Function at 0x140004b70
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm7
movaps xmmword [rsp + 0x40], xmm8
cmp byte [0x14012f986], 0
je 0x14000550a
mov rax, qword [0x14012e9a8]
mov dword [rax + 0x4830], 0x3f400000
or dword [rax + 0x47d0], 0x42
mov qword [rax + 0x47f0], 0x42c80000
mov r15d, 1
mov dword [rax + 0x47d8], r15d
xor edx, edx
lea r8d, [r15 + 2]
lea rcx, str.Options_List
call fcn.140037080
mov rsi, qword [0x14012e9a8]
mov rax, qword [rsi + 0x3ef8]
mov byte [rax + 0xb8], r15b
mov rax, qword [rsi + 0x3ef8]
mov r14, qword [rax + 0x298]
cmp byte [0x14012f9a0], 0
jne 0x1400051f0
movss xmm6, dword [rax + 0x24]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov rbx, qword [0x14012e9a8]
mulss xmm7, dword [rbx + 0x14]
movss xmm8, dword [0x1400ea4dc]
divss xmm7, xmm8
addss xmm7, xmm6
mov rax, qword [rbx + 0x3ef8]
movss xmm6, dword [rax + 0x20]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rbx + 0x10]
divss xmm0, xmm8
addss xmm0, xmm6
movss dword [0x14012fde8], xmm0
movss dword [0x14012fdec], xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [0x14012f9a8], xmm0
movss dword [0x14012f9ac], xmm6
mov rax, qword [0x14012e9a8]
mov rcx, qword [rax + 0x3ef8]
movss xmm6, dword [rcx + 0x24]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov rbx, qword [0x14012e9a8]
mulss xmm7, dword [rbx + 0x14]
divss xmm7, xmm8
addss xmm7, xmm6
mov rax, qword [rbx + 0x3ef8]
movss xmm6, dword [rax + 0x20]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rbx + 0x10]
divss xmm0, xmm8
addss xmm0, xmm6
movss dword [0x14012fdf0], xmm0
movss dword [0x14012fdf4], xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [0x14012f9b0], xmm0
movss dword [0x14012f9b4], xmm6
mov rax, qword [0x14012e9a8]
mov rcx, qword [rax + 0x3ef8]
movss xmm6, dword [rcx + 0x24]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov rbx, qword [0x14012e9a8]
mulss xmm7, dword [rbx + 0x14]
divss xmm7, xmm8
addss xmm7, xmm6
mov rax, qword [rbx + 0x3ef8]
movss xmm6, dword [rax + 0x20]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rbx + 0x10]
divss xmm0, xmm8
addss xmm0, xmm6
movss dword [0x14012fdf8], xmm0
movss dword [0x14012fdfc], xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [0x14012f9b8], xmm0
movss dword [0x14012f9bc], xmm6
mov rax, qword [0x14012e9a8]
mov rcx, qword [rax + 0x3ef8]
movss xmm6, dword [rcx + 0x24]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov rbx, qword [0x14012e9a8]
mulss xmm7, dword [rbx + 0x14]
divss xmm7, xmm8
addss xmm7, xmm6
mov rax, qword [rbx + 0x3ef8]
movss xmm6, dword [rax + 0x20]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rbx + 0x10]
divss xmm0, xmm8
addss xmm0, xmm6
movss dword [0x14012fe00], xmm0
movss dword [0x14012fe04], xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [0x14012f9c0], xmm0
movss dword [0x14012f9c4], xmm6
mov rax, qword [0x14012e9a8]
mov rcx, qword [rax + 0x3ef8]
movss xmm6, dword [rcx + 0x24]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov rbx, qword [0x14012e9a8]
mulss xmm7, dword [rbx + 0x14]
divss xmm7, xmm8
addss xmm7, xmm6
mov rax, qword [rbx + 0x3ef8]
movss xmm6, dword [rax + 0x20]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rbx + 0x10]
divss xmm0, xmm8
addss xmm0, xmm6
movss dword [0x14012fe08], xmm0
movss dword [0x14012fe0c], xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [0x14012f9c8], xmm0
movss dword [0x14012f9cc], xmm6
mov rax, qword [0x14012e9a8]
mov rcx, qword [rax + 0x3ef8]
movss xmm6, dword [rcx + 0x24]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov rbx, qword [0x14012e9a8]
mulss xmm7, dword [rbx + 0x14]
divss xmm7, xmm8
addss xmm7, xmm6
mov rax, qword [rbx + 0x3ef8]
movss xmm6, dword [rax + 0x20]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rbx + 0x10]
divss xmm0, xmm8
addss xmm0, xmm6
movss dword [0x14012fe10], xmm0
movss dword [0x14012fe14], xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [0x14012f9d0], xmm0
movss dword [0x14012f9d4], xmm6
mov rax, qword [0x14012e9a8]
mov rcx, qword [rax + 0x3ef8]
movss xmm6, dword [rcx + 0x24]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov rbx, qword [0x14012e9a8]
mulss xmm7, dword [rbx + 0x14]
divss xmm7, xmm8
addss xmm7, xmm6
mov rax, qword [rbx + 0x3ef8]
movss xmm6, dword [rax + 0x20]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [rbx + 0x10]
divss xmm0, xmm8
addss xmm0, xmm6
movss dword [0x14012fe18], xmm0
movss dword [0x14012fe1c], xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [0x14012f9d8], xmm0
movss dword [0x14012f9dc], xmm6
mov byte [0x14012f9a0], r15b
mov rsi, qword [0x14012e9a8]
lea rbp, [0x14012fdec]
movss xmm7, dword [0x1400ea468]
movss xmm6, dword [0x1400ea314]
xorps xmm8, xmm8
mov r13d, 7
lea rcx, [0x14012fde8]
cmp r15d, r13d
jge 0x1400052e4
lea rbx, [rbp + 4]
movsxd rax, r15d
lea rdi, [rcx + rax*8]
mov r12d, r13d
sub r12d, r15d
lea r13, [0x14012fde8]
nop dword [rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [rbp]
movss xmm0, dword [rbx]
subss xmm0, dword [rbp - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm7
movaps xmm1, xmm6
subss xmm1, xmm0
comiss xmm1, xmm8
jbe 0x1400052c6
mov dword [rsp + 0x30], 0x3f800000
mov dword [rsp + 0x34], 0x3f800000
mov dword [rsp + 0x38], 0x3f800000
mulss xmm1, dword [rsi + 0x37d0]
movss dword [rsp + 0x3c], xmm1
lea rcx, [rsp + 0x30]
call fcn.14002c140
mov r9d, eax
lea eax, [r15 - 1]
movsxd rcx, eax
lea rdx, [rcx*8]
add rdx, r13
movss dword [rsp + 0x20], xmm6
mov r8, rdi
mov rcx, r14
call fcn.140051970
mov rsi, qword [0x14012e9a8]
add rdi, 8
add rbx, 8
sub r12, 1
jne 0x140005240
inc r15d
add rbp, 8
jmp 0x14000520b
movss xmm6, dword [rsi + 0x18]
movaps xmm0, xmmword [0x1400ea810]
movups xmmword [rsp + 0x30], xmm0
mov rdi, rcx
xor r12d, r12d
mov ebx, r12d
lea r15, [0x14012f9ac]
movss xmm7, dword [0x1400ea338]
nop dword [rax]
movaps xmm1, xmm6
mulss xmm1, dword [rbx + r15 - 4]
addss xmm1, dword [rbx + rcx]
movss dword [rbx + rcx], xmm1
movaps xmm0, xmm6
mulss xmm0, dword [rbx + r15]
addss xmm0, dword [rbx + rcx + 4]
movss dword [rbx + rcx + 4], xmm0
mov rax, qword [rsi + 0x3ef8]
movss xmm3, dword [rax + 0x20]
movss xmm2, dword [rax + 0x28]
addss xmm2, xmm3
comiss xmm3, xmm1
jbe 0x14000535a
movss dword [rbx + rcx], xmm2
jmp 0x140005364
comiss xmm1, xmm2
jbe 0x140005364
movss dword [rbx + rcx], xmm3
mov rax, qword [rsi + 0x3ef8]
movss xmm2, dword [rax + 0x24]
movss xmm1, dword [rax + 0x2c]
addss xmm1, xmm2
comiss xmm2, xmm0
jbe 0x140005386
movss dword [rbx + rcx + 4], xmm1
jmp 0x140005391
comiss xmm0, xmm1
jbe 0x140005391
movss dword [rbx + rcx + 4], xmm2
lea rcx, [rsp + 0x30]
call fcn.14002c140
mov ebp, eax
test eax, 0xff000000
je 0x1400053e5
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
movaps xmm2, xmm7
mov rdx, rdi
mov rcx, r14
call fcn.140050aa0
mov r8d, dword [r14 + 0x78]
dec r8d
mov dword [r14 + 0x78], r8d
mov r9d, ebp
mov rdx, qword [r14 + 0x80]
mov rcx, r14
call fcn.1400504d0
mov dword [r14 + 0x78], r12d
mov rsi, qword [0x14012e9a8]
add rdi, 8
add rbx, 8
sub r13, 1
lea rcx, [0x14012fde8]
jne 0x140005310
cmp byte [0x14010820c], r12b
je 0x140005413
lea rcx, [0x1400e0520]
call fcn.1400607d0
cmp byte [0x14010821f], r12b
je 0x140005442
cmp byte [0x14012f998], r12b
jne 0x140005436
mov ecx, dword [reloc.WS2_32.dll_getsockname]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140005442
lea rcx, str.Legitbot
call fcn.1400607d0
cmp byte [0x14010821e], r12b
je 0x140005457
lea rcx, str.Recoil_Control_System
call fcn.1400607d0
cmp byte [0x140108220], r12b
je 0x14000546c
lea rcx, str.Radar
call fcn.1400607d0
cmp byte [0x140108212], r12b
je 0x14000549b
cmp byte [0x14012f982], r12b
jne 0x14000548f
mov ecx, dword [0x14012f99c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000549b
lea rcx, str.Triggerbot
call fcn.1400607d0
cmp byte [0x140108270], r12b
je 0x1400054b0
lea rcx, str.Crosshair
call fcn.1400607d0
cmp byte [0x14012f98c], r12b
je 0x1400054c5
lea rcx, str.Spectators
call fcn.1400607d0
cmp byte [0x14010821d], r12b
je 0x1400054da
lea rcx, str.Bunnyhop
call fcn.1400607d0
cmp byte [0x14012f983], r12b
je 0x1400054ef
lea rcx, str.Quickstop
call fcn.1400607d0
cmp byte [0x14010823c], r12b
je 0x140005504
lea rcx, str.C4_Timer
call fcn.1400607d0
call fcn.1400392b0
nop
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [rsp + 0x60]
movaps xmm7, xmmword [rsp + 0x50]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret