Function at 0x1800485c0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm7
mov rax, qword [0x18006c3c0]
xor rax, rsp
mov qword [rbp - 0x30], rax
mov rbx, qword [0x18006cfb8]
lea rcx, str.Misc
movss xmm7, dword [0x180062990]
xor edx, edx
mov dword [rbp - 0x40], 0x43a00000
mov dword [rbp - 0x3c], 0x42820000
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm7
addss xmm2, dword [0x18006293c]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3ed8]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180009690
mov edi, eax
cmp dword [rbx + 0x3f0c], eax
jne 0x1800486d3
lea r8, str.Misc
mov edx, 0xb
mov ecx, eax
call fcn.18001ddf0
lea r8, [rbp - 0x40]
mov edx, edi
lea rcx, str.Misc
call fcn.18003f110
mov rcx, qword [0x18006cfb8]
movss xmm6, dword [0x180062a3c]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0x9b], 0
jne 0x180048726
movaps xmm1, xmm6
mov qword [rbp - 0x40], 0
lea rcx, [rbp - 0x40]
call fcn.180017000
lea rdx, [0x18006c485]
lea rcx, [0x180062214]
call fcn.180034f20
lea rdx, [0x18006c484]
lea rcx, str.Menu_Partukulleri
call fcn.180034f20
call fcn.180010c70
mov rdx, qword [0x18006cfb8]
mov dword [rbp - 0x40], 0x43a00000
mov dword [rbp - 0x3c], 0x43b90000
mov rax, qword [rdx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rdx + 0x3ed8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm7
addss xmm2, dword [0x180062974]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov rax, qword [rdx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rdx + 0x3ed8]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov ebx, dword [rax + rcx*4 - 4]
cmp dword [rdx + 0x3f0c], ebx
jne 0x180048815
lea r8, [0x180060a2e]
mov edx, 0xb
mov ecx, ebx
call fcn.18001ddf0
lea r8, [rbp - 0x40]
mov edx, ebx
lea rcx, [0x180060a2e]
call fcn.18003f110
mov rcx, qword [0x18006cfb8]
lea rdx, [0x18006cd97]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.FastPlace
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, dword [0x1800628c0]
addss xmm2, dword [0x180062888]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.180034f20
test al, al
je 0x1800488c0
call fcn.1800460e0
call fcn.180045ed0
mov rcx, qword [0x18006cfb8]
movss xmm7, dword [0x180062904]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.FastPlace_Keybind
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm7
addss xmm2, dword [0x180062944]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.180033670
cmp byte [0x18006e890], 0
lea rdi, [0x18005efc0]
mov rcx, qword [0x18006cfb8]
lea r14, [0x18005f258]
mov qword [rbp - 0x40], 0
lea r15, str.TusAta
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, dword [0x180062910]
addss xmm2, dword [0x180062954]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
jne 0x180048a10
movsxd rax, dword [0x18006c498]
lea rdx, [rbp - 0x40]
mov rcx, qword [r15 + rax*8]
call fcn.180033e80
test al, al
je 0x180048a07
mov byte [0x18006e890], 1
jmp 0x180048a10
cmp byte [0x18006e890], 0
je 0x180048a55
lea rdx, [rbp - 0x40]
lea rcx, str.Tus_Ata
call fcn.180033e80
test al, al
je 0x180048a2b
mov byte [0x18006e890], 0
mov rbx, rdi
nop
mov ecx, dword [rbx]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180048a4c
mov eax, dword [rbx]
mov dword [0x18006c498], eax
mov byte [0x18006e890], 0
add rbx, 4
cmp rbx, r14
jne 0x180048a30
mov rcx, qword [0x18006cfb8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0x9b], 0
jne 0x180048a8e
movaps xmm1, xmm6
mov qword [rbp - 0x40], 0
lea rcx, [rbp - 0x40]
call fcn.180017000
lea rdx, [0x18006d0d9]
lea rcx, str.Spammer
call fcn.180034f20
test al, al
je 0x180048aaf
call fcn.1800430e0
call fcn.180042d40
mov rcx, qword [0x18006cfb8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0x9b], 0
jne 0x180048ae8
movaps xmm1, xmm6
mov qword [rbp - 0x40], 0
lea rcx, [rbp - 0x40]
call fcn.180017000
call fcn.180036930
mov rcx, qword [0x18006cfb8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0x9b], 0
jne 0x180048b2d
movaps xmm1, xmm6
mov qword [rbp - 0x40], 0
lea rcx, [rbp - 0x40]
call fcn.180017000
mov rcx, qword [0x18006cfb8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.Spammer_Keybind
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm7
addss xmm2, dword [0x18006299c]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.180033670
cmp byte [0x18006e565], 0
mov rcx, qword [0x18006cfb8]
mov qword [rbp - 0x40], 0
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, dword [0x180062910]
addss xmm2, dword [0x1800629a0]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
jne 0x180048c59
movsxd rax, dword [0x18006c494]
lea rdx, [rbp - 0x40]
mov rcx, qword [r15 + rax*8]
call fcn.180033e80
test al, al
je 0x180048c50
mov byte [0x18006e565], 1
jmp 0x180048c59
cmp byte [0x18006e565], 0
je 0x180048c9c
lea rdx, [rbp - 0x40]
lea rcx, str.Tus_Ata
call fcn.180033e80
test al, al
je 0x180048c74
mov byte [0x18006e565], 0
mov rbx, rdi
mov ecx, dword [rbx]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180048c93
mov eax, dword [rbx]
mov dword [0x18006c494], eax
mov byte [0x18006e565], 0
add rbx, 4
cmp rbx, r14
jne 0x180048c77
lea rdx, [0x18006d0e4]
lea rcx, str.Speed
call fcn.180034f20
test al, al
je 0x180048cb8
call fcn.180043bf0
lea rcx, str.Speed_Keybind
call fcn.180033670
cmp byte [0x18006e231], 0
mov qword [rbp - 0x40], 0
jne 0x180048cff
movsxd rax, dword [0x18006d500]
lea rdx, [rbp - 0x40]
mov rcx, qword [r15 + rax*8]
call fcn.180033e80
test al, al
je 0x180048cf6
mov byte [0x18006e231], 1
jmp 0x180048cff
cmp byte [0x18006e231], 0
je 0x180048d45
lea rdx, [rbp - 0x40]
lea rcx, str.Tus_Ata
call fcn.180033e80
test al, al
je 0x180048d1a
mov byte [0x18006e231], 0
mov rbx, rdi
nop dword [rax]
mov ecx, dword [rbx]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180048d3c
mov eax, dword [rbx]
mov dword [0x18006d500], eax
mov byte [0x18006e231], 0
add rbx, 4
cmp rbx, r14
jne 0x180048d20
lea rax, str._.3f
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x40]
lea rax, [rbp - 0x38]
mov dword [rbp - 0x38], 0x3f000000
lea r8, [0x18006c47c]
mov qword [rsp + 0x20], rax
mov edx, 8
mov dword [rbp - 0x40], 0x3a83126f
lea rcx, str.Speed
call fcn.180036d30
call fcn.180010c70
mov rbx, qword [0x18006cfb8]
lea rcx, str.Visuals
movss xmm7, dword [0x1800629ec]
xor edx, edx
mov dword [rbp - 0x40], 0x43a00000
mov dword [rbp - 0x3c], 0x431d0000
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm7
addss xmm2, dword [0x18006293c]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3ed8]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180009690
mov esi, eax
cmp dword [rbx + 0x3f0c], eax
jne 0x180048e6e
lea r8, str.Visuals
mov edx, 0xb
mov ecx, eax
call fcn.18001ddf0
lea r8, [rbp - 0x40]
mov edx, esi
lea rcx, str.Visuals
call fcn.18003f110
mov rcx, qword [0x18006cfb8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0x9b], 0
jne 0x180048eb9
movaps xmm1, xmm6
mov qword [rbp - 0x40], 0
lea rcx, [rbp - 0x40]
call fcn.180017000
lea rdx, [0x18006cd94]
lea rcx, str.ESP_Player
call fcn.180034f20
lea rdx, [0x18006cd7f]
lea rcx, str.Chest_ESP
call fcn.180034f20
lea rdx, [0x18006cd7b]
lea rcx, str.XRAY
call fcn.180034f20
call fcn.180010c70
mov rbx, qword [0x18006cfb8]
lea rcx, str.Strafe
xor edx, edx
mov dword [rbp - 0x40], 0x43a00000
mov dword [rbp - 0x3c], 0x431d0000
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm7
addss xmm2, dword [0x1800629c8]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3ed8]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.180009690
mov esi, eax
cmp dword [rbx + 0x3f0c], eax
jne 0x180048fcc
lea r8, str.Strafe
mov edx, 0xb
mov ecx, eax
call fcn.18001ddf0
lea r8, [rbp - 0x40]
mov edx, esi
lea rcx, str.Strafe
call fcn.18003f110
lea rdx, [0x18006d109]
lea rcx, str.Strafe
call fcn.180034f20
test al, al
je 0x180048fff
call fcn.180044870
call fcn.180043f10
lea rcx, str.Strafe_Keybind
call fcn.180033670
cmp byte [0x18006e564], 0
mov qword [rbp - 0x40], 0
jne 0x18004904a
movsxd rax, dword [0x18006d508]
lea rdx, [rbp - 0x40]
mov rcx, qword [r15 + rax*8]
call fcn.180033e80
test al, al
je 0x18004903d
mov byte [0x18006e564], 1
jmp 0x18004904a
cmp byte [0x18006e564], 0
je 0x18004911c
lea rdx, [rbp - 0x40]
lea rcx, str.Tus_Ata
call fcn.180033e80
lea rcx, [rbp - 0x40]
call fcn.180040c20
mov rbx, qword [rbp - 0x40]
movabs rax, 0x7ffffffffff0bdbe
cmp rbx, rax
jg 0x18004907f
add rbx, 0xf4240
jmp 0x180049089
movabs rbx, 0x7fffffffffffffff
movabs rsi, 0x4e94914effff
movabs r15, 0x431bde82d7b634db
nop dword [rax]
lea rcx, [rbp - 0x40]
call fcn.180040c20
mov rax, qword [rbp - 0x40]
cmp rbx, rax
je 0x1800490f7
jl 0x1800490f7
mov rcx, rbx
sub rcx, rax
cmp rcx, rsi
jg 0x1800490eb
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x1800490e2
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x1800490a0
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x1800490a0
mov ecx, dword [rdi]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180049113
mov eax, dword [rdi]
mov dword [0x18006d508], eax
mov byte [0x18006e564], 0
add rdi, 4
cmp rdi, r14
jne 0x1800490f7
call fcn.180010c70
mov rcx, qword [rbp - 0x30]
xor rcx, rsp
call fcn.1800554d0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x60]
mov rsp, r11
pop r15
pop r14
pop rbp
ret