Function at 0x140032660
Capabilities:
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x140048040]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400326ae
cmp byte [0x1400480c1], 0
sete al
mov byte [0x1400480c1], al
jmp 0x1400326b5
movzx eax, byte [0x1400480c1]
test al, al
je 0x140032f80
mov rax, qword [0x140048cf0]
mov dword [rax + 0x1af4], 0x44160000
mov dword [rax + 0x1af8], 0x43c80000
mov dword [rax + 0x1acc], 2
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [0x140040ecc]
mulss xmm2, dword [0x140040ddc]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [0x140040ed0]
mulss xmm1, dword [0x140040ddc]
movss dword [rax + 0x1ae4], xmm1
movss dword [rax + 0x1ae8], xmm2
xor esi, esi
mov qword [rax + 0x1aec], rsi
mov dword [rax + 0x1ac8], 2
mov r8d, 0x2b
lea rdx, [0x1400480c1]
lea rcx, [0x14003c716]
call fcn.140009740
lea rcx, str.rage_to_unreal_no_balls
call fcn.140023ff0
call fcn.1400260c0
call fcn.14002d970
test al, al
je 0x1400328d3
lea rcx, [0x140040a58]
call fcn.14002ea00
test al, al
je 0x1400327bd
mov dword [0x140048cf8], esi
mov rax, qword [0x140048cf0]
mov r8, qword [rax + 0x19f8]
cmp byte [r8 + 0x7f], sil
jne 0x1400327bd
movsxd rcx, dword [rax + 0x1e30]
mov rax, qword [rax + 0x1e38]
mov rdx, qword [rax + rcx*8 - 8]
movsx rax, word [rdx + 0x5a]
imul rcx, rax, 0x1c
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x1400327bd
dec dword [r8 + 0x1e0]
lea rcx, str.Visuals
call fcn.14002ea00
test al, al
je 0x140032818
mov dword [0x140048cf8], 1
mov rax, qword [0x140048cf0]
mov r8, qword [rax + 0x19f8]
cmp byte [r8 + 0x7f], sil
jne 0x140032818
movsxd rcx, dword [rax + 0x1e30]
mov rax, qword [rax + 0x1e38]
mov rdx, qword [rax + rcx*8 - 8]
movsx rax, word [rdx + 0x5a]
imul rcx, rax, 0x1c
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x140032818
dec dword [r8 + 0x1e0]
lea rcx, str.Exploits
call fcn.14002ea00
test al, al
je 0x140032873
mov dword [0x140048cf8], 3
mov rax, qword [0x140048cf0]
mov r8, qword [rax + 0x19f8]
cmp byte [r8 + 0x7f], sil
jne 0x140032873
movsxd rcx, dword [rax + 0x1e30]
mov rax, qword [rax + 0x1e38]
mov rdx, qword [rax + rcx*8 - 8]
movsx rax, word [rdx + 0x5a]
imul rcx, rax, 0x1c
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x140032873
dec dword [r8 + 0x1e0]
lea rcx, str.Misc
call fcn.14002ea00
test al, al
je 0x1400328ce
mov dword [0x140048cf8], 4
mov rax, qword [0x140048cf0]
mov r8, qword [rax + 0x19f8]
cmp byte [r8 + 0x7f], sil
jne 0x1400328ce
movsxd rcx, dword [rax + 0x1e30]
mov rax, qword [rax + 0x1e38]
mov rdx, qword [rax + rcx*8 - 8]
movsx rax, word [rdx + 0x5a]
imul rcx, rax, 0x1c
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x1400328ce
dec dword [r8 + 0x1e0]
call fcn.14002dd10
lea r14, [0x140048210]
mov rbx, 0xffffffffffffffff
mov eax, dword [0x140048cf8]
test eax, eax
jne 0x140032bd9
lea rdx, [0x14004937b]
lea rcx, str.Aimbot
call fcn.140025a10
movss xmm1, dword [0x140040eec]
xorps xmm0, xmm0
call fcn.14000d400
mov edi, dword [0x140048eb8]
movsxd rax, dword [0x1400485f8]
mov rdx, rsi
cmp eax, 0x7b
ja 0x14003292b
mov rdx, qword [r14 + rax*8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movdqa xmm1, xmmword [0x140040f50]
movdqu xmmword [rbp - 0x28], xmm1
mov byte [rbp - 0x38], sil
test rdx, rdx
jne 0x140032957
mov r8d, 0xa
lea rdx, str.Select_Key
jmp 0x14003296a
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140032960
lea rcx, [rbp - 0x38]
call fcn.1400385a0
cmp edi, 1
jne 0x14003298e
mov r8d, 9
lea rdx, str.Press_Key
lea rcx, [rbp - 0x38]
call fcn.1400385a0
mov dword [rbp - 0x40], 0x42fa0000
mov dword [rbp - 0x3c], 0x41c80000
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0xf
cmova rcx, qword [rbp - 0x38]
lea rdx, [rbp - 0x40]
call fcn.140024720
test al, al
je 0x1400329d9
test edi, edi
jne 0x1400329d9
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140032230]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140032a17
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032a12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032a12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140039ba4
lea rdx, [0x140049375]
lea rcx, str.Prediction
call fcn.140025a10
lea rdx, [0x140049376]
lea rcx, str.Shotgun_Triggerbot
call fcn.140025a10
movss xmm1, dword [0x140040eec]
xorps xmm0, xmm0
call fcn.14000d400
mov edi, dword [0x140048f34]
movsxd rax, dword [0x1400485f0]
mov rdx, rsi
cmp eax, 0x7b
ja 0x140032a66
mov rdx, qword [r14 + rax*8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movdqa xmm1, xmmword [0x140040f50]
movdqu xmmword [rbp - 0x28], xmm1
mov byte [rbp - 0x38], 0
test rdx, rdx
jne 0x140032a92
mov r8d, 0xa
lea rdx, str.Select_Key
jmp 0x140032a9f
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x140032a95
lea rcx, [rbp - 0x38]
call fcn.1400385a0
cmp edi, 1
jne 0x140032ac3
mov r8d, 9
lea rdx, str.Press_Key
lea rcx, [rbp - 0x38]
call fcn.1400385a0
mov dword [rbp - 0x40], 0x42fa0000
mov dword [rbp - 0x3c], 0x41c80000
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0xf
cmova rcx, qword [rbp - 0x38]
lea rdx, [rbp - 0x40]
call fcn.140024720
test al, al
je 0x140032b0e
test edi, edi
jne 0x140032b0e
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140032280]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140032b4c
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032b47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032b47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140039ba4
lea rdx, [0x14004937f]
lea rcx, str.Visible_Check
call fcn.140025a10
lea rdx, [0x140049378]
lea rcx, str.Fov_Circle
call fcn.140025a10
mov dword [rbp - 0x18], 0x3e8
mov dword [rbp - 0x40], 0xa
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
lea r8, [0x1400485fc]
lea rcx, str.Fov_Size
call fcn.140027420
mov dword [rbp - 0x40], 0x14
mov dword [rbp - 0x18], 1
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x18]
lea r8, [0x140048600]
lea rcx, str.Smoothing
call fcn.140027420
call fcn.140027050
mov eax, dword [0x140048cf8]
cmp eax, 1
jne 0x140032cd0
lea rdx, [0x140049374]
lea rcx, str.Fullbox
call fcn.140025a10
test al, al
je 0x140032c00
mov byte [0x140049372], 0
lea rdx, [0x140049372]
lea rcx, str.Cornerbox
call fcn.140025a10
test al, al
je 0x140032c1e
mov byte [0x140049374], 0
lea rdx, [0x14004937c]
lea rcx, str.Skeleton
call fcn.140025a10
lea rdx, [0x140049377]
lea rcx, str.Head
call fcn.140025a10
test al, al
je 0x140032c58
cmp byte [0x14004937c], 0
jne 0x140032c58
mov byte [0x14004937c], 1
lea rdx, [0x140049370]
lea rcx, str.Distance
call fcn.140025a10
lea rdx, [0x14004937d]
lea rcx, str.Username
call fcn.140025a10
lea rdx, [0x140049379]
lea rcx, str.Weapon
call fcn.140025a10
lea rdx, [0x140049371]
lea rcx, str.Rank
call fcn.140025a10
lea rdx, [0x140049373]
lea rcx, str.Platform
call fcn.140025a10
lea rdx, [0x14004937e]
lea rcx, str.Visible_Check
call fcn.140025a10
mov eax, dword [0x140048cf8]
cmp eax, 3
jne 0x140032e11
lea rdx, [0x14004937a]
lea rcx, str.Player_Freeze
call fcn.140025a10
movss xmm1, dword [0x140040eec]
xorps xmm0, xmm0
call fcn.14000d400
mov edi, dword [0x140048f30]
movsxd rax, dword [0x1400485f4]
mov rdx, rsi
cmp eax, 0x7b
ja 0x140032d15
mov rdx, qword [r14 + rax*8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movdqa xmm1, xmmword [0x140040f50]
movdqu xmmword [rbp - 0x28], xmm1
mov byte [rbp - 0x38], 0
test rdx, rdx
jne 0x140032d41
mov r8d, 0xa
lea rdx, str.Select_Key
jmp 0x140032d4d
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140032d41
mov r8, rbx
lea rcx, [rbp - 0x38]
call fcn.1400385a0
cmp edi, 1
jne 0x140032d71
mov r8d, 9
lea rdx, str.Press_Key
lea rcx, [rbp - 0x38]
call fcn.1400385a0
mov dword [rbp - 0x40], 0x42fa0000
mov dword [rbp - 0x3c], 0x41c80000
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0xf
cmova rcx, qword [rbp - 0x38]
lea rdx, [rbp - 0x40]
call fcn.140024720
test al, al
je 0x140032dbc
test edi, edi
jne 0x140032dbc
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x1400322d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140032dfa
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032df5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140032df5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140039ba4
movdqa xmm0, xmmword [0x140040f50]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
mov eax, dword [0x140048cf8]
cmp eax, 4
jne 0x140032eeb
mov qword [rbp - 0x40], 0
lea rdx, [rbp - 0x40]
lea rcx, str.Dev_Config__BR_
call fcn.140024720
test al, al
je 0x140032e86
mov byte [0x14004937b], 1
mov byte [0x140049375], 1
mov byte [0x140049376], 1
mov byte [0x140049378], 1
mov dword [0x140048600], 1
mov byte [0x140049374], 1
mov byte [0x140049370], 1
mov byte [0x14004937d], 1
mov byte [0x140049373], 1
mov byte [0x140049379], 1
mov byte [0x14004937e], 1
mov qword [rbp - 0x40], 0
lea rdx, [rbp - 0x40]
lea rcx, str.Dev_Config__R_
call fcn.140024720
test al, al
je 0x140032eeb
mov byte [0x14004937b], 1
mov byte [0x140049376], 1
mov byte [0x140049378], 1
mov dword [0x140048600], 1
mov byte [0x140049374], 1
mov byte [0x140049370], 1
mov byte [0x14004937d], 1
mov byte [0x140049373], 1
mov byte [0x140049379], 1
mov byte [0x14004937e], 1
mov rcx, qword [0x140048cf0]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], 0
jne 0x140032f1e
mov qword [rbp - 0x40], 0
xorps xmm1, xmm1
lea rcx, [rbp - 0x40]
call fcn.140004a90
call fcn.1400260c0
mov rcx, qword [0x140048cf0]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], 0
jne 0x140032f56
mov qword [rbp - 0x40], 0
xorps xmm1, xmm1
lea rcx, [rbp - 0x40]
call fcn.140004a90
mov qword [rbp - 0x40], 0
lea rdx, [rbp - 0x40]
lea rcx, str.Unload
call fcn.140024720
test al, al
je 0x140032f7b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000c6f0
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140039790
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret