Function at 0x140001540
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x1400ad040]
xor rax, rsp
mov qword [rbp + 7], rax
cmp byte [0x1400ad2d0], 0
je 0x140001f6b
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000158a
cmp byte [0x1400ad0c0], 0
sete al
mov byte [0x1400ad0c0], al
jmp 0x140001591
movzx eax, byte [0x1400ad0c0]
test al, al
je 0x140001f6b
mov rcx, qword [0x1400adad8]
lea rdx, [0x1400ad2d0]
movss xmm1, dword [0x1400ad2c4]
mov r8d, 0x12a
movss xmm0, dword [0x1400ad2c0]
unpcklps xmm0, xmm1
xorps xmm1, xmm1
mov eax, dword [rcx + 0x1dc0]
movsd qword [rcx + 0x1dd4], xmm0
or eax, 1
mov dword [rcx + 0x1dc0], eax
or eax, 0x42
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
movaps xmmword [rsp + 0x60], xmm7
xorps xmm7, xmm7
unpcklps xmm1, xmm7
movsd qword [rcx + 0x1ddc], xmm1
movss xmm0, dword [0x1400ad2c8]
movss xmm1, dword [0x1400ad2cc]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1dc8], 1
mov dword [rcx + 0x1e20], 0x3f800000
lea rcx, str.Crystal.dev
call fcn.14000ff00
call fcn.14004e3e0
test al, al
je 0x140001f61
mov qword [rsp + 0x98], r12
lea rcx, [0x14009afc4]
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x88], r14
movaps xmmword [rsp + 0x70], xmm6
call fcn.140050390
movss xmm6, dword [0x1400a4c58]
lea r13, str.__._0123456789_A
xor r12d, r12d
lea r14d, [r12 + 0x42]
test al, al
je 0x140001924
mov rcx, qword [0x1400adad8]
lea rdx, str.Recoil
mov qword [rbp - 9], r12
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rcx, qword [rcx + 0x1d18]
call fcn.1400073c0
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp - 9]
lea rcx, str.Recoil
call fcn.14000ce30
test al, al
je 0x14000191f
mov rcx, qword [0x1400adad8]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, str.Recoil_Control
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm0, xmm6
addss xmm2, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140043860
mov rcx, qword [0x1400adad8]
lea rdx, [0x1400adb59]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm0, xmm6
addss xmm2, dword [0x1400a4c60]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140045910
cmp byte [0x1400adb59], r12b
je 0x14000191a
movzx eax, byte [0x1400ad0e8]
mov edx, r14d
cmp al, 0x67
cmovb edx, eax
movzx eax, dl
lea rcx, [rax + rax*2]
mov ecx, dword [r13 + rcx*8 + 0x10]
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x14000184f
cmp byte [0x1400adad0], r12b
cvttss2si r8, dword [0x1400ad0f8]
mov qword [rsp + 0x20], r12
sete byte [0x1400adad0]
xor edx, edx
xor r9d, r9d
lea ecx, [rdx + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov rcx, qword [0x1400adad8]
lea r9, [rbp - 9]
mov dword [rbp - 1], 0x41200000
mov dword [rbp - 9], 0x3f800000
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x130]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp - 1]
mov qword [rsp + 0x20], rax
call fcn.1400471c0
mov rcx, qword [0x1400adad8]
lea r9, [rbp - 9]
movss xmm2, dword [0x1400a4c74]
mov qword [rbp - 9], 0x42c80000
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x130]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140001090
call fcn.14000d060
call fcn.1400504b0
lea rcx, [0x14009b010]
call fcn.140050390
test al, al
je 0x140001cda
mov rcx, qword [0x1400adad8]
lea rdx, str.Triggerbot
mov qword [rbp - 9], r12
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rcx, qword [rcx + 0x1d18]
call fcn.1400073c0
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp - 9]
lea rcx, str.Triggerbot
call fcn.14000ce30
test al, al
je 0x140001cd5
mov rcx, qword [0x1400adad8]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, [0x14009b010]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm0, xmm6
addss xmm2, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140043860
mov rcx, qword [0x1400adad8]
lea rdx, [0x1400adb58]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm0, xmm6
addss xmm2, dword [0x1400a4c60]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140045910
cmp byte [0x1400adb58], r12b
je 0x140001cd0
mov qword [rsp + 0xb0], rbx
xor ecx, ecx
mov ebx, dword [0x1400adb50]
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xc0], rdi
mov edi, dword [0x1400adb54]
mov qword [rsp + 0x80], r15
call qword [sym.imp.USER32.dll_GetDC]
mov r8d, ebx
mov edx, edi
mov rcx, rax
mov rsi, rax
call qword [sym.imp.GDI32.dll_GetPixel]
mov rdx, rsi
xor ecx, ecx
mov r15d, eax
call qword [sym.imp.USER32.dll_ReleaseDC]
movzx ecx, byte [0x1400ad0e8]
cmp cl, 0x67
cmovb r14d, ecx
movzx ecx, r14b
lea rcx, [rcx + rcx*2]
mov ecx, dword [r13 + rcx*8 + 0x10]
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140001be5
cmp byte [0x1400adad0], r12b
mov ebx, dword [0x1400adb50]
mov edi, dword [0x1400adb54]
sete byte [0x1400adad0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov r8d, ebx
mov edx, edi
mov rcx, rax
mov rsi, rax
call qword [sym.imp.GDI32.dll_GetPixel]
mov rdx, rsi
xor ecx, ecx
mov ebx, eax
call qword [sym.imp.USER32.dll_ReleaseDC]
movzx edx, bx
mov eax, ebx
shr edx, 8
movzx ecx, r15w
shr ecx, 8
sub edx, ecx
mov r8d, edx
neg r8d
cmovs r8d, edx
shr eax, 0x10
movzx ecx, al
mov eax, r15d
shr eax, 0x10
movzx eax, al
sub ecx, eax
movzx edx, bl
mov eax, ecx
neg eax
cmovs eax, ecx
add r8d, eax
movzx eax, r15b
sub edx, eax
mov eax, edx
neg eax
cmovs eax, edx
add r8d, eax
cvttss2si eax, dword [0x1400ad0f8]
cmp r8d, eax
jle 0x140001be5
xor edx, edx
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 2]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
mov rcx, qword [0x1400adad8]
lea r9, [rbp - 1]
mov dword [rbp - 9], 0x42c80000
mov dword [rbp - 1], 0x3f800000
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x130]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
call fcn.1400471c0
mov rcx, qword [0x1400adad8]
lea r9, [rbp - 9]
movss xmm2, dword [0x1400a4c74]
mov qword [rbp - 9], 0x42c80000
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x130]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140001090
mov r15, qword [rsp + 0x80]
mov rdi, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xb0]
call fcn.14000d060
call fcn.1400504b0
lea rcx, str.Misc
call fcn.140050390
mov r14, qword [rsp + 0x88]
mov r13, qword [rsp + 0x90]
test al, al
je 0x140001f4f
mov rcx, qword [0x1400adad8]
lea rdx, str.Triggerbot
mov qword [rbp - 9], r12
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rcx, qword [rcx + 0x1d18]
call fcn.1400073c0
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp - 9]
lea rcx, str.Triggerbot
call fcn.14000ce30
test al, al
je 0x140001f4a
mov rcx, qword [0x1400adad8]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, [0x14009b010]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm0, xmm6
addss xmm2, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140043860
mov rcx, qword [0x1400adad8]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, str.Join_developers_discord__
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm0, xmm6
addss xmm2, dword [0x1400a4c60]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140043860
movss xmm1, dword [0x1400a4cb8]
xorps xmm0, xmm0
call fcn.140014fe0
lea rdx, [rbp - 9]
mov qword [rbp - 9], r12
lea rcx, str.Click_Me
call fcn.140044180
test al, al
je 0x140001ea2
mov dword [rsp + 0x28], 1
lea r8, str.https:__discord.gg_fS7emjH8bK
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x1400adad8]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, str.Join_designers_discord__
movss xmm2, dword [rax + 0x130]
movss xmm3, dword [rax + 0x50]
subss xmm3, dword [rax + 0x9c]
addss xmm3, xmm6
maxss xmm2, xmm3
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x130], xmm2
call fcn.140043860
movss xmm1, dword [0x1400a4cb8]
xorps xmm0, xmm0
call fcn.140014fe0
lea rdx, [rbp - 9]
mov qword [rbp - 9], r12
lea rcx, str.Click_Me
call fcn.140044180
test al, al
je 0x140001f45
mov dword [rsp + 0x28], 1
lea r8, str.https:__discord.gg_BbqjzKrqKf
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.14000d060
call fcn.1400504b0
call fcn.14004e860
movaps xmm6, xmmword [rsp + 0x70]
mov r12, qword [rsp + 0x98]
call fcn.1400131d0
movaps xmm7, xmmword [rsp + 0x60]
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140053240
add rsp, 0xa0
pop rbp
ret