Function at 0x1400905f0
Capabilities:
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1402d8540]
xor rax, rsp
mov qword [rbp - 0x20], rax
mov rbx, qword [0x1402dc758]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140090636
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14009063d
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
je 0x140090fd8
mov qword [rsp + 0x90], rdi
lea rcx, [0x1402dcd50]
movaps xmmword [rsp + 0x70], xmm6
call qword [sym.imp.USER32.dll_GetCursorPos]
movaps xmm0, xmmword [0x1402b6a80]
lea rcx, [rbp - 0x40]
movd xmm1, dword [0x1402dcd54]
movups xmmword [rbp - 0x40], xmm0
movd xmm0, dword [0x1402dcd50]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x30], xmm0
movss dword [rbp - 0x2c], xmm1
call fcn.140062bf0
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
movss xmm2, dword [0x1402b68a0]
add rcx, 0x1cc8
mov r9d, eax
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_50
call fcn.14007e880
mov rax, qword [0x1402dc758]
lea rcx, str.been_ud_for_6_months
xor edx, edx
mov dword [rax + 0x1af4], 0x441b0000
lea r8d, [rdx + 0x2a]
mov dword [rax + 0x1af8], 0x43af0000
mov dword [rax + 0x1acc], 1
call fcn.140069620
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Evotoogood
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68dc]
addss xmm2, dword [0x1402b68d8]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083cd0
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
movss xmm6, dword [0x1402b68d0]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, [0x1402b531c]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b68e8]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084350
xor edi, edi
test al, al
je 0x140090818
mov dword [0x1402dcc90], edi
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, [0x1402b5328]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b68f4]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084350
test al, al
je 0x1400908b5
mov dword [0x1402dcc90], 1
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.MISC
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b6904]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084350
test al, al
je 0x140090952
mov dword [0x1402dcc90], 2
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Discord
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b690c]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084350
test al, al
je 0x1400909f2
lea rcx, str.start_https:__discord.gg_8jTAstg4GK
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42820000
mov dword [rbp - 0x2c], 0x41a00000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.unload
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b6914]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084350
test al, al
je 0x140090a8e
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [0x1402dcc90]
mov dword [rbx + 0x1594], 0x41000000
mov dword [rbx + 0x1598], 0x41000000
test eax, eax
jne 0x140090cc2
mov rbx, qword [0x1402dc758]
lea rcx, str.Aimbot
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b6908]
addss xmm2, dword [0x1402b68e0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.1400624a0
cmp dword [rbx + 0x1a24], eax
jne 0x140090b74
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140090b83
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Aimbot
call fcn.140067990
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Evo_Aim:
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68cc]
addss xmm2, dword [0x1402b68c0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083cd0
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [0x1402b531c]
call fcn.140085070
movss xmm6, dword [0x1402b6824]
lea rax, str._.3f
movss dword [rsp + 0x30], xmm6
lea r9, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea r8, [0x1402d85c8]
lea rax, [rbp - 0x28]
mov dword [rbp - 0x28], 0x41700000
mov edx, 4
mov qword [rsp + 0x20], rax
lea rcx, str.Smooth
mov dword [rbp - 0x30], 0x40000000
call fcn.140085bd0
movss dword [rsp + 0x30], xmm6
lea rax, [0x1402b5140]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x28]
lea rax, [rbp - 0x30]
mov dword [rbp - 0x30], 0x258
lea r8, [0x1402d85c4]
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp - 0x28], reloc.WLDAP32.dll_Ordinal_50
lea rcx, str.Fov_Size
call fcn.140085bd0
mov eax, dword [0x1402dcc90]
cmp eax, 1
jne 0x140090e4e
mov rbx, qword [0x1402dc758]
lea rcx, str.Visuals
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b6908]
addss xmm2, dword [0x1402b68e0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.1400624a0
cmp dword [rbx + 0x1a24], eax
jne 0x140090d8f
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140090d9e
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Visuals
call fcn.140067990
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Evo_Enemy:
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68cc]
addss xmm2, dword [0x1402b68c0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083cd0
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Corner_Box
call fcn.140085070
mov eax, dword [0x1402dcc90]
cmp eax, 2
jne 0x140090fc1
mov rbx, qword [0x1402dc758]
lea rcx, str.Misc
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b6908]
addss xmm2, dword [0x1402b68e0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.1400624a0
cmp dword [rbx + 0x1a24], eax
jne 0x140090f1b
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140090f2a
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Misc
call fcn.140067990
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Evo_Gay:
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68cc]
addss xmm2, dword [0x1402b68c0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083cd0
call fcn.140067bd0
call fcn.14006c460
mov rdi, qword [rsp + 0x90]
movaps xmm6, xmmword [rsp + 0x70]
mov rcx, qword [rbp - 0x20]
xor rcx, rsp
call fcn.140221d10
mov rbx, qword [rsp + 0x98]
add rsp, 0x80
pop rbp
ret