov ecx, dword [0x18001d118]
test al, al
mov edx, 2
movaps xmm0, xmm6
cmovne ecx, edx
unpcklps xmm0, xmm8
cmp ecx, 3
mov dword [0x18001d118], ecx
movq rdx, xmm0
lea rcx, str.Colors
sete r8b
call fcn.1800073f0
mov ecx, dword [0x18001d118]
test al, al
mov edx, 3
movaps xmm0, xmm6
cmovne ecx, edx
unpcklps xmm0, xmm8
cmp ecx, 4
mov dword [0x18001d118], ecx
movq rdx, xmm0
lea rcx, str.Settings
sete r8b
call fcn.1800073f0
mov edx, dword [0x18001d118]
test al, al
movss xmm1, dword [0x18001d0dc]
mov ebx, 4
movss xmm9, dword [0x180015c5c]
cmovne edx, ebx
movss dword [0x18001a7f0], xmm1
xorps xmm11, xmm11
mov dword [0x18001d118], edx
mov dword [0x18001a4c4], 0x43020000
mov byte [0x18001a4c3], 1
test edx, edx
jne 0x18000a347
lea rdx, [0x18001cd1c]
lea rcx, str.Aimbot
call fcn.1800076a0
cmp byte [0x18001cd1c], 0
je 0x18000a164
movaps xmm0, xmm9
lea r8, [0x18001ce28]
unpcklps xmm0, xmm8
lea rcx, str.Aimbot_Key
movq rdx, xmm0
call fcn.180009800
lea rdx, [0x18001cd1d]
lea rcx, str.Silent_Aim
call fcn.1800076a0
movss xmm1, dword [0x18001ce3c]
movss xmm6, dword [0x18001ce38]
movaps xmm7, xmm1
inc dword [0x18001a7ec]
addss xmm7, xmm13
movzx eax, byte [0x18001a4c2]
addss xmm6, xmm13
movss xmm0, dword [0x18001a7e8]
addss xmm7, xmm0
addss xmm6, dword [0x18001a4c4]
test al, al
je 0x18000a1d6
movss xmm6, dword [0x18001d0e8]
addss xmm6, dword [0x18001d0e0]
movss xmm7, dword [0x18001d0e4]
addss xmm6, xmm13
cmp byte [0x18001a4c3], 0
je 0x18000a207
movss xmm7, dword [0x18001a7f0]
movaps xmm0, xmm7
mov byte [0x18001a4c3], 0
subss xmm0, xmm1
mov dword [0x18001a7f0], 0
movss dword [0x18001a7e8], xmm0
test al, al
jne 0x18000a218
addss xmm0, xmm12
movss dword [0x18001a7e8], xmm0
movaps xmm0, xmmword [0x1800163b0]
lea r8, [rbp - 0x49]
movaps xmm2, xmm6
movaps xmmword [rbp - 0x49], xmm0
addss xmm2, dword [0x180015bdc]
movaps xmm1, xmm7
lea rcx, str.AimbonesEXPERIMENTAL
addss xmm1, dword [0x180015bfc]
mov r9b, 1
movaps xmm0, xmm2
unpcklps xmm0, xmm1
movq rdx, xmm0
call fcn.18000b2a0
movss xmm0, dword [0x18001d0d8]
ucomiss xmm0, xmm11
mov byte [0x18001a4c2], 0
movss dword [0x18001d0e0], xmm6
movss dword [0x18001d0e4], xmm7
jp 0x18000a28e
jne 0x18000a28e
movss dword [0x18001d0d8], xmm6
movss dword [0x18001d0dc], xmm7
lea rdx, [0x18001ce18]
lea rcx, str.Head
call fcn.1800076a0
mov eax, dword [0x18001a010]
lea rdx, [0x18001ce19]
cmp byte [0x18001ce18], 0
mov ecx, 8
cmovne eax, ecx
lea rcx, str.Chest
mov dword [0x18001a010], eax
call fcn.1800076a0
mov eax, dword [0x18001a010]
lea rdx, [0x18001ce1a]
cmp byte [0x18001ce19], 0
lea rcx, str.Legs
cmovne eax, ebx
mov dword [0x18001a010], eax
call fcn.1800076a0
mov eax, dword [0x18001a010]
lea rdx, [0x18001ce1c]
cmp byte [0x18001ce1a], 0
mov ecx, 0x16
cmovne eax, ecx
lea rcx, str.Hans
mov dword [0x18001a010], eax
call fcn.1800076a0
mov eax, dword [0x18001a010]
mov ecx, 0x20
cmp byte [0x18001ce1c], 0
mov edx, dword [0x18001d118]
cmovne eax, ecx
mov dword [0x18001a010], eax
movss xmm6, dword [0x180015b64]
lea rbx, str._.0f
cmp edx, 1
jne 0x18000a442
lea rdx, [0x18001cd0c]
lea rcx, str.Draw_Player
call fcn.1800076a0
lea rdx, [0x18001cd11]
lea rcx, str.Player_Chams
call fcn.1800076a0
lea rdx, [0x18001cd16]
lea rcx, str.Player_Armor
call fcn.1800076a0
lea rdx, [0x18001cd19]
lea rcx, str.Health_Bar
call fcn.1800076a0
lea rdx, [0x18001cd0d]
lea rcx, str.Tamed_Dino
call fcn.1800076a0
lea rdx, [0x18001cd0e]
lea rcx, str.Wild_Dino
call fcn.1800076a0
lea rdx, [0x18001cd12]
lea rcx, str.Dino_Chams
call fcn.1800076a0
lea rdx, [0x18001cd10]
lea rcx, str.Draw_Container
call fcn.1800076a0
lea rdx, [0x18001cd13]
lea rcx, str.Container_Chams
call fcn.1800076a0
lea rdx, [0x18001cd1a]
lea rcx, str.Hide_Empty
call fcn.1800076a0
movaps xmm3, xmm13
mov qword [rsp + 0x20], rbx
movaps xmm2, xmm6
lea rdx, [0x18001cd08]
lea rcx, str.ESP_Scale
call fcn.18000ab60
mov edx, dword [0x18001d118]
cmp edx, 2
jne 0x18000a629
lea rdx, [0x18001cd28]
lea rcx, str.Tek_Punch
call fcn.1800076a0
cmp byte [0x18001cd28], 0
je 0x18000a487
movaps xmm0, xmm9
lea r8, [0x18001ce20]
unpcklps xmm0, xmm8
lea rcx, str.Punch_Key
movq rdx, xmm0
call fcn.180009800
lea rdx, [0x18001cd29]
lea rcx, str.Tek_Jump
call fcn.1800076a0
cmp byte [0x18001cd29], 0
je 0x18000a4c3
movaps xmm0, xmm9
lea r8, [0x18001ce24]
unpcklps xmm0, xmm8
lea rcx, str.Jump_Key
movq rdx, xmm0
call fcn.180009800
lea rdx, [0x18001cd2c]
lea rcx, str.Instant_Turn
call fcn.1800076a0
lea rdx, [0x18001cd50]
lea rcx, str.FastFire
call fcn.1800076a0
movaps xmm3, xmm10
mov byte [0x18001a4c2], 1
movaps xmm2, xmm6
mov qword [rsp + 0x20], rbx
lea rdx, [0x18001cd34]
lea rcx, [0x180015470]
call fcn.18000ab60
lea rdx, [0x18001cd38]
lea rcx, str.Auto_Armor
call fcn.1800076a0
movaps xmm3, xmm10
mov byte [0x18001a4c2], 1
xorps xmm2, xmm2
mov qword [rsp + 0x20], rbx
lea rdx, [0x18001cd3c]
lea rcx, str.Percent
call fcn.18000ab60
lea rdx, [0x18001cd2d]
lea rcx, str.Color_Hack
call fcn.1800076a0
lea rdx, [0x18001cd2e]
lea rcx, str.Chat_Spam
call fcn.1800076a0
lea rdx, [0x18001cd52]
lea rcx, str.AirStuck
call fcn.1800076a0
cmp byte [0x18001cd52], 0
je 0x18000a5aa
movaps xmm0, xmm9
lea r8, [0x18001cd5c]
unpcklps xmm0, xmm8
lea rcx, [0x180015470]
movq rdx, xmm0
call fcn.180009800
movss xmm3, dword [0x180015b68]
lea rdx, [0x18001cd58]
xorps xmm2, xmm2
mov byte [0x18001a4c2], 1
lea rcx, [0x180015470]
mov qword [rsp + 0x20], rbx
call fcn.18000ab60
lea rdx, [0x18001cd53]
lea rcx, str.GhostMode
call fcn.1800076a0
cmp byte [0x18001cd53], 0
je 0x18000a610
movaps xmm0, xmm9
lea r8, [0x18001cd60]
unpcklps xmm0, xmm8
lea rcx, [0x180015470]
movq rdx, xmm0
call fcn.180009800
lea rdx, [0x18001cd2a]
lea rcx, str.Deino_Fly
call fcn.1800076a0
mov edx, dword [0x18001d118]
cmp edx, 3
jne 0x18000a6e3
lea rdx, [0x18001cd68]
lea rcx, str.Enemy_Player
call fcn.180007930
lea rdx, [0x18001cd78]
lea rcx, str.Dead_Player
call fcn.180007930
lea rdx, [0x18001cd88]
lea rcx, str.Sleep_Player
call fcn.180007930
lea rdx, [0x18001cd98]
lea rcx, str.Team_Player
call fcn.180007930
lea rdx, [0x18001cda8]
lea rcx, str.ColorHack_Color
call fcn.180007930
lea rdx, [0x18001cdb8]
lea rcx, str.Container
call fcn.180007930
lea rdx, [0x18001cde8]
lea rcx, str.Tamed_Dino
call fcn.180007930
lea rdx, [0x18001cdf8]
lea rcx, str.Wild_Dino
call fcn.180007930
lea rdx, [0x18001ce08]
lea rcx, str.Turret
call fcn.180007930
mov edx, dword [0x18001d118]
cmp edx, 4
jne 0x18000a744
lea rdx, [0x18001cd2b]
lea rcx, str.HUD_Information
call fcn.1800076a0
lea rdx, [0x18001cd51]
lea rcx, str.Nazi_CrossHair
call fcn.1800076a0
movss xmm3, dword [0x180015c94]
lea rdx, [0x18001cd44]
movaps xmm2, xmm6
mov qword [rsp + 0x20], rbx
lea rcx, str.FOV_Size
call fcn.18000ab60
lea rdx, [0x18001ce2c]
lea rcx, str.Panic
call fcn.1800076a0
lea rbx, [0x18001a935]
mov esi, 0x80
lea rdi, [0x18001a904]
nop word [rax + rax]
mov eax, dword [rbx - 0x35]
cmp eax, 0xffffffff
je 0x18000a83c
cmp eax, 1
jne 0x18000a794
movups xmm0, xmmword [rbx - 0x21]
lea r9, [rbp - 0x59]
mov rcx, qword [rdi]
movss xmm2, dword [rbx - 0x25]
movss xmm1, dword [rbx - 0x29]
movaps xmmword [rbp - 0x59], xmm0
call fcn.18000bcc0
jmp 0x18000a835
cmp eax, 2
jne 0x18000a7b8
movups xmm0, xmmword [rbx - 0x21]
movzx r9d, byte [rbx - 5]
lea r8, [rbp - 0x59]
mov rdx, qword [rdi]
mov rcx, qword [rbx - 0xd]
movaps xmmword [rbp - 0x59], xmm0
call fcn.18000b2a0
jmp 0x18000a835
cmp eax, 3
jne 0x18000a7dc
movups xmm0, xmmword [rbx - 0x21]
movzx r9d, byte [rbx - 5]
lea r8, [rbp - 0x59]
mov rdx, qword [rdi]
mov rcx, qword [rbx - 0xd]
movaps xmmword [rbp - 0x59], xmm0
call fcn.18000b1c0
jmp 0x18000a835
cmp eax, 4
jne 0x18000a835
movss xmm3, dword [rbx]
lea rax, [rbp - 0x59]
movups xmm0, xmmword [rbx - 0x21]
lea r8, [rbp - 0x69]
mov rcx, qword [0x18001a7e0]
movss xmm1, dword [rbx + 4]
lea rdx, [rbp - 0x49]
movss xmm2, dword [rbx + 8]
movss dword [rbp - 0x45], xmm3
movd xmm3, dword [rbx + 0xf]
movaps xmmword [rbp - 0x59], xmm0
movss xmm0, dword [rbx - 4]
cvtdq2ps xmm3, xmm3
mov qword [rsp + 0x20], rax
movss dword [rbp - 0x69], xmm1
movss dword [rbp - 0x65], xmm2
movss dword [rbp - 0x49], xmm0
call fcn.18000fa40
mov dword [rbx - 0x35], 0xffffffff
add rdi, 0x48
add rbx, 0x48
sub rsi, 1
jne 0x18000a760
cmp byte [0x18001d0b8], sil
je 0x18000aa03
lea rcx, [rbp - 0x49]
mov qword [rsp + 0x100], r14
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm8, dword [rbp - 0x49]
lea rax, [rbp - 0x59]
movd xmm9, dword [rbp - 0x45]
lea r8, [rbp - 0x49]
movaps xmm0, xmmword [0x180016290]
lea rdx, [rbp - 0x69]
mov rcx, qword [0x18001a7e0]
movaps xmm3, xmm10
cvtdq2ps xmm8, xmm8
mov qword [rsp + 0x20], rax
cvtdq2ps xmm9, xmm9
movaps xmm11, xmm8
movss dword [rbp - 0x69], xmm8
addss xmm11, xmm12
movss dword [rbp - 0x65], xmm9
movaps xmm12, xmm9
addss xmm12, xmm13
movups xmmword [rbp - 0x59], xmm0
movss dword [rbp - 0x49], xmm11
movss dword [rbp - 0x45], xmm12
call fcn.18000fa40
mov edi, 0x23
lea ebx, [rsi + 0xa]
mov esi, 0xf
lea r14d, [rdi - 5]
nop dword [rax + rax]
movaps xmm0, xmmword [0x180016290]
lea rax, [rbp - 0x59]
mov rcx, qword [0x18001a7e0]
lea r8, [rbp - 0x49]
movups xmmword [rbp - 0x59], xmm0
dec edi
lea rdx, [rbp - 0x69]
cmp edi, esi
movss dword [rbp - 0x69], xmm8
movaps xmm3, xmm10
movss dword [rbp - 0x65], xmm9
cmovl edi, esi
mov qword [rsp + 0x20], rax
inc ebx
cmp ebx, r14d
cmovg ebx, r14d
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm8
addss xmm0, xmm9
movss dword [rbp - 0x49], xmm1
movss dword [rbp - 0x45], xmm0
call fcn.18000fa40
cmp ebx, r14d
jne 0x18000a8f0
movaps xmm0, xmmword [0x180016290]
lea rax, [rbp - 0x59]
mov rcx, qword [0x18001a7e0]
lea r8, [rbp - 0x49]
mov r14, qword [rsp + 0x100]
lea rdx, [rbp - 0x69]
movaps xmm7, xmm8
movss dword [rbp - 0x69], xmm8
addss xmm7, dword [0x180015c00]
movaps xmm6, xmm9
movss dword [rbp - 0x65], xmm9
addss xmm6, dword [0x180015c20]
movaps xmm3, xmm10
mov qword [rsp + 0x20], rax
movups xmmword [rbp - 0x59], xmm0
movss dword [rbp - 0x49], xmm7
movss dword [rbp - 0x45], xmm6
call fcn.18000fa40
movaps xmm0, xmmword [0x180016290]
lea rax, [rbp - 0x59]
mov rcx, qword [0x18001a7e0]
lea r8, [rbp - 0x49]
movaps xmm3, xmm10
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x69]
movss dword [rbp - 0x49], xmm7
movups xmmword [rbp - 0x59], xmm0
movss dword [rbp - 0x45], xmm6
movss dword [rbp - 0x69], xmm11
movss dword [rbp - 0x65], xmm12
call fcn.18000fa40
mov rcx, qword [rbp - 0x39]
xor rcx, rsp
call fcn.180012da0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop rbp
ret