Function at 0x4388e0
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push esi
push 0x2d
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x438904
cmp byte [0x45b024], 0
sete al
mov byte [0x45b024], al
jmp 0x438909
mov al, byte [0x45b024]
test al, al
je 0x43910e
cmp byte [0x45b037], 0
jne 0x438922
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [0x461fe8]
mov edx, 0x45b037
push 0x2a
mov ecx, str.WaRock_External_Software
or dword [eax + 0x4708], 2
mov dword [eax + 0x4728], 0x442a0000
mov dword [eax + 0x472c], 0x43d20000
mov dword [eax + 0x4710], 1
call fcn.00412a30
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x43200000
mov ecx, str.PLAYER
mov dword [ebp - 4], 0x41f00000
call fcn.004359b0
mov ecx, dword [0x46bcf0]
xor edx, edx
add esp, 4
test al, al
cmovne ecx, edx
mov dword [0x46bcf0], ecx
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x438a0f
mov esi, dword [0x461fe8]
sub esp, 0xc
movaps xmm0, xmmword [0x457ca0]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [esi + 0x46d8]
mov ecx, dword [esi + 0x46dc]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x46e0]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x3e58]
mov dword [ebp - 0xc], ecx
mov ecx, dword [esi + 0x46e4]
mov dword [ebp - 4], ecx
lea ecx, [ebp - 0x20]
mov dword [esp + 8], 0x3f800000
mov byte [eax + 0xac], 1
mov dword [esp], 0
call fcn.004046c0
mov ecx, dword [esi + 0x3e58]
push eax
lea eax, [ebp - 8]
push eax
mov ecx, dword [ecx + 0x26c]
lea eax, [ebp - 0x10]
push eax
call fcn.00430940
movss xmm1, dword [0x4578d0]
xorps xmm0, xmm0
call fcn.0040e960
push ecx
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x43200000
mov ecx, str.ZOMBIE
mov dword [ebp - 0xc], 0x41f00000
call fcn.004359b0
mov ecx, dword [0x46bcf0]
add esp, 4
test al, al
mov edx, 1
cmovne ecx, edx
mov dword [0x46bcf0], ecx
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x438ad5
mov esi, dword [0x461fe8]
sub esp, 0xc
movaps xmm0, xmmword [0x457ca0]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [esi + 0x46d8]
mov ecx, dword [esi + 0x46dc]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x46e0]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x3e58]
mov dword [ebp - 4], ecx
mov ecx, dword [esi + 0x46e4]
mov dword [ebp - 0xc], ecx
lea ecx, [ebp - 0x20]
mov dword [esp + 8], 0x3f800000
mov byte [eax + 0xac], 1
mov dword [esp], 0
call fcn.004046c0
mov ecx, dword [esi + 0x3e58]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ecx + 0x26c]
lea eax, [ebp - 8]
push eax
call fcn.00430940
movss xmm1, dword [0x4578d0]
xorps xmm0, xmm0
call fcn.0040e960
push ecx
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x43200000
mov ecx, str.VEHICLE
mov dword [ebp - 0xc], 0x41f00000
call fcn.004359b0
mov ecx, dword [0x46bcf0]
add esp, 4
test al, al
mov edx, 2
cmovne ecx, edx
mov dword [0x46bcf0], ecx
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x438b9b
mov esi, dword [0x461fe8]
sub esp, 0xc
movaps xmm0, xmmword [0x457ca0]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [esi + 0x46d8]
mov ecx, dword [esi + 0x46dc]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x46e0]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x3e58]
mov dword [ebp - 4], ecx
mov ecx, dword [esi + 0x46e4]
mov dword [ebp - 0xc], ecx
lea ecx, [ebp - 0x20]
mov dword [esp + 8], 0x3f800000
mov byte [eax + 0xac], 1
mov dword [esp], 0
call fcn.004046c0
mov ecx, dword [esi + 0x3e58]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ecx + 0x26c]
lea eax, [ebp - 8]
push eax
call fcn.00430940
movss xmm1, dword [0x4578d0]
xorps xmm0, xmm0
call fcn.0040e960
push ecx
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x43200000
mov ecx, 0x457150
mov dword [ebp - 0xc], 0x41f00000
call fcn.004359b0
mov ecx, dword [0x46bcf0]
add esp, 4
test al, al
mov edx, 3
cmovne ecx, edx
mov dword [0x46bcf0], ecx
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x438c61
mov esi, dword [0x461fe8]
sub esp, 0xc
movaps xmm0, xmmword [0x457ca0]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [esi + 0x46d8]
mov ecx, dword [esi + 0x46dc]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x46e0]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x3e58]
mov dword [ebp - 4], ecx
mov ecx, dword [esi + 0x46e4]
mov dword [ebp - 0xc], ecx
lea ecx, [ebp - 0x20]
mov dword [esp + 8], 0x3f800000
mov byte [eax + 0xac], 1
mov dword [esp], 0
call fcn.004046c0
mov ecx, dword [esi + 0x3e58]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ecx + 0x26c]
lea eax, [ebp - 8]
push eax
call fcn.00430940
mov eax, dword [0x46bcf0]
cmp eax, 3
ja case.default.0x438c6f
jmp dword [eax*4 + 0x439114]
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x42200000
mov dword [ebp - 0xc], 0x42a00000
call fcn.0040e910
call fcn.0040e650
mov edx, 0x46bcf4
mov ecx, str.GM_Warning
call fcn.00436710
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x438cb8
push str.You_can_view_the_GM_name_via_notification.
call fcn.0040dc10
add esp, 4
mov edx, 0x46bcfa
mov ecx, str.Wall_Hack
call fcn.00436710
mov edx, 0x46bcf8
mov ecx, str.Radar_Gps
call fcn.00436710
mov edx, 0x46bcf5
mov ecx, str.No_Recoil
call fcn.00436710
mov edx, 0x46bcfe
mov ecx, str.IamBot
call fcn.00436710
mov edx, 0x46bd01
mov ecx, 0x4571b8
call fcn.00436710
mov edx, 0x46bd03
mov ecx, str.Iam_ShootNeck
call fcn.00436710
mov edx, 0x46bcf6
mov ecx, str.2_Bullet_Travel
call fcn.00436710
mov edx, 0x46bd02
mov ecx, str.Shoot_speed
call fcn.00436710
mov edx, 0x46bcfd
mov ecx, str.Unli_Stamina
call fcn.00436710
mov edx, 0x46bcff
mov ecx, str.Anti_AFk
call fcn.00436710
mov edx, 0x46bcfb
mov ecx, str.No_Weight
call fcn.00436710
mov edx, 0x46bcf7
mov ecx, str.No_Range
call fcn.00436710
mov edx, 0x46bcfc
mov ecx, str.Hit_Ground
call fcn.00436710
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x437a0000
mov dword [ebp - 0xc], 0x42a00000
call fcn.0040e910
call fcn.0040e650
mov edx, 0x46bcf9
mov ecx, str.Quick_Death_Spawm
call fcn.00436710
mov edx, 0x46bd00
mov ecx, str.Quick_FFA_Spawm
call fcn.00436710
call fcn.0040e410
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x43e10000
mov dword [ebp - 0xc], 0x42a00000
call fcn.0040e910
call fcn.0040e650
call fcn.0040e410
call fcn.00412830
pop esi
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x42200000
mov dword [ebp - 0xc], 0x42a00000
call fcn.0040e910
call fcn.0040e650
mov edx, 0x46bd0f
mov ecx, str.Save_Position
call fcn.00436710
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x438e25
push str.Press_the__HOME__button_to_activate_Zopk_or_Zopk_Line.
call fcn.0040dc10
add esp, 4
mov edx, 0x46bd15
mov ecx, str.Zopk
call fcn.00436710
mov edx, 0x46bd14
mov ecx, str.Zopk_Line
call fcn.00436710
mov edx, 0x46bd10
mov ecx, str.Bring_Zopk
call fcn.00436710
mov edx, 0x46bd13
mov ecx, str.Auto_shot
call fcn.00436710
mov edx, 0x46bd0d
mov ecx, str.Unli_Ammo
call fcn.00436710
mov edx, 0x46bd0e
mov ecx, str.Auto_Heal
call fcn.00436710
mov edx, 0x46bd11
mov ecx, str.Auto_Head
call fcn.00436710
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x438ea6
push str.Turn_off__Auto_Head__if_you_want_to_turn_on_this.
call fcn.0040dc10
add esp, 4
mov edx, 0x46bd12
mov ecx, str.Anti_spectate
call fcn.00436710
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x439104
push str.Recommended_when_you_are_using_Zombie_OPK
call fcn.0040dc10
add esp, 4
call fcn.0040e410
call fcn.00412830
pop esi
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x42200000
mov dword [ebp - 0xc], 0x42a00000
call fcn.0040e910
call fcn.0040e650
mov edx, 0x46bd04
mov ecx, str.Vehicle_Fastlock
call fcn.00436710
mov edx, 0x46bd09
mov ecx, str.Vehicle_Nodamage
call fcn.00436710
mov edx, 0x46bd07
mov ecx, str.Vehicle_No_overheat
call fcn.00436710
mov edx, 0x46bd06
mov ecx, str.Vehicle_RapidFire
call fcn.00436710
mov edx, 0x46bd05
mov ecx, str.Vehicle_Radar
call fcn.00436710
mov edx, 0x46bd08
mov ecx, str.Vehicle_Invislbe
call fcn.00436710
call fcn.004363b0
call fcn.0040e410
call fcn.00412830
pop esi
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0x42200000
mov dword [ebp - 0xc], 0x42a00000
call fcn.0040e910
call fcn.0040e650
mov edx, 0x46bd0b
mov ecx, str.Esp_Name_Distance_
call fcn.00436710
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x439004
mov edx, dword [0x461fe8]
mov eax, dword [edx + 0x46d8]
mov ecx, dword [edx + 0x46dc]
mov dword [ebp - 8], eax
mov eax, dword [edx + 0x46e0]
mov dword [ebp - 4], ecx
mov ecx, dword [edx + 0x46e4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], ecx
call fcn.00411be0
movaps xmm0, xmmword [0x457ca0]
lea ecx, [ebp - 0x20]
sub esp, 0xc
mov esi, eax
movups xmmword [ebp - 0x20], xmm0
mov dword [esp + 8], 0x3f800000
mov dword [esp], 0
call fcn.004046c0
push eax
lea eax, [ebp - 0x10]
mov ecx, esi
push eax
lea eax, [ebp - 8]
push eax
call fcn.00430940
mov edx, 0x46bd0c
mov ecx, str.Esp_Line
call fcn.00436710
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x439084
mov edx, dword [0x461fe8]
mov eax, dword [edx + 0x46d8]
mov ecx, dword [edx + 0x46dc]
mov dword [ebp - 8], eax
mov eax, dword [edx + 0x46e0]
mov dword [ebp - 4], ecx
mov ecx, dword [edx + 0x46e4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], ecx
call fcn.00411be0
movaps xmm0, xmmword [0x457ca0]
lea ecx, [ebp - 0x20]
sub esp, 0xc
mov esi, eax
movups xmmword [ebp - 0x20], xmm0
mov dword [esp + 8], 0x3f800000
mov dword [esp], 0
call fcn.004046c0
push eax
lea eax, [ebp - 0x10]
mov ecx, esi
push eax
lea eax, [ebp - 8]
push eax
call fcn.00430940
mov edx, 0x46bd0a
mov ecx, str.Esp_3D_Box_Health_
call fcn.00436710
xor ecx, ecx
call fcn.0041b350
test al, al
je 0x439104
mov edx, dword [0x461fe8]
mov eax, dword [edx + 0x46d8]
mov ecx, dword [edx + 0x46dc]
mov dword [ebp - 8], eax
mov eax, dword [edx + 0x46e0]
mov dword [ebp - 4], ecx
mov ecx, dword [edx + 0x46e4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], ecx
call fcn.00411be0
movaps xmm0, xmmword [0x457ca0]
lea ecx, [ebp - 0x20]
sub esp, 0xc
mov esi, eax
movups xmmword [ebp - 0x20], xmm0
mov dword [esp + 8], 0x3f800000
mov dword [esp], 0
call fcn.004046c0
push eax
lea eax, [ebp - 0x10]
mov ecx, esi
push eax
lea eax, [ebp - 8]
push eax
call fcn.00430940
call fcn.0040e410
call fcn.00412830
pop esi
mov esp, ebp
pop ebp
ret