Function at 0x140005fa0
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x14004e028]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor edi, edi
cmp byte [0x14004ea38], dil
jne 0x140006285
xor ecx, ecx
call fcn.1400261e0
mov rbx, qword [0x14004eaf8]
movaps xmm0, xmmword [0x140047680]
movaps xmm1, xmmword [0x140047650]
movups xmmword [rbx + 0x1628], xmm0
movaps xmm0, xmmword [0x1400475d0]
movups xmmword [rbx + 0x1638], xmm1
movaps xmm1, xmmword [0x1400474a0]
movups xmmword [rbx + 0x1648], xmm0
movups xmmword [rbx + 0x1658], xmm1
movaps xmm1, xmmword [0x140047600]
xorps xmm0, xmm0
movups xmmword [rbx + 0x1688], xmm0
movaps xmm0, xmmword [0x140047520]
movups xmmword [rbx + 0x1698], xmm1
movaps xmm1, xmmword [0x140047620]
movups xmmword [rbx + 0x16a8], xmm0
movaps xmm0, xmmword [0x1400475e0]
movups xmmword [rbx + 0x16b8], xmm1
movaps xmm1, xmmword [0x140047500]
movups xmmword [rbx + 0x16c8], xmm0
movaps xmm0, xmmword [0x140047610]
movups xmmword [rbx + 0x16e8], xmm1
movaps xmm1, xmmword [0x1400474e0]
movups xmmword [rbx + 0x16d8], xmm0
movaps xmm0, xmmword [0x1400475f0]
movups xmmword [rbx + 0x16f8], xmm1
movaps xmm1, xmmword [0x140047630]
movups xmmword [rbx + 0x1708], xmm0
movaps xmm0, xmmword [0x140047530]
movups xmmword [rbx + 0x1718], xmm1
movaps xmm1, xmmword [0x140047670]
movups xmmword [rbx + 0x1728], xmm0
movaps xmm0, xmmword [0x140047680]
movups xmmword [rbx + 0x1738], xmm1
movaps xmm1, xmmword [0x1400474b0]
movups xmmword [rbx + 0x1748], xmm0
movaps xmm0, xmmword [0x140047670]
movups xmmword [rbx + 0x1758], xmm1
movaps xmm1, xmmword [0x140047550]
movups xmmword [rbx + 0x1768], xmm0
movaps xmm0, xmmword [0x140047660]
movups xmmword [rbx + 0x1788], xmm1
movaps xmm1, xmmword [0x140047510]
movups xmmword [rbx + 0x1798], xmm0
movaps xmm0, xmmword [0x140047550]
movups xmmword [rbx + 0x17a8], xmm1
movaps xmm1, xmmword [0x140047640]
movups xmmword [rbx + 0x17b8], xmm0
movaps xmm0, xmmword [0x1400474f0]
movups xmmword [rbx + 0x17c8], xmm1
movaps xmm1, xmmword [0x140047530]
movups xmmword [rbx + 0x17d8], xmm0
movaps xmm0, xmmword [0x140047670]
movups xmmword [rbx + 0x17e8], xmm1
movaps xmm1, xmmword [0x1400474c0]
movups xmmword [rbx + 0x17f8], xmm0
movaps xmm0, xmmword [0x140047540]
movups xmmword [rbx + 0x1808], xmm1
movaps xmm1, xmmword [0x140047670]
movups xmmword [rbx + 0x1818], xmm0
movaps xmm0, xmmword [0x1400475b0]
movups xmmword [rbx + 0x1828], xmm1
movaps xmm1, xmmword [0x1400475a0]
movups xmmword [rbx + 0x1888], xmm0
movups xmmword [rbx + 0x1898], xmm1
movups xmmword [rbx + 0x18a8], xmm0
movaps xmm0, xmmword [0x1400474d0]
movups xmmword [rbx + 0x18b8], xmm1
movaps xmm1, xmmword [0x140047560]
movups xmmword [rbx + 0x1918], xmm0
movups xmmword [rbx + 0x1668], xmm1
mov eax, dword [rbx + 0x1d08]
movss xmm0, dword [0x14004ec00]
or eax, 1
movss xmm2, dword [0x14004ec04]
mov dword [rbx + 0x1d08], eax
movss dword [rbx + 0x1d18], xmm0
movss dword [rbx + 0x1d1c], xmm2
mov qword [rbx + 0x1d20], rdi
mov dword [rbx + 0x1d0c], 2
lea rcx, [rbx + 0x1d88]
movss xmm0, dword [0x140046b98]
lea rdx, [rbp - 0x40]
movss xmm1, dword [0x140046b9c]
or eax, 2
movss dword [rbx + 0x1d28], xmm0
movss dword [rbx + 0x1d2c], xmm1
mov dword [rbx + 0x1d08], eax
mov dword [rbx + 0x1d10], 1
movss xmm1, dword [rbx + 0x1580]
movss xmm0, dword [rbx + 0x1584]
movss dword [rbp - 0x3c], xmm1
movss dword [rbp - 0x38], xmm0
mov dword [rbp - 0x40], 6
call fcn.14001e300
mov dword [rbx + 0x1580], 0x3f000000
mov dword [rbx + 0x1584], 0x3f000000
mov byte [0x14004ea38], 1
mov ecx, 0xa
call fcn.14003f6ec
xor edx, edx
mov r8d, 0x12b
mov rcx, rax
mov dword [rax], 0x65746e49
mov dword [rax + 4], 0x63616672
mov word [rax + 8], 0x65
call fcn.140013f50
mov ecx, 0xc
mov dword [rbp - 0x40], 0x42a60000
mov dword [rbp - 0x3c], 0x42a60000
call fcn.14003f6ec
mov rcx, qword [0x14004eaf8]
mov rbx, rax
mov rdx, rbx
mov dword [rax], 0x6c696843
mov dword [rax + 4], 0x6e695764
mov dword [rax + 8], 0x776f64
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rcx, qword [rcx + 0x1c10]
call fcn.14000cd70
mov edx, eax
mov dword [rsp + 0x20], 0x18
lea r8, [rbp - 0x40]
mov rcx, rbx
call fcn.140011530
mov rcx, qword [0x14004eaf8]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c10]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x140047244]
subss xmm2, dword [0x140047280]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.140011740
movss xmm1, dword [0x140047338]
xorps xmm0, xmm0
call fcn.140017200
mov r8, qword [0x14004eaf8]
mov rax, qword [r8 + 0x1c10]
movss xmm1, dword [rax + 0x220]
cmp qword [rax + 0x178], rdi
jne 0x1400063d0
cmp qword [r8 + 0x2020], rdi
je 0x1400063d8
movss xmm1, dword [rax + 0x1f0]
movss xmm0, dword [rax + 0x224]
lea rcx, [rbp - 0x28]
subss xmm0, dword [rax + 0xdc]
subss xmm1, dword [rax + 0xd8]
mov dword [rbp - 0x28], 0x300030
mov byte [rbp - 0x14], dil
movss dword [rbp - 0x3c], xmm0
movdqa xmm0, xmmword [0x140047490]
movdqu xmmword [rbp - 0x24], xmm0
movss dword [rbp - 0x40], xmm1
call fcn.1400079b0
mov r8, qword [0x14004eaf8]
mov rdx, rax
mov rbx, rax
mov rcx, qword [r8 + 0x1c10]
mov byte [rcx + 0x90], 1
mov rcx, qword [r8 + 0x1c10]
call fcn.14000cd70
mov edx, eax
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x40]
mov rcx, rbx
call fcn.140011530
mov eax, dword [0x14004ead0]
cmp eax, 1
jne 0x14000663a
lea rdx, [0x14004e1b8]
lea rcx, str.Aimbot
call fcn.1400338a0
lea rdx, [0x14004e185]
lea rcx, str.Fov_Circle
call fcn.1400338a0
lea rax, [rbp - 0x30]
mov dword [rbp - 0x30], 0x42c80000
lea rbx, [0x140041e4c]
mov dword [rbp - 0x40], 0x41200000
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x40]
lea r8, [0x14004e1d0]
mov qword [rsp + 0x20], rax
mov edx, 8
lea rcx, [0x140041e50]
call fcn.1400357b0
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r8, [0x14004e1c8]
mov dword [rbp - 0x40], 0x42c80000
mov edx, 8
mov dword [rbp - 0x30], 0x3f800000
lea rcx, str.Smooth
call fcn.1400357b0
lea rax, str.Head
mov qword [rbp - 0x28], rax
lea r9, [rbp - 0x28]
lea rax, str.Neck
mov qword [rbp - 0x20], rax
lea rdx, [0x14004e1bc]
lea rax, str.Chest
mov qword [rbp - 0x18], rax
call fcn.140034a60
mov eax, dword [0x14004e1bc]
test eax, eax
jne 0x140006547
mov dword [0x14004e1c0], 8
jmp 0x140006567
cmp eax, 1
jne 0x140006558
mov dword [0x14004e1c0], 7
jmp 0x140006567
cmp eax, 2
jne 0x140006567
mov dword [0x14004e1c0], 6
lea rax, [0x140041e7c]
mov dword [rbp - 0x40], 0x64
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x30]
lea rax, [rbp - 0x40]
mov dword [rbp - 0x30], 1
lea r8, [0x14004e1cc]
mov qword [rsp + 0x20], rax
mov edx, 4
lea rcx, str.distance_x
call fcn.1400357b0
movzx eax, byte [0x14004ecc8]
mov qword [rbp - 0x40], rdi
test al, al
jne 0x1400065e4
movsxd rcx, dword [0x14004e190]
lea rax, [0x1400422f0]
lea rdx, [rbp - 0x40]
mov rcx, qword [rax + rcx*8]
call fcn.140032af0
test al, al
je 0x1400067ac
mov byte [0x14004ecc8], 1
jmp 0x1400067ac
cmp al, 1
jne 0x1400067ac
lea rdx, [rbp - 0x40]
lea rcx, [0x140041da4]
call fcn.140032af0
lea rbx, [0x140042040]
lea rdi, [0x1400422d8]
nop word [rax + rax]
mov ecx, dword [rbx]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000662c
mov eax, dword [rbx]
mov dword [0x14004e190], eax
mov byte [0x14004ecc8], 0
add rbx, 4
cmp rbx, rdi
jne 0x140006610
jmp 0x1400067ac
cmp eax, 2
jne 0x1400066e0
lea rdx, [0x14004e180]
lea rcx, str.Corner_Box
call fcn.1400338a0
lea rdx, [0x14004e189]
lea rcx, str.2D_Box
call fcn.1400338a0
lea rdx, [0x14004e182]
lea rcx, str.Head_Circle
call fcn.1400338a0
lea rdx, [0x14004e181]
lea rcx, str.Skeleton
call fcn.1400338a0
lea rdx, [0x14004e183]
lea rcx, str.Distance
call fcn.1400338a0
lea rdx, [0x14004e18b]
lea rcx, str.Health_Bar
call fcn.1400338a0
lea rdx, [0x14004e188]
lea rcx, str.SnapLine
call fcn.1400338a0
lea rdx, [0x14004e186]
lea rcx, str.Overlay_Fps
call fcn.1400338a0
jmp 0x1400067ac
cmp eax, 3
jne 0x1400067ac
lea rdx, [rbp - 0x40]
mov qword [rbp - 0x40], rdi
lea rcx, str.Discord
call fcn.140032af0
test al, al
je 0x140006722
mov dword [rsp + 0x28], 5
lea r8, str.https:__discord.gg_uidissue
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rcx, str.Gui_Key
call fcn.1400321d0
movzx eax, byte [0x14004ecc8]
mov qword [rbp - 0x40], rdi
test al, al
jne 0x140006765
movsxd rcx, dword [0x14004e194]
lea rax, [0x1400422f0]
lea rdx, [rbp - 0x40]
mov rcx, qword [rax + rcx*8]
call fcn.140032af0
test al, al
je 0x1400067ac
mov byte [0x14004ecc8], 1
jmp 0x1400067ac
cmp al, 1
jne 0x1400067ac
lea rdx, [rbp - 0x40]
lea rcx, [0x140041da4]
call fcn.140032af0
lea rbx, [0x140042040]
lea rdi, [0x1400422d8]
mov ecx, dword [rbx]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400067a3
mov eax, dword [rbx]
mov dword [0x14004e194], eax
mov byte [0x14004ecc8], 0
add rbx, 4
cmp rbx, rdi
jne 0x140006787
call fcn.140011740
mov rcx, qword [0x14004eaf8]
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x42a60000
mov dword [rbp - 0x3c], 0x41d80000
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Combat
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x1400472b4]
addss xmm2, dword [0x1400472e0]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.140032af0
test al, al
je 0x140006855
mov dword [0x14004ead0], 1
mov rcx, qword [0x14004eaf8]
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x42a60000
mov dword [rbp - 0x3c], 0x41d80000
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Visuals
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x1400472b4]
addss xmm2, dword [0x1400472e8]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.140032af0
test al, al
je 0x1400068f9
mov dword [0x14004ead0], 2
mov rcx, qword [0x14004eaf8]
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x40], 0x42a60000
mov dword [rbp - 0x3c], 0x41d80000
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Misc
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x1400472b4]
addss xmm2, dword [0x1400472ec]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.140032af0
test al, al
je 0x14000699d
mov dword [0x14004ead0], 3
call fcn.1400163b0
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14003f310
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret