Function at 0x465cb0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4810f3
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x328
mov eax, dword [0x493040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x4ef188]
lea ecx, [ebp - 0x20]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0x59f19c
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x20], 0
call esi
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x1c]
push 0
push 4
push ecx
add eax, 0x108
mov dword [ebp - 0x1c], 0
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 0x1c], 6
jne 0x466d47
mov eax, dword [0x4ef354]
lea ecx, [ebp - 0x20]
add eax, dword [0x4ef17c]
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x20], 0
call esi
mov edi, dword [ebp - 0x20]
lea ecx, [ebp - 0x1c]
push 0
push 4
push ecx
lea eax, [edi + 0x25f]
mov dword [ebp - 0x1c], 0
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 0x1c], 0
jne 0x466d47
push 0
push 4
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0
push ecx
lea eax, [edi + 0x100]
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 0x38], 0
jle 0x466d47
mov eax, dword [0x4ef354]
lea ecx, [ebp - 0x20]
add eax, dword [0x4ef17c]
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x20], 0
call esi
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x15]
push 0
push 1
push ecx
add eax, 0x997c
mov byte [ebp - 0x15], 0
push eax
push dword [0x4ef278]
call esi
cmp byte [ebp - 0x15], 0
jne 0x466d47
call fcn.00453190
test al, al
je 0x466d47
mov eax, dword [0x4ef354]
lea ecx, [ebp - 0x20]
add eax, dword [0x4ef17c]
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x20], 0
call esi
mov ecx, dword [ebp - 0x20]
call fcn.00453740
movsx edi, ax
mov ecx, edi
call fcn.00452700
test al, al
jne 0x465e52
cmp edi, 0x1f
jne 0x466d47
cmp byte [0x4ef24a], 0
je 0x465e92
cmp edi, 4
je 0x465e88
cmp edi, 0x3d
je 0x465e88
cmp edi, 0x20
je 0x465e88
cmp edi, 2
je 0x465e88
cmp edi, 0x24
je 0x465e88
cmp edi, 3
je 0x465e88
cmp edi, 0x1e
je 0x465e88
cmp edi, 1
je 0x465e88
cmp edi, 0x40
jne 0x465e92
mov eax, str.pistol
jmp 0x465f74
cmp byte [0x4ef251], 0
je 0x465ec3
cmp edi, 0x23
je 0x465eb9
cmp edi, 0x19
je 0x465eb9
cmp edi, 0x1d
je 0x465eb9
cmp edi, 0x1b
je 0x465eb9
cmp edi, 0x1c
je 0x465eb9
cmp edi, 0xe
jne 0x465ec3
mov eax, str.heavy
jmp 0x465f74
cmp byte [0x4ef21d], 0
je 0x465ef6
cmp edi, 0x11
je 0x465eef
cmp edi, 0x22
je 0x465eef
cmp edi, 0x21
je 0x465eef
cmp edi, 0x17
je 0x465eef
cmp edi, 0x18
je 0x465eef
cmp edi, 0x13
je 0x465eef
cmp edi, 0x1a
jne 0x465ef6
mov eax, 0x489ad4
jmp 0x465f74
cmp byte [0x4ef243], 0
je 0x465f29
cmp edi, 0xd
je 0x465f22
cmp edi, 0xa
je 0x465f22
cmp edi, 7
je 0x465f22
cmp edi, 0x10
je 0x465f22
cmp edi, 0x3c
je 0x465f22
cmp edi, 8
je 0x465f22
cmp edi, 0x27
jne 0x465f29
mov eax, str.rifle
jmp 0x465f74
cmp byte [0x4ef23b], 0
je 0x465f4d
cmp edi, 0x28
je 0x465f46
cmp edi, 9
je 0x465f46
cmp edi, 0x26
je 0x465f46
cmp edi, 0xb
jne 0x465f4d
mov eax, str.sniper
jmp 0x465f74
cmp byte [0x4ef228], 0
je 0x465f62
cmp edi, 0x1f
jne 0x465f62
mov eax, str.zeus
jmp 0x465f74
cmp byte [0x4ef22b], 0
je 0x466d47
mov eax, str.general
push str.on_key
mov edx, eax
mov dword [ebp - 0x6c], eax
mov ecx, str.aimbot
call fcn.00470870
add esp, 4
test al, al
je 0x465fcd
mov edx, dword [ebp - 0x6c]
mov ecx, str.aimbot
push 0x489ab0
call fcn.00470f80
add esp, 4
mov ecx, eax
call fcn.004523e0
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x466d47
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x4ef184]
jne 0x466d47
mov edx, dword [ebp - 0x6c]
mov ecx, str.aimbot
push str.mode
call fcn.00470f80
add esp, 4
test eax, eax
jne 0x465ffc
push 0x489a6c
call fcn.00470f80
add esp, 4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
jmp 0x466004
movss xmm0, dword [0x48c788]
mov eax, dword [0x4ef354]
lea ecx, [ebp - 0x1c]
add eax, dword [0x4ef17c]
xorps xmm1, xmm1
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
movss dword [ebp - 0x20], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x7c], xmm0
movss dword [ebp - 0x3c], xmm0
movss dword [ebp - 0x84], xmm0
movss dword [ebp - 0xac], xmm0
movss dword [ebp - 0x80], xmm1
mov dword [ebp - 0x1c], 0
call esi
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x38]
push 0
push 4
push ecx
lea eax, [esi + 0x138]
mov dword [ebp - 0x38], 0
push eax
push dword [0x4ef278]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [ebp - 0x38]
lea ecx, [ebp - 0x40]
push 0
push 4
push ecx
lea eax, [esi + 0x13c]
movss dword [ebp - 0xa8], xmm0
push eax
push dword [0x4ef278]
mov dword [ebp - 0x40], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [ebp - 0x40]
lea ecx, [ebp - 0x4c]
push 0
push 4
lea eax, [esi + 0x140]
movss dword [ebp - 0xa4], xmm0
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x4c], 0
call esi
mov eax, dword [0x4ef354]
lea ecx, [ebp - 0x1c]
add eax, dword [0x4ef17c]
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x1c], 0
call esi
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x38]
push 0
push 4
push ecx
lea eax, [esi + 0x108]
mov dword [ebp - 0x38], 0
push eax
push dword [0x4ef278]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [ebp - 0x38]
lea ecx, [ebp - 0x40]
push 0
push 4
push ecx
lea eax, [esi + 0x10c]
movss dword [ebp - 0x48], xmm0
push eax
push dword [0x4ef278]
mov dword [ebp - 0x40], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [ebp - 0x40]
lea ecx, [ebp - 0x2c]
push 0
push 4
lea eax, [esi + 0x110]
movss dword [ebp - 0x28], xmm0
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x2c], 0
call esi
movss xmm0, dword [ebp - 0xa8]
lea eax, [ebp - 0xc8]
addss xmm0, dword [ebp - 0x48]
push eax
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0xa4]
addss xmm0, dword [ebp - 0x28]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x4c]
addss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0x1c], xmm0
call fcn.00453410
add esp, 4
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
push 0
mov dword [ebp - 0x98], eax
mov eax, dword [0x4ef354]
add eax, dword [0x4ef17c]
push 4
push ecx
push eax
push dword [0x4ef278]
movq qword [ebp - 0xa0], xmm0
call esi
mov esi, dword [ebp - 0x2c]
lea ecx, [ebp - 0x34]
push 0
push 4
push ecx
lea eax, [esi + 0x303c]
mov dword [ebp - 0x34], 0
push eax
push dword [0x4ef278]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [ebp - 0x34]
lea ecx, [ebp - 0x30]
push 0
push 4
push ecx
lea eax, [esi + 0x3040]
movss dword [ebp - 0xb0], xmm0
push eax
push dword [0x4ef278]
mov dword [ebp - 0x30], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [ebp - 0x30]
lea ecx, [ebp - 0x48]
push 0
push 4
lea eax, [esi + 0x3044]
movss dword [ebp - 0xb4], xmm0
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x48], 0
call esi
mov edx, dword [ebp - 0x6c]
mov ecx, str.aimbot
push str.visible_only
call fcn.00470870
add esp, 4
test al, al
je 0x4663ee
mov eax, dword [0x4ef188]
lea ecx, [ebp - 0x30]
push 0
push 4
push ecx
add eax, 0x59f19c
mov dword [ebp - 0x30], 0
push eax
push dword [0x4ef278]
call esi
mov esi, dword [ebp - 0x30]
lea eax, [ebp - 0x218]
push 0x120
push 0
push eax
add esi, 0x188
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x120
push eax
push esi
push dword [0x4ef278]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00404060
push 0x120
mov dword [ebp - 4], 0
lea eax, [ebp - 0x338]
mov esi, dword [0x4ef188]
push 0
push eax
add esi, 0x63ae00
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x338]
push 0
push 0x120
push eax
push esi
push dword [0x4ef278]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
call esi
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0xf8]
call fcn.00404060
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.00406850
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0xe4]
cmp ecx, 0xf
jbe 0x4663ab
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4663a1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4663de
push ecx
push edx
call fcn.0047df67
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x4663ee
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4663e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4663e4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047df67
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 0x16], 0
call fcn.00453c40
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x88], eax
cmp ecx, eax
je 0x4669b4
jmp 0x466426
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ecx]
lea ecx, [ebp - 0x30]
push 0
push 4
mov dword [ebp - 0x34], eax
add eax, 0x138
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x30], 0
call esi
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x24]
movss xmm0, dword [ebp - 0x30]
add eax, 0x13c
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
movss dword [ebp - 0x60], xmm0
mov dword [ebp - 0x24], 0
call esi
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x28]
movss xmm0, dword [ebp - 0x24]
add eax, 0x140
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
movss dword [ebp - 0x8c], xmm0
mov dword [ebp - 0x28], 0
call esi
mov edx, dword [ebp - 0x6c]
mov ecx, str.aimbot
push str.bone
call fcn.00470f80
add esp, 4
cmp eax, 5
ja case.default.0x4664b9
jmp dword [eax*4 + 0x466d68]
mov ecx, dword [ebp - 0x34]
call fcn.004538b0
cwde
mov dword [ebp - 0x2c], eax
jmp 0x466500
mov eax, 8
mov dword [ebp - 0x2c], eax
jmp 0x466500
mov eax, 7
mov dword [ebp - 0x2c], eax
jmp 0x466500
mov eax, 6
mov dword [ebp - 0x2c], eax
jmp 0x466500
mov eax, 5
mov dword [ebp - 0x2c], eax
jmp 0x466500
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x466500
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0xf0]
mov edx, eax
push ecx
mov ecx, dword [ebp - 0x34]
call fcn.00453660
add esp, 4
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x24]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
push 0
mov dword [ebp - 0x70], eax
mov eax, dword [0x4ef354]
add eax, dword [0x4ef17c]
push 4
push ecx
push eax
push dword [0x4ef278]
movq qword [ebp - 0x78], xmm0
call esi
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x24]
je 0x46699c
push 0
push 1
lea ecx, [ebp - 0x15]
mov byte [ebp - 0x15], 0
push ecx
add eax, 0xed
push eax
push dword [0x4ef278]
call esi
cmp byte [ebp - 0x15], 0
jne 0x46699c
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x15]
push 0
push 1
push ecx
add eax, 0x9990
mov byte [ebp - 0x15], 0
push eax
push dword [0x4ef278]
call esi
cmp byte [ebp - 0x15], 0
jne 0x46699c
cmp edi, 0x1f
jne 0x466612
movss xmm2, dword [ebp - 0xa4]
movss xmm0, dword [ebp - 0xa8]
subss xmm0, dword [ebp - 0x60]
subss xmm2, dword [ebp - 0x8c]
movss xmm1, dword [ebp - 0x4c]
subss xmm1, dword [ebp - 0x28]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.004070b0
movss dword [ebp - 0x60], xmm0
fld dword [ebp - 0x60]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
fstp dword [ebp - 0x60]
movss xmm0, dword [ebp - 0x60]
add esp, 4
andps xmm0, xmmword [0x48ca90]
comiss xmm0, dword [0x48c728]
ja 0x46699c
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x28]
push 0
push 4
push ecx
add eax, 0x25f
mov dword [ebp - 0x28], 0
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 0x28], 0
jne 0x46699c
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x24]
push 0
push 4
push ecx
add eax, 0x100
mov dword [ebp - 0x24], 0
push eax
push dword [0x4ef278]
call esi
cmp dword [ebp - 0x24], 0
jle 0x46699c
mov edx, dword [ebp - 0x6c]
mov ecx, str.aimbot
push str.friendly_fire
call fcn.00470870
add esp, 4
test al, al
jne 0x4666f4
mov eax, dword [0x4ef354]
lea ecx, [ebp - 0x28]
add eax, dword [0x4ef17c]
push 0
push 4
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x28], 0
call esi
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x24]
push 0
push 2
push ecx
add eax, 0xf4
mov dword [ebp - 0x24], 0
push eax
push dword [0x4ef278]
call esi
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x30]
movzx esi, word [ebp - 0x24]
add eax, 0xf4
push 0
push 2
push ecx
push eax
push dword [0x4ef278]
mov dword [ebp - 0x30], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp si, word [ebp - 0x30]
je 0x46699c
mov esi, dword [ebp - 0x6c]
mov ecx, str.aimbot
push str.visible_only
mov edx, esi
call fcn.00470870
add esp, 4
test al, al
je 0x466778
movss xmm0, dword [ebp - 0x74]
lea eax, [ebp - 0xdc]
movss xmm1, dword [ebp - 0x78]
movss dword [ebp - 0xd8], xmm0
movss xmm0, dword [ebp - 0x70]
movss dword [ebp - 0xd4], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [ebp - 0xc4], xmm0
movss xmm0, dword [ebp - 0x38]
push eax
movss dword [ebp - 0xc0], xmm0
lea eax, [ebp - 0xc4]
movss xmm0, dword [ebp - 0x1c]
push eax
movss dword [ebp - 0xdc], xmm1
movss dword [ebp - 0xbc], xmm0
call fcn.00406a10
test al, al
je 0x46699c
movss xmm0, dword [ebp - 0x78]
sub esp, 8
subss xmm0, dword [ebp - 0x40]
movss dword [ebp - 0x8c], xmm0
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x74]
subss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0x60], xmm0
fld dword [ebp - 0x60]
fstp dword [esp + 4]
fld dword [ebp - 0x8c]
fstp dword [esp]
movss dword [ebp - 0x28], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
movss xmm0, dword [ebp - 0x70]
add esp, 8
subss xmm0, dword [ebp - 0x1c]
fstp dword [ebp - 0x60]
xorps xmm0, xmmword [0x48cac0]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x90], xmm0
movss xmm0, dword [ebp - 0x60]
fld qword [ebp - 0x90]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x68], xmm0
fld qword [ebp - 0x68]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIatan2
movss xmm0, dword [ebp - 0xb0]
fstp qword [ebp - 0x68]
movsd xmm1, qword [ebp - 0x68]
addss xmm0, xmm0
cvtpd2ps xmm1, xmm1
addss xmm0, dword [ebp - 0xa0]
mulss xmm1, dword [0x48c700]
subss xmm1, xmm0
movss xmm0, dword [ebp - 0x28]
cvtps2pd xmm0, xmm0
movss dword [ebp - 0x30], xmm1
movsd qword [ebp - 0x68], xmm0
movss xmm0, dword [ebp - 0x24]
fld qword [ebp - 0x68]
cvtps2pd xmm0, xmm0
movss dword [ebp - 0x8c], xmm1
movsd qword [ebp - 0x68], xmm0
fld qword [ebp - 0x68]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIatan2
movss xmm0, dword [ebp - 0xb4]
mov edx, esi
fstp qword [ebp - 0x68]
movsd xmm1, qword [ebp - 0x68]
addss xmm0, xmm0
cvtpd2ps xmm1, xmm1
push str.mode
mov ecx, str.aimbot
addss xmm0, dword [ebp - 0x9c]
mulss xmm1, dword [0x48c700]
subss xmm1, xmm0
movss xmm0, dword [ebp - 0x48]
mulss xmm0, dword [0x48c640]
addss xmm0, dword [ebp - 0x98]
movss dword [ebp - 0x28], xmm1
movss dword [ebp - 0x60], xmm1
xorps xmm1, xmm1
subss xmm1, xmm0
movss dword [ebp - 0x24], xmm1
call fcn.00470f80
add esp, 4
test eax, eax
jne 0x4668eb
fld dword [ebp - 0x60]
sub esp, 8
fstp dword [esp + 4]
fld dword [ebp - 0x8c]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
fstp dword [ebp - 0x60]
movss xmm0, dword [ebp - 0x60]
add esp, 8
jmp 0x46695b
movss xmm0, dword [ebp - 0x40]
subss xmm0, dword [ebp - 0x78]
movsd xmm1, qword [0x48c648]
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_pow_precise
movss xmm1, dword [ebp - 0x38]
subss xmm1, dword [ebp - 0x74]
movsd qword [ebp - 0x68], xmm0
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x48c648]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_pow_precise
movss xmm1, dword [ebp - 0x1c]
subss xmm1, dword [ebp - 0x70]
movsd qword [ebp - 0x90], xmm0
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x48c648]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_pow_precise
movsd xmm1, qword [ebp - 0x68]
addsd xmm1, qword [ebp - 0x90]
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movss xmm1, dword [ebp - 0x20]
comiss xmm1, xmm0
jbe 0x46699c
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x7c], xmm0
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [ebp - 0x28]
movss dword [ebp - 0x84], xmm0
movss dword [ebp - 0xac], xmm0
movss xmm0, dword [ebp - 0x24]
movss dword [ebp - 0x80], xmm0
mov byte [ebp - 0x16], 1
mov ecx, dword [ebp - 0x44]
add ecx, 4
mov dword [ebp - 0x44], ecx
cmp ecx, dword [ebp - 0x88]
jne 0x466420
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
test ecx, ecx
je 0x4669f1
mov edx, dword [ebp - 0x50]
mov eax, ecx
sub edx, ecx
and edx, 0xfffffffc
cmp edx, 0x1000
jb 0x4669e7
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4669e7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0047df67
add esp, 8
cmp byte [ebp - 0x16], 0
je 0x466d47
fld dword [ebp - 0xac]
sub esp, 8
fstp dword [esp + 4]
fld dword [ebp - 0x3c]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
mov edx, dword [ebp - 0x6c]
mov ecx, str.aimbot
push str.mode
fstp dword [ebp - 0x88]
call fcn.00470f80
movss xmm2, dword [ebp - 0x7c]
add esp, 0xc
movss xmm1, dword [ebp - 0x84]
test eax, eax
jne 0x466a55
movss xmm0, dword [ebp - 0x88]
comiss xmm2, xmm0
jbe 0x466a55
comiss xmm1, xmm0
ja 0x466d47
push ecx
call fcn.00471620
divss xmm1, xmm0
add esp, 4
divss xmm2, xmm0
addss xmm1, dword [ebp - 0x9c]
addss xmm2, dword [ebp - 0xa0]
movss dword [ebp - 0x84], xmm1
movss xmm1, dword [ebp - 0x80]
movss dword [ebp - 0x7c], xmm2
divss xmm1, xmm0
addss xmm1, dword [ebp - 0x98]
movss dword [ebp - 0x80], xmm1
cmp edi, 0x28
je 0x466ab1
cmp edi, 9
je 0x466ab1
cmp edi, 0x26
je 0x466ab1
cmp edi, 0xb
jne 0x466b5d
push str.auto_scope
mov ecx, str.aimbot
call fcn.00470870
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add esp, 4
test al, al
je 0x466b51
push 0
push 4
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
push eax
mov eax, dword [0x4ef354]
add eax, dword [0x4ef17c]
push eax
push dword [0x4ef278]
call esi
push 0
push 1
lea eax, [ebp - 0x16]
mov byte [ebp - 0x16], 0
push eax
mov eax, dword [ebp - 0x3c]
add eax, 0x9974
push eax
push dword [0x4ef278]
call esi
cmp byte [ebp - 0x16], 0
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jne 0x466b45
push 0
push 4
lea eax, [ebp - 0x88]
mov dword [ebp - 0x88], 6
push eax
mov eax, dword [0x4ef17c]
add eax, 0x3233030
push eax
push dword [0x4ef278]
call edi
movss xmm2, dword [ebp - 0x7c]
movss xmm1, dword [ebp - 0x80]
jmp 0x466b69
movss xmm2, dword [ebp - 0x7c]
movss xmm1, dword [ebp - 0x80]
jmp 0x466b63
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm0, dword [ebp - 0x84]
movss xmm4, dword [0x48c72c]
movss xmm3, dword [0x48c7dc]
ucomiss xmm2, xmm2
movss dword [ebp - 0x78], xmm2
movss dword [ebp - 0x74], xmm0
lahf
movss dword [ebp - 0x70], xmm1
test ah, 0x44
jp 0x466c05
ucomiss xmm0, xmm0
lahf
test ah, 0x44
jp 0x466c05
ucomiss xmm1, xmm1
lahf
test ah, 0x44
jp 0x466c05
comiss xmm2, xmm4
movss xmm1, dword [0x48c73c]
jbe 0x466bc1
subss xmm2, xmm1
movss dword [ebp - 0x78], xmm2
comiss xmm3, xmm2
jbe 0x466bcf
addss xmm2, xmm1
movss dword [ebp - 0x78], xmm2
comiss xmm0, xmm4
jbe 0x466bdd
subss xmm0, xmm1
movss dword [ebp - 0x74], xmm0
comiss xmm3, xmm0
jbe 0x466beb
addss xmm0, xmm1
movss dword [ebp - 0x74], xmm0
movq xmm0, qword [ebp - 0x78]
mov eax, dword [ebp - 0x70]
movq qword [ebp - 0xa0], xmm0
movss xmm1, dword [ebp - 0xa0]
jmp 0x466c32
xorps xmm1, xmm1
mov dword [ebp - 0x9c], 0
movss dword [ebp - 0xa0], xmm1
movq xmm0, qword [ebp - 0xa0]
mov dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
comiss xmm1, dword [0x48c70c]
mov dword [ebp - 0x70], eax
movq qword [ebp - 0x78], xmm0
jbe 0x466c4c
mov dword [ebp - 0x78], 0x42b20000
jmp 0x466c60
movss xmm0, dword [0x48c7d0]
comiss xmm0, xmm1
jbe 0x466c60
mov dword [ebp - 0x78], 0xc2b20000
movss xmm0, dword [ebp - 0x74]
comiss xmm0, xmm4
jbe 0x466c73
mov dword [ebp - 0x74], 0x43340000
jmp 0x466c7f
comiss xmm3, xmm0
jbe 0x466c7f
mov dword [ebp - 0x74], 0xc3340000
movq xmm0, qword [ebp - 0x78]
push 0
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x3c]
push 4
push eax
mov eax, dword [0x4ef188]
add eax, 0x59f19c
movq qword [ebp - 0x68], xmm0
push eax
push dword [0x4ef278]
mov dword [ebp - 0x3c], 0
call esi
push 0
push 4
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x3c]
add eax, 0x4d90
push eax
push dword [0x4ef278]
call edi
push 0
push 4
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
push eax
mov eax, dword [0x4ef188]
add eax, 0x59f19c
push eax
push dword [0x4ef278]
call esi
push 0
push 4
lea eax, [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x3c]
add eax, 0x4d94
push eax
push dword [0x4ef278]
call edi
push 0
push 4
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0
push eax
mov eax, dword [0x4ef188]
add eax, 0x59f19c
push eax
push dword [0x4ef278]
call esi
push 0
push 4
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x44]
add eax, 0x4d98
push eax
push dword [0x4ef278]
call edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0047dd95
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret