Function at 0x140057f18
Capabilities:
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0x288
mov rax, qword [0x14017c138]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov eax, dword [0x14017ce50]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140057f52
cmp dword [rsp + 0x40], 1
je 0x140057f5e
cmp dword [rsp + 0x40], 2
je 0x140057f6a
jmp 0x140057f74
mov dword [reloc.WS2_32.dll_closesocket], 1
jmp 0x140057f74
mov dword [reloc.WS2_32.dll_closesocket], 0
jmp 0x140057f74
mov dword [reloc.WS2_32.dll_closesocket], 2
cmp dword [reloc.WS2_32.dll_connect], 0
jne 0x140057f99
mov byte [0x14017ce7d], 0
mov byte [0x14017ce67], 0
mov byte [reloc.WS2_32.dll_accept], 1
mov byte [0x14017ce6b], 0
cmp dword [reloc.WS2_32.dll_connect], 1
jne 0x140057fbe
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017ce7d], 0
mov byte [0x14017ce67], 1
mov byte [0x14017ce6b], 0
cmp dword [reloc.WS2_32.dll_connect], 2
jne 0x140057fe3
mov byte [0x14017ce67], 0
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017ce7d], 1
mov byte [0x14017ce6b], 0
cmp dword [reloc.WS2_32.dll_connect], 3
jne 0x140058008
mov byte [0x14017ce67], 0
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017ce7d], 0
mov byte [0x14017ce6b], 1
call fcn.14001dda4
call fcn.14001e738
call fcn.14000d1e0
call fcn.1400448dc
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x140058056
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x140058044
mov dword [rsp + 0x44], 1
jmp 0x14005804c
mov dword [rsp + 0x44], 0
mov al, byte [rsp + 0x44]
mov byte [reloc.WS2_32.dll_accept], al
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x140058c71
lea rdx, str.Betaware_Cheats
lea rcx, [rsp + 0x1c8]
call fcn.14003d6fc
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d3c8], eax
jle 0x1400580fc
lea rcx, [0x14017d3c8]
call fcn.1400b640c
cmp dword [0x14017d3c8], 0xffffffff
jne 0x1400580fc
mov dword [rsp + 0x20], 0xff
mov r9d, 0xf9
mov r8d, 0x7d
mov edx, reloc.WLDAP32.dll_Ordinal_79
lea rcx, [rsp + 0x178]
call fcn.14003f638
mov qword [rsp + 0x50], rax
lea rdx, [0x14017d3b8]
mov rcx, qword [rsp + 0x50]
call fcn.140041cb4
nop
lea rcx, [0x14017d3c8]
call fcn.1400b63ac
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d3e0], eax
jle 0x14005817f
lea rcx, [0x14017d3e0]
call fcn.1400b640c
cmp dword [0x14017d3e0], 0xffffffff
jne 0x14005817f
mov dword [rsp + 0x20], 0xff
mov r9d, 0xff
mov r8d, 0xff
mov edx, 0xff
lea rcx, [rsp + 0x188]
call fcn.14003f638
mov qword [rsp + 0x58], rax
lea rdx, [0x14017d3d0]
mov rcx, qword [rsp + 0x58]
call fcn.140041cb4
nop
lea rcx, [0x14017d3e0]
call fcn.1400b63ac
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d3f8], eax
jle 0x1400581fc
lea rcx, [0x14017d3f8]
call fcn.1400b640c
cmp dword [0x14017d3f8], 0xffffffff
jne 0x1400581fc
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
xor r8d, r8d
mov edx, 0xff
lea rcx, [rsp + 0x198]
call fcn.14003f638
mov qword [rsp + 0x60], rax
lea rdx, [0x14017d3e8]
mov rcx, qword [rsp + 0x60]
call fcn.140041cb4
nop
lea rcx, [0x14017d3f8]
call fcn.1400b63ac
xor ecx, ecx
call fcn.14001724c
lea rcx, [rsp + 0x1e0]
call fcn.140011d24
mov byte [rsp + 0x228], 1
mov byte [rsp + 0x200], 1
mov dword [rsp + 0x1f8], 3
mov dword [rsp + 0x1fc], 3
call fcn.140008ad0
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x98]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x14012a544]
lea rdx, str.C:WindowsFontscourbi.ttf
mov rcx, qword [rsp + 0x70]
call fcn.140012704
call fcn.140008f64
mov qword [rsp + 0xc0], rax
movss xmm2, dword [0x14012a598]
movss xmm1, dword [0x14012a5a4]
lea rcx, [rsp + 0x78]
call fcn.14003f6cc
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.14000f548
mov r8d, reloc.WLDAP32.dll_Ordinal_27
xor edx, edx
lea rcx, [0x1400c02de]
call fcn.140002f1c
xorps xmm2, xmm2
movss xmm1, dword [0x1400bc23c]
lea rcx, [rsp + 0xc8]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
movss xmm2, dword [0x14012a59c]
movss xmm1, dword [0x14012a568]
lea rcx, [rsp + 0xd0]
call fcn.14003f6cc
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.tabs
call fcn.140005514
movss xmm2, dword [0x14012a548]
movss xmm1, dword [0x1400c021c]
lea rcx, [rsp + 0xd8]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
movss xmm2, dword [0x14012a558]
movss xmm1, dword [0x14012a564]
lea rcx, [rsp + 0xe0]
call fcn.14003f6cc
mov rdx, rax
lea rcx, str.Aimbot
call fcn.1400226a4
xor ecx, ecx
call fcn.140009c74
movzx eax, al
test eax, eax
je 0x140058378
mov dword [0x14017ce54], 0
call fcn.140027ab4
call fcn.140027ab4
movss xmm2, dword [0x14012a560]
movss xmm1, dword [0x1400c021c]
lea rcx, [rsp + 0xe8]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
movss xmm2, dword [0x14012a558]
movss xmm1, dword [0x14012a564]
lea rcx, [rsp + 0xf0]
call fcn.14003f6cc
mov rdx, rax
lea rcx, str.Visuals
call fcn.1400226a4
xor ecx, ecx
call fcn.140009c74
movzx eax, al
test eax, eax
je 0x1400583eb
mov dword [0x14017ce54], 1
call fcn.140027ab4
call fcn.140027ab4
movss xmm2, dword [0x14012a56c]
movss xmm1, dword [0x1400c021c]
lea rcx, [rsp + 0xf8]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
movss xmm2, dword [0x14012a558]
movss xmm1, dword [0x14012a564]
lea rcx, [rsp + 0x100]
call fcn.14003f6cc
mov rdx, rax
lea rcx, str.Exploits
call fcn.1400226a4
xor ecx, ecx
call fcn.140009c74
movzx eax, al
test eax, eax
je 0x14005845e
mov dword [0x14017ce54], 2
call fcn.140027ab4
call fcn.140027ab4
movss xmm2, dword [0x14012a578]
movss xmm1, dword [0x1400c021c]
lea rcx, [rsp + 0x108]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
movss xmm2, dword [0x14012a558]
movss xmm1, dword [0x14012a564]
lea rcx, [rsp + 0x110]
call fcn.14003f6cc
mov rdx, rax
lea rcx, str.Settings
call fcn.1400226a4
xor ecx, ecx
call fcn.140009c74
movzx eax, al
test eax, eax
je 0x1400584d1
mov dword [0x14017ce54], 3
call fcn.140027ab4
call fcn.140027ab4
movss xmm2, dword [0x14012a594]
movss xmm1, dword [0x1400c021c]
lea rcx, [rsp + 0x118]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
movss xmm2, dword [0x14012a558]
movss xmm1, dword [0x14012a564]
lea rcx, [rsp + 0x120]
call fcn.14003f6cc
mov rdx, rax
lea rcx, str.Exit
call fcn.1400226a4
xor ecx, ecx
call fcn.140009c74
movzx eax, al
test eax, eax
je 0x140058542
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.140007058
movss xmm2, dword [0x1400bc208]
movss xmm1, dword [0x1400bc218]
lea rcx, [rsp + 0x128]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
movss xmm2, dword [0x14012a590]
movss xmm1, dword [0x14012a584]
lea rcx, [rsp + 0x130]
call fcn.14003f6cc
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.menu
call fcn.140005514
cmp dword [0x14017ce54], 0
jne 0x140058640
lea rcx, str._________Aim_Assistance
call fcn.140027af4
call fcn.140027158
lea rcx, [0x1400c034c]
call fcn.140027af4
lea rdx, [0x140158aaf]
lea rcx, str.Aimbot_Enable
call fcn.140022da0
lea rdx, [0x140167acd]
lea rcx, str.Memory_Aimbot_Enable
call fcn.140022da0
lea rdx, [0x140167ace]
lea rcx, str.FOV_Circle
call fcn.140022da0
movss xmm1, dword [0x1400bc23c]
xorps xmm0, xmm0
call fcn.14000ed88
call fcn.140027ab4
mov r9d, 0xffffffff
lea r8, str.Circle
lea rdx, [0x14017a824]
lea rcx, [0x1400c02df]
call fcn.1400234dc
call fcn.140027ab4
call fcn.140027ab4
cmp dword [0x14017ce54], 1
jne 0x140058761
lea rcx, str.________Visual_Assistance
call fcn.140027af4
call fcn.140027158
lea rcx, [0x1400c038c]
call fcn.140027af4
lea rdx, [0x14017ce75]
lea rcx, str.Cornered_Box
call fcn.140022da0
lea rdx, [0x14017ce65]
lea rcx, str.2D_Box_Esp
call fcn.140022da0
lea rdx, [0x14017ce7e]
lea rcx, str.Filled_Box_Esp
call fcn.140022da0
lea rdx, [0x14017ce60]
lea rcx, str.3D_Box_Esp
call fcn.140022da0
lea rdx, [0x14017ce62]
lea rcx, str.Dynamic_Esp
call fcn.140022da0
lea rdx, [0x14017ce78]
lea rcx, str.Snaplines
call fcn.140022da0
lea rdx, [0x14017ce64]
lea rcx, str.Crosshair_Snapline
call fcn.140022da0
lea rdx, [0x14017ce5f]
lea rcx, str.Headdot_Esp
call fcn.140022da0
lea rdx, [0x14017ce71]
lea rcx, str.Germany_Croshair
call fcn.140022da0
lea rdx, [0x14017ce5b]
lea rcx, str.Head_Esp
call fcn.140022da0
lea rdx, [0x14017ce70]
lea rcx, str.Triangle_Esp
call fcn.140022da0
lea rdx, [0x14017ce6c]
lea rcx, str.Skeleton_Esp
call fcn.140022da0
lea rdx, [0x14017ce5a]
lea rcx, str.Reload_Check
call fcn.140022da0
cmp dword [0x14017ce54], 2
jne 0x140058832
lea rcx, str.___________Exploits
call fcn.140027af4
call fcn.140027158
lea rcx, [0x1400c03bc]
call fcn.140027af4
lea rdx, [0x14017ce4f]
lea rcx, str.Slowmotion__Hold_Shift_
call fcn.140022da0
lea rdx, [0x14017ce5e]
lea rcx, str.Big_Player
call fcn.140022da0
lea rdx, [0x14017ce63]
lea rcx, str.Tiny_Player
call fcn.140022da0
lea rdx, [0x14017ce4d]
lea rcx, str.infinite_Car_Fuel
call fcn.140022da0
lea rdx, [0x14017ce58]
lea rcx, str.AirStuck__Hold_Shift_
call fcn.140022da0
lea rdx, [0x14017ce5c]
lea rcx, str.Spinbot
call fcn.140022da0
lea rdx, [0x14017ce68]
lea rcx, str.No_Recoil
call fcn.140022da0
call fcn.140027ab4
lea rcx, str.NOTE_:
call fcn.140027af4
call fcn.140027ab4
lea rcx, str.__EXPLOITS_HAVE_A_HIGH_BAN_RISK__
call fcn.140027af4
cmp dword [0x14017ce54], 3
jne 0x1400588ac
lea rcx, str.___________Information
call fcn.140027af4
call fcn.140027158
lea rcx, [0x1400c03dc]
call fcn.140027af4
call fcn.140027ab4
mov rdx, qword [0x14017cc18]
lea rcx, str.__Base_ID_:__p__
call fcn.140027af4
lea rcx, str.__Updated_to_latest_Patch_28.06.2023__
call fcn.140027af4
lea rcx, str.__Discord__discord.gg_dbtARh6TJR__
call fcn.140027af4
lea rcx, str.__Working_on_Windows_10___11_50_50__
call fcn.140027af4
lea rcx, str.__If_the_menu_or_cheat_has_any_issues__
call fcn.140027af4
lea rcx, str.please_report_it_the_server___
call fcn.140027af4
call fcn.140007058
movss xmm2, dword [0x1400bc208]
movss xmm1, dword [0x14012a58c]
lea rcx, [rsp + 0x138]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
movss xmm2, dword [0x14012a590]
movss xmm1, dword [0x14012a584]
lea rcx, [rsp + 0x140]
call fcn.14003f6cc
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.menu2
call fcn.140005514
cmp dword [0x14017ce54], 0
jne 0x140058a8d
lea rcx, str.__________Aim_Settings
call fcn.140027af4
call fcn.140027158
lea rcx, [0x1400c041c]
call fcn.140027af4
movss xmm2, dword [0x1400c021c]
movss xmm1, dword [0x14012a58c]
lea rcx, [rsp + 0x148]
call fcn.14003f6cc
mov rcx, rax
call fcn.14000f28c
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
call fcn.140027ab4
lea rcx, str.Aimbot_FOV_Value
call fcn.140027af4
movss xmm0, dword [0x1400bc1e4]
movss dword [rsp + 0x28], xmm0
lea rax, [0x1400c07cc]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14012a5a0]
movss xmm2, dword [0x14012a574]
lea rdx, [0x14017a820]
lea rcx, [0x1400c07d8]
call fcn.1400273fc
call fcn.140027ab4
lea rcx, str.Aimbot_Smoothness
call fcn.140027af4
movss xmm0, dword [0x1400bc1e4]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14012a55c]
movss xmm2, dword [0x1400bc1ec]
lea rdx, [0x14017a818]
lea rcx, [0x1400c0810]
call fcn.1400273fc
call fcn.140027ab4
lea rcx, str.Aimbot_Key
call fcn.140027af4
mov r8d, dword [0x14017d008]
lea rdx, [0x1400437d8]
mov ecx, dword [0x14017cc34]
call fcn.14004c0a4
call fcn.140027ab4
lea rcx, str.Aimbot_Bone
call fcn.140027af4
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, str.Head
lea rdx, [0x14017d31c]
lea rcx, [0x1400c0840]
call fcn.14002365c
call fcn.140027ab4
cmp dword [0x14017ce54], 1
jne 0x140058b07
lea rcx, str._________Visual_Settings
call fcn.140027af4
call fcn.140027158
lea rcx, [0x1400c0434]
call fcn.140027af4
call fcn.140027ab4
lea rcx, str.Max_Esp_Distance
call fcn.140027af4
lea rax, [0x1400c0454]
mov qword [rsp + 0x20], rax
mov r9d, 0x3e8
mov r8d, 0x1f4
lea rdx, [0x14017c0a0]
lea rcx, str.MaxDistance
call fcn.140027444
call fcn.140027ab4
lea rdx, [0x14017a80c]
lea rcx, str.Distance_Esp
call fcn.140022da0
cmp dword [0x14017ce54], 2
jne 0x140058b66
lea rcx, str._________Misc_Settings
call fcn.140027af4
call fcn.140027158
lea rcx, [0x1400c04a4]
call fcn.140027af4
lea rdx, [0x140158aad]
lea rcx, str.watermarket
call fcn.140022da0
lea rdx, [0x14017ce6e]
lea rcx, str.FPS_Counter
call fcn.140022da0
lea rdx, [0x14017ce79]
lea rcx, str.Stream_Proof
call fcn.140022da0
cmp dword [0x14017ce54], 3
jne 0x140058c71
lea rcx, str.___________Other_Information
call fcn.140027af4
call fcn.140027158
lea rcx, [0x1400c04d4]
call fcn.140027af4
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
mov r8d, 0xff
mov edx, reloc.WLDAP32.dll_Ordinal_26
lea rcx, [rsp + 0x1a8]
call fcn.14003f638
mov qword [rsp + 0x80], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x80]
call fcn.140041cb4
lea rdx, str.__Currently_Undetected_on_EAC__
lea rcx, [rsp + 0x158]
call fcn.140027b1c
mov dword [rsp + 0x20], 0xff
mov r9d, reloc.WS2_32.dll_recv
mov r8d, 0xa7
mov edx, 0xe8
lea rcx, [rsp + 0x1b8]
call fcn.14003f638
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x168]
mov rcx, qword [rsp + 0x88]
call fcn.140041cb4
lea rdx, str.__Currently_Semi_Detected_on_BE__
lea rcx, [rsp + 0x168]
call fcn.140027b1c
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x150]
call fcn.14003f6cc
mov rdx, rax
lea rcx, str.Discord_Server__Click_me_
call fcn.1400226a4
movzx eax, al
test eax, eax
je 0x140058c71
lea rcx, str.start_https:__discord.gg_dbtARh6TJR
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400448dc
call fcn.140007560
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x90], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x14017d328]
call qword [rsp + 0x90]
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x98], rax
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov rcx, qword [0x14017d328]
call qword [rsp + 0x98]
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xa0], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x14017d328]
call qword [rsp + 0xa0]
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x1400bc1e4]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14017d328]
call qword [rsp + 0xa8]
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rcx, qword [0x14017d328]
call qword [rax + 0x148]
test eax, eax
jl 0x140058d9c
call fcn.14000df2c
call fcn.140008968
mov rcx, rax
call fcn.14001ddbc
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rcx, qword [0x14017d328]
call qword [rax + 0x150]
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14017d328]
call qword [rsp + 0xb0]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x88760868
jne 0x140058e35
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rcx, qword [0x14017d328]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140058e35
call fcn.14001dd2c
mov rax, qword [0x14017d328]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0xb8], rax
lea rdx, [0x14017cf00]
mov rcx, qword [0x14017d328]
call qword [rsp + 0xb8]
call fcn.14001dbc4
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.1400b65b0
add rsp, 0x288
ret