Function at 0x14003a810
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
push rbp
push rdi
sub rsp, 0x198
lea rbp, [rsp + 0x30]
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14003a860
movzx eax, byte [0x1400f2003]
test eax, eax
jne 0x14003a849
mov dword [rbp + 0x128], 1
jmp 0x14003a853
mov dword [rbp + 0x128], 0
movzx eax, byte [rbp + 0x128]
mov byte [0x1400f2003], al
movzx eax, byte [0x1400f6e9d]
test eax, eax
je 0x14003a907
movzx eax, byte [0x1400f6eae]
test eax, eax
je 0x14003a907
call fcn.140029d40
mov qword [rbp + 0x128], rax
lea rcx, [0x1400f7290]
call fcn.140026960
mov dword [rbp + 0x130], eax
movss xmm0, dword [0x1400f62d0]
movss dword [rbp + 0x134], xmm0
cvtsi2ss xmm0, dword [0x1400f7344]
cvtsi2ss xmm1, dword [0x1400f72e0]
movaps xmm2, xmm0
lea rcx, [rbp + 0x40]
call fcn.1400254a0
mov qword [rbp + 0x138], rax
movss xmm0, dword [0x1400ceb90]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0x168
mov r9d, dword [rbp + 0x130]
movss xmm2, dword [rbp + 0x134]
mov rdx, qword [rbp + 0x138]
mov rcx, qword [rbp + 0x128]
call fcn.14006b360
movzx eax, byte [0x1400f2003]
test eax, eax
je 0x14003adc8
call fcn.140029d40
mov qword [rbp + 0x128], rax
mov dword [rsp + 0x20], 0xff
mov r9d, 0xff
mov r8d, 0xff
mov edx, 0xff
lea rcx, [rbp + 0x48]
call fcn.1400253b0
mov rcx, rax
call fcn.140026960
mov dword [rbp + 0x130], eax
call fcn.14004da10
movss xmm0, dword [rax + 0x12c]
addss xmm0, dword [0x1400cebac]
movss dword [rbp + 0x134], xmm0
call fcn.14004da10
movss xmm0, dword [rax + 0x128]
subss xmm0, dword [0x1400ceb90]
movss dword [rbp + 0x138], xmm0
movss xmm2, dword [rbp + 0x134]
movss xmm1, dword [rbp + 0x138]
lea rcx, [rbp + 0x58]
call fcn.1400254a0
mov qword [rbp + 0x140], rax
call fcn.14004da10
movss xmm0, dword [rax + 0x12c]
movss dword [rbp + 0x148], xmm0
call fcn.14004da10
movss xmm0, dword [rax + 0x128]
addss xmm0, dword [0x1400ceb94]
movss dword [rbp + 0x14c], xmm0
movss xmm2, dword [rbp + 0x148]
movss xmm1, dword [rbp + 0x14c]
lea rcx, [rbp + 0x60]
call fcn.1400254a0
mov qword [rbp + 0x150], rax
mov dword [rsp + 0x28], 0xf
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, dword [rbp + 0x130]
mov r8, qword [rbp + 0x140]
mov rdx, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x128]
call fcn.14006f4c0
lea rax, [rbp + 0x68]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x69]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x68]
movzx r8d, byte [rbp + 0x69]
movzx edx, byte [rbp + 0x6a]
lea rcx, [rbp + 0x70]
call fcn.1400221e0
mov rcx, rax
call fcn.140032b10
mov r8d, 2
lea rdx, [0x1400f72e5]
mov rcx, rax
call fcn.1400424c0
movss xmm2, dword [0x1400cebfc]
movss xmm1, dword [0x1400cec00]
lea rcx, [rbp + 0x80]
call fcn.1400254a0
xor edx, edx
mov rcx, rax
call fcn.140062400
lea rax, [rbp + 0x88]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x89]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x88]
movzx r8d, byte [rbp + 0x89]
movzx edx, byte [rbp + 0x8a]
lea rcx, [rbp + 0x90]
call fcn.140022450
mov rcx, rax
call fcn.140032ae0
mov qword [rbp + 0x128], rax
mov dword [rsp + 0x20], 0xff
mov r9d, 0x4b
mov r8d, 0x8b
mov edx, 0xbe
lea rcx, [rbp + 0xa0]
call fcn.1400253b0
mov qword [rbp + 0x130], rax
lea rdx, [rbp + 0xb0]
mov rcx, qword [rbp + 0x130]
call fcn.140026930
mov rdx, qword [rbp + 0x128]
lea rcx, [rbp + 0xb0]
call fcn.1400b8ea0
lea rax, [rbp + 0xc0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xc1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xc0]
movzx r8d, byte [rbp + 0xc1]
movzx edx, byte [rbp + 0xc2]
lea rcx, [rbp + 0xd0]
call fcn.1400225d0
mov rcx, rax
call fcn.140032b10
mov qword [rbp + 0x128], rax
mov dword [rsp + 0x20], 0xff
mov r9d, 0xe9
mov r8d, 0x82
mov edx, 0x2d
lea rcx, [rbp + 0xe0]
call fcn.1400253b0
mov qword [rbp + 0x130], rax
lea rdx, [rbp + 0xf0]
mov rcx, qword [rbp + 0x130]
call fcn.140026930
mov rdx, qword [rbp + 0x128]
lea rcx, [rbp + 0xf0]
call fcn.1400b8ea0
xor ecx, ecx
call fcn.1400521c0
movzx eax, al
test eax, eax
je 0x14003ac31
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.https:__discord.gg_hiddencool1
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.1400b2e30
call fcn.1400b4f60
lea rdx, [0x1400f2001]
lea rcx, str.Cheat_Enabled
call fcn.14003bc80
call fcn.1400b4f60
call fcn.1400b2e30
call fcn.1400b4f60
movss xmm2, dword [0x1400ceba8]
movss xmm1, dword [0x1400cebc8]
lea rcx, [rbp + 0x100]
call fcn.1400254a0
mov rdx, rax
mov ecx, 0xa
call fcn.14005c8f0
xor edx, edx
lea rcx, str.MenuTabs
call fcn.14009b700
xor r8d, r8d
xor edx, edx
lea rcx, str.AIMBOT
call fcn.14009bb80
movzx eax, al
test eax, eax
je 0x14003acdc
movss xmm2, dword [0x1400cebf8]
movss xmm1, dword [0x1400cec00]
lea rcx, [rbp + 0x108]
call fcn.1400254a0
xor edx, edx
mov rcx, rax
call fcn.140062400
call fcn.140035930
call fcn.1400a7080
xor r8d, r8d
xor edx, edx
lea rcx, str.VISUALS
call fcn.14009bb80
movzx eax, al
test eax, eax
je 0x14003ad24
movss xmm2, dword [0x1400cebec]
movss xmm1, dword [0x1400cec00]
lea rcx, [rbp + 0x110]
call fcn.1400254a0
xor edx, edx
mov rcx, rax
call fcn.140062400
call fcn.1400370c0
call fcn.1400a7080
xor r8d, r8d
xor edx, edx
lea rcx, str.COLORS
call fcn.14009bb80
movzx eax, al
test eax, eax
je 0x14003ad6c
movss xmm2, dword [0x1400cebf0]
movss xmm1, dword [0x1400cec00]
lea rcx, [rbp + 0x118]
call fcn.1400254a0
xor edx, edx
mov rcx, rax
call fcn.140062400
call fcn.1400367c0
call fcn.1400a7080
xor r8d, r8d
xor edx, edx
lea rcx, str.CONFIG
call fcn.14009bb80
movzx eax, al
test eax, eax
je 0x14003adb4
movss xmm2, dword [0x1400cebe4]
movss xmm1, dword [0x1400cec00]
lea rcx, [rbp + 0x120]
call fcn.1400254a0
xor edx, edx
mov rcx, rax
call fcn.140062400
call fcn.140036e90
call fcn.1400a7080
mov ecx, 1
call fcn.14005be80
call fcn.1400a6f00
call fcn.140049fd0
lea rsp, [rbp + 0x168]
pop rdi
pop rbp
ret