Function at 0x140041670
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
sub rsp, 0x218
call fcn.14001f600
call fcn.14001ff90
call fcn.14000dce4
nop
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x1400416ca
movzx eax, byte [0x140055164]
test eax, eax
jne 0x1400416ac
mov dword [rsp + 0x40], 1
jmp 0x1400416b4
mov dword [rsp + 0x40], 0
mov al, byte [rsp + 0x40]
mov byte [0x140055164], al
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
movzx eax, byte [0x140055164]
test eax, eax
je 0x14004251e
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aa4]
movss xmm2, dword [0x140047a94]
movss xmm1, dword [0x140047a94]
lea rcx, [rsp + 0xc0]
call fcn.14003587c
mov rdx, rax
mov ecx, 2
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab4]
movss xmm2, dword [0x140047a98]
movss xmm1, dword [0x140047aa4]
lea rcx, [rsp + 0xd0]
call fcn.14003587c
mov rdx, rax
mov ecx, 0xa
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab8]
movss xmm2, dword [0x140047aa4]
movss xmm1, dword [0x140047aac]
lea rcx, [rsp + 0xe0]
call fcn.14003587c
mov rdx, rax
mov ecx, 0xb
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab8]
movss xmm2, dword [0x140047aa4]
movss xmm1, dword [0x140047ab0]
lea rcx, [rsp + 0xf0]
call fcn.14003587c
mov rdx, rax
mov ecx, 5
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047aac]
movss xmm2, dword [0x140047a98]
movss xmm1, dword [0x140047a98]
lea rcx, [rsp + 0x100]
call fcn.14003587c
mov rdx, rax
mov ecx, 7
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab0]
movss xmm2, dword [0x140047aa4]
movss xmm1, dword [0x140047aa4]
lea rcx, [rsp + 0x110]
call fcn.14003587c
mov rdx, rax
mov ecx, 8
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab4]
movss xmm2, dword [0x140047aac]
movss xmm1, dword [0x140047aac]
lea rcx, [rsp + 0x120]
call fcn.14003587c
mov rdx, rax
mov ecx, 9
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab8]
movss xmm2, dword [0x140047acc]
movss xmm1, dword [0x140047ab0]
lea rcx, [rsp + 0x130]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x12
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047acc]
movss xmm2, dword [0x140047ab0]
movss xmm1, dword [0x140047ab0]
lea rcx, [rsp + 0x140]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x13
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b668]
movss xmm2, dword [0x140047ab8]
movss xmm1, dword [0x140047ab8]
lea rcx, [rsp + 0x150]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x14
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ac4]
movss xmm2, dword [0x140047aa4]
movss xmm1, dword [0x140047aac]
lea rcx, [rsp + 0x160]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x15
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047acc]
movss xmm2, dword [0x140047aac]
movss xmm1, dword [0x140047ab0]
lea rcx, [rsp + 0x170]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x16
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b668]
movss xmm2, dword [0x140047ab0]
movss xmm1, dword [0x140047ab4]
lea rcx, [rsp + 0x180]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x17
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047acc]
movss xmm2, dword [0x140047aa4]
movss xmm1, dword [0x140047ab4]
lea rcx, [rsp + 0x190]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x1b
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b668]
movss xmm2, dword [0x140047aac]
movss xmm1, dword [0x140047ab8]
lea rcx, [rsp + 0x1a0]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x1c
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ad8]
movss xmm2, dword [0x140047ab0]
movss xmm1, dword [0x140047ac4]
lea rcx, [rsp + 0x1b0]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x1d
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ac4]
movss xmm2, dword [0x140047aa4]
movss xmm1, dword [0x140047aac]
lea rcx, [rsp + 0x1c0]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x18
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047acc]
movss xmm2, dword [0x140047aac]
movss xmm1, dword [0x140047ab0]
lea rcx, [rsp + 0x1d0]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x19
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b668]
movss xmm2, dword [0x140047ab0]
movss xmm1, dword [0x140047ab4]
lea rcx, [rsp + 0x1e0]
call fcn.14003587c
mov rdx, rax
mov ecx, 0x1a
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14004b668]
movss xmm2, dword [0x14004b668]
movss xmm1, dword [0x14004b668]
lea rcx, [rsp + 0x1f0]
call fcn.14003587c
mov rdx, rax
xor ecx, ecx
call fcn.14000eae0
nop
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140047ab4]
movss xmm2, dword [0x140047ab4]
movss xmm1, dword [0x140047ab4]
lea rcx, [rsp + 0x200]
call fcn.14003587c
mov rdx, rax
mov ecx, 1
call fcn.14000eae0
nop
movss xmm1, dword [0x14004b678]
mov ecx, 2
call fcn.14000ebc8
movss xmm1, dword [0x140047b00]
mov ecx, 0xb
call fcn.14000ebc8
nop
movss xmm2, dword [0x14004c020]
movss xmm1, dword [0x14004c020]
lea rcx, [rsp + 0x88]
call fcn.140035844
mov rdx, rax
mov ecx, 1
call fcn.14000eb3c
nop
movss xmm2, dword [0x140047afc]
movss xmm1, dword [0x14004b678]
lea rcx, [rsp + 0x90]
call fcn.140035844
mov rdx, rax
mov ecx, 0xa
call fcn.14000eb3c
nop
movss xmm2, dword [0x14004e454]
movss xmm1, dword [0x14004c020]
lea rcx, [rsp + 0x98]
call fcn.140035844
mov rdx, rax
mov ecx, 0xd
call fcn.14000eb3c
nop
movss xmm2, dword [0x140047b18]
movss xmm1, dword [0x140047b18]
lea rcx, [rsp + 0xa0]
call fcn.140035844
xor edx, edx
mov rcx, rax
call fcn.14001038c
nop
mov r8d, 0x22
xor edx, edx
lea rcx, str.___________________________________________________________________________M8_SOLUTION
call fcn.1400031a4
nop
xor edx, edx
lea rcx, [0x14004d0c8]
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x140041e3e
lea rdx, [0x140056f69]
lea rcx, str.Aimbot
call fcn.1400257b4
lea rdx, [0x140056f6a]
lea rcx, str.Aim_Prediction
call fcn.1400257b4
lea rdx, [0x14005534c]
lea rcx, str.Cercle
call fcn.1400257b4
lea rdx, [0x140056f6b]
lea rcx, str.Triggerbot
call fcn.1400257b4
lea rdx, [0x140056f51]
lea rcx, str.Visible_Check
call fcn.1400257b4
lea rcx, str.Vitesse_Aimbot
call fcn.14002e2b0
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d120]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14004e454]
movss xmm2, dword [0x140047ad8]
lea rdx, [0x14005536c]
lea rcx, str.Vitesse
call fcn.14002dd80
lea rcx, str.Taille_du_cercle
call fcn.14002e2b0
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d144]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047b20]
movss xmm2, dword [0x14004c024]
lea rdx, [0x140055374]
lea rcx, str.Taille
call fcn.14002dd80
lea rcx, str.Touche_Aimbot
call fcn.14002e2b0
mov r8d, dword [0x140057594]
lea rdx, [0x140037608]
mov ecx, dword [0x140056f34]
call fcn.14003b26c
nop
xor edx, edx
lea rcx, [0x14004d168]
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x140041f81
lea rdx, [0x140057970]
lea rcx, [0x14004d16c]
call fcn.1400257b4
lea rdx, [0x140057971]
lea rcx, [0x14004d170]
call fcn.1400257b4
lea rdx, [0x140057972]
lea rcx, [0x14004d178]
call fcn.1400257b4
lea rdx, [0x140056f50]
lea rcx, str.Voir_les_bots
call fcn.1400257b4
lea rdx, [0x140056f5a]
lea rcx, str.Crosshair_Lines
call fcn.1400257b4
lea rdx, [0x140056f7c]
lea rcx, str.Skeleton
call fcn.1400257b4
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d1b4]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047ae8]
movss xmm2, dword [0x140047ad8]
lea rdx, [0x1400553b0]
lea rcx, str.Epaisseur_Box
call fcn.14002dd80
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d1d0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047ae8]
movss xmm2, dword [0x140047ad8]
lea rdx, [0x14005537c]
lea rcx, str.Epaisseur_Skeleton
call fcn.14002dd80
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d1ec]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047b00]
movss xmm2, dword [0x140047a98]
lea rdx, [0x140056864]
lea rcx, str.Epaisseur_Crosshair_lignes
call fcn.14002dd80
nop
xor edx, edx
lea rcx, str.Exploits
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x140042037
lea rdx, [0x140056f65]
lea rcx, str.Fov_Changer
call fcn.1400257b4
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047b10]
movss xmm2, dword [0x14004e458]
lea rdx, [0x14005535c]
lea rcx, [0x14004c339]
call fcn.14002dd80
lea rdx, [0x140056f62]
lea rcx, str.Big_Player
call fcn.1400257b4
lea rdx, [0x140056f64]
lea rcx, str.SpinBot
call fcn.1400257b4
lea rdx, [0x140056f63]
lea rcx, str.AirStuck___left_shift__
call fcn.1400257b4
lea rdx, [0x140056f66]
lea rcx, str.First_Personne__En_dev_mais_marche_
call fcn.1400257b4
nop
xor edx, edx
lea rcx, str.Couleurs
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x1400421f7
xor r8d, r8d
lea rdx, [0x140055458]
lea rcx, str.Couleur_cercle_1
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055468]
lea rcx, str.Couleur_cercle_2
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055478]
lea rcx, str.Couleur_cercle_3
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055408]
lea rcx, str.Skeleton_Color__Haut_
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055418]
lea rcx, str.Skeleton_Alternate_Color__Bas_
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400554d8]
lea rcx, str.Crosshair_Color
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055488]
lea rcx, str.FPS_couleur_1
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055498]
lea rcx, str.FPS_couleur_2
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400554a8]
lea rcx, str.FPS_couleur_3
call fcn.140026480
lea rcx, [0x14004c33a]
call fcn.14002e2b0
lea rcx, str.Visible
call fcn.14002e2b0
xor r8d, r8d
lea rdx, [0x1400553e8]
lea rcx, [0x14004d370]
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400553f8]
lea rcx, str.Corner
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400553d8]
lea rcx, str.BoxEsp2DFilled
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400554b8]
lea rcx, str.Crosshair_lignes
call fcn.140026480
lea rcx, [0x14004c33b]
call fcn.14002e2b0
lea rcx, str._Non_visible
call fcn.14002e2b0
xor r8d, r8d
lea rdx, [0x140055428]
lea rcx, str._Box
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055438]
lea rcx, str._Corner
call fcn.140026480
xor r8d, r8d
lea rdx, [0x140055448]
lea rcx, str._BoxEsp2DFilled
call fcn.140026480
xor r8d, r8d
lea rdx, [0x1400554c8]
lea rcx, str._Crosshair_lignes
call fcn.140026480
nop
xor edx, edx
lea rcx, str.Config
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x1400423ae
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0xa8]
call fcn.140035844
mov rdx, rax
lea rcx, str.Legit
call fcn.140025104
movzx eax, al
test eax, eax
je 0x140042391
mov byte [0x140056f69], 1
mov byte [0x140056f6a], 0
mov byte [0x14005534c], 1
mov byte [0x140056f6b], 0
mov byte [0x140056f51], 1
movss xmm0, dword [0x140047af4]
movss dword [0x14005536c], xmm0
movss xmm0, dword [0x14004e46c]
movss dword [0x140055374], xmm0
mov dword [0x140055368], 1
mov dword [0x140056f70], 1
mov dword [rsp + 0x48], 1
mov byte [0x140057970], 0
mov byte [0x140057971], 0
mov byte [0x140057972], 1
mov byte [0x140056f50], 0
mov byte [0x140056f5a], 1
mov byte [0x140056f7c], 1
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 3
mov dword [rsp + 0x54], 2
mov byte [0x140056f65], 0
mov byte [0x140056f62], 0
mov byte [0x140056f64], 0
mov byte [0x140056f63], 0
mov byte [0x140056f66], 0
mov eax, 4
imul rax, rax, 0
lea rcx, [0x1400554b8]
xorps xmm0, xmm0
movss dword [rcx + rax], xmm0
mov eax, 4
imul rax, rax, 1
lea rcx, [0x1400554b8]
movss xmm0, dword [0x140047ad8]
movss dword [rcx + rax], xmm0
mov eax, 4
imul rax, rax, 2
lea rcx, [0x1400554b8]
xorps xmm0, xmm0
movss dword [rcx + rax], xmm0
mov eax, 4
imul rax, rax, 3
lea rcx, [0x1400554b8]
movss xmm0, dword [0x140047ad8]
movss dword [rcx + rax], xmm0
mov eax, 4
imul rax, rax, 3
lea rcx, [0x1400554c8]
xorps xmm0, xmm0
movss dword [rcx + rax], xmm0
mov byte [0x14005534d], 0
mov byte [0x140056f5c], 0
movss xmm1, dword [0x140047b38]
xorps xmm0, xmm0
call fcn.14000fb38
lea rcx, str.By_Eskyny
call fcn.14002e2b0
nop
xor edx, edx
lea rcx, str.Autre
call fcn.140025f3c
movzx eax, al
test eax, eax
je 0x140042468
lea rdx, [0x14005534d]
lea rcx, [0x14004d424]
call fcn.1400257b4
lea rdx, [0x140056f5c]
lea rcx, str.Crosshair
call fcn.1400257b4
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14004d434]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14004e458]
movss xmm2, dword [0x140047ad8]
lea rdx, [0x1400554fc]
lea rcx, str.Taille_Crosshair
call fcn.14002dd80
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
lea rax, str.__.1f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140047b00]
movss xmm2, dword [0x140047a98]
lea rdx, [0x140056860]
lea rcx, str.Epaisseur_Crosshair
call fcn.14002dd80
nop
call fcn.14002dadc
lea rcx, str.Dev_by_Eskyny_pour_M8_Solution
call fcn.14002e2b0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0xb0]
call fcn.140035844
mov rdx, rax
lea rcx, str.Discord_de_Eskyny
call fcn.140025104
movzx eax, al
test eax, eax
je 0x1400424c9
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.https:__discord.gg_yFuDr8jpqn
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0xb8]
call fcn.140035844
mov rdx, rax
lea rcx, str.Discord_M8_Solutions
call fcn.140025104
movzx eax, al
test eax, eax
je 0x140042518
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.https:__discord.gg_msolution
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
call fcn.14000762c
nop
call fcn.140037df8
call fcn.140007c28
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x140057960]
call qword [rsp + 0x58]
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x140057960]
call qword [rsp + 0x60]
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x68], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x140057960]
call qword [rsp + 0x68]
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x140047ad8]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140057960]
call qword [rsp + 0x70]
nop
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rcx, qword [0x140057960]
call qword [rax + 0x148]
test eax, eax
jl 0x140042633
call fcn.14000ec40
call fcn.140009050
mov rcx, rax
call fcn.14001f618
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rcx, qword [0x140057960]
call qword [rax + 0x150]
nop
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140057960]
call qword [rsp + 0x78]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x88760868
jne 0x1400426c7
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rcx, qword [0x140057960]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x1400426c7
call fcn.14001f588
mov rax, qword [0x140057960]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x80], rax
lea rdx, [0x140056ee0]
mov rcx, qword [0x140057960]
call qword [rsp + 0x80]
call fcn.14001f420
nop
add rsp, 0x218
ret