Function at 0x140005350
Capabilities:
Create process on windows
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
vmovaps xmmword [rax - 0x18], xmm6
vmovaps xmmword [rax - 0x28], xmm7
vmovaps xmmword [rax - 0x38], xmm8
mov rax, qword [0x140100080]
xor rax, rsp
mov qword [rbp + 0x17], rax
cmp byte [0x140101914], 0
mov rax, qword [0x140101960]
vmovaps ymm0, ymmword [0x1400ebdc0]
vmovups xmm1, xmmword [0x1400eb870]
mov dword [rax + 0x37d0], 0x3f800000
mov dword [rax + 0x37e0], 0x40400000
mov dword [rax + 0x3850], 0x3f800000
mov dword [rax + 0x384c], 0x41a00000
mov dword [rax + 0x3814], 0x40400000
vmovups xmmword [rax + 0x3908], xmm1
vmovaps ymm1, ymmword [0x1400ebaa0]
vmovups ymmword [rax + 0x3928], ymm1
vmovaps ymm1, ymmword [0x1400ebc20]
vmovups ymmword [rax + 0x3948], ymm1
vmovaps ymm1, ymmword [0x1400ebb80]
vmovups ymmword [rax + 0x3968], ymm1
vmovaps ymm1, ymmword [0x1400ebc00]
vmovups ymmword [rax + 0x3988], ymm1
vmovaps ymm1, ymmword [0x1400ebc40]
vmovups ymmword [rax + 0x39a8], ymm1
vmovaps ymm1, ymmword [0x1400ebbe0]
vmovups ymmword [rax + 0x39c8], ymm1
vmovaps ymm1, ymmword [0x1400ebc80]
vmovups ymmword [rax + 0x39e8], ymm1
vmovaps ymm1, ymmword [0x1400ebb60]
vmovups ymmword [rax + 0x3a08], ymm1
vmovaps ymm1, ymmword [0x1400ebac0]
vmovups ymmword [rax + 0x38b8], ymm0
vmovups xmm0, xmmword [0x1400eb8e0]
vmovups ymmword [rax + 0x3a28], ymm1
vmovaps ymm1, ymmword [0x1400ebba0]
vmovups xmmword [rax + 0x38d8], xmm0
vxorps xmm0, xmm0, xmm0
vmovups ymmword [rax + 0x3a48], ymm1
vmovaps ymm1, ymmword [0x1400ebc60]
vmovups xmmword [rax + 0x3918], xmm0
vmovaps ymm0, ymmword [0x1400ebea0]
vmovups ymmword [rax + 0x3a98], ymm1
vmovups xmm1, xmmword [0x1400eb970]
vmovups ymmword [rax + 0x3b18], ymm0
vmovups ymmword [rax + 0x3b38], ymm0
vmovups xmm0, xmmword [0x1400eb830]
vmovups xmmword [rax + 0x3ab8], xmm1
vmovups xmmword [rax + 0x3ba8], xmm0
jne 0x1400054ff
mov dword [rax + 0x38e4], 0x3f400000
mov byte [0x140101914], 1
or dword [rax + 0x47d0], 2
lea rcx, str.Counter_Strike_2_MagicKey
mov qword [rsp + 0xb0], rbx
xor edx, edx
mov dword [rax + 0x47f0], 0x43af0000
mov r8d, 0x412a
mov dword [rax + 0x47f4], 0x43e10000
mov dword [rax + 0x47d8], 1
vzeroupper
call fcn.14001d830
call fcn.1400563f0
mov rdx, qword [0x140101960]
lea rsi, str._.1f
vmovss xmm6, dword [0x1400eb6e8]
xor edi, edi
mov rax, qword [rdx + 0x3ef8]
cmp byte [rax + 0xbb], dil
jne 0x1400058e6
mov rbx, qword [rdx + 0x4bc0]
test rbx, rbx
je 0x1400058e6
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [0x1400e2d7c]
mov rcx, rbx
call fcn.1400581e0
test al, al
je 0x1400058df
movsx rax, word [rbx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rbx + 8]
mov ecx, dword [rcx + rax]
call fcn.140020850
lea rdx, [0x1401018fd]
lea rcx, str.BoxESP
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, [0x1400e2d88]
lea r8d, [rdi + 0x20]
lea rdx, [0x140100250]
call fcn.1400517e0
mov edx, edi
lea rcx, str.Normal
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x140005607
inc rcx
inc edx
add rcx, rax
cmp byte [rcx], dil
jne 0x140005600
mov dword [rsp + 0x20], edx
lea r9, str.Normal
lea rdx, [0x140101900]
lea rcx, [0x1400e2da8]
call fcn.14004a370
lea rdx, [0x1401018f2]
lea rcx, str.BoneESP
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, [0x1400e2db8]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x1401002a0]
call fcn.1400517e0
lea rdx, [0x1401018ff]
lea rcx, [0x1400e2dc4]
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, str.EyeRay
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140100240]
call fcn.1400517e0
lea rdx, [0x1401018fc]
lea rcx, str.HealthBar
call fcn.140047b80
mov edx, edi
lea rcx, str.Vetical
nop dword [rax]
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x1400056d7
inc rcx
inc edx
add rcx, rax
cmp byte [rcx], dil
jne 0x1400056d0
mov dword [rsp + 0x20], edx
lea r9, str.Vetical
lea rdx, [0x1401018f8]
lea rcx, [0x1400e2e08]
call fcn.14004a370
lea rdx, [0x140101907]
lea rcx, str.WeaponText
call fcn.140047b80
lea rdx, [0x140101906]
lea rcx, str.PlayerName
call fcn.140047b80
lea rdx, [0x1401018ef]
lea rcx, str.HeadShootLine
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, [0x1400e2e48]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140100270]
call fcn.1400517e0
lea rdx, [0x1401018ee]
lea rcx, str.FovLine
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, [0x1400e2e68]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140100260]
call fcn.1400517e0
vmovss xmm0, dword [0x1400eb618]
vmovss xmm1, dword [0x1400eb640]
lea rax, [rbp - 5]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, [0x1401000d0]
lea rax, [rbp - 9]
mov r8d, 8
lea rdx, [0x1400e2e80]
mov qword [rsp + 0x20], rax
vmovss dword [rbp - 9], xmm0
vmovss dword [rbp - 5], xmm1
call fcn.14005e7a0
lea rdx, [0x14010190d]
lea rcx, str.LineToEnemy
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, [0x1400e2ea0]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140100280]
call fcn.1400517e0
lea rdx, [0x1401018f1]
lea rcx, str.CrossHair
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, [0x1400e2ec8]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x1401002c0]
call fcn.1400517e0
vmovss xmm0, dword [0x1400eb60c]
vmovss xmm1, dword [0x1400eb654]
lea rax, [rbp - 5]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, [0x1401000c4]
lea rax, [rbp - 9]
mov r8d, 8
lea rdx, [0x1400e2ee0]
mov qword [rsp + 0x20], rax
vmovss dword [rbp - 9], xmm0
vmovss dword [rbp - 5], xmm1
call fcn.14005e7a0
mov rdx, qword [0x140101960]
mov rax, qword [rdx + 0x3ef8]
cmp byte [rax + 0xbb], dil
jne 0x1400058e6
mov r8, qword [rdx + 0x4bc0]
test r8, r8
je 0x1400058e6
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x1400058e6
mov rax, qword [rdx + 0x3ef8]
dec dword [rax + 0xf0]
jmp 0x1400058e6
mov rdx, qword [0x140101960]
mov rax, qword [rdx + 0x3ef8]
lea r14, [0x1400e2f90]
vmovss xmm8, dword [0x1400eb590]
vxorps xmm7, xmm7, xmm7
cmp byte [rax + 0xbb], dil
jne 0x140005c2d
mov rbx, qword [rdx + 0x4bc0]
test rbx, rbx
je 0x140005c2d
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [0x1400e2ef0]
mov rcx, rbx
call fcn.1400581e0
test al, al
je 0x140005c26
movsx rax, word [rbx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rbx + 8]
mov ecx, dword [rcx + rax]
call fcn.140020850
lea rdx, [0x1401018f3]
lea rcx, str.AimBot
call fcn.140047b80
mov edx, edi
lea rcx, str.MENU
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x140005977
inc rcx
inc edx
add rcx, rax
cmp byte [rcx], dil
jne 0x140005970
mov dword [rsp + 0x20], edx
lea r9, str.MENU
lea rdx, [0x1401018e8]
lea rcx, str.AimKey
call fcn.14004a370
test al, al
je 0x1400059dd
mov rdx, qword [0x1401026f8]
mov rax, qword [0x140102700]
movsxd rcx, dword [0x1401018e8]
sub rax, rdx
sar rax, 2
cmp rax, rcx
jbe 0x14000612e
mov eax, dword [rdx + rcx*4]
mov dword [0x1401000e0], eax
vmovss xmm1, dword [0x1400eb478]
vmovss xmm0, dword [0x1400eb634]
lea rax, [rbp - 5]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, [0x1401000dc]
vmovss dword [rbp - 9], xmm1
vmovss dword [rbp + 3], xmm1
vmovss xmm1, dword [0x1400eb508]
lea rax, [rbp - 9]
mov r8d, 8
lea rdx, [0x1400e2f40]
mov qword [rsp + 0x20], rax
vmovss dword [rbp - 1], xmm1
vmovss dword [rbp - 5], xmm0
call fcn.14005e7a0
lea rdx, [0x1401018fe]
lea rcx, str.FovCircle
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, str.FovCircleColor
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x1401002b0]
call fcn.1400517e0
lea rax, [rbp - 1]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, str.333_
lea rax, [rbp + 3]
mov r8d, 8
lea rdx, [0x1400e2f6c]
mov qword [rsp + 0x20], rax
call fcn.14005e7a0
mov edx, edi
lea rcx, str.Head
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x140005ab7
inc rcx
inc edx
add rcx, rax
cmp byte [rcx], dil
jne 0x140005ab0
mov dword [rsp + 0x20], edx
lea r9, str.Head
lea rdx, [0x140101908]
lea rcx, str.AimPos
call fcn.14004a370
test al, al
je 0x140005b25
mov ecx, dword [0x140101908]
test ecx, ecx
je 0x140005b1b
sub ecx, 1
je 0x140005b0f
cmp ecx, 1
jne 0x140005b25
mov dword [reloc.WS2_32.dll_getsockname], 4
jmp 0x140005b25
mov dword [reloc.WS2_32.dll_getsockname], 5
jmp 0x140005b25
mov dword [reloc.WS2_32.dll_getsockname], 6
lea rax, [rbp + 3]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
lea r9, [0x1401000e4]
lea rax, [rbp - 1]
mov dword [rbp - 1], 1
mov r8d, 5
mov qword [rsp + 0x20], rax
lea rdx, str.Start_Bullet
mov dword [rbp + 3], 6
vmovss dword [rbp - 5], xmm7
vmovss dword [rbp - 9], xmm8
call fcn.14005e7a0
lea rax, [rbp - 9]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, [0x140100238]
lea rax, [rbp - 5]
mov r8d, 8
lea rdx, str.RCS_Yaw
mov qword [rsp + 0x20], rax
call fcn.14005e7a0
lea rax, [rbp - 9]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, [0x14010023c]
lea rax, [rbp - 5]
mov r8d, 8
lea rdx, str.RCS_Pitch
mov qword [rsp + 0x20], rax
call fcn.14005e7a0
lea rdx, [0x1401018f5]
lea rcx, [0x1400e2fc0]
call fcn.140047b80
mov rdx, qword [0x140101960]
mov rax, qword [rdx + 0x3ef8]
cmp byte [rax + 0xbb], dil
jne 0x140005c2d
mov r8, qword [rdx + 0x4bc0]
test r8, r8
je 0x140005c2d
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x140005c2d
mov rax, qword [rdx + 0x3ef8]
dec dword [rax + 0xf0]
jmp 0x140005c2d
mov rdx, qword [0x140101960]
mov rax, qword [rdx + 0x3ef8]
cmp byte [rax + 0xbb], dil
jne 0x140005e43
mov rbx, qword [rdx + 0x4bc0]
test rbx, rbx
je 0x140005e43
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [0x1400e2fd0]
mov rcx, rbx
call fcn.1400581e0
test al, al
je 0x140005e3c
movsx rax, word [rbx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rbx + 8]
mov ecx, dword [rcx + rax]
call fcn.140020850
lea rdx, [0x1401018f4]
lea rcx, str.Radar
call fcn.140047b80
mov edx, edi
lea rcx, str.Circle
nop dword [rax]
nop dword [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x140005cb7
inc rcx
inc edx
add rcx, rax
cmp byte [rcx], dil
jne 0x140005cb0
mov dword [rsp + 0x20], edx
lea r9, str.Circle
lea rdx, [0x1401000d8]
lea rcx, [0x1400e3000]
call fcn.14004a370
lea rdx, [0x140101904]
lea rcx, str.CrossLine
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, [0x1400e3020]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140100290]
call fcn.1400517e0
vmovss xmm0, dword [0x1400eb674]
vmovss xmm1, dword [0x1400eb694]
vmovss dword [rbp - 9], xmm0
vmovss xmm0, dword [0x1400eb63c]
lea rax, [rbp + 3]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, [0x1401000c8]
vmovss dword [rbp + 7], xmm0
vmovss xmm0, dword [0x1400eb4e8]
vmovss dword [rbp - 5], xmm1
vmovss xmm1, dword [0x1400eb660]
lea rax, [rbp - 1]
mov r8d, 8
lea rdx, str.PointSize
mov qword [rsp + 0x20], rax
vmovss dword [rbp - 1], xmm0
vmovss dword [rbp + 0xf], xmm1
vmovss dword [rbp + 3], xmm8
call fcn.14005e7a0
lea rax, [rbp - 5]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, [0x1401000cc]
lea rax, [rbp - 9]
mov r8d, 8
lea rdx, [0x1400e3048]
mov qword [rsp + 0x20], rax
call fcn.14005e7a0
lea rax, [rbp + 0xf]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
lea r9, [0x1401000c0]
lea rax, [rbp + 7]
mov r8d, 8
lea rdx, [0x1400e3058]
mov qword [rsp + 0x20], rax
call fcn.14005e7a0
mov rdx, qword [0x140101960]
mov rax, qword [rdx + 0x3ef8]
cmp byte [rax + 0xbb], dil
jne 0x140005e43
mov r8, qword [rdx + 0x4bc0]
test r8, r8
je 0x140005e43
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x140005e43
mov rax, qword [rdx + 0x3ef8]
dec dword [rax + 0xf0]
jmp 0x140005e43
mov rdx, qword [0x140101960]
mov rax, qword [rdx + 0x3ef8]
cmp byte [rax + 0xbb], dil
jne 0x140005faf
mov rbx, qword [rdx + 0x4bc0]
test rbx, rbx
je 0x140005faf
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [0x1400e3068]
mov rcx, rbx
call fcn.1400581e0
test al, al
je 0x140005faf
movsx rax, word [rbx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rbx + 8]
mov ecx, dword [rcx + rax]
call fcn.140020850
lea rdx, [0x1401018ec]
lea rcx, str.TriggerBot
call fcn.140047b80
mov edx, edi
lea rcx, str.MENU
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x140005ec7
inc rcx
inc edx
add rcx, rax
cmp byte [rcx], dil
jne 0x140005ec0
mov dword [rsp + 0x20], edx
lea r9, str.MENU
lea rdx, [0x140101910]
lea rcx, str.TriggerKey
call fcn.14004a370
test al, al
je 0x140005f2d
mov rdx, qword [0x140102730]
mov rax, qword [0x140102738]
movsxd rcx, dword [0x140101910]
sub rax, rdx
sar rax, 2
cmp rax, rcx
jbe 0x14000612e
mov eax, dword [rdx + rcx*4]
mov dword [0x1401000b8], eax
lea rax, [rbp + 7]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
lea r9, [0x1401000b4]
lea rax, [rbp + 0xf]
mov dword [rbp + reloc.WS2_32.dll_ntohs], 0xf
mov r8d, 5
mov qword [rsp + 0x20], rax
lea rdx, str.Delay
mov dword [rbp + 7], 0xaa
call fcn.14005e7a0
mov r8, qword [0x140101960]
mov rax, qword [r8 + 0x3ef8]
cmp byte [rax + 0xbb], dil
jne 0x140005faf
mov rdx, qword [r8 + 0x4bc0]
test rdx, rdx
je 0x140005faf
movsx rax, word [rdx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x140005faf
mov rax, qword [r8 + 0x3ef8]
dec dword [rax + 0xf0]
call fcn.140064130
mov rax, qword [0x140101960]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], dil
jne 0x140005fdd
mov eax, dword [rcx + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140048b90
lea rdx, [0x14010190c]
lea rcx, [0x1400e30a0]
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, str.My_Discord
lea rdx, [rbp + 7]
vmovss dword [rbp + 7], xmm7
vmovss dword [rbp + 0xb], xmm7
call fcn.1400465c0
test al, al
je 0x14000603d
mov dword [rsp + 0x28], 0xa
lea r8, str.https:__discord.gg_YKj6uDyDY6
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rdx, [0x1401018ed]
lea rcx, [0x1400e3110]
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, str.My_Youtube
lea rdx, [rbp + 7]
vmovss dword [rbp + 7], xmm7
vmovss dword [rbp + 0xb], xmm7
call fcn.1400465c0
test al, al
je 0x14000609d
mov dword [rsp + 0x28], 0xa
lea r8, str.https:__www.youtube.com__EasyCheatV1_about
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rdx, [0x1401018f0]
lea rcx, str.Bunnyhop
call fcn.140047b80
vmovaps xmm1, xmm6
call fcn.140023300
lea rcx, str.INS_Show_Hide_Menu
call fcn.140045b90
call fcn.140056890
xor edx, edx
lea rcx, str.BF4_Info
mov r8d, 0xc028f
call fcn.14001d830
lea rcx, str.__MagicKey___My_Discord_Astra6707
call fcn.140045b90
call fcn.14001faa0
mov rbx, qword [rsp + 0xb0]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400cad80
lea r11, [rsp + 0xa0]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
vmovaps xmm6, xmmword [r11 - 0x10]
vmovaps xmm7, xmmword [r11 - 0x20]
vmovaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
ret
call fcn.140008fb0
int3