Function at 0x140001e90
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Log keystrokes via polling
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xf8]
sub rsp, 0x1d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x78], rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rbx, rax
movups xmm0, xmmword [str.OverlayWindowClass]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [0x140004620]
movups xmmword [rbp + 0x60], xmm1
mov ecx, dword [0x140004630]
mov dword [rbp + 0x70], ecx
movzx ecx, word [0x140004634]
mov word [rbp + 0x74], cx
xor r13d, r13d
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
lea rax, [0x140001a40]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], rbx
lea rax, [rbp + 0x50]
mov qword [rbp - 0x60], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp - 0x78], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0xc8
mov dword [rsp + 0x30], 0xc8
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
mov r9d, 0x80000000
xor r8d, r8d
lea rdx, [rbp + 0x50]
mov ecx, 0x8080028
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r12, rax
mov r9d, 3
mov r8b, 0xb4
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
test r12, r12
jne 0x140002018
xor eax, eax
mov rcx, qword [rbp + 0x78]
xor rcx, rsp
call fcn.1400024d0
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, 0xa
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov esi, 0x50
mov dword [rbp - 0x48], 0x190050
mov edx, dword [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
mov dword [rbp - 0x50], r13d
mov dword [rbp - 0x4c], 0x18004f
lea r8, [rbp - 0x50]
mov edx, 1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x48], r13d
lea rdx, str.Roblox
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14000249a
lea rdx, [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp - 0x48]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
mov qword [rbp - 0x40], rax
call fcn.140001280
mov rbx, rax
mov qword [rbp - 0x38], rax
lea rdx, str.______RobloxPlayerBeta.exe_Found
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400017b0
mov rcx, rax
lea rdx, [0x140001990]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rbp - 0x50], r13
lea rcx, [rbp - 0x50]
call fcn.1400015b0
lea rdx, str.______Initializing_Aimbot..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400017b0
mov rcx, rax
lea rdx, [0x140001990]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rbp - 0x50], 1
lea rcx, [rbp - 0x50]
call fcn.1400015b0
lea rdx, str.______Aimbot_Initialized.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400017b0
mov rcx, rax
lea rdx, [0x140001990]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rbp - 0x50], r13
lea rcx, [rbp - 0x50]
call fcn.1400015b0
lea rdx, str.______Created_Overlay_Window
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400017b0
mov rcx, rax
lea rdx, [0x140001990]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rdx, [rbx + 0x100]
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp - 8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, qword [rbp - 8]
test r15, r15
jne 0x1400021c9
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xffffffff
jmp 0x140001fd2
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
movss xmm9, dword [0x14000463c]
movss xmm10, dword [0x140004648]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140002252
nop
lea rcx, [rbp]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140002220
lea rcx, [rbp - 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov r9d, dword [rbp - 0x4c]
add r9d, 0xffffff9c
mov r8d, dword [rbp - 0x50]
add r8d, 0xffffff9c
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xc8
mov dword [rsp + 0x20], 0xc8
mov rdx, 0xffffffffffffffff
mov rcx, r12
call qword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, 0x51
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400022b9
cmp byte [0x14000772c], 0
sete byte [0x14000772c]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14000772c], 0
je 0x1400023c3
mov rdx, r15
lea rcx, [rbp - 0x40]
call fcn.140001b60
mov rdi, rax
test rax, rax
je 0x1400023c3
lea rdx, [r15 + 0x140]
mov qword [rsp + 0x20], r13
mov r9d, 0xc
lea r8, [rbp + 0x40]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rdi + 0x140]
mov qword [rsp + 0x20], r13
mov r9d, 0xc
lea r8, [rbp + 0x30]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x30]
subss xmm6, dword [rbp + 0x40]
movss xmm7, dword [rbp + 0x34]
subss xmm7, dword [rbp + 0x44]
movss xmm1, dword [rbp + 0x38]
subss xmm1, dword [rbp + 0x48]
movaps xmm2, xmm7
mulss xmm2, xmm7
movaps xmm0, xmm6
mulss xmm0, xmm6
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140002369
xorps xmm8, xmm8
sqrtss xmm8, xmm2
jmp 0x140002375
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm8, xmm0
lea rcx, [rbp - 0x48]
call qword [sym.imp.USER32.dll_GetCursorPos]
divss xmm7, xmm8
mulss xmm7, xmm9
mulss xmm7, xmm10
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rbp - 0x44]
addss xmm7, xmm1
cvttss2si edx, xmm7
divss xmm6, xmm8
mulss xmm6, xmm9
mulss xmm6, xmm10
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rbp - 0x48]
addss xmm6, xmm0
cvttss2si ecx, xmm6
call qword [sym.imp.USER32.dll_SetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov ecx, eax
sub ecx, r14d
cmp ecx, 0x64
jb 0x14000247e
mov r8b, 0x20
mov edx, 0x14
lea rcx, [rbp - 0x28]
call fcn.1400014a0
mov rdi, r13
nop dword [rax]
lea rbx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rbx, qword [rbp - 0x28]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1a
sub r8d, ecx
add r8b, 0x41
mov byte [rdi + rbx], r8b
inc rdi
cmp rdi, 0x14
jl 0x1400023f0
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x14000247b
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002476
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002493
call fcn.14000252c
mov r14d, esi
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x50
jmp 0x140002200
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp - 0x40]
call fcn.1400011c0
lea rdx, [0x1400051f0]
lea rcx, [rbp - 0x40]
call sub.VCRUNTIME140.dll__CxxThrowException
int3