Function at 0x10001270
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov eax, dword [0x1006a00c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1006a018], 1
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
push edi
jne 0x1000164c
mov esi, dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
call esi
call esi
push 0
push 0x989680
push edx
push eax
call fcn.10056210
mov dword [ebp - 0xa8], eax
mov ecx, 0x1005741c
mov eax, dword [0x10070674]
mov dword [ebp - 0xa4], edx
mov edx, 0x1006a018
push 0x2b
or dword [eax + 0x3fec], 3
mov dword [eax + 0x4010], 0x43aa0000
mov dword [eax + 0x4014], 0x41f00000
mov dword [eax + 0x3ff4], 1
mov dword [eax + 0x4000], 0x3f800000
mov dword [eax + 0x4004], 0x3f800000
mov dword [eax + 0x4008], 0
mov dword [eax + 0x400c], 0
mov dword [eax + 0x3ff0], 1
mov byte [eax + 0x4028], 1
call fcn.1000f2e0
add esp, 4
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ctime64]
movaps xmm0, xmmword [0x10066cc0]
add esp, 4
movups xmmword [ebp - 0x9c], xmm0
push eax
lea eax, [ebp - 0x9c]
push str.__PRESS___F5___TO_HIDE___SHOW__s
push eax
call fcn.10041cb0
add esp, 0xc
call fcn.10012560
mov eax, dword [0x10070674]
cmp dword [eax + 0x40d8], 0
jg 0x10001397
push 0x74d
push str.D:MyFilesDLLDLL_WITH_HWID_RANPINASImGui_StandaloneImGuiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x10070674]
add esp, 0xc
or dword [eax + 0x3fec], 2
mov dword [eax + 0x4010], 0x43870000
mov dword [eax + 0x4014], 0x43a00000
mov dword [eax + 0x3ff4], 1
movsd xmm0, qword [eax + 0x3e98]
push dword [eax + 0x3ea0]
mulsd xmm0, qword [0x100668d0]
cvttsd2si eax, xmm0
and eax, 3
movsx eax, byte [eax + 0x10057468]
push eax
lea eax, [ebp - 0x88]
push str._c__dAnimatedTitle
push eax
call fcn.100010b0
mov eax, dword [0x10070674]
lea ecx, [ebp - 0x88]
push 0x2b
mov edx, 0x1006a018
or dword [eax + 0x3fec], 0x40
mov dword [eax + 0x4044], 0x3f800000
call fcn.1000f2e0
add esp, 0x14
mov edx, 0x10070696
mov ecx, str.AUTO_POTION_Q
call fcn.10043510
mov edx, 0x10070695
mov ecx, str.HP_FREEZE
call fcn.10043510
mov edx, 0x10070697
mov ecx, str.WALL_HACK
call fcn.10043510
mov edx, 0x10070694
mov ecx, str.REMOVE_FOG
call fcn.10043510
mov ecx, dword [0x10070674]
movss xmm0, dword [0x10066994]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100014b3
movaps xmm1, xmm0
mov dword [ebp - 0x94], 0
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x90], 0
call fcn.10014950
mov ecx, dword [0x10070674]
movss xmm0, dword [0x10066994]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100014f1
movaps xmm1, xmm0
mov dword [ebp - 0x94], 0
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x90], 0
call fcn.10014950
sub esp, 0x10
call fcn.10044a70
mov eax, dword [0x10070690]
add esp, 0x10
cmp eax, 3
ja case.default.0x10001506
jmp dword [eax*4 + 0x10001d14]
mov dword [0x10070144], 0x40000000
jmp 0x1000153b
mov dword [0x10070144], 0x41200000
jmp 0x1000153b
mov dword [0x10070144], 0x42200000
jmp 0x1000153b
mov dword [0x10070144], 0x42700000
push 0
push 4
push 0x10070144
push 0xc
push dword [0x1007068c]
call ebx
push ecx
push str._.3f
lea eax, [ebp - 0x90]
mov dword [ebp - 0xa0], 0
push eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x90], 0x3f4ccccd
push eax
push 0x1007069c
mov edx, 8
mov ecx, 0x100574c8
call fcn.100455b0
add esp, 0x10
mov dword [ebp - 0xa0], 0x43480000
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0x44160000
mov edx, 8
mov ecx, str.DRONE
push str._.3f
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x10070140
call fcn.100455b0
add esp, 0x10
mov dword [ebp - 0x90], 0x3e8
lea eax, [ebp - 0x90]
mov dword [ebp - 0xa0], 0
mov edx, 4
mov ecx, str.AUTO_SP_W
push 0x100574d4
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x100706a0
call fcn.100455b0
add esp, 0x10
mov dword [ebp - 0x90], 0x3e8
lea eax, [ebp - 0x90]
mov dword [ebp - 0xa0], 0
mov edx, 4
mov ecx, str.AUTO_MP_E
push 0x100574d4
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x10070698
call fcn.100455b0
add esp, 0x14
call fcn.10012560
push 0x74
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x10001666
cmp byte [0x1006a018], 0
sete byte [0x1006a018]
cmp byte [0x10070696], 0
lea eax, [ebp - 0x8c]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 1
push 0x7783ab
je 0x100016bf
call edi
lea eax, [ebp - 0x8c]
mov byte [0x7783ab], 1
push eax
push dword [ebp - 0x8c]
push 1
push 0x7783ab
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x7783bf
call edi
mov byte [0x7783bf], 0
jmp 0x100016f7
call edi
lea eax, [ebp - 0x8c]
mov byte [0x7783ab], 2
push eax
push dword [ebp - 0x8c]
push 1
push 0x7783ab
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x7783bf
call edi
mov byte [0x7783bf], 2
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
push 1
push 0x7783bf
call edi
cmp byte [0x10070695], 0
je 0x10001748
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0xbe1448
call edi
lea eax, [ebp - 0x8c]
mov dword [0xbe1448], 0x4f3f2f1f
push eax
push dword [ebp - 0x8c]
push 4
push 0xbe1448
call edi
cmp byte [0x10070697], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
je 0x10001780
push 0x5e2da1
call edi
lea eax, [ebp - 0x8c]
mov byte [0x5e2da1], 0xeb
push eax
push dword [ebp - 0x8c]
push 1
push 0x5e2da1
jmp 0x100017a2
push 0x5e30b1
call edi
lea eax, [ebp - 0x8c]
mov byte [0x5e30b1], 0x74
push eax
push dword [ebp - 0x8c]
push 1
push 0x5e30b1
call edi
cmp byte [0x10070694], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0x3048c10
je 0x1000180a
call edi
lea eax, [ebp - 0x8c]
mov dword [0x3048c10], 0x461c3c00
push eax
push dword [ebp - 0x8c]
push 4
push 0x3048c10
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0x3048be8
call edi
lea eax, [ebp - 0x8c]
mov dword [0x3048be8], 0x461c3c00
push eax
push dword [ebp - 0x8c]
jmp 0x10001855
call edi
lea eax, [ebp - 0x8c]
mov dword [0x3048c10], 0x442f0000
push eax
push dword [ebp - 0x8c]
push 4
push 0x3048c10
call edi
lea eax, [ebp - 0xa4]
push eax
push 0x40
push 4
push 0x3048be8
call edi
lea eax, [ebp - 0xa4]
mov dword [0x3048be8], 0x44fa0000
push eax
push dword [ebp - 0xa4]
push 4
push 0x3048be8
call edi
movzx eax, word [0x10070664]
cmp eax, dword [0x100706a0]
jge 0x1000189c
lea eax, [ebp - 0xa0]
push eax
push 0x40
push 1
push 0x30482ed
call edi
lea eax, [ebp - 0xa0]
mov byte [0x30482ed], 3
push eax
push dword [ebp - 0xa0]
push 1
push 0x30482ed
call edi
movzx eax, word [0x1007066c]
cmp eax, dword [0x10070698]
jge 0x100018da
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x30482ee
call edi
lea eax, [ebp - 0x90]
mov byte [0x30482ee], 3
push eax
push dword [ebp - 0x90]
push 1
push 0x30482ee
call edi
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 2
push 0x1007066c
push 0xbe144c
push dword [0x1007068c]
call esi
push 0
push 2
push 0x10070664
push 0xbe1450
push dword [0x1007068c]
call esi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x7ed5c0
call edi
lea eax, [ebp - 0x90]
mov byte [0x7ed5c0], 0xeb
push eax
push dword [ebp - 0x90]
push 1
push 0x7ed5c0
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x7ed6f3
call edi
lea eax, [ebp - 0x90]
mov byte [0x7ed6f3], 0xeb
push eax
push dword [ebp - 0x90]
push 1
push 0x7ed6f3
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b6bf7
call edi
mov eax, dword [0x100574f0]
mov ecx, 0x4b6bf7
mov dword [ecx], eax
movzx eax, word [0x100574f4]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b6c75
call edi
mov eax, dword [0x100574f0]
mov ecx, 0x4b6c75
mov dword [ecx], eax
movzx eax, word [0x100574f4]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b6d07
call edi
mov eax, dword [0x100574f0]
mov ecx, 0x4b6d07
mov dword [ecx], eax
movzx eax, word [0x100574f4]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b6de9
call edi
mov eax, dword [0x100574f0]
mov ecx, 0x4b6de9
mov dword [ecx], eax
movzx eax, word [0x100574f4]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b6e23
call edi
mov eax, dword [0x100574f0]
mov ecx, 0x4b6e23
mov dword [ecx], eax
movzx eax, word [0x100574f4]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x4b6b2a
call edi
lea eax, [ebp - 0x90]
mov byte [0x4b6b2a], 0
push eax
push dword [ebp - 0x90]
push 1
push 0x4b6b2a
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x5a8bd0
call edi
mov eax, dword [0x100574f0]
mov ecx, 0x5a8bd0
mov dword [ecx], eax
movzx eax, word [0x100574f4]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
push 0
push 4
push 0x10070140
push 0x3048970
push dword [0x1007068c]
call ebx
push 0
push 4
push 0x1007069c
push 0xfd2023
push dword [0x1007068c]
call ebx
lea eax, [ebp - 0x90]
push eax
push 0x40
push 5
push 0x4a17e0
call edi
mov eax, dword [0x100574f8]
mov ecx, 0x4a17e0
mov dword [ecx], eax
mov al, byte [0x100574fc]
mov byte [ecx + 4], al
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 5
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x4de6d0
call edi
lea eax, [ebp - 0x90]
mov byte [0x4de6d0], 0xd8
push eax
push dword [ebp - 0x90]
push 1
push 0x4de6d0
call edi
lea eax, [ebp - 0x90]
mov dword [0x10070668], 0x5e73a6
push eax
push 0x40
push 6
push 0x5e73a0
call edi
mov eax, 0x5e73a0
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov eax, 0x10001250
sub eax, 0x5e73a5
mov byte [0x5e73a0], 0xe9
mov dword [0x5e73a1], eax
lea eax, [ebp - 0xa0]
push eax
push dword [ebp - 0x90]
push 6
push 0x5e73a0
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57dcc4
call edi
lea eax, [ebp - 0x90]
mov byte [0x57dcc4], 0x8e
push eax
push dword [ebp - 0x90]
push 1
push 0x57dcc4
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57de3e
call edi
lea eax, [ebp - 0x90]
mov byte [0x57de3e], 0x8e
push eax
push dword [ebp - 0x90]
push 1
push 0x57de3e
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57d441
call edi
lea eax, [ebp - 0x90]
mov byte [0x57d441], 0x8e
push eax
push dword [ebp - 0x90]
push 1
push 0x57d441
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57d53e
call edi
lea eax, [ebp - 0x90]
mov byte [0x57d53e], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57d53e
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57c990
call edi
lea eax, [ebp - 0x90]
mov byte [0x57c990], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57c990
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57ca7a
call edi
lea eax, [ebp - 0x90]
mov byte [0x57ca7a], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57ca7a
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100550a4
mov esp, ebp
pop ebp
ret