Function at 0x140090a10
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1402d8540]
xor rax, rsp
mov qword [rbp - 0x20], rax
mov rbx, qword [0x1402dc758]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140090a56
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x140090a5d
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
je 0x140091358
mov qword [rsp + 0x90], rdi
lea rcx, [0x1402dcd50]
movaps xmmword [rsp + 0x70], xmm6
call qword [sym.imp.USER32.dll_GetCursorPos]
movaps xmm0, xmmword [0x1402b6aa0]
lea rcx, [rbp - 0x40]
movd xmm1, dword [0x1402dcd54]
movups xmmword [rbp - 0x40], xmm0
movd xmm0, dword [0x1402dcd50]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x30], xmm0
movss dword [rbp - 0x2c], xmm1
call fcn.1400630d0
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
movss xmm2, dword [0x1402b68d0]
add rcx, 0x1cc8
mov r9d, eax
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_50
call fcn.14007ecb0
mov rax, qword [0x1402dc758]
lea rcx, str.Mercy_free__not_mine_ritz_cheat
xor edx, edx
mov dword [rax + 0x1af4], 0x441b0000
lea r8d, [rdx + 0x2a]
mov dword [rax + 0x1af8], 0x43af0000
mov dword [rax + 0x1acc], 1
call fcn.140069b00
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.free_cheato
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b690c]
addss xmm2, dword [0x1402b6908]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084110
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
movss xmm6, dword [0x1402b6900]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, [0x1402b53ac]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b6918]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084790
xor edi, edi
test al, al
je 0x140090c38
mov dword [0x1402dcc90], edi
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, [0x1402b53b8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b6924]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084790
test al, al
je 0x140090cd5
mov dword [0x1402dcc90], 1
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.MISC
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b6934]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084790
test al, al
je 0x140090d72
mov dword [0x1402dcc90], 2
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42820000
mov dword [rbp - 0x2c], 0x41a00000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.unload
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b6940]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084790
test al, al
je 0x140090e0e
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [0x1402dcc90]
mov dword [rbx + 0x1594], 0x41000000
mov dword [rbx + 0x1598], 0x41000000
test eax, eax
jne 0x140091042
mov rbx, qword [0x1402dc758]
lea rcx, str.Aimbot
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b6938]
addss xmm2, dword [0x1402b6910]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140062980
cmp dword [rbx + 0x1a24], eax
jne 0x140090ef4
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140090f03
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Aimbot
call fcn.140067e70
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.free_cheato
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68fc]
addss xmm2, dword [0x1402b68f0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084110
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [0x1402b53ac]
call fcn.1400854b0
movss xmm6, dword [0x1402b6854]
lea rax, str._.3f
movss dword [rsp + 0x30], xmm6
lea r9, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea r8, [0x1402d85c8]
lea rax, [rbp - 0x28]
mov dword [rbp - 0x28], 0x41700000
mov edx, 4
mov qword [rsp + 0x20], rax
lea rcx, str.Smooth
mov dword [rbp - 0x30], 0x40000000
call fcn.140086010
movss dword [rsp + 0x30], xmm6
lea rax, [0x1402b51c0]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x28]
lea rax, [rbp - 0x30]
mov dword [rbp - 0x30], 0x258
lea r8, [0x1402d85c4]
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp - 0x28], reloc.WLDAP32.dll_Ordinal_50
lea rcx, str.Fov_Size
call fcn.140086010
mov eax, dword [0x1402dcc90]
cmp eax, 1
jne 0x1400911ce
mov rbx, qword [0x1402dc758]
lea rcx, str.Visuals
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b6938]
addss xmm2, dword [0x1402b6910]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140062980
cmp dword [rbx + 0x1a24], eax
jne 0x14009110f
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x14009111e
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Visuals
call fcn.140067e70
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.free_cheato
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68fc]
addss xmm2, dword [0x1402b68f0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084110
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Corner_Box
call fcn.1400854b0
mov eax, dword [0x1402dcc90]
cmp eax, 2
jne 0x140091341
mov rbx, qword [0x1402dc758]
lea rcx, str.Misc
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b6938]
addss xmm2, dword [0x1402b6910]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140062980
cmp dword [rbx + 0x1a24], eax
jne 0x14009129b
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x1400912aa
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Misc
call fcn.140067e70
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.free_cheato
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68fc]
addss xmm2, dword [0x1402b68f0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140084110
call fcn.1400680b0
call fcn.14006c940
mov rdi, qword [rsp + 0x90]
movaps xmm6, xmmword [rsp + 0x70]
mov rcx, qword [rbp - 0x20]
xor rcx, rsp
call fcn.1402220d0
mov rbx, qword [rsp + 0x98]
add rsp, 0x80
pop rbp
ret