Function at 0x14003c870
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0x178
mov rax, qword [0x140064f40]
xor rax, rsp
mov qword [rsp + 0x160], rax
call fcn.14001e868
call fcn.14001f1f8
call fcn.14000d17c
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14003c8da
movzx eax, byte [0x14004d015]
test eax, eax
jne 0x14003c8bd
mov dword [rsp + 0x44], 1
jmp 0x14003c8c5
mov dword [rsp + 0x44], 0
mov al, byte [rsp + 0x44]
mov byte [0x14004d015], al
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x10
mov eax, eax
mov ecx, dword [0x1400660c0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x140066050], eax
jle 0x14003c93d
lea rcx, [0x140066050]
call fcn.14003f408
cmp dword [0x140066050], 0xffffffff
jne 0x14003c93d
movss xmm2, dword [0x140042ab0]
movss xmm1, dword [0x1400484bc]
lea rcx, [0x140066048]
call fcn.14002e7e8
nop
lea rcx, [0x140066050]
call fcn.14003f39c
mov rcx, qword [0x140065fb0]
call fcn.14000dbb0
movss xmm2, dword [0x1400484d4]
movss xmm1, dword [0x1400484cc]
lea rcx, [rsp + 0x50]
call fcn.14002e7e8
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000f4fc
lea rdx, [0x140047c68]
lea rcx, [rsp + 0x4c]
call fcn.14002e0a0
lea rdx, str.Snapline
lea rcx, [rsp + 0xe8]
call fcn.14002de5c
lea rdx, str.Max_Visuals_Distance
lea rcx, [rsp + 0x148]
call fcn.14002d83c
lea rdx, [0x140047c98]
lea rcx, [rsp + 0xd8]
call fcn.14002dfa0
lea rdx, str.Aimbot_Key
lea rcx, [rsp + 0x108]
call fcn.14002dcd0
lea rdx, str.Aimbot_Bone
lea rcx, [rsp + 0x128]
call fcn.14002db24
lea rdx, str.Aimbot_FOV
lea rcx, [rsp + 0x118]
call fcn.14002dcd0
lea rdx, str.Smooth
lea rcx, [rsp + 0xe0]
call fcn.14002dfa0
movss xmm2, dword [0x140048488]
movss xmm1, dword [0x140048488]
lea rcx, [rsp + 0xc8]
call fcn.14002e7e8
mov rdx, rax
mov ecx, 1
call fcn.14000ddb4
movzx eax, byte [0x14004d015]
test eax, eax
je 0x14003d155
mov r8d, 0x22
xor edx, edx
lea rcx, str.patrukes_private
call fcn.140002f68
movss xmm2, dword [0x14004849c]
movss xmm1, dword [0x140048494]
lea rcx, [rsp + 0x58]
call fcn.14002e7e8
lea rcx, [rsp + 0x58]
call fcn.14000f240
movss xmm2, dword [0x14004685c]
movss xmm1, dword [0x1400484b0]
lea rcx, [rsp + 0x60]
call fcn.14002e7e8
lea rdx, [rsp + 0x60]
lea rcx, str.Aimbot
call fcn.1400230ac
movzx eax, al
test eax, eax
je 0x14003cab9
mov dword [0x140066044], 0
movss xmm2, dword [0x14004849c]
movss xmm1, dword [0x1400484b8]
lea rcx, [rsp + 0x68]
call fcn.14002e7e8
lea rcx, [rsp + 0x68]
call fcn.14000f240
movss xmm2, dword [0x14004685c]
movss xmm1, dword [0x1400484b0]
lea rcx, [rsp + 0x70]
call fcn.14002e7e8
lea rdx, [rsp + 0x70]
lea rcx, str.Visuals
call fcn.1400230ac
movzx eax, al
test eax, eax
je 0x14003cb19
mov dword [0x140066044], 1
movss xmm2, dword [0x14004849c]
movss xmm1, dword [0x1400484d0]
lea rcx, [rsp + 0x78]
call fcn.14002e7e8
lea rcx, [rsp + 0x78]
call fcn.14000f240
movss xmm2, dword [0x14004685c]
movss xmm1, dword [0x1400484b0]
lea rcx, [rsp + 0x80]
call fcn.14002e7e8
lea rdx, [rsp + 0x80]
lea rcx, [0x140047d00]
call fcn.1400230ac
movzx eax, al
test eax, eax
je 0x14003cb7f
mov dword [0x140066044], 2
movss xmm2, dword [0x14004849c]
movss xmm1, dword [0x1400484d8]
lea rcx, [rsp + 0x88]
call fcn.14002e7e8
lea rcx, [rsp + 0x88]
call fcn.14000f240
movss xmm2, dword [0x14004685c]
movss xmm1, dword [0x1400484b0]
lea rcx, [rsp + 0x90]
call fcn.14002e7e8
lea rdx, [rsp + 0x90]
lea rcx, str.Exploits
call fcn.1400230ac
movzx eax, al
test eax, eax
je 0x14003cbeb
mov dword [0x140066044], 3
cmp dword [0x140066044], 0
jne 0x14003cde6
lea rcx, str._Aimbot
call fcn.1400280bc
lea rcx, [0x140046aa4]
call fcn.1400280bc
call fcn.14002807c
lea rdx, [0x140065062]
lea rcx, str.Enable_Aimbot
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
xorps xmm0, xmm0
call fcn.14000ed40
lea rdx, [0x140065071]
lea rcx, str.Visible_Check
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
xorps xmm0, xmm0
call fcn.14000ed40
lea rdx, [0x140065063]
lea rcx, str.Circle_FOV
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
xorps xmm0, xmm0
call fcn.14000ed40
lea rdx, [0x140065065]
lea rcx, str.Filled_Fov
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
movss xmm0, dword [0x1400484dc]
call fcn.14000ed40
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0xd0]
call fcn.14002e7e8
mov rdx, rax
lea rcx, str.Unload
call fcn.1400230ac
movzx eax, al
test eax, eax
je 0x14003ccd7
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.14002807c
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 5
lea r8, str.Head
lea rdx, [0x140065084]
lea rcx, str.Bone
call fcn.140024008
call fcn.14002807c
call fcn.14002807c
lea rcx, str.Key_Aimbot:
call fcn.1400280bc
call fcn.14002807c
call fcn.14002807c
mov r8d, dword [0x140065758]
lea rdx, [0x14002f9a0]
mov ecx, dword [0x14006559c]
call fcn.140038718
call fcn.14002807c
call fcn.14002807c
lea rcx, str.Aim_Settings:
call fcn.1400280bc
call fcn.14002807c
call fcn.14002807c
movss xmm0, dword [0x140042a7c]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140047d90]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14004685c]
movss xmm2, dword [0x140042a7c]
lea rdx, [0x14004d034]
lea rcx, str.Aimbot_Smoothness
call fcn.140027b48
call fcn.14002807c
call fcn.14002807c
movss xmm0, dword [0x140042a7c]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140047dac]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140042ac0]
movss xmm2, dword [0x1400484a0]
lea rdx, [0x14004d03c]
lea rcx, str.Aim_FOV
call fcn.140027b48
call fcn.14002807c
cmp dword [0x140066044], 1
jne 0x14003cfbb
lea rcx, str._Visual
call fcn.1400280bc
lea rcx, [0x140046aa5]
call fcn.1400280bc
call fcn.14002807c
lea rdx, [0x140065068]
lea rcx, str.Enable_ESP
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
movss xmm0, dword [0x1400484c0]
call fcn.14000ed40
lea rdx, [0x14006506e]
lea rcx, str.Distance
call fcn.1400237a4
call fcn.14002807c
lea rdx, [0x14006506a]
lea rcx, [0x140047de4]
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
movss xmm0, dword [0x1400484c0]
call fcn.14000ed40
lea rdx, [0x14006507c]
lea rcx, str.Crosshair
call fcn.1400237a4
call fcn.14002807c
lea rdx, [0x140065077]
lea rcx, str.3D_Box
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
movss xmm0, dword [0x1400484c0]
call fcn.14000ed40
lea rdx, [0x140065079]
lea rcx, str.Esp_Line_Top
call fcn.1400237a4
call fcn.14002807c
lea rdx, [0x14006506c]
lea rcx, str.Cornered_Boxes
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
movss xmm0, dword [0x1400484c0]
call fcn.14000ed40
lea rdx, [0x140065078]
lea rcx, str.Esp_Line_Bottom
call fcn.1400237a4
call fcn.14002807c
lea rdx, [0x14006506d]
lea rcx, str.Filled_Boxes
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
movss xmm0, dword [0x1400484c0]
call fcn.14000ed40
lea rdx, [0x14006507a]
lea rcx, str.Target_Line
call fcn.1400237a4
call fcn.14002807c
lea rdx, [0x140065076]
lea rcx, str.nameEsp
call fcn.1400237a4
movss xmm1, dword [0x140042ad8]
movss xmm0, dword [0x1400484c0]
call fcn.14000ed40
lea rdx, [0x14006506f]
lea rcx, str.Skeleton
call fcn.1400237a4
call fcn.14002807c
lea rax, [0x140047e64]
mov qword [rsp + 0x20], rax
mov r9d, 0x960
mov r8d, 0x14
lea rdx, [0x14004d038]
lea rcx, str.Esp_Distance
call fcn.140027b90
cmp dword [0x140066044], 2
jne 0x14003d0ad
call fcn.14002807c
lea rcx, str.Misc
call fcn.1400280bc
lea rcx, [0x140046aa6]
call fcn.1400280bc
call fcn.14002807c
call fcn.14002807c
call fcn.14002807c
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x40]
call fcn.14002f5c4
mov rcx, rax
call fcn.14002f234
lea rdx, [0x14004d014]
mov rcx, rax
call fcn.1400237a4
call fcn.14002807c
call fcn.14002807c
lea rdx, [0x140065060]
lea rcx, str.Dynamic_FOV
call fcn.1400237a4
call fcn.14002807c
call fcn.14002807c
call fcn.14002807c
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x41]
call fcn.14002f63c
mov rcx, rax
call fcn.14002f3b4
movss xmm0, dword [0x140042a7c]
movss dword [rsp + 0x28], xmm0
lea rcx, str._.3f
mov qword [rsp + 0x20], rcx
movss xmm3, dword [0x140042a9c]
movss xmm2, dword [0x140042a7c]
lea rdx, [0x14004d024]
mov rcx, rax
call fcn.140027b48
lea rcx, [0x140046aa7]
call fcn.1400280bc
call fcn.14002807c
cmp dword [0x140066044], 3
jne 0x14003d150
call fcn.14002807c
lea rcx, str.Exploits__DETECTION_RISK_
call fcn.1400280bc
lea rcx, [0x140046ab1]
call fcn.1400280bc
call fcn.14002807c
call fcn.14002807c
lea rdx, [0x14006507e]
lea rcx, str.No_recoil
call fcn.1400237a4
call fcn.14002807c
call fcn.14002807c
lea rdx, [0x14006507f]
lea rcx, str.Big_player
call fcn.1400237a4
call fcn.14002807c
call fcn.14002807c
lea rdx, [0x140065080]
lea rcx, str.airstuck
call fcn.1400237a4
call fcn.14002807c
call fcn.14002807c
lea rdx, [0x140065081]
lea rcx, str.Spinbot
call fcn.1400237a4
call fcn.14002807c
call fcn.140006f08
call fcn.140030774
call fcn.1400074c0
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x98], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x140065fe0]
call qword [rsp + 0x98]
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xa0], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x140065fe0]
call qword [rsp + 0xa0]
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xa8], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x140065fe0]
call qword [rsp + 0xa8]
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x140042a7c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140065fe0]
call qword [rsp + 0xb0]
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rcx, qword [0x140065fe0]
call qword [rax + 0x148]
test eax, eax
jl 0x14003d280
call fcn.14000deb8
call fcn.1400088cc
mov rcx, rax
call fcn.14001e880
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rcx, qword [0x140065fe0]
call qword [rax + 0x150]
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140065fe0]
call qword [rsp + 0xb8]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x88760868
jne 0x14003d319
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rcx, qword [0x140065fe0]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003d319
call fcn.14001e7f0
mov rax, qword [0x140065fe0]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0xc0], rax
lea rdx, [0x1400656d0]
mov rcx, qword [0x140065fe0]
call qword [rsp + 0xc0]
call fcn.14001e688
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.14003f510
add rsp, 0x178
ret