Function at 0x140035d98
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0x118
mov rax, qword [0x140049740]
xor rax, rsp
mov qword [rsp + 0x100], rax
call fcn.14001dcec
call fcn.14001e67c
call fcn.14000cb44
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x140035e02
movzx eax, byte [0x14004829c]
test eax, eax
jne 0x140035de5
mov dword [rsp + 0x40], 1
jmp 0x140035ded
mov dword [rsp + 0x40], 0
mov al, byte [rsp + 0x40]
mov byte [0x14004829c], al
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x10
mov eax, eax
mov ecx, dword [0x14004a620]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14004a5b0], eax
jle 0x140035e65
lea rcx, [0x14004a5b0]
call fcn.14003b058
cmp dword [0x14004a5b0], 0xffffffff
jne 0x140035e65
movss xmm2, dword [0x14003daac]
movss xmm1, dword [0x140043268]
lea rcx, [0x14004a5a8]
call fcn.14002c814
nop
lea rcx, [0x14004a5b0]
call fcn.14003afec
mov rcx, qword [0x14004a520]
call fcn.14000d3fc
lea rax, str.Head
mov qword [rsp + 0xe8], rax
lea rax, str.Neck
mov qword [rsp + 0xf0], rax
lea rax, str.Chest
mov qword [rsp + 0xf8], rax
movss xmm2, dword [0x14004327c]
movss xmm1, dword [0x140043284]
lea rcx, [rsp + 0x48]
call fcn.14002c814
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.14000ea48
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0xc0]
call fcn.14002c814
mov rdx, rax
mov ecx, 1
call fcn.14000d58c
mov r8d, 0x2b
xor edx, edx
lea rcx, str.Plasma
call fcn.140002d58
call fcn.140008db4
mov qword [rsp + 0xc8], rax
lea rcx, [rsp + 0xd0]
call fcn.140008dd8
lea rcx, [rsp + 0xd8]
call fcn.140008df4
movzx eax, byte [0x14004829c]
test eax, eax
je 0x14003642a
movss xmm2, dword [0x140043248]
movss xmm1, dword [0x140043244]
lea rcx, [rsp + 0x50]
call fcn.14002c814
lea rcx, [rsp + 0x50]
call fcn.14000e8c8
movss xmm2, dword [0x14004181c]
movss xmm1, dword [0x14004325c]
lea rcx, [rsp + 0x58]
call fcn.14002c814
lea rdx, [rsp + 0x58]
lea rcx, str.Aimbot
call fcn.140021f18
movzx eax, al
test eax, eax
je 0x140035f8e
mov dword [0x14004a5a4], 0
movss xmm2, dword [0x140043248]
movss xmm1, dword [0x140043264]
lea rcx, [rsp + 0x60]
call fcn.14002c814
lea rcx, [rsp + 0x60]
call fcn.14000e8c8
movss xmm2, dword [0x14004181c]
movss xmm1, dword [0x14004325c]
lea rcx, [rsp + 0x68]
call fcn.14002c814
lea rdx, [rsp + 0x68]
lea rcx, str.Visuals
call fcn.140021f18
movzx eax, al
test eax, eax
je 0x140035fee
mov dword [0x14004a5a4], 1
movss xmm2, dword [0x140043248]
movss xmm1, dword [0x140043278]
lea rcx, [rsp + 0x70]
call fcn.14002c814
lea rcx, [rsp + 0x70]
call fcn.14000e8c8
movss xmm2, dword [0x14004181c]
movss xmm1, dword [0x14004325c]
lea rcx, [rsp + 0x78]
call fcn.14002c814
lea rdx, [rsp + 0x78]
lea rcx, str.Misc
call fcn.140021f18
movzx eax, al
test eax, eax
je 0x14003604e
mov dword [0x14004a5a4], 2
movss xmm2, dword [0x140043248]
movss xmm1, dword [0x140043280]
lea rcx, [rsp + 0x80]
call fcn.14002c814
lea rcx, [rsp + 0x80]
call fcn.14000e8c8
movss xmm2, dword [0x14004181c]
movss xmm1, dword [0x14004325c]
lea rcx, [rsp + 0x88]
call fcn.14002c814
lea rdx, [rsp + 0x88]
lea rcx, str.Exploits
call fcn.140021f18
movzx eax, al
test eax, eax
je 0x1400360ba
mov dword [0x14004a5a4], 3
movzx eax, byte [0x14004829c]
test eax, eax
je 0x1400361fd
cmp dword [0x14004a5a4], 0
jne 0x1400361fd
call fcn.140026cf0
lea rdx, [0x140049d1e]
lea rcx, str.Enable_Aimbot
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049e10]
lea rcx, str.Visible_Check
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049d7c]
lea rcx, str.Circle_FOV
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049d7d]
lea rcx, str.Filled_Fov
call fcn.1400225c8
call fcn.140026cf0
mov r8d, dword [0x14004a444]
lea rdx, [0x14002d4fc]
mov ecx, dword [0x140049d04]
call fcn.140031948
call fcn.140026cf0
call fcn.140026cf0
lea rcx, str.Aim_Settings:
call fcn.140026d30
call fcn.140026cf0
call fcn.140026cf0
movss xmm0, dword [0x14003da7c]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140042b28]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14004323c]
movss xmm2, dword [0x14003da7c]
lea rdx, [0x1400482c8]
lea rcx, str.Aimbot_Smoothness
call fcn.140026800
call fcn.140026cf0
call fcn.140026cf0
movss xmm0, dword [0x14003da7c]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140042b44]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003dabc]
movss xmm2, dword [0x14004324c]
lea rdx, [0x1400482d0]
lea rcx, str.Aim_FOV
call fcn.140026800
call fcn.140026cf0
cmp dword [0x14004a5a4], 1
jne 0x1400363bd
lea rcx, [0x140041a89]
call fcn.140026d30
call fcn.140026cf0
lea rdx, [0x140049e04]
lea rcx, str.Enable_ESP
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049e0a]
lea rcx, str.Distance
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049e06]
lea rcx, [0x140042b74]
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049e08]
lea rcx, str.Cornered_Boxes
call fcn.1400225c8
lea rdx, [0x140049e17]
lea rcx, str.Esp_Line
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049e09]
lea rcx, str.Filled_Boxes
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049e15]
lea rcx, str.Player_Name
call fcn.1400225c8
call fcn.140026cf0
lea rdx, [0x140049e0c]
lea rcx, str.Skeleton
call fcn.1400225c8
lea rcx, str._ESP_Thickness
call fcn.140026d30
movss xmm0, dword [0x14003da7c]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140042bd8]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003da94]
xorps xmm2, xmm2
lea rdx, [0x1400482dc]
lea rcx, str.Box_Thickness
call fcn.140026800
movss xmm0, dword [0x14003da7c]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140042bf0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003da94]
xorps xmm2, xmm2
lea rdx, [0x1400482e0]
lea rcx, str.Cornered_Thickness
call fcn.140026800
movss xmm0, dword [0x14003da7c]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140042c0c]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003da94]
xorps xmm2, xmm2
lea rdx, [0x1400482d8]
lea rcx, str.Skeleton_Thickness
call fcn.140026800
movss xmm0, dword [0x14003da7c]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003da94]
xorps xmm2, xmm2
lea rdx, [0x1400482e4]
lea rcx, str.Line_Thickness
call fcn.140026800
cmp dword [0x14004a5a4], 2
jne 0x14003642a
call fcn.140026cf0
lea rcx, [0x140041a8a]
call fcn.140026d30
call fcn.140026cf0
call fcn.140026cf0
lea rdx, [0x140049e1a]
lea rcx, str.Stream_Proof
call fcn.1400225c8
call fcn.140026cf0
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0xe0]
call fcn.14002c814
mov rdx, rax
lea rcx, str.Unload
call fcn.140021f18
movzx eax, al
test eax, eax
je 0x14003642a
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.140006cb0
call fcn.14002dd1c
call fcn.140007268
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x90], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x14004a558]
call qword [rsp + 0x90]
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x98], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x14004a558]
call qword [rsp + 0x98]
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xa0], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x14004a558]
call qword [rsp + 0xa0]
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x14003da7c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14004a558]
call qword [rsp + 0xa8]
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rcx, qword [0x14004a558]
call qword [rax + 0x148]
test eax, eax
jl 0x14003655a
call fcn.14000d690
call fcn.140008644
mov rcx, rax
call fcn.14001dd04
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rcx, qword [0x14004a558]
call qword [rax + 0x150]
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14004a558]
call qword [rsp + 0xb0]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x88760868
jne 0x1400365f3
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rcx, qword [0x14004a558]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x1400365f3
call fcn.14001dc74
mov rax, qword [0x14004a558]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0xb8], rax
lea rdx, [0x140049f20]
mov rcx, qword [0x14004a558]
call qword [rsp + 0xb8]
call fcn.14001db0c
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.14003b160
add rsp, 0x118
ret