Function at 0x140008f10
Capabilities:
Encode data using xor
Enumerate gui resources
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x150
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x1400df080]
xor rax, rsp
mov qword [rbp + 0x10], rax
mov edi, dword [reloc.WS2_32.dll_accept]
xor esi, esi
cmp byte [0x1400dff08], sil
movabs r12, 0x2540be400
lea r14d, [rsi + 4]
lea r15d, [rsi + 0x1f]
jne 0x1400091b2
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140008f93
imul rax, rax, 0x64
jmp 0x140008fb1
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movups xmm0, xmmword [str.aVQMSU_]
lea rcx, [rax + r12]
movups xmm1, xmmword [0x1400c6a40]
mov r8d, esi
movzx eax, word [0x1400c6a98]
movups xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [0x1400c6a50]
movups xmmword [rbp - 0x70], xmm0
movups xmm0, xmmword [0x1400c6a70]
movups xmmword [rbp - 0x80], xmm1
movups xmm1, xmmword [0x1400c6a60]
movups xmmword [rbp - 0x50], xmm0
movsd xmm0, qword [0x1400c6a90]
movups xmmword [rbp - 0x60], xmm1
movups xmm1, xmmword [0x1400c6a80]
movsd qword [rbp - 0x30], xmm0
mov qword [0x1400e01c0], rcx
movups xmmword [rbp - 0x40], xmm1
mov word [rbp - 0x28], ax
cmp edi, 2
jl 0x140009165
movdqa xmm0, xmmword [str.66666666666666667777777777777777]
lea rcx, [rsp + 0x74]
movdqa xmm5, xmmword [0x1400ceb70]
movdqa xmm4, xmmword [0x1400cecc0]
movdqa xmm7, xmmword [0x1400ceba0]
movdqa xmmword [rbp - 0x10], xmm0
mov edx, dword [rbp - 0x10]
movd xmm6, r14d
movd xmm8, r15d
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400cebe0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400cebe0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x68
jl 0x140009060
cmp r8d, 0x6a
jge 0x1400091a1
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x6a
jl 0x140009170
lea rcx, [rsp + 0x70]
call fcn.140002880
mov byte [0x1400dff08], 1
cmp byte [reloc.WS2_32.dll_accept], 1
jne 0x140009928
cmp dword [0x1400e2678], esi
jne 0x140009348
xorps xmm0, xmm0
mov qword [rbp], rsi
lea rdx, [rbp - 0x10]
lea rcx, [0x140053ee0]
movdqu xmmword [rbp - 0x10], xmm0
call qword [sym.imp.USER32.dll_EnumWindows]
mov rdi, qword [rbp - 0x10]
mov rsi, qword [rbp - 8]
cmp rdi, rsi
je 0x1400092e2
mov rbx, rdi
nop dword [rax]
lea rcx, [rbx + 8]
lea rdx, str.Apex_Legends
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140009225
add rbx, 0x108
cmp rbx, rsi
jne 0x140009200
jmp 0x1400092c4
lea rcx, [0x1400e00b0]
mov edx, 2
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
lea rbx, [rbx + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rbx - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rbx - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rbx - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rbx - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rbx - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rbx - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140009231
mov rax, qword [rbx]
mov qword [rcx], rax
mov rcx, qword [0x1400e00b0]
mov qword [0x1400e2680], rcx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rcx, qword [0x1400e2680]
lea rdx, [0x1400e2660]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov rsi, qword [rbp - 8]
mov rdi, qword [rbp - 0x10]
mov dword [0x1400e2678], 1
cmp rdi, rsi
je 0x1400092cd
mov qword [rbp - 8], rdi
lea rdx, [rbp - 0x10]
lea rcx, [0x140053ee0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rdi, qword [rbp - 0x10]
test rdi, rdi
je 0x1400099a6
mov rcx, qword [rbp]
movabs rax, 0xf83e0f83e0f83e1
sub rcx, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rdi
imul rdx, rdx, 0x108
cmp rdx, 0x1000
jb 0x14000933b
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, r15
jbe 0x14000933b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400b4d58
jmp 0x1400099a6
cmp byte [0x1400dff07], sil
jne 0x140009536
movzx eax, word [0x1400cb440]
mov r8d, esi
mov word [rsp + 0x60], ax
movups xmm0, xmmword [str.pXMWeM_G__r___4fgdk_t5_9_5zW]
movups xmm1, xmmword [0x1400cb430]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm1
cmp edi, 2
jl 0x1400094c5
movdqa xmm0, xmmword [str.66666666666666667777777777777777]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1400ceb70]
movdqa xmm4, xmmword [0x1400cecc0]
movdqa xmm7, xmmword [0x1400ceba0]
movdqa xmmword [rbp - 0x10], xmm0
mov edx, dword [rbp - 0x10]
movd xmm6, r14d
movd xmm8, r15d
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400cebe0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400cebe0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x20
jl 0x1400093c0
cmp r8d, 0x22
jge 0x140009501
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x22
jl 0x1400094d0
lea rcx, [rsp + 0x40]
call fcn.140002880
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1400dff07], 1
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 0x12]
call qword [sym.imp.USER32.dll_PostMessageA]
movd xmm1, dword [0x1400df0d4]
lea rdx, [0x1400df0b8]
movd xmm0, dword [0x1400df0d8]
lea rcx, str.___PALLADIUM___
mov rax, qword [0x1400e2640]
mov r8d, dword [0x1400e01b8]
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x1400ce98c]
mulss xmm0, dword [0x1400ce99c]
movss dword [0x1400df0c8], xmm1
movaps xmm7, xmm1
mulss xmm7, dword [0x1400ce9a0]
movss dword [0x1400df0cc], xmm0
or dword [rax + 0x49b8], 2
movsd xmm0, qword [0x1400df0c8]
movsd qword [rax + 0x49d8], xmm0
mov dword [rax + 0x49c0], 2
call fcn.140016a70
call fcn.140005520
mov rcx, qword [0x1400e2640]
movss xmm6, dword [0x1400ce9e0]
mov r8, qword [rcx + 0x4008]
cmp byte [r8 + 0xc3], sil
jne 0x140009605
mov edx, dword [r8 + 0x1c4]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1b8], rsi
je 0x1400095fd
neg edx
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm6
call fcn.14003dc90
lea rdx, [rbp - 0x10]
movss dword [rbp - 0x10], xmm7
lea rcx, str.Visuals
mov dword [rbp - 0xc], esi
call fcn.14003c270
test al, al
je 0x140009627
mov dword [0x1400e2b30], esi
movss xmm1, dword [0x1400ceadc]
xorps xmm0, xmm0
call fcn.14001c4a0
lea rcx, [0x1400c6930]
lea rdx, [rbp - 0x10]
call fcn.14003c270
test al, al
je 0x140009658
mov ecx, 1
mov dword [0x1400e2b30], ecx
jmp 0x14000965e
mov ecx, dword [0x1400e2b30]
mov rax, qword [0x1400e2640]
mov rdx, qword [rax + 0x4008]
cmp byte [rdx + 0xc3], sil
jne 0x1400096a5
mov r8d, dword [rdx + 0x1c4]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1b8], rsi
je 0x140009697
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm6
call fcn.14003dc90
mov ecx, dword [0x1400e2b30]
test ecx, ecx
jne 0x140009730
lea rcx, str._____VISUALS_____
call fcn.14003b8a0
lea rdx, [0x1400dff02]
lea rcx, [0x1400c67d4]
call fcn.14003d440
lea rdx, [0x1400dff06]
lea rcx, str.SnapLines
call fcn.14003d440
lea rdx, [0x1400dff01]
lea rcx, str.Health_Bar__box_
call fcn.14003d440
lea rdx, [0x1400dff0f]
lea rcx, str.Seer_health
call fcn.14003d440
lea rdx, [0x1400dff0e]
lea rcx, str.Distance_Esp
call fcn.14003d440
lea rdx, [0x1400dff0a]
lea rcx, str.Player_Glow
call fcn.14003d440
jmp 0x140009874
cmp ecx, 1
jne 0x140009874
lea rcx, str._____AIM_____
call fcn.14003b8a0
lea rcx, str.USE_AT_YOUR_OWN_RISK___HIGH_BAN_RISK_
call fcn.14003b8a0
lea rdx, [0x1400dff05]
lea rcx, str.Aimbot
call fcn.14003d440
lea rax, [rbp - 0x20]
mov dword [rbp - 0x20], reloc.WS2_32.dll_sendto
lea rbx, [0x1400c6878]
mov dword [rbp - 0x10], 1
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x10]
lea r8, [0x1400df0c0]
mov qword [rsp + 0x20], rax
mov edx, r14d
lea rcx, str.Smoothing
call fcn.14003e9a0
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r8, [0x1400df0bc]
mov dword [rbp - 0x10], 0x320
mov edx, r14d
mov dword [rbp - 0x20], esi
lea rcx, [0x1400c688c]
call fcn.14003e9a0
lea rdx, [0x1400dff04]
lea rcx, str.Fov_Circle
call fcn.14003d440
lea rcx, str.Aim_Offset_Slider__Hip_To_Head_
call fcn.14003b8a0
lea rax, [rbp - 0x10]
mov dword [rbp - 0x10], 0x420c0000
lea rbx, str._.3f
mov dword [rbp - 0x20], esi
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x20]
lea r8, [0x1400e2634]
mov qword [rsp + 0x20], rax
mov edx, 8
lea rcx, [0x1400c6768]
call fcn.14003e9a0
lea rdx, [0x1400dff0c]
lea rcx, str.Recoil_Hack
call fcn.14003d440
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r8, [0x1400e2630]
mov dword [rbp - 0x10], 0x42c80000
mov edx, 8
mov dword [rbp - 0x20], esi
lea rcx, str.Recoil_Strength
call fcn.14003e9a0
mov rax, qword [0x1400e2640]
mov rdx, qword [rax + 0x4008]
cmp byte [rdx + 0xc3], sil
jne 0x1400098b5
mov r8d, dword [rdx + 0x1c4]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1b8], rsi
je 0x1400098ad
neg r8d
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm6
call fcn.14003dc90
mov rdx, qword [0x1400e2650]
lea rcx, str.base_address:__llx
call fcn.14003b8a0
mov edx, dword [0x1400df0d4]
lea rcx, str.ScreenX:__d
call fcn.14003b8a0
mov edx, dword [0x1400df0d8]
lea rcx, str.ScreenY:__d
call fcn.14003b8a0
movss xmm0, dword [0x1400ceab4]
lea rcx, str.Application_average__.3f_ms_frame___.1f_FPS_
mov rax, qword [0x1400e2640]
movss xmm1, dword [rax + 0xd4]
divss xmm0, xmm1
cvtps2pd xmm2, xmm1
cvtps2pd xmm1, xmm0
movq r8, xmm2
movq rdx, xmm1
call fcn.14003b8a0
call fcn.140018e20
cmp byte [0x1400dff0a], sil
je 0x140009984
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14000994f
imul rax, rax, 0x64
jmp 0x14000996d
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, qword [0x1400e01c0]
je 0x140009978
jl 0x140009984
call fcn.140005f20
add qword [0x1400e01c0], r12
call fcn.140006180
mov ecx, reloc.WS2_32.dll_WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400099a6
cmp byte [reloc.WS2_32.dll_accept], sil
sete byte [0x1400df0b8]
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.1400b49c0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret