Function at 0x14008fac0
Capabilities:
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1402d8540]
xor rax, rsp
mov qword [rbp - 0x20], rax
mov rbx, qword [0x1402dc758]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14008fb06
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14008fb0d
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
je 0x1400904ab
mov qword [rsp + 0x90], rdi
lea rcx, [0x1402dcd50]
movaps xmmword [rsp + 0x70], xmm6
call qword [sym.imp.USER32.dll_GetCursorPos]
movdqa xmm0, xmmword [0x1402b6d70]
lea rcx, [rbp - 0x40]
movd xmm1, dword [0x1402dcd54]
movups xmmword [rbp - 0x40], xmm0
movd xmm0, dword [0x1402dcd50]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x30], xmm0
movss dword [rbp - 0x2c], xmm1
call fcn.140062b80
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
movss xmm2, dword [0x1402b6880]
add rcx, 0x1cc8
mov r9d, eax
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_50
call fcn.14007de50
mov rax, qword [0x1402dc758]
lea rcx, str.been_ud_for_6_months
xor edx, edx
mov r8d, Ordinal_46
mov dword [rax + 0x1af4], 0x441b0000
mov dword [rax + 0x1af8], 0x43af0000
mov dword [rax + 0x1acc], 1
call fcn.1400695e0
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Evotoogood
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68bc]
addss xmm2, dword [0x1402b68b8]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.1400832c0
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
movss xmm6, dword [0x1402b68b0]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, [0x1402b531c]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b68c8]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083940
xor edi, edi
test al, al
je 0x14008fceb
mov dword [0x1402dcc90], edi
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, [0x1402b5328]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b68d4]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083940
test al, al
je 0x14008fd88
mov dword [0x1402dcc90], 1
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.MISC
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b68e4]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083940
test al, al
je 0x14008fe25
mov dword [0x1402dcc90], 2
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42b20000
mov dword [rbp - 0x2c], 0x42000000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Discord
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b68ec]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083940
test al, al
je 0x14008fec5
lea rcx, str.start_https:__discord.gg_8jTAstg4GK
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x1402dc758]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42820000
mov dword [rbp - 0x2c], 0x41a00000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.unload
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, xmm6
addss xmm2, dword [0x1402b68f4]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140083940
test al, al
je 0x14008ff61
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [0x1402dcc90]
mov dword [rbx + 0x1594], 0x41000000
mov dword [rbx + 0x1598], 0x41000000
test eax, eax
jne 0x140090195
mov rbx, qword [0x1402dc758]
lea rcx, str.Aimbot
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68e8]
addss xmm2, dword [0x1402b68c0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140062430
cmp dword [rbx + 0x1a24], eax
jne 0x140090047
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140090056
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Aimbot
call fcn.140067910
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Evo_Aim:
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68ac]
addss xmm2, dword [0x1402b68a0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.1400832c0
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [0x1402b531c]
call fcn.140084670
movss xmm6, dword [0x1402b6804]
lea rax, str._.3f
movss dword [rsp + 0x30], xmm6
lea r9, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea r8, [0x1402d85c8]
lea rax, [rbp - 0x28]
mov dword [rbp - 0x28], 0x41700000
mov edx, 4
mov qword [rsp + 0x20], rax
lea rcx, str.Smooth
mov dword [rbp - 0x30], 0x40000000
call fcn.1400851c0
movss dword [rsp + 0x30], xmm6
lea rax, [0x1402b5140]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x28]
lea rax, [rbp - 0x30]
mov dword [rbp - 0x30], 0x258
lea r8, [0x1402d85c4]
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp - 0x28], reloc.WLDAP32.dll_Ordinal_50
lea rcx, str.Fov_Size
call fcn.1400851c0
mov eax, dword [0x1402dcc90]
cmp eax, 1
jne 0x140090321
mov rbx, qword [0x1402dc758]
lea rcx, str.Visuals
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68e8]
addss xmm2, dword [0x1402b68c0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140062430
cmp dword [rbx + 0x1a24], eax
jne 0x140090262
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140090271
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Visuals
call fcn.140067910
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Evo_Enemy:
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68ac]
addss xmm2, dword [0x1402b68a0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.1400832c0
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Corner_Box
call fcn.140084670
mov eax, dword [0x1402dcc90]
cmp eax, 2
jne 0x140090494
mov rbx, qword [0x1402dc758]
lea rcx, str.Misc
xor edx, edx
mov dword [rbp - 0x30], 0x43e10000
mov dword [rbp - 0x2c], 0x438b8000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68e8]
addss xmm2, dword [0x1402b68c0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140062430
cmp dword [rbx + 0x1a24], eax
jne 0x1400903ee
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x1400903fd
mov byte [rbx + 0x1a37], 1
lea r8, [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov edx, eax
lea rcx, str.Misc
call fcn.140067910
mov rcx, qword [0x1402dc758]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.Evo_Gay:
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x1402b68ac]
addss xmm2, dword [0x1402b68a0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.1400832c0
call fcn.140067be0
call fcn.14006c490
mov rdi, qword [rsp + 0x90]
movaps xmm6, xmmword [rsp + 0x70]
mov rcx, qword [rbp - 0x20]
xor rcx, rsp
call fcn.1402213f0
mov rbx, qword [rsp + 0x98]
add rsp, 0x80
pop rbp
ret