Function at 0x14003e510
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
movaps xmmword [rsp + 0x70], xmm8
movaps xmmword [rsp + 0x60], xmm9
mov rax, qword [0x14013dec0]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov ecx, dword [reloc.WS2_32.dll_accept]
test ecx, ecx
je 0x14003e553
cmp ecx, 1
jne 0x14003e55d
mov dword [reloc.WS2_32.dll_bind], 2
jmp 0x14003e55d
mov dword [reloc.WS2_32.dll_bind], 1
cmp byte [0x14013f8ec], 0
movss xmm9, dword [0x140126234]
movss xmm8, dword [0x140126200]
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], rdi
je 0x14003e658
mov rax, qword [0x14013f450]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48b0]
mov rcx, qword [rcx]
call fcn.140007400
movdqa xmm0, xmmword [0x140126600]
lea rcx, [rbp - 9]
movups xmmword [rbp - 9], xmm0
mov rbx, rax
call fcn.140003de0
mov rcx, qword [0x14013f450]
mov edi, eax
movss xmm0, dword [rcx + 0x10]
movss xmm1, dword [rcx + 0x14]
mulss xmm0, xmm8
mulss xmm1, xmm8
movss dword [rbp - 9], xmm0
movss dword [rbp - 5], xmm1
test eax, 0xff000000
je 0x14003e658
movss xmm2, dword [0x14013df6c]
comiss xmm8, xmm2
ja 0x14003e658
movss xmm0, dword [0x1401262c0]
subss xmm2, xmm8
mov dword [rsp + 0x28], 0x63
lea rdx, [rbp - 9]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm0
mov rcx, rbx
call fcn.140025880
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
call fcn.140023e10
mov dword [rbx + 0x78], 0
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003e679
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14003e680
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
je 0x14003ecba
mov rax, qword [0x14013f450]
lea rcx, [0x14011e046]
movdqa xmm0, xmmword [0x140126750]
xor edx, edx
movdqa xmm1, xmmword [0x140126780]
mov r8d, 0x23
movaps xmmword [rsp + 0x90], xmm6
mov dword [rax + 0x37d0], 0x41200000
mov dword [rax + 0x37d4], 0x41200000
mov dword [rax + 0x37d8], 0x40c00000
mov dword [rax + 0x3804], 0x41000000
mov dword [rax + 0x3808], 0x40a00000
mov dword [rax + 0x380c], 0x40800000
mov dword [rax + 0x3814], 0x41200000
mov dword [rax + 0x3818], 0x41000000
movups xmmword [rax + 0x38c4], xmm0
movdqa xmm0, xmmword [0x1401267d0]
movups xmmword [rax + 0x39f4], xmm1
movdqa xmm1, xmmword [0x140126820]
movups xmmword [rax + 0x3a04], xmm0
movdqa xmm0, xmmword [0x140126880]
movups xmmword [rax + 0x3a14], xmm1
movdqa xmm1, xmmword [0x140126580]
movups xmmword [rax + 0x38a4], xmm0
movups xmmword [rax + 0x3a54], xmm1
or dword [rax + 0x47b0], 2
mov dword [rax + 0x47d0], 0x442f0000
mov dword [rax + 0x47d4], 0x43fa0000
mov dword [rax + 0x47b8], 2
movaps xmmword [rsp + 0x80], xmm7
call fcn.14000d2c0
mov rcx, qword [0x14013f450]
xor edx, edx
mov qword [rbp - 9], 0x43480000
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rbx, qword [rcx + 0x3ed8]
lea rcx, str.Sidebar
movsxd rax, dword [rbx + 0xf0]
mov r8, qword [rbx + 0xf8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003850
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x3f20], eax
jne 0x14003e7e7
lea r8, str.Sidebar
mov edx, listen
mov ecx, eax
call fcn.14001a820
lea r8, [rbp - 9]
mov dword [rsp + 0x20], 8
mov edx, edi
lea rcx, str.Sidebar
call fcn.14000a610
mov rbx, qword [0x14013f450]
mov rcx, qword [rbx + 0x3ed8]
cmp qword [rcx + 0x1a8], 0
movss xmm6, dword [rcx + 0x250]
jne 0x14003e82b
cmp qword [rbx + 0x4b30], 0
je 0x14003e833
movss xmm6, dword [rcx + 0x220]
subss xmm6, dword [rcx + 0x100]
movss xmm7, dword [0x140126328]
lea rdi, str.ZENWARE
movss xmm3, dword [0x14012631c]
lea rdx, [rbp - 9]
movss xmm2, dword [rbx + 0x3c10]
mov rcx, qword [rbx + 0x3c08]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm7
call fcn.140029ed0
movss xmm0, dword [rbp - 9]
lea rcx, [rbp - 9]
addss xmm0, dword [0x14012622c]
mov rdx, rdi
cvttss2si eax, xmm0
movd xmm1, eax
mov rax, qword [rbx + 0x3ed8]
cvtdq2ps xmm1, xmm1
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
subss xmm6, xmm1
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
mulss xmm6, xmm8
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
movdqa xmm0, xmmword [0x1401268d0]
movups xmmword [rbp - 9], xmm0
call fcn.14002e890
mov rax, qword [0x14013f450]
movaps xmm6, xmmword [rsp + 0x90]
mov rax, qword [rax + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14003e921
mov eax, dword [rax + 0x1b4]
movaps xmm1, xmm9
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140030780
xor r8d, r8d
lea rdx, str.Aimbot
call fcn.14003ecf0
mov r8d, 1
lea rdx, str.Visuals
call fcn.14003ecf0
mov r8d, 2
lea rdx, str.Misc
call fcn.14003ecf0
mov rax, qword [0x14013f450]
mov rax, qword [rax + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14003e981
mov eax, dword [rax + 0x1b4]
movaps xmm1, xmm9
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140030780
movdqa xmm1, xmmword [0x140126870]
lea rdx, str.v1.0.0
lea rcx, [rbp - 9]
movups xmmword [rbp - 9], xmm1
call fcn.14002e890
call fcn.14000a870
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140012c70
mov rcx, qword [0x14013f450]
xor edx, edx
mov qword [rbp - 9], 0
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rbx, qword [rcx + 0x3ed8]
lea rcx, str.MainContent
movsxd rax, dword [rbx + 0xf0]
mov r8, qword [rbx + 0xf8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003850
mov r8, qword [rbx]
mov edi, eax
cmp dword [r8 + 0x3f20], eax
jne 0x14003ea13
lea r8, str.MainContent
mov edx, listen
mov ecx, eax
call fcn.14001a820
lea r8, [rbp - 9]
mov dword [rsp + 0x20], 0
mov edx, edi
lea rcx, str.MainContent
call fcn.14000a610
mov ecx, dword [0x14013f8e8]
test ecx, ecx
je 0x14003ebdc
sub ecx, 1
je 0x14003eae7
cmp ecx, 1
jne 0x14003eca8
lea rcx, str.Miscellaneous_Settings
call fcn.14002e750
mov rcx, qword [0x14013f450]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14003ea92
movaps xmm1, xmm7
mov qword [rbp - 9], 0
lea rcx, [rbp - 9]
call fcn.140012950
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Enable_Watermark
call fcn.14002ff40
lea rdx, [0x14013f8ee]
lea rcx, str.Enable_Debug
call fcn.14002ff40
lea rdx, [rbp - 9]
mov dword [rbp - 9], 0xbf800000
lea rcx, str.Unload
mov dword [rbp - 5], 0x42200000
call fcn.14002f0c0
test al, al
je 0x14003eca8
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.Visual_Settings
call fcn.14002e750
mov rcx, qword [0x14013f450]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14003eb2c
movaps xmm1, xmm7
mov qword [rbp - 9], 0
lea rcx, [rbp - 9]
call fcn.140012950
lea rdx, [0x14013f8f4]
lea rcx, str.Enable_Visuals
call fcn.14002ff40
lea rdx, [0x14013f8f1]
lea rcx, str.Cornered_Box
call fcn.14002ff40
lea rdx, [0x14013f8ef]
lea rcx, str.Fill_Box
call fcn.14002ff40
lea rdx, [0x14013f994]
lea rcx, str.Show_Box
call fcn.14002ff40
lea rdx, [0x14013f8f3]
lea rcx, str.Skeleton
call fcn.14002ff40
lea rdx, [0x14013f995]
lea rcx, str.Head_Circle
call fcn.14002ff40
lea rdx, [0x14013f8f2]
lea rcx, str.Rank_Esp
call fcn.14002ff40
lea rdx, [0x14013f8f0]
lea rcx, str.Draw_Line
call fcn.14002ff40
lea rdx, [0x14013f8f5]
lea rcx, str.Show_Distance
call fcn.14002ff40
jmp 0x14003eca8
lea rcx, str.Aimbot_Settings
call fcn.14002e750
mov rcx, qword [0x14013f450]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x14003ec21
movaps xmm1, xmm7
mov qword [rbp - 9], 0
lea rcx, [rbp - 9]
call fcn.140012950
lea rdx, [0x14013f8ed]
lea rcx, str.Enable_Aimbot
call fcn.14002ff40
lea rdx, [0x14013f8ec]
lea rcx, str.Show_FOV
call fcn.14002ff40
lea rax, [rbp + 7]
mov dword [rbp + 7], 0x43960000
lea r9, [rbp - 9]
mov qword [rsp + 0x20], rax
lea r8, [0x14013df6c]
mov dword [rbp - 9], 0x42480000
lea rcx, str.FOV_Size
call fcn.140031b60
lea rax, [rbp - 9]
mov dword [rbp - 9], 0x41200000
lea r9, [rbp + 7]
mov qword [rsp + 0x20], rax
lea r8, [0x14013df68]
mov dword [rbp + 7], 0x3f800000
lea rcx, str.Smoothness
call fcn.140031b60
call fcn.140031880
call fcn.14000a870
call fcn.14000f4d0
movaps xmm7, xmmword [rsp + 0x80]
mov rdi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xb0]
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1400f99c0
movaps xmm8, xmmword [rsp + 0x70]
movaps xmm9, xmmword [rsp + 0x60]
add rsp, 0xa0
pop rbp
ret