Function at 0x140033870
Capabilities:
Execute command
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x70
mov rax, qword [0x1403765c0]
xor rax, rsp
mov qword [rsp + 0x60], rax
call fcn.14002aad0
call fcn.14002b990
call fcn.1400104c0
call fcn.14000aab0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rdi, [rsp + 0x78]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rdi
mov rbx, qword [rdi]
mov rax, rbx
xor rax, rcx
mov qword [rsp + 0x38], rax
mov qword [rdi], 0
mov rax, qword [0x140376890]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call rax
nop
mov qword [rdi], rbx
mov rcx, qword [0x140376ba0]
test al, 1
je 0x140033904
cmp byte [rcx + 8], 0
sete al
mov byte [rcx + 8], al
cmp byte [rcx + 9], 0
sete al
mov byte [rcx + 9], al
cmp byte [rcx + 0xa4], 0
je 0x140033999
cmp byte [rcx + 0xa7], 0
je 0x140033999
call fcn.14000aab0
mov rbx, rax
movaps xmm0, xmmword [0x14008a050]
movups xmmword [rsp + 0x38], xmm0
lea rcx, [rsp + 0x38]
call fcn.140008b40
mov r9d, eax
mov rcx, qword [0x140376ba0]
movd xmm2, dword [rcx + 0xa0]
cvtdq2ps xmm2, xmm2
mov eax, dword [rcx + 4]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [rcx]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x30], xmm0
movss dword [rsp + 0x34], xmm1
movss xmm1, dword [0x1400849d4]
movss dword [rsp + 0x28], xmm1
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_33
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.14001a5c0
mov rcx, qword [0x140376b80]
call fcn.140031360
mov rax, qword [0x140376ba0]
cmp byte [rax + 8], 0
je 0x140033b35
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov rax, qword [0x140376ba0]
cmp byte [rax + 0x64], 0
jne 0x1400339f0
lea rcx, [0x14008b150]
call fcn.14001a1e0
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov rax, qword [0x140376ba0]
jns 0x1400339f0
mov byte [rax + 0x64], 1
cmp byte [rax + 0x64], 1
jne 0x140033a1d
lea rcx, str._n_F1__Box_ESP:_ON
call fcn.14001a1e0
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov rax, qword [0x140376ba0]
jns 0x140033a1d
mov byte [rax + 0x64], 0
cmp byte [rax + 0x7c], 0
jne 0x140033a4a
lea rcx, str._n_F2__Aimbot:_OFF
call fcn.14001a1e0
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov rax, qword [0x140376ba0]
jns 0x140033a4a
mov byte [rax + 0x7c], 1
cmp byte [rax + 0x7c], 1
jne 0x140033a77
lea rcx, str._n_F2__Aimbot:_ON
call fcn.14001a1e0
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140033a77
mov rax, qword [0x140376ba0]
mov byte [rax + 0x7c], 0
lea rcx, str._n_UP_ARROW__Increase_FOV
call fcn.14001a1e0
mov ecx, Ordinal_41
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140033aa1
mov rax, qword [0x140376ba0]
add dword [rax + 0xa0], 0xa
lea rcx, str._n_DOWN_ARROW__Decrease_FOV
call fcn.14001a1e0
mov ecx, Ordinal_41
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140033acb
mov rax, qword [0x140376ba0]
add dword [rax + 0xa0], 0xfffffff6
lea rcx, str._n_RIGHT_ARROW__Increase_Smoothing
call fcn.14001a1e0
mov ecx, Ordinal_41
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140033af4
mov rax, qword [0x140376ba0]
inc dword [rax + 0x9c]
lea rcx, str._n_LEFT_ARROW__Decrease_Smoothing
call fcn.14001a1e0
mov ecx, Ordinal_41
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140033b1d
mov rax, qword [0x140376ba0]
dec dword [rax + 0x9c]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14008b0f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000b000
call fcn.140011b90
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov rcx, qword [0x140376a18]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140376a28]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x140376a18]
mov rax, qword [rcx]
lea r8, [rsp + 0x50]
mov rdx, qword [0x140376a28]
call qword [rax + 0x190]
call fcn.14000acc0
mov rcx, rax
call fcn.14002ab10
mov rcx, qword [0x140376a20]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [rax + 0x40]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14007f680
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rdi
ret