Function at 0x140058414
Capabilities:
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0x288
mov rax, qword [0x14017c140]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov eax, dword [0x14017ce24]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x14005844e
cmp dword [rsp + 0x40], 1
je 0x14005845a
cmp dword [rsp + 0x40], 2
je 0x140058466
jmp 0x140058470
mov dword [reloc.WS2_32.dll_closesocket], 1
jmp 0x140058470
mov dword [reloc.WS2_32.dll_closesocket], 0
jmp 0x140058470
mov dword [reloc.WS2_32.dll_closesocket], 2
cmp dword [reloc.WS2_32.dll_connect], 0
jne 0x140058495
mov byte [0x14017ce51], 0
mov byte [0x14017ce3b], 0
mov byte [reloc.WS2_32.dll_accept], 1
mov byte [0x14017ce3f], 0
cmp dword [reloc.WS2_32.dll_connect], 1
jne 0x1400584ba
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017ce51], 0
mov byte [0x14017ce3b], 1
mov byte [0x14017ce3f], 0
cmp dword [reloc.WS2_32.dll_connect], 2
jne 0x1400584df
mov byte [0x14017ce3b], 0
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017ce51], 1
mov byte [0x14017ce3f], 0
cmp dword [reloc.WS2_32.dll_connect], 3
jne 0x140058504
mov byte [0x14017ce3b], 0
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14017ce51], 0
mov byte [0x14017ce3f], 1
call fcn.14001de3c
call fcn.14001e7cc
call fcn.14000d108
call fcn.140044d68
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x140058553
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x140058541
mov dword [rsp + 0x44], 1
jmp 0x140058549
mov dword [rsp + 0x44], 0
mov al, byte [rsp + 0x44]
mov byte [reloc.WS2_32.dll_accept], al
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x140059197
lea rdx, str.Betaware_Cheats
lea rcx, [rsp + 0x1c8]
call fcn.14003db18
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d410], eax
jle 0x1400585fa
lea rcx, [0x14017d410]
call fcn.1400b69fc
cmp dword [0x14017d410], 0xffffffff
jne 0x1400585fa
mov dword [rsp + 0x20], 0xff
mov r9d, 0xf9
mov r8d, 0x7d
mov edx, reloc.WLDAP32.dll_Ordinal_79
lea rcx, [rsp + 0x178]
call fcn.14003fa40
mov qword [rsp + 0x50], rax
lea rdx, [0x14017d400]
mov rcx, qword [rsp + 0x50]
call fcn.140042160
nop
lea rcx, [0x14017d410]
call fcn.1400b6990
nop
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d428], eax
jle 0x14005867e
lea rcx, [0x14017d428]
call fcn.1400b69fc
cmp dword [0x14017d428], 0xffffffff
jne 0x14005867e
mov dword [rsp + 0x20], 0xff
mov r9d, 0xff
mov r8d, 0xff
mov edx, 0xff
lea rcx, [rsp + 0x188]
call fcn.14003fa40
mov qword [rsp + 0x58], rax
lea rdx, [0x14017d418]
mov rcx, qword [rsp + 0x58]
call fcn.140042160
nop
lea rcx, [0x14017d428]
call fcn.1400b6990
nop
mov eax, 0x13b0
mov eax, eax
mov ecx, dword [0x14017d6d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14017d440], eax
jle 0x1400586fc
lea rcx, [0x14017d440]
call fcn.1400b69fc
cmp dword [0x14017d440], 0xffffffff
jne 0x1400586fc
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
xor r8d, r8d
mov edx, 0xff
lea rcx, [rsp + 0x198]
call fcn.14003fa40
mov qword [rsp + 0x60], rax
lea rdx, [0x14017d430]
mov rcx, qword [rsp + 0x60]
call fcn.140042160
nop
lea rcx, [0x14017d440]
call fcn.1400b6990
nop
xor ecx, ecx
call fcn.14001724c
lea rcx, [rsp + 0x1e0]
call fcn.140011cb0
mov byte [rsp + 0x228], 1
mov byte [rsp + 0x200], 1
mov dword [rsp + 0x1f8], 3
mov dword [rsp + 0x1fc], 3
call fcn.140008a28
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x98]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x14012a864]
lea rdx, str.C:WindowsFontscourbi.ttf
mov rcx, qword [rsp + 0x70]
call fcn.1400126cc
call fcn.140008ebc
mov qword [rsp + 0xc0], rax
movss xmm2, dword [0x14012a8b0]
movss xmm1, dword [0x14012a8bc]
lea rcx, [rsp + 0x78]
call fcn.14003fad4
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.14000f498
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_27
xor edx, edx
lea rcx, [0x1400ded1f]
call fcn.140002f3c
nop
xorps xmm2, xmm2
movss xmm1, dword [0x1400bc21c]
lea rcx, [rsp + 0xc8]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
movss xmm2, dword [0x14012a8b4]
movss xmm1, dword [0x14012a880]
lea rcx, [rsp + 0xd0]
call fcn.14003fad4
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.tabs
call fcn.140005488
nop
movss xmm2, dword [0x14012a868]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0xd8]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
movss xmm2, dword [0x14012a870]
movss xmm1, dword [0x14012a87c]
lea rcx, [rsp + 0xe0]
call fcn.14003fad4
mov rdx, rax
lea rcx, str.Aimbot
call fcn.140022798
nop
xor ecx, ecx
call fcn.140009bd4
movzx eax, al
test eax, eax
je 0x14005887e
mov dword [0x14017ce28], 0
call fcn.140027ac0
call fcn.140027ac0
nop
movss xmm2, dword [0x14012a878]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0xe8]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
movss xmm2, dword [0x14012a870]
movss xmm1, dword [0x14012a87c]
lea rcx, [rsp + 0xf0]
call fcn.14003fad4
mov rdx, rax
lea rcx, str.Visuals
call fcn.140022798
nop
xor ecx, ecx
call fcn.140009bd4
movzx eax, al
test eax, eax
je 0x1400588f4
mov dword [0x14017ce28], 1
call fcn.140027ac0
call fcn.140027ac0
nop
movss xmm2, dword [0x14012a884]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0xf8]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
movss xmm2, dword [0x14012a870]
movss xmm1, dword [0x14012a87c]
lea rcx, [rsp + 0x100]
call fcn.14003fad4
mov rdx, rax
lea rcx, str.Exploits
call fcn.140022798
nop
xor ecx, ecx
call fcn.140009bd4
movzx eax, al
test eax, eax
je 0x14005896a
mov dword [0x14017ce28], 2
call fcn.140027ac0
call fcn.140027ac0
nop
movss xmm2, dword [0x14012a890]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0x108]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
movss xmm2, dword [0x14012a870]
movss xmm1, dword [0x14012a87c]
lea rcx, [rsp + 0x110]
call fcn.14003fad4
mov rdx, rax
lea rcx, str.Settings
call fcn.140022798
nop
xor ecx, ecx
call fcn.140009bd4
movzx eax, al
test eax, eax
je 0x1400589e0
mov dword [0x14017ce28], 3
call fcn.140027ac0
call fcn.140027ac0
nop
movss xmm2, dword [0x14012a8ac]
movss xmm1, dword [0x1400c01f4]
lea rcx, [rsp + 0x118]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
movss xmm2, dword [0x14012a870]
movss xmm1, dword [0x14012a87c]
lea rcx, [rsp + 0x120]
call fcn.14003fad4
mov rdx, rax
lea rcx, str.Exit
call fcn.140022798
nop
xor ecx, ecx
call fcn.140009bd4
movzx eax, al
test eax, eax
je 0x140058a55
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140006fc4
nop
movss xmm2, dword [0x1400bc1e8]
movss xmm1, dword [0x1400bc1f8]
lea rcx, [rsp + 0x128]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
movss xmm2, dword [0x14012a8a8]
movss xmm1, dword [0x14012a89c]
lea rcx, [rsp + 0x130]
call fcn.14003fad4
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.menu
call fcn.140005488
nop
cmp dword [0x14017ce28], 0
jne 0x140058b57
lea rcx, str._________Aim_Assistance
call fcn.140027b00
call fcn.140027160
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027b00
lea rdx, [0x140158a9f]
lea rcx, str.Aimbot_Enable
call fcn.140022e90
lea rdx, [0x140158aa4]
lea rcx, str.Memory_Aimbot_Enable
call fcn.140022e90
lea rdx, [0x140158aa5]
lea rcx, str.FOV_Circle
call fcn.140022e90
movss xmm1, dword [0x1400bc21c]
xorps xmm0, xmm0
call fcn.14000ece0
call fcn.140027ac0
mov r9d, 0xffffffff
lea r8, str.Circle
lea rdx, [0x14017a820]
lea rcx, [0x1400ded44]
call fcn.1400235c4
call fcn.140027ac0
call fcn.140027ac0
nop
cmp dword [0x14017ce28], 1
jne 0x140058c79
lea rcx, str.________Visual_Assistance
call fcn.140027b00
call fcn.140027160
lea rcx, [0x140128d54]
call fcn.140027b00
lea rdx, [0x14017ce49]
lea rcx, str.Cornered_Box
call fcn.140022e90
lea rdx, [0x14017ce39]
lea rcx, str.2D_Box_Esp
call fcn.140022e90
lea rdx, [0x14017ce52]
lea rcx, str.Filled_Box_Esp
call fcn.140022e90
lea rdx, [0x14017ce34]
lea rcx, str.3D_Box_Esp
call fcn.140022e90
lea rdx, [0x14017ce36]
lea rcx, str.Dynamic_Esp
call fcn.140022e90
lea rdx, [0x14017ce4c]
lea rcx, str.Snaplines
call fcn.140022e90
lea rdx, [0x14017ce38]
lea rcx, str.Crosshair_Snapline
call fcn.140022e90
lea rdx, [0x14017ce33]
lea rcx, str.Headdot_Esp
call fcn.140022e90
lea rdx, [0x14017ce45]
lea rcx, str.Germany_Croshair
call fcn.140022e90
lea rdx, [0x14017ce2f]
lea rcx, str.Head_Esp
call fcn.140022e90
lea rdx, [0x14017ce44]
lea rcx, str.Triangle_Esp
call fcn.140022e90
lea rdx, [0x14017ce40]
lea rcx, str.Skeleton_Esp
call fcn.140022e90
lea rdx, [0x14017ce2e]
lea rcx, str.Reload_Check
call fcn.140022e90
nop
cmp dword [0x14017ce28], 2
jne 0x140058d4b
lea rcx, str.___________Exploits
call fcn.140027b00
call fcn.140027160
lea rcx, [0x140128e4c]
call fcn.140027b00
lea rdx, [0x14017ce23]
lea rcx, str.Slowmotion__Hold_Shift_
call fcn.140022e90
lea rdx, [0x14017ce32]
lea rcx, str.Big_Player
call fcn.140022e90
lea rdx, [0x14017ce37]
lea rcx, str.Tiny_Player
call fcn.140022e90
lea rdx, [0x14017ce21]
lea rcx, str.infinite_Car_Fuel
call fcn.140022e90
lea rdx, [0x14017ce2c]
lea rcx, str.AirStuck__Hold_Shift_
call fcn.140022e90
lea rdx, [0x14017ce30]
lea rcx, str.Spinbot
call fcn.140022e90
lea rdx, [0x14017ce3c]
lea rcx, str.No_Recoil
call fcn.140022e90
call fcn.140027ac0
lea rcx, str.NOTE_:
call fcn.140027b00
call fcn.140027ac0
lea rcx, str.__EXPLOITS_HAVE_A_HIGH_BAN_RISK__
call fcn.140027b00
nop
cmp dword [0x14017ce28], 3
jne 0x140058dc6
lea rcx, str.___________Information
call fcn.140027b00
call fcn.140027160
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027b00
call fcn.140027ac0
mov rdx, qword [0x14017cf30]
lea rcx, str.__Base_ID_:__p__
call fcn.140027b00
lea rcx, str.__Updated_to_latest_Patch_28.06.2023__
call fcn.140027b00
lea rcx, str.__Discord__discord.gg_dbtARh6TJR__
call fcn.140027b00
lea rcx, str.__Working_on_Windows_10___11_50_50__
call fcn.140027b00
lea rcx, str.__If_the_menu_or_cheat_has_any_issues__
call fcn.140027b00
lea rcx, str.please_report_it_the_server___
call fcn.140027b00
nop
call fcn.140006fc4
nop
movss xmm2, dword [0x1400bc1e8]
movss xmm1, dword [0x14012a8a4]
lea rcx, [rsp + 0x138]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
movss xmm2, dword [0x14012a8a8]
movss xmm1, dword [0x14012a89c]
lea rcx, [rsp + 0x140]
call fcn.14003fad4
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.menu2
call fcn.140005488
nop
cmp dword [0x14017ce28], 0
jne 0x140058fad
lea rcx, str.__________Aim_Settings
call fcn.140027b00
call fcn.140027160
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027b00
nop
movss xmm2, dword [0x1400c01f4]
movss xmm1, dword [0x14012a8a4]
lea rcx, [rsp + 0x148]
call fcn.14003fad4
mov rcx, rax
call fcn.14000f1dc
nop
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
call fcn.140027ac0
lea rcx, str.Aimbot_FOV_Value
call fcn.140027b00
movss xmm0, dword [0x1400bc1c4]
movss dword [rsp + 0x28], xmm0
lea rax, [0x14012903c]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14012a8b8]
movss xmm2, dword [0x14012a88c]
lea rdx, [0x14017a81c]
lea rcx, [0x140129048]
call fcn.140027404
call fcn.140027ac0
lea rcx, str.Aimbot_Smoothness
call fcn.140027b00
movss xmm0, dword [0x1400bc1c4]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14012a874]
movss xmm2, dword [0x1400bc1cc]
lea rdx, [0x14017a814]
lea rcx, [0x140129080]
call fcn.140027404
call fcn.140027ac0
lea rcx, str.Aimbot_Key
call fcn.140027b00
mov r8d, dword [0x14017d330]
lea rdx, [0x140043c54]
mov ecx, dword [0x14017cc48]
call fcn.14004c5c4
call fcn.140027ac0
lea rcx, str.Aimbot_Bone
call fcn.140027b00
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, str.Head
lea rdx, [0x14017d364]
lea rcx, [0x1401290b0]
call fcn.140023740
call fcn.140027ac0
nop
cmp dword [0x14017ce28], 1
jne 0x140059028
lea rcx, str._________Visual_Settings
call fcn.140027b00
call fcn.140027160
lea rcx, [0x1401290dc]
call fcn.140027b00
call fcn.140027ac0
lea rcx, str.Max_Esp_Distance
call fcn.140027b00
lea rax, [0x1401290f4]
mov qword [rsp + 0x20], rax
mov r9d, 0x3e8
mov r8d, 0x1f4
lea rdx, [0x14017c044]
lea rcx, str.MaxDistance
call fcn.14002744c
call fcn.140027ac0
lea rdx, [0x140158aaa]
lea rcx, str.Distance_Esp
call fcn.140022e90
nop
cmp dword [0x14017ce28], 2
jne 0x140059088
lea rcx, str._________Misc_Settings
call fcn.140027b00
call fcn.140027160
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027b00
lea rdx, [0x140158a9d]
lea rcx, str.watermarket
call fcn.140022e90
lea rdx, [0x14017ce42]
lea rcx, str.FPS_Counter
call fcn.140022e90
lea rdx, [0x14017ce4d]
lea rcx, str.Stream_Proof
call fcn.140022e90
nop
cmp dword [0x14017ce28], 3
jne 0x140059197
lea rcx, str.___________Other_Information
call fcn.140027b00
call fcn.140027160
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.140027b00
nop
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
mov r8d, 0xff
mov edx, reloc.WLDAP32.dll_Ordinal_26
lea rcx, [rsp + 0x1a8]
call fcn.14003fa40
mov qword [rsp + 0x80], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x80]
call fcn.140042160
lea rdx, str.__Currently_Undetected_on_EAC__
lea rcx, [rsp + 0x158]
call fcn.140027b28
nop
mov dword [rsp + 0x20], 0xff
mov r9d, reloc.WS2_32.dll_recv
mov r8d, 0xa7
mov edx, 0xe8
lea rcx, [rsp + 0x1b8]
call fcn.14003fa40
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x168]
mov rcx, qword [rsp + 0x88]
call fcn.140042160
lea rdx, str.__Currently_Semi_Detected_on_BE__
lea rcx, [rsp + 0x168]
call fcn.140027b28
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x150]
call fcn.14003fad4
mov rdx, rax
lea rcx, str.Discord_Server__Click_me_
call fcn.140022798
movzx eax, al
test eax, eax
je 0x140059197
lea rcx, str.start_https:__discord.gg_dbtARh6TJR
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
call fcn.140044d68
call fcn.1400074c4
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x90], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x14017d370]
call qword [rsp + 0x90]
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x98], rax
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov rcx, qword [0x14017d370]
call qword [rsp + 0x98]
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xa0], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x14017d370]
call qword [rsp + 0xa0]
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x1400bc1c4]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14017d370]
call qword [rsp + 0xa8]
nop
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rcx, qword [0x14017d370]
call qword [rax + 0x148]
test eax, eax
jl 0x1400592c4
call fcn.14000de60
call fcn.1400088c0
mov rcx, rax
call fcn.14001de54
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rcx, qword [0x14017d370]
call qword [rax + 0x150]
nop
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14017d370]
call qword [rsp + 0xb0]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x88760868
jne 0x14005935e
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rcx, qword [0x14017d370]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14005935e
call fcn.14001ddc4
mov rax, qword [0x14017d370]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0xb8], rax
lea rdx, [0x14017ced0]
mov rcx, qword [0x14017d370]
call qword [rsp + 0xb8]
call fcn.14001dc5c
nop
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.1400b6b00
add rsp, 0x288
ret