Function at 0x4389d0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x158
mov eax, dword [0x445040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x4452c9], 0
push esi
push edi
je 0x438a21
cmp byte [0x4452ca], 0
je 0x438a3f
push 0x11
push dword [0x46f980]
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov byte [0x4452ca], 0
jmp 0x438a3f
cmp byte [0x4452ca], 0
jne 0x438a3f
push 0
push dword [0x46f980]
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov byte [0x4452ca], 1
cmp dword [0x46febc], 0
jne 0x438a56
cmp dword [0x46fec4], 0
je 0x438a56
call fcn.00421930
mov esi, dword [0x46f850]
lea eax, [ebp - 0x150]
push eax
push dword [0x46fecc]
mov dword [ebp - 0x10c], esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x148]
sub eax, dword [ebp - 0x150]
movd xmm1, eax
mov eax, dword [ebp - 0x144]
sub eax, dword [ebp - 0x14c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
lea eax, [ebp - 0x128]
cvtdq2ps xmm0, xmm0
push eax
movss dword [esi + 0x10], xmm1
movss dword [esi + 0x14], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [ebp - 0x128]
mov ecx, edi
sub ecx, dword [0x46fed0]
mov esi, dword [ebp - 0x124]
mov edx, esi
sbb edx, dword [0x46fed4]
call fcn.0043c0f0
mov edx, dword [0x46fedc]
mov ecx, dword [0x46fed8]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x134], xmm0
call fcn.0043c0f0
movss xmm1, dword [ebp - 0x134]
cvtsd2ss xmm0, xmm0
mov eax, dword [ebp - 0x10c]
push 0x11
divss xmm1, xmm0
movss dword [eax + 0x18], xmm1
mov dword [0x46fed4], esi
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
mov dword [0x46fed0], edi
call esi
mov edi, dword [ebp - 0x10c]
shr eax, 0xf
and al, 1
push 0x10
mov byte [edi + 0xfc], al
call esi
shr eax, 0xf
and al, 1
push 0x12
mov byte [edi + 0xfd], al
call esi
mov ecx, dword [0x46f850]
shr eax, 0xf
and al, 1
mov byte [edi + 0xff], 0
mov byte [edi + 0xfe], al
cmp byte [ecx + 0x37b], 0
lea esi, [ecx + 0xe4]
je 0x438ba9
cvttss2si eax, dword [esi]
mov dword [ebp - 0x114], eax
cvttss2si eax, dword [ecx + 0xe8]
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push dword [0x46fecc]
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x110]
push dword [ebp - 0x114]
call dword [sym.imp.USER32.dll_SetCursorPos]
mov dword [esi], 0xff7fffff
mov dword [esi + 4], 0xff7fffff
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, dword [0x46fecc]
jne 0x438c0b
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x438c0b
lea eax, [ebp - 0x138]
push eax
push dword [0x46fecc]
call dword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x438c0b
movd xmm0, dword [ebp - 0x138]
movd xmm1, dword [ebp - 0x134]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [esi], xmm0
movss dword [esi + 4], xmm1
cmp byte [edi + 0xbc], 0
je 0x438c19
or eax, 0xffffffff
jmp 0x438c24
mov eax, dword [0x46f850]
mov eax, dword [eax + 0x1c58]
cmp dword [0x46efa8], eax
je 0x438c36
mov dword [0x46efa8], eax
call fcn.00421b30
call fcn.00405af0
push dword [0x46fa00]
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
call edi
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
test al, 1
je 0x438c65
cmp byte [0x46f99b], 0
push 1
sete byte [0x46f99b]
call esi
push dword [0x4452bc]
call edi
test al, 1
je 0x438c83
cmp byte [0x4452cb], 0
push 1
sete byte [0x4452cb]
call esi
push 0x70
call edi
test al, 1
je 0x438c9d
cmp byte [0x4452cb], 0
push 1
sete byte [0x4452cb]
call esi
cmp byte [0x4452cb], 0
je 0x438cab
call fcn.004358c0
cmp byte [0x46f99f], 0
movss xmm2, dword [0x442690]
movss xmm4, dword [0x442770]
je 0x438eb6
mov ecx, dword [0x46ec10]
xorps xmm3, xmm3
movsd xmm1, qword [0x4426e8]
mov eax, dword [0x46fe5c]
cdq
movd xmm0, ecx
sub eax, edx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
sar eax, 1
mov dword [ebp - 0x10c], eax
mov dword [0x46f988], eax
mov eax, dword [0x46fa0c]
cdq
addsd xmm0, qword [ecx*8 + 0x442950]
sub eax, edx
mov edi, dword [0x46f850]
mov edx, eax
add edi, 0x1be4
mov eax, dword [0x46ec14]
sar edx, 1
divsd xmm0, xmm1
mov dword [0x46f854], edx
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x442950]
mov eax, dword [0x46ec18]
divsd xmm0, xmm1
cvtpd2ps xmm5, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x442950]
mov eax, dword [0x46ec1c]
divsd xmm0, xmm1
cvtpd2ps xmm6, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x442950]
divsd xmm0, xmm1
movss xmm1, dword [ebp - 0x134]
comiss xmm3, xmm1
cvtpd2ps xmm7, xmm0
jbe 0x438da5
xorps xmm0, xmm0
jmp 0x438dac
movaps xmm0, xmm2
minss xmm0, xmm1
comiss xmm3, xmm5
movss xmm1, dword [0x44266c]
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si ecx, xmm0
jbe 0x438dca
xorps xmm0, xmm0
jmp 0x438dd1
movaps xmm0, xmm2
minss xmm0, xmm5
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm6
jbe 0x438dec
xorps xmm0, xmm0
jmp 0x438df3
movaps xmm0, xmm2
minss xmm0, xmm6
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm7
jbe 0x438e0e
xorps xmm2, xmm2
jmp 0x438e12
minss xmm2, xmm7
movd xmm0, dword [ebp - 0x10c]
mulss xmm2, xmm4
cvtdq2ps xmm0, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x128], xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
cvttss2si esi, xmm2
movss dword [ebp - 0x124], xmm0
shl esi, 0x18
or esi, ecx
test esi, 0xff000000
je 0x438eb6
movd xmm2, dword [0x4452d4]
lea eax, [ebp - 0x128]
cvtdq2ps xmm2, xmm2
push 0xff
push ecx
mov dword [esp], 0x40c84601
mov ecx, edi
push eax
subss xmm2, xmm1
call fcn.0041cfb0
push ecx
mov dword [esp], 0x3f800000
mov ecx, edi
push 1
push esi
push dword [edi + 0x54]
push dword [ecx + 0x5c]
call fcn.0041be80
mov ecx, dword [edi + 0x58]
test ecx, ecx
jns 0x438eaf
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x54]
call fcn.00413090
mov dword [edi + 0x54], 0
cmp byte [0x4452c8], 0
je 0x438fb8
mov eax, dword [0x46f850]
sub esp, 8
mov dword [ebp - 0x150], 0x90a08ad3
mov dword [ebp - 0x14c], 0xda4aa009
mov dword [ebp - 0x148], 0x612d26b0
movss xmm0, dword [eax + 0x380]
lea eax, [ebp - 0x150]
cvtps2pd xmm0, xmm0
mov dword [ebp - 0x144], 0x891468d0
mov dword [ebp - 0x130], 0xaaf3da95
mov dword [ebp - 0x12c], 0xf47a8529
mov dword [ebp - 0x128], 0x612d26d6
mov dword [ebp - 0x124], 0x891468d0
movaps xmm1, xmmword [ebp - 0x150]
movsd qword [esp], xmm0
push eax
movaps xmmword [ebp - 0x150], xmm1
lea eax, [ebp - 0x108]
xorps xmm1, xmmword [ebp - 0x130]
push eax
movaps xmmword [ebp - 0x150], xmm1
call fcn.004135e0
lea eax, [ebp - 0x108]
push eax
mov eax, 0x94f2095
imul dword [0x46fe5c]
push 0x46ea40
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, 0x43
call fcn.0042e640
add esp, 0x18
mov edx, 0x43
cmp byte [0x46f99b], 0
mov ecx, 0x370
je 0x438fa6
push str.AIMBOT_:_ON
push 0x46ea40
jmp 0x438fb0
push str.AIMBOT_:_OFF
push 0x46ea00
call fcn.0042e640
add esp, 8
cmp byte [0x46f99b], 0
mov edx, 0x46ea00
mov eax, 0x46ea40
mov ecx, 0x370
cmove eax, edx
mov edx, 0x43
push 0x43d44a
push eax
call fcn.0042e640
mov eax, dword [0x46f850]
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x150], 0xaaf3da95
mov dword [ebp - 0x14c], 0xf47a8529
mov dword [ebp - 0x148], 0x612d26d6
movss xmm0, dword [eax + 0x380]
cvtps2pd xmm0, xmm0
mov dword [ebp - 0x144], 0x891468d0
mov dword [ebp - 0x130], 0xaaf3da95
mov dword [ebp - 0x12c], 0xf47a8529
mov dword [ebp - 0x128], 0x612d26d6
mov dword [ebp - 0x124], 0x891468d0
movaps xmm1, xmmword [ebp - 0x150]
movsd qword [esp], xmm0
push ecx
movaps xmmword [ebp - 0x150], xmm1
lea ecx, [ebp - 0x108]
xorps xmm1, xmmword [ebp - 0x130]
push ecx
movaps xmmword [ebp - 0x150], xmm1
call fcn.004135e0
mov eax, 0x94f2095
lea ecx, [ebp - 0x108]
imul dword [0x46fe5c]
push ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, 0x43
push 0x46ea40
call fcn.0042e640
add esp, 0x18
call fcn.00433ba0
push 0
push 4
lea eax, [ebp - 0x110]
push eax
mov eax, dword [0x46fa08]
add eax, 0xe16ce8
push eax
push dword [0x46f990]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [ebp - 0x110]
lea eax, [ebp - 0x10c]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
add edi, 0xe16ce8
cmp byte [0x46f9fc], 0
push eax
push 0x40
push 4
push edi
push dword [0x46f990]
mov dword [ebp - 0x134], 0x451c4000
jne 0x43910a
mov dword [ebp - 0x134], 0x437f0000
call esi
push 0
push 4
lea eax, [ebp - 0x134]
push eax
push edi
push dword [0x46f990]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [ebp - 0x10c]
push eax
push dword [ebp - 0x10c]
push 4
push edi
push dword [0x46f990]
call esi
call fcn.00406c50
mov eax, dword [0x46f9f4]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x46f9f4]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x46f9f4]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x46f9f4]
push 0
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push 0
push 1
push 0
push 0
push eax
call dword [ecx + 0xac]
mov eax, dword [0x46f9f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x4391d7
call fcn.00407080
mov ecx, dword [0x46f850]
xor eax, eax
add ecx, 0x1ba4
cmp byte [ecx], al
cmove ecx, eax
call fcn.004210e0
mov eax, dword [0x46f9f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x46f9f4]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x439294
mov eax, dword [0x46f9f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x439294
cmp dword [0x46fec4], 0
je 0x439276
mov ecx, dword [0x46fec8]
test ecx, ecx
je 0x43922f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x46fec8], 0
mov ecx, dword [0x46fec0]
test ecx, ecx
je 0x439249
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x46fec0], 0
mov ecx, dword [0x46febc]
mov esi, dword [0x46f850]
test ecx, ecx
je 0x43925f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x46febc], 0
mov eax, dword [esi + 0x94]
mov dword [eax + 8], 0
mov eax, dword [0x46f9f4]
push 0x46f9b4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
cmp dword [0x46fec4], 0
je 0x439294
call fcn.00421930
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0043aac4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret