Function at 0x10001270
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov eax, dword [0x1006b00c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1006b018], 1
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
push edi
jne 0x1000181c
mov esi, dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
call esi
call esi
mov eax, dword [0x10071684]
cmp dword [eax + 0x40d8], 0
jg 0x100012ce
push 0x74d
push str.D:MyFilesDLLDLL_WITH_HWID_RANPINASImGui_StandaloneImGuiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x10071684]
add esp, 0xc
or dword [eax + 0x3fec], 2
mov dword [eax + 0x4010], 0x43af0000
mov dword [eax + 0x4014], 0x43480000
mov dword [eax + 0x3ff4], 1
movsd xmm0, qword [eax + 0x3e98]
push dword [eax + 0x3ea0]
mulsd xmm0, qword [0x10067908]
cvttsd2si eax, xmm0
and eax, 3
movsx eax, byte [eax + 0x10058430]
push eax
lea eax, [ebp - 0x88]
push str._c__dAnimatedTitle
push eax
call fcn.100010b0
mov eax, dword [0x10071684]
lea ecx, [ebp - 0x88]
push 0x2b
mov edx, 0x1006b018
or dword [eax + 0x3fec], 0x40
mov dword [eax + 0x4044], 0x3f800000
call fcn.1000f5f0
add esp, 0x10
mov dword [ebp - 0x94], 0x42d00000
lea edx, [ebp - 0x94]
mov dword [ebp - 0x90], 0
mov ecx, str.Misc
call fcn.100425b0
mov ecx, dword [0x10071150]
xor edx, edx
movss xmm1, dword [0x10067900]
add esp, 4
test al, al
xorps xmm0, xmm0
cmovne ecx, edx
mov dword [0x10071150], ecx
call fcn.10015020
push ecx
lea edx, [ebp - 0x94]
mov dword [ebp - 0x94], 0x42d00000
mov ecx, str.Visuals
mov dword [ebp - 0x90], 0
call fcn.100425b0
mov ecx, dword [0x10071150]
add esp, 4
movss xmm1, dword [0x10067900]
test al, al
mov edx, 1
xorps xmm0, xmm0
cmovne ecx, edx
mov dword [0x10071150], ecx
call fcn.10015020
push ecx
lea edx, [ebp - 0x94]
mov dword [ebp - 0x94], 0x42d00000
mov ecx, str.Auto_Potion
mov dword [ebp - 0x90], 0
call fcn.100425b0
mov ecx, dword [0x10071150]
add esp, 4
test al, al
mov edx, 2
cmovne ecx, edx
mov dword [0x10071150], ecx
sub ecx, 0
je 0x10001717
sub ecx, 1
je 0x10001568
sub ecx, 1
jne 0x10001817
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x1000148e
movss xmm1, dword [0x100679cc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014c60
mov edx, 0x100716a6
mov ecx, str.AUTO_POTION_Q
call fcn.10043ac0
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100014e6
movss xmm1, dword [0x100679cc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014c60
push ecx
push 0x100584f8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0x3e8
push eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xa0], 0
push eax
push 0x100716ac
mov edx, 4
mov ecx, str.AUTO_SP_W
call fcn.10045b60
add esp, 0x10
mov dword [ebp - 0x90], 0x3e8
lea eax, [ebp - 0x90]
mov dword [ebp - 0xa0], 0
mov edx, 4
mov ecx, str.AUTO_MP_E
push 0x100584f8
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x100716a8
call fcn.10045b60
add esp, 0x14
jmp 0x10001817
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100015b1
movss xmm1, dword [0x100679cc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014c60
sub esp, 0x10
call fcn.10045020
mov eax, dword [0x100716a0]
add esp, 0x10
cmp eax, 3
ja case.default.0x100015c6
jmp dword [eax*4 + 0x10002020]
mov dword [0x10071148], 0x40000000
jmp 0x100015fb
mov dword [0x10071148], 0x41200000
jmp 0x100015fb
mov dword [0x10071148], 0x42200000
jmp 0x100015fb
mov dword [0x10071148], 0x42700000
push 0
push 4
push 0x10071148
push 0xc
push dword [0x1007169c]
call ebx
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x10001657
movss xmm1, dword [0x100679cc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014c60
push ecx
push str._.3f
lea eax, [ebp - 0x90]
mov dword [ebp - 0xa0], 0x3a83126f
push eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x90], 0x3f4ccccd
push eax
push 0x1007114c
mov edx, 8
mov ecx, 0x100584cc
call fcn.10045b60
add esp, 0x10
mov dword [ebp - 0xa0], 0x43480042
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0x44160000
mov edx, 8
mov ecx, str.DRONE
push str._.3f
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x10071140
call fcn.10045b60
add esp, 0x10
mov dword [ebp - 0xa0], 0x42a00083
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0x43960000
mov edx, 8
mov ecx, str.FASTZOOM_IN_OUT
push str._.3f
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x10071144
call fcn.10045b60
add esp, 0x14
jmp 0x10001817
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x10001760
movss xmm1, dword [0x100679cc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014c60
mov edx, 0x100716a5
mov ecx, str.HP_FREEZE
call fcn.10043ac0
mov edx, 0x100716a7
mov ecx, str.WALL_NAME
call fcn.10043ac0
mov edx, 0x100716a4
mov ecx, str.REMOVE_FOG
call fcn.10043ac0
mov ecx, dword [0x10071684]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
cmp byte [eax + 0xc8], 0
jne 0x100017d6
movss xmm1, dword [0x100679cc]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
call fcn.10014c60
movaps xmm0, xmmword [0x10067d00]
lea eax, [ebp - 0x9c]
push str.F5_HOTKEY_SHOW__HIDE
push eax
movups xmmword [ebp - 0x9c], xmm0
call fcn.10041f90
movaps xmm0, xmmword [0x10067d00]
lea eax, [ebp - 0x9c]
push str.Passive:_AntiChat_Block
push eax
movups xmmword [ebp - 0x9c], xmm0
call fcn.10041f90
add esp, 0x10
call fcn.10012870
push 0x74
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x10001836
cmp byte [0x1006b018], 0
sete byte [0x1006b018]
cmp byte [0x100716a6], 0
lea eax, [ebp - 0x8c]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 1
push 0x77928b
je 0x100018d2
call edi
lea eax, [ebp - 0x8c]
mov byte [0x77928b], 1
push eax
push dword [ebp - 0x8c]
push 1
push 0x77928b
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x77929f
call edi
lea eax, [ebp - 0x8c]
mov byte [0x77929f], 0
push eax
push dword [ebp - 0x8c]
push 1
push 0x77929f
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x308a434
call edi
lea eax, [ebp - 0x8c]
mov byte [0x308a434], 0x17
push eax
push dword [ebp - 0x8c]
push 1
push 0x308a434
jmp 0x1000191e
call edi
lea eax, [ebp - 0x8c]
mov byte [0x77928b], 2
push eax
push dword [ebp - 0x8c]
push 1
push 0x77928b
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x77929f
call edi
lea eax, [ebp - 0x8c]
mov byte [0x77929f], 2
push eax
push dword [ebp - 0x8c]
push 1
push 0x77929f
call edi
cmp byte [0x100716a5], 0
je 0x1000195b
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0xbe34d8
call edi
lea eax, [ebp - 0x8c]
mov dword [0xbe34d8], 0x4f3f2f1f
push eax
push dword [ebp - 0x8c]
push 4
push 0xbe34d8
call edi
cmp byte [0x100716a7], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 1
push 0x5e3cd1
je 0x1000197f
call edi
mov byte [0x5e3cd1], 0xeb
jmp 0x10001988
call edi
mov byte [0x5e3cd1], 0x74
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
push 1
push 0x5e3cd1
call edi
cmp byte [0x100716a4], 0
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0x308ad58
je 0x10001a04
call edi
lea eax, [ebp - 0x8c]
mov dword [0x308ad58], 0x461c3c00
push eax
push dword [ebp - 0x8c]
push 4
push 0x308ad58
call edi
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 4
push 0x308ad30
call edi
lea eax, [ebp - 0x8c]
mov dword [0x308ad30], 0x461c3c00
push eax
push dword [ebp - 0x8c]
jmp 0x10001a4f
call edi
lea eax, [ebp - 0x8c]
mov dword [0x308ad58], 0x442f0000
push eax
push dword [ebp - 0x8c]
push 4
push 0x308ad58
call edi
lea eax, [ebp - 0xa4]
push eax
push 0x40
push 4
push 0x308ad30
call edi
lea eax, [ebp - 0xa4]
mov dword [0x308ad30], 0x44fa0000
push eax
push dword [ebp - 0xa4]
push 4
push 0x308ad30
call edi
movzx eax, word [0x10071674]
cmp eax, dword [0x100716ac]
jge 0x10001a96
lea eax, [ebp - 0xa0]
push eax
push 0x40
push 1
push 0x308a435
call edi
lea eax, [ebp - 0xa0]
mov byte [0x308a435], 3
push eax
push dword [ebp - 0xa0]
push 1
push 0x308a435
call edi
movzx eax, word [0x1007167c]
cmp eax, dword [0x100716a8]
jge 0x10001ad4
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x308a436
call edi
lea eax, [ebp - 0x90]
mov byte [0x308a436], 3
push eax
push dword [ebp - 0x90]
push 1
push 0x308a436
call edi
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 2
push 0x1007167c
push 0xbe34dc
push dword [0x1007169c]
call esi
push 0
push 2
push 0x10071674
push 0xbe34e0
push dword [0x1007169c]
call esi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x7ee428
call edi
mov eax, dword [0x10058514]
mov ecx, 0x7ee428
mov dword [ecx], eax
movzx eax, word [0x10058518]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x7eec13
call edi
lea eax, [ebp - 0x90]
mov byte [0x7eec13], 0xeb
push eax
push dword [ebp - 0x90]
push 1
push 0x7eec13
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b74a7
call edi
mov eax, dword [0x1005851c]
mov ecx, 0x4b74a7
mov dword [ecx], eax
movzx eax, word [0x10058520]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b7525
call edi
mov eax, dword [0x1005851c]
mov ecx, 0x4b7525
mov dword [ecx], eax
movzx eax, word [0x10058520]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b75b7
call edi
mov eax, dword [0x1005851c]
mov ecx, 0x4b75b7
mov dword [ecx], eax
movzx eax, word [0x10058520]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b7699
call edi
mov eax, dword [0x1005851c]
mov ecx, 0x4b7699
mov dword [ecx], eax
movzx eax, word [0x10058520]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x4b76d3
call edi
mov eax, dword [0x1005851c]
mov ecx, 0x4b76d3
mov dword [ecx], eax
movzx eax, word [0x10058520]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x4b73da
call edi
lea eax, [ebp - 0x90]
mov byte [0x4b73da], 0
push eax
push dword [ebp - 0x90]
push 1
push 0x4b73da
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x4b7408
call edi
lea eax, [ebp - 0x90]
mov byte [0x4b7408], 0
push eax
push dword [ebp - 0x90]
push 1
push 0x4b7408
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 7
push 0x435d89
call edi
mov eax, dword [0x10058524]
mov ecx, 0x435d89
mov dword [ecx], eax
movzx eax, word [0x10058528]
mov word [ecx + 4], ax
mov al, byte [0x1005852a]
mov byte [ecx + 6], al
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 7
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 7
push 0x435dd6
call edi
mov eax, dword [0x10058524]
mov ecx, 0x435dd6
mov dword [ecx], eax
movzx eax, word [0x10058528]
mov word [ecx + 4], ax
mov al, byte [0x1005852a]
mov byte [ecx + 6], al
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 7
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x435e1d
call edi
mov eax, dword [0x1005851c]
mov ecx, 0x435e1d
mov dword [ecx], eax
movzx eax, word [0x10058520]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 6
push 0x5a9c10
call edi
mov eax, dword [0x1005851c]
mov ecx, 0x5a9c10
mov dword [ecx], eax
movzx eax, word [0x10058520]
mov word [ecx + 4], ax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 6
push ecx
call edi
push 0
push 4
push 0x10071140
push 0x308aab8
push dword [0x1007169c]
call ebx
push 0
push 4
push 0x10071144
push 0x308aac4
push dword [0x1007169c]
call ebx
push 0
push 4
push 0x1007114c
push 0xfd2023
push dword [0x1007169c]
call ebx
lea eax, [ebp - 0x90]
push eax
push 0x40
push 5
push 0x4a2030
call edi
mov eax, dword [0x1005852c]
mov ecx, 0x4a2030
mov dword [ecx], eax
mov al, byte [0x10058530]
mov byte [ecx + 4], al
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x90]
push 5
push ecx
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x4df092
call edi
lea eax, [ebp - 0x90]
mov byte [0x4df092], 0xd8
push eax
push dword [ebp - 0x90]
push 1
push 0x4df092
call edi
lea eax, [ebp - 0x90]
mov dword [0x10071678], 0x5e82b6
push eax
push 0x40
push 6
push 0x5e82b0
call edi
mov eax, 0x5e82b0
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov eax, 0x10001250
sub eax, 0x5e82b5
mov byte [0x5e82b0], 0xe9
mov dword [0x5e82b1], eax
lea eax, [ebp - 0xa0]
push eax
push dword [ebp - 0x90]
push 6
push 0x5e82b0
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57eb24
call edi
lea eax, [ebp - 0x90]
mov byte [0x57eb24], 0x8e
push eax
push dword [ebp - 0x90]
push 1
push 0x57eb24
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57ec9e
call edi
lea eax, [ebp - 0x90]
mov byte [0x57ec9e], 0x8e
push eax
push dword [ebp - 0x90]
push 1
push 0x57ec9e
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57e2a1
call edi
lea eax, [ebp - 0x90]
mov byte [0x57e2a1], 0x8e
push eax
push dword [ebp - 0x90]
push 1
push 0x57e2a1
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57e39e
call edi
lea eax, [ebp - 0x90]
mov byte [0x57e39e], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57e39e
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57d7f0
call edi
lea eax, [ebp - 0x90]
mov byte [0x57d7f0], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57d7f0
call edi
lea eax, [ebp - 0x90]
push eax
push 0x40
push 1
push 0x57d8da
call edi
lea eax, [ebp - 0x90]
mov byte [0x57d8da], 0x96
push eax
push dword [ebp - 0x90]
push 1
push 0x57d8da
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10055654
mov esp, ebp
pop ebp
ret