Function at 0x140031370
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0x68
mov rax, qword [0x140043040]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400313a4
cmp byte [0x1400430c1], 0
sete al
mov byte [0x1400430c1], al
jmp 0x1400313ab
movzx eax, byte [0x1400430c1]
test al, al
je 0x140031658
mov rax, qword [0x1400438e0]
lea rdx, [0x1400430c1]
mov r8d, 0x2b
lea rcx, str.redshirtfan_is_based
movss xmm2, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
subss xmm2, dword [0x14003c924]
subss xmm1, dword [0x14003c920]
mov dword [rax + 0x1af4], 0x44160000
mov dword [rax + 0x1af8], 0x43c80000
mov dword [rax + 0x1acc], 2
mulss xmm2, dword [0x14003c82c]
mov qword [rax + 0x1aec], 0
mulss xmm1, dword [0x14003c82c]
mov dword [rax + 0x1ac8], 2
movss dword [rax + 0x1ae4], xmm2
movss dword [rax + 0x1ae8], xmm1
call fcn.140009740
lea rcx, str.Overlay
call fcn.140023d40
call fcn.140025e00
call fcn.14002d6b0
test al, al
je 0x14003151d
lea rcx, [0x14003c6b0]
call fcn.14002e740
test al, al
je 0x1400314bb
mov rax, qword [0x1400438e0]
mov dword [0x1400438e8], 0
mov r8, qword [rax + 0x19f8]
cmp byte [r8 + 0x7f], 0
jne 0x1400314bb
movsxd rcx, dword [rax + 0x1e30]
mov rax, qword [rax + 0x1e38]
mov rdx, qword [rax + rcx*8 - 8]
movsx rax, word [rdx + 0x5a]
imul rcx, rax, 0x1c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x1400314bb
dec dword [r8 + 0x1e0]
lea rcx, str.Visuals
call fcn.14002e740
test al, al
je 0x140031518
mov rax, qword [0x1400438e0]
mov dword [0x1400438e8], 1
mov r8, qword [rax + 0x19f8]
cmp byte [r8 + 0x7f], 0
jne 0x140031518
movsxd rcx, dword [rax + 0x1e30]
mov rax, qword [rax + 0x1e38]
mov rdx, qword [rax + rcx*8 - 8]
movsx rax, word [rdx + 0x5a]
imul rcx, rax, 0x1c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x140031518
dec dword [r8 + 0x1e0]
call fcn.14002da50
mov eax, dword [0x1400438e8]
test eax, eax
jne 0x1400315c0
lea rdx, [0x140043f32]
lea rcx, str.Aimbot
call fcn.140025750
lea rdx, [0x140043f31]
lea rcx, str.Fov_Circle
call fcn.140025750
lea rax, [rsp + 0x48]
mov dword [rsp + 0x48], 0x3e8
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r8, [0x14004320c]
mov dword [rsp + 0x40], 0xa
lea rcx, str.Fov_Size
call fcn.140027160
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0x14
lea r9, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r8, [0x140043210]
mov dword [rsp + 0x48], 1
lea rcx, str.Smoothing
call fcn.140027160
call fcn.140026d90
mov eax, dword [0x1400438e8]
cmp eax, 1
jne 0x1400315fe
lea rdx, [0x140043f30]
lea rcx, str.Fullbox
call fcn.140025750
lea rdx, [0x140043f33]
lea rcx, str.Skeleton
call fcn.140025750
lea rdx, [0x140043f34]
lea rcx, str.Render_Count
call fcn.140025750
mov rcx, qword [0x1400438e0]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], 0
jne 0x140031633
xorps xmm1, xmm1
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x40]
call fcn.140004a90
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], 0
call fcn.140024470
test al, al
je 0x140031653
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000c6f0
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.1400358c0
add rsp, 0x68
ret