Function at 0x1400488e0
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov r11, rsp
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1400db098]
xor rax, rsp
mov qword [rbp - 0x18], rax
cmp byte [reloc.WS2_32.dll_accept], 0
movaps xmmword [rsp + 0x60], xmm6
movss xmm6, dword [0x1400ca18c]
mov dword [reloc.WS2_32.dll_bind], 2
je 0x140048a06
mov rax, qword [0x1400dc580]
lea r8, str.Foreground
mov qword [r11 + 8], rbx
mov edx, 1
mov qword [r11 + 0x10], rdi
mov rcx, qword [rax + 0x48b0]
mov rcx, qword [rcx]
call fcn.140007d40
movaps xmm0, xmmword [0x1400ca470]
lea rcx, [rbp - 0x28]
movups xmmword [rbp - 0x28], xmm0
mov rbx, rax
call fcn.140004000
mov rcx, qword [0x1400dc580]
mov edi, eax
movss xmm1, dword [0x1400ca150]
movd xmm2, dword [0x1400db0f0]
cvtdq2ps xmm2, xmm2
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm1
movss dword [rbp - 0x28], xmm0
movss xmm0, dword [rcx + 0x14]
mulss xmm0, xmm1
movss dword [rbp - 0x24], xmm0
test eax, 0xff000000
je 0x1400489f6
comiss xmm1, xmm2
ja 0x1400489f6
movss xmm0, dword [0x1400ca220]
subss xmm2, xmm1
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp - 0x28]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140027060
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], 1
call fcn.1400255e0
mov dword [rbx + 0x78], 0
mov rbx, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm6, xmmword [rsp + 0x60]
test al, 1
je 0x140048a2c
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x140048a33
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
je 0x140048dc1
mov rax, qword [0x1400dc580]
lea rcx, str.SubZero_Free_External
xor edx, edx
or dword [rax + 0x47b0], 2
lea r8d, [rdx + 0x22]
mov dword [rax + 0x47d0], 0x438c0000
mov dword [rax + 0x47d4], 0x44480000
mov dword [rax + 0x47b8], 2
call fcn.14000db90
lea rcx, str.Aimbot
call fcn.140031220
lea rdx, [0x1400db0f4]
lea rcx, str.Enable_Aimbot
call fcn.140032bc0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140048bb3
lea rdx, [0x1400db0ec]
lea rcx, str.Show_Fov
call fcn.140032bc0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140048b61
mov rcx, qword [0x1400dc580]
lea r9, [rbp - 0x28]
lea r8, [0x1400db0f0]
mov dword [rbp - 0x30], Ordinal_301
mov dword [rbp - 0x28], reloc.WLDAP32.dll_Ordinal_50
or dword [rcx + 0x4760], 1
mov rax, qword [rcx + 0x3ed8]
mov dword [rcx + 0x4764], 0x43160000
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.Fov_Radius
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, dword [0x1400ca228]
addss xmm0, dword [0x1400ca250]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
call fcn.140035070
lea rcx, str.Smoothness_Depends_on_Sens
call fcn.140031220
mov rax, qword [0x1400dc580]
lea r9, [rbp - 0x30]
lea r8, [0x1400db0e8]
mov dword [rbp - 0x28], reloc.WS2_32.dll_ntohs
lea rcx, str.Smoothness
mov dword [rbp - 0x30], 5
or dword [rax + 0x4760], 1
mov dword [rax + 0x4764], 0x43160000
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
call fcn.140035070
lea rcx, [0x1400c999c]
call fcn.140031220
lea rdx, [0x1400db0f5]
lea rcx, str.Enable_Visuals
call fcn.140032bc0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140048ca5
lea rdx, [0x1400dcb22]
lea rcx, str.Name_ESP
call fcn.140032bc0
lea rdx, [0x1400dcb24]
lea rcx, str.Weapon_ESP
call fcn.140032bc0
lea rdx, [0x1400dcb26]
lea rcx, [0x1400c906c]
call fcn.140032bc0
lea rdx, [0x1400dcb23]
lea rcx, str.ThreeDBox
call fcn.140032bc0
lea rdx, [0x1400dcb20]
lea rcx, str.Fill_Box
call fcn.140032bc0
lea rdx, [0x1400dcb21]
lea rcx, str.Line
call fcn.140032bc0
lea rdx, [0x1400dcb25]
lea rcx, str.Distance
call fcn.140032bc0
lea rdx, [0x1400db0f6]
lea rcx, str.Crosshair
call fcn.140032bc0
lea rax, [rbp - 0x28]
mov dword [rbp - 0x28], 0x9c4
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r8, reloc.WLDAP32.dll_Ordinal_200
mov dword [rbp - 0x30], reloc.WS2_32.dll_select
lea rcx, str.Distance
call fcn.140035070
movss xmm0, dword [0x1400dc5a0]
lea rdx, [rbp - 0x28]
movss xmm1, dword [0x1400dc5a4]
lea rcx, str.Visible_Color
xor r9d, r9d
movss dword [rbp - 0x28], xmm0
movss xmm0, dword [0x1400dc5a8]
movss dword [rbp - 0x24], xmm1
movss dword [rbp - 0x20], xmm0
lea r8d, [r9 + 0x22]
mov dword [rbp - 0x1c], 0x3f800000
call fcn.14003c900
test al, al
je 0x140048d15
movss xmm0, dword [rbp - 0x28]
movss xmm1, dword [rbp - 0x24]
movss dword [0x1400dc5a0], xmm0
movss xmm0, dword [rbp - 0x20]
movss dword [0x1400dc5a8], xmm0
movss dword [0x1400dc5a4], xmm1
movss xmm0, dword [0x1400dc608]
lea rdx, [rbp - 0x28]
movss xmm1, dword [0x1400dc60c]
lea rcx, str.InVisible_Color
xor r9d, r9d
movss dword [rbp - 0x28], xmm0
movss xmm0, dword [0x1400dc610]
movss dword [rbp - 0x24], xmm1
movss dword [rbp - 0x20], xmm0
lea r8d, [r9 + 0x22]
mov dword [rbp - 0x1c], 0x3f800000
call fcn.14003c900
test al, al
je 0x140048d85
movss xmm0, dword [rbp - 0x28]
movss xmm1, dword [rbp - 0x24]
movss dword [0x1400dc608], xmm0
movss xmm0, dword [rbp - 0x20]
movss dword [0x1400dc610], xmm0
movss dword [0x1400dc60c], xmm1
lea rcx, str.Misc
call fcn.140031220
lea rdx, [rbp - 0x28]
mov dword [rbp - 0x28], 0x42f00000
lea rcx, str.Unload
mov dword [rbp - 0x24], 0x41a00000
call fcn.140031c10
test al, al
je 0x140048dbc
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000fe40
mov rcx, qword [rbp - 0x18]
xor rcx, rsp
call fcn.1400afce0
add rsp, 0x70
pop rbp
ret