Function at 0x1400381ac
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0xa8
call fcn.14001ec04
call fcn.14001f594
call fcn.14000d4dc
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400381fc
movzx eax, byte [0x14004a290]
test eax, eax
jne 0x1400381ea
mov dword [rsp + 0x40], 1
jmp 0x1400381f2
mov dword [rsp + 0x40], 0
mov al, byte [rsp + 0x40]
mov byte [0x14004a290], al
movzx eax, byte [0x14004a290]
test eax, eax
je 0x14003859b
movss xmm2, dword [0x14004428c]
movss xmm1, dword [0x14004428c]
lea rcx, [rsp + 0x48]
call fcn.14002c8b4
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.14000f5b4
mov r8d, 0x2a
xor edx, edx
lea rcx, str.Realese_By_SevenQLF
call fcn.140003060
movss xmm2, dword [0x1400429e0]
movss xmm1, dword [0x1400429e0]
lea rcx, [rsp + 0x80]
call fcn.14002c8b4
mov rdx, rax
lea rcx, [0x140043bfc]
call fcn.140022e30
movzx eax, al
test eax, eax
je 0x140038280
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov r8b, 1
xor edx, edx
mov ecx, 2
call fcn.14000715c
movss xmm2, dword [0x140044294]
movss xmm1, dword [0x140044290]
lea rcx, [rsp + 0x88]
call fcn.14002c8b4
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier1
call fcn.1400055d8
lea rcx, str.Aimbot
call fcn.140027c8c
lea rdx, [0x14004c3cf]
lea rcx, [0x140043c1c]
call fcn.1400234e0
movss xmm1, dword [0x14003eca0]
xorps xmm0, xmm0
call fcn.14000efa4
lea rdx, [0x14004c3d0]
lea rcx, str.Crosshair
call fcn.1400234e0
movss xmm1, dword [0x14003eca0]
xorps xmm0, xmm0
call fcn.14000efa4
lea rdx, [0x14004c3c5]
lea rcx, str.Circle_FOV
call fcn.1400234e0
movss xmm0, dword [0x14003ec48]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140043c44]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003ec88]
movss xmm2, dword [0x14004427c]
lea rdx, [0x14004a2a0]
lea rcx, str.Aimbot_FOV
call fcn.140027718
movss xmm0, dword [0x14003ec48]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003ec6c]
movss xmm2, dword [0x14003ec48]
lea rdx, [0x14004a29c]
lea rcx, str.Aimbot_Smooth
call fcn.140027718
lea rcx, str.Aimbot_Key
call fcn.140027c8c
mov r8d, dword [0x14004c598]
lea rdx, [0x14002db20]
mov ecx, dword [0x14004c4b8]
call fcn.140033d24
call fcn.140027c4c
lea rcx, str.Aimbot_Config
call fcn.140027c8c
lea rdx, [0x14004c3e7]
lea rcx, str.RAGE_CONFIG
call fcn.1400234e0
movzx eax, al
test eax, eax
je 0x14003841b
movzx eax, byte [0x14004c3e7]
test eax, eax
je 0x14003841b
movss xmm0, dword [0x14003ec58]
movss dword [0x14004a29c], xmm0
movss xmm0, dword [0x14003ec7c]
movss dword [0x14004a2a0], xmm0
movss xmm1, dword [0x14003eca0]
xorps xmm0, xmm0
call fcn.14000efa4
lea rdx, [0x14004c3e8]
lea rcx, str.LEGIT_CONFIG
call fcn.1400234e0
movzx eax, al
test eax, eax
je 0x140038470
movzx eax, byte [0x14004c3e8]
test eax, eax
je 0x140038470
movss xmm0, dword [0x140044268]
movss dword [0x14004a29c], xmm0
movss xmm0, dword [0x140044280]
movss dword [0x14004a2a0], xmm0
movss xmm1, dword [0x14003eca0]
xorps xmm0, xmm0
call fcn.14000efa4
lea rdx, [0x14004c3e9]
lea rcx, str.TOURNAMENT
call fcn.1400234e0
movzx eax, al
test eax, eax
je 0x1400384c5
movzx eax, byte [0x14004c3e9]
test eax, eax
je 0x1400384c5
movss xmm0, dword [0x140044270]
movss dword [0x14004a29c], xmm0
movss xmm0, dword [0x14003ec7c]
movss dword [0x14004a2a0], xmm0
call fcn.1400076dc
call fcn.14000dad0
movss xmm2, dword [0x140044298]
movss xmm1, dword [0x14004429c]
lea rcx, [rsp + 0x90]
call fcn.14002c8b4
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier2
call fcn.1400055d8
lea rcx, [0x140043cdc]
call fcn.140027c8c
lea rdx, [0x14004c3c7]
lea rcx, str.Enable
call fcn.1400234e0
lea rdx, [0x14004c3c8]
lea rcx, [0x140043ce8]
call fcn.1400234e0
lea rdx, [0x14004c3d2]
lea rcx, str.Skeleton
call fcn.1400234e0
call fcn.140027c4c
lea rcx, str.Esp_Distance
call fcn.140027c8c
lea rax, [0x140043d10]
mov qword [rsp + 0x20], rax
mov r9d, 0x1f4
mov r8d, 0x14
lea rdx, [0x14004a2a8]
lea rcx, [0x140042c05]
call fcn.140027760
call fcn.1400076dc
mov r8b, 1
xor edx, edx
mov ecx, 1
call fcn.14000715c
call fcn.140007628
call fcn.14002fb00
call fcn.140007be0
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x50], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x14004c940]
call qword [rsp + 0x50]
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x14004c940]
call qword [rsp + 0x58]
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x14004c940]
call qword [rsp + 0x60]
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x14003ec48]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14004c940]
call qword [rsp + 0x68]
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rcx, qword [0x14004c940]
call qword [rax + 0x148]
test eax, eax
jl 0x1400386ae
call fcn.14000e26c
call fcn.140009014
mov rcx, rax
call fcn.14001ec1c
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rcx, qword [0x14004c940]
call qword [rax + 0x150]
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14004c940]
call qword [rsp + 0x70]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x88760868
jne 0x14003873b
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rcx, qword [0x14004c940]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003873b
call fcn.14001eb8c
mov rax, qword [0x14004c940]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x78], rax
lea rdx, [0x14004c460]
mov rcx, qword [0x14004c940]
call qword [rsp + 0x78]
call fcn.14001ea24
add rsp, 0xa8
ret