Function at 0x180041d30
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rsi
lea rbp, [rax - 0x5f]
sub rsp, 0x98
mov qword [rax + 0x20], rbx
mov ecx, 0x2d
mov qword [rax - 0x18], rdi
movaps xmmword [rax - 0x58], xmm9
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180041d70
call fcn.180044380
movzx ebx, byte [rax]
call fcn.180044380
test bl, bl
sete cl
mov byte [rax], cl
cmp qword [0x1801a9178], 0
jne 0x180041d89
cmp qword [0x1801a9188], 0
je 0x180041d89
call fcn.180027a30
mov rcx, qword [0x1801a91b8]
lea rdx, [rbp - 9]
mov rbx, qword [0x1801a8fa0]
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 1]
lea rcx, [rbp + 0x77]
sub eax, dword [rbp - 9]
xor esi, esi
mov qword [rbp + 0x77], rsi
movd xmm1, eax
mov eax, dword [rbp + 3]
sub eax, dword [rbp - 5]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x10], xmm1
movss dword [rbx + 0x14], xmm0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x77]
xorps xmm1, xmm1
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [0x1801a91c0]
cvtsi2ss xmm0, qword [0x1801a91c8]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [rbx + 0x18], xmm1
mov qword [0x1801a91c0], rcx
lea ecx, [rsi + 0x11]
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
lea ecx, [rsi + 0x10]
and al, 1
mov byte [rbx + 0x140], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
lea ecx, [rsi + 0x12]
and al, 1
mov byte [rbx + 0x141], al
call qword [sym.imp.USER32.dll_GetKeyState]
mov rdi, qword [0x1801a8fa0]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x143], sil
mov byte [rbx + 0x142], al
cmp byte [rdi + 0x39b], sil
je 0x180041e99
cvttss2si eax, dword [rdi + 0x128]
mov rcx, qword [0x1801a91b8]
lea rdx, [rbp + 0x67]
mov dword [rbp + 0x67], eax
cvttss2si eax, dword [rdi + 0x12c]
mov dword [rbp + 0x6b], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x180041e99
mov edx, dword [rbp + 0x6b]
mov ecx, dword [rbp + 0x67]
call qword [sym.imp.USER32.dll_SetCursorPos]
mov dword [rdi + 0x128], 0xff7fffff
mov dword [rdi + 0x12c], 0xff7fffff
call qword [sym.imp.USER32.dll_GetActiveWindow]
cmp rax, qword [0x1801a91b8]
jne 0x180041eff
lea rcx, [rbp + 0x6f]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x180041eff
mov rcx, qword [0x1801a91b8]
lea rdx, [rbp + 0x6f]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x180041eff
movd xmm0, dword [rbp + 0x6f]
movd xmm1, dword [rbp + 0x73]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rdi + 0x128], xmm0
movss dword [rdi + 0x12c], xmm1
cmp byte [rbx + 0xc8], sil
je 0x180041f0f
mov eax, 0xffffffff
jmp 0x180041f1c
mov rax, qword [0x1801a8fa0]
mov eax, dword [rax + 0x1f48]
cmp dword [0x1801a8694], eax
je 0x180041f2f
mov dword [0x1801a8694], eax
call fcn.180027cc0
call fcn.180027e40
call fcn.180005d00
call fcn.180040240
call fcn.180044380
movaps xmm1, xmmword [0x18005fb80]
movaps xmm0, xmmword [0x18005fc10]
movzx ecx, byte [rax]
mov rax, qword [0x1801a8fa0]
mov byte [rax + 0xc8], cl
movups xmmword [rax + 0x1634], xmm1
xorps xmm1, xmm1
movups xmmword [rax + 0x1624], xmm0
movaps xmm0, xmmword [0x18005fa00]
movups xmmword [rax + 0x1654], xmm1
movaps xmm1, xmmword [0x18005f830]
movups xmmword [rax + 0x1644], xmm0
movaps xmm0, xmmword [0x18005fa30]
movups xmmword [rax + 0x1674], xmm1
movaps xmm1, xmmword [0x18005f940]
movups xmmword [rax + 0x1664], xmm0
movaps xmm0, xmmword [0x18005f820]
movups xmmword [rax + 0x1694], xmm1
movaps xmm1, xmmword [0x18005fb00]
movups xmmword [rax + 0x1684], xmm0
movaps xmm0, xmmword [0x18005f950]
movups xmmword [rax + 0x16b4], xmm1
movaps xmm1, xmmword [0x18005fad0]
movups xmmword [rax + 0x16a4], xmm0
movaps xmm0, xmmword [0x18005fa70]
movups xmmword [rax + 0x16d4], xmm1
movaps xmm1, xmmword [0x18005fae0]
movups xmmword [rax + 0x16c4], xmm0
movups xmmword [rax + 0x16e4], xmm0
movaps xmm0, xmmword [0x18005f940]
movups xmmword [rax + 0x16f4], xmm1
movaps xmm1, xmmword [0x18005f960]
movups xmmword [rax + 0x1704], xmm0
movaps xmm0, xmmword [0x18005f970]
movups xmmword [rax + 0x1714], xmm1
movaps xmm1, xmmword [0x18005f990]
movups xmmword [rax + 0x1724], xmm0
movaps xmm0, xmmword [0x18005fbc0]
movups xmmword [rax + 0x1734], xmm1
movaps xmm1, xmmword [0x18005f960]
movups xmmword [rax + 0x1744], xmm0
movaps xmm0, xmmword [0x18005f990]
movups xmmword [rax + 0x1754], xmm1
movaps xmm1, xmmword [0x18005f9a0]
movups xmmword [rax + 0x1764], xmm0
movaps xmm0, xmmword [0x18005f950]
movups xmmword [rax + 0x1774], xmm1
movaps xmm1, xmmword [0x18005fb00]
movups xmmword [rax + 0x1784], xmm0
movaps xmm0, xmmword [0x18005f920]
movups xmmword [rax + 0x1794], xmm1
movaps xmm1, xmmword [0x18005f8b0]
movups xmmword [rax + 0x17a4], xmm0
movaps xmm0, xmmword [0x18005f870]
movups xmmword [rax + 0x17b4], xmm1
movaps xmm1, xmmword [0x18005f840]
movups xmmword [rax + 0x17c4], xmm0
movaps xmm0, xmmword [0x18005f850]
movups xmmword [rax + 0x17d4], xmm1
movaps xmm1, xmmword [0x18005fb60]
movups xmmword [rax + 0x17e4], xmm0
movaps xmm0, xmmword [0x18005f840]
movups xmmword [rax + 0x17f4], xmm1
movaps xmm1, xmmword [0x18005f850]
movups xmmword [rax + 0x1804], xmm0
movaps xmm0, xmmword [0x18005fb60]
movups xmmword [rax + 0x1814], xmm1
movaps xmm1, xmmword [0x18005f920]
movups xmmword [rax + 0x1824], xmm0
movaps xmm0, xmmword [0x18005fae0]
movups xmmword [rax + 0x1834], xmm1
movaps xmm1, xmmword [0x18005f8c0]
movups xmmword [rax + 0x1844], xmm0
movaps xmm0, xmmword [0x18005f920]
movups xmmword [rax + 0x1854], xmm1
movaps xmm1, xmmword [0x18005fae0]
movups xmmword [rax + 0x1864], xmm0
movaps xmm0, xmmword [0x18005fa80]
movups xmmword [rax + 0x1874], xmm1
movups xmmword [rax + 0x1884], xmm0
movups xmmword [rax + 0x1894], xmm0
movups xmmword [rax + 0x18a4], xmm0
movups xmmword [rax + 0x18b4], xmm0
movaps xmm1, xmm0
movaps xmm0, xmmword [0x18005f920]
movups xmmword [rax + 0x18c4], xmm0
movups xmmword [rax + 0x18d4], xmm0
movaps xmm1, xmm0
movaps xmm0, xmmword [0x18005f840]
movups xmmword [rax + 0x18e4], xmm0
movaps xmm0, xmmword [0x18005f7c0]
xorps xmm1, xmm1
movups xmmword [rax + 0x1904], xmm0
movaps xmm0, xmmword [0x18005fbc0]
movups xmmword [rax + 0x18f4], xmm1
movaps xmm1, xmmword [0x18005fb00]
movups xmmword [rax + 0x1924], xmm0
movaps xmm0, xmmword [0x18005f9c0]
movups xmmword [rax + 0x1914], xmm1
movaps xmm1, xmmword [0x18005fa80]
movups xmmword [rax + 0x1944], xmm0
movaps xmm0, xmmword [0x18005f880]
movups xmmword [rax + 0x1934], xmm1
movaps xmm1, xmmword [0x18005f7f0]
movups xmmword [rax + 0x1964], xmm0
movups xmmword [rax + 0x1954], xmm1
mov dword [rax + 0x1564], 0x41000000
mov dword [rax + 0x1568], 0x41000000
mov dword [rax + 0x1598], 0x40a00000
mov dword [rax + 0x159c], 0x40000000
mov dword [rax + 0x15b8], 0x40c00000
mov qword [rax + 0x15bc], 0x40c00000
mov dword [rax + 0x15a8], 0x40c00000
mov dword [rax + 0x15ac], 0x40c00000
mov dword [rax + 0x15b0], 0x40c00000
mov dword [rax + 0x15b4], 0x40c00000
mov dword [rax + 0x15c4], esi
mov dword [rax + 0x15c8], 0x41c80000
mov dword [rax + 0x15d0], 0x41700000
mov dword [rax + 0x15d8], 0x41200000
mov dword [rax + 0x1570], 0x3f800000
mov dword [rax + 0x158c], 0x3f800000
mov dword [rax + 0x1594], 0x3f800000
mov dword [rax + 0x15a4], 0x3f800000
mov dword [rax + 0x15e8], 0x3f800000
mov dword [rax + 0x156c], 0x40e00000
mov dword [rax + 0x1588], 0x40800000
mov dword [rax + 0x15a0], 0x40400000
mov dword [rax + 0x1590], 0x40800000
mov dword [rax + 0x15d4], 0x41100000
mov dword [rax + 0x15dc], 0x40400000
mov dword [rax + 0x15e0], 0x40800000
mov dword [rax + 0x15e4], 0x40800000
call fcn.180044380
movss xmm9, dword [0x18005f594]
mov ebx, 1
cmp byte [rax], sil
je 0x1800428e3
movaps xmmword [rsp + 0x80], xmm6
call fcn.180042a90
mov rax, qword [0x1801a8fa0]
mov ecx, ebx
mov dword [rax + 0x130], esi
mov byte [rax + 0x134], sil
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rcx, qword [0x1801a8fa0]
test ax, ax
je 0x180042376
mov byte [rcx + 0x130], bl
or dword [rcx + 0x1cb0], 2
mov dword [rcx + 0x1cd0], 0x43960000
mov dword [rcx + 0x1cd4], 0x43c80000
mov dword [rcx + 0x1cb8], ebx
mov rcx, qword [0x1801a9040]
call fcn.18000ddf0
xor edx, edx
lea rcx, str.menu
lea r8d, [rdx + 0x2a]
call fcn.18000b680
mov rcx, qword [0x1801a8fa0]
lea rdx, [rbp + 0x67]
movss xmm6, dword [0x18005f658]
xorps xmm0, xmm0
mov dword [rbp + 0x67], 0x42a00000
mov dword [rbp + 0x6b], 0x41a00000
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
movss dword [rax + 0xd8], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Visuals
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.18002aa10
mov ecx, dword [0x1801a91d0]
lea rdx, [rbp + 0x67]
test al, al
mov dword [rbp + 0x67], 0x42a00000
mov dword [rbp + 0x6b], 0x41a00000
cmovne ecx, esi
mov dword [0x1801a91d0], ecx
mov rcx, qword [0x1801a8fa0]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
movss xmm0, dword [rax + 0xf0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, dword [0x18005f674]
movss dword [rax + 0xd8], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Misc
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.18002aa10
mov ecx, dword [0x1801a91d0]
test al, al
cmovne ecx, ebx
mov dword [0x1801a91d0], ecx
mov rcx, qword [0x1801a8fa0]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
movss xmm0, dword [rax + 0xf0]
addss xmm1, dword [0x18005f694]
movss dword [rax + 0xd8], xmm1
maxss xmm0, xmm1
mov dword [rbp + 0x67], 0x42a00000
lea rdx, [rbp + 0x67]
mov dword [rbp + 0x6b], 0x41a00000
movss dword [rax + 0xf0], xmm0
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Aimbot
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.18002aa10
mov edx, dword [0x1801a91d0]
lea rdi, str._.3f
test al, al
mov ecx, 2
cmovne edx, ecx
mov rcx, qword [0x1801a8fa0]
mov dword [0x1801a91d0], edx
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, dword [0x18005f660]
movss dword [rax + 0xdc], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf4], xmm0
test edx, edx
jne 0x180042765
lea rcx, str.Visuals
call fcn.180029fd0
call fcn.180044380
lea rcx, str.ESP_Box
lea rdx, [rax + 2]
call fcn.18002bce0
call fcn.180044380
lea rcx, str.ESP_Snaplines
lea rdx, [rax + 7]
call fcn.18002bce0
call fcn.180044380
lea rcx, str.ESP_Type
lea rdx, [rax + 6]
call fcn.18002bce0
call fcn.180044380
lea rcx, str.ESP_Distance
lea rdx, [rax + 5]
call fcn.18002bce0
movss xmm0, dword [0x18005f6bc]
movss dword [rbp + 0x67], xmm0
mov dword [rbp + 0x6f], 0x3f800000
call fcn.180044380
lea rcx, [rbp + 0x67]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x6f]
lea rcx, str.Max_Distance
mov edx, 8
lea r8, [rax + 0x8c]
call fcn.18002f050
call fcn.180044380
mov r8d, 0x202
lea rcx, str.ESP_Color
lea rdx, [rax + 0x30]
call fcn.180034bf0
test al, al
je 0x18004275f
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm8
call fcn.180044380
movss xmm8, dword [rax + 0x38]
call fcn.180044380
movss xmm7, dword [rax + 0x34]
call fcn.180044380
mov dword [rbp + 3], 0x3f800000
movss xmm6, dword [rax + 0x30]
call fcn.180044380
movups xmm0, xmmword [rbp - 9]
movss xmm0, xmm6
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm7
movaps xmm7, xmmword [rsp + 0x70]
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm8
movaps xmm8, xmmword [rsp + 0x60]
shufps xmm0, xmm0, 0xc9
movups xmmword [rax + 0x20], xmm0
mov edx, dword [0x1801a91d0]
movaps xmm6, xmmword [rsp + 0x80]
cmp edx, ebx
jne 0x180042798
lea rcx, str.Misc
call fcn.180029fd0
call fcn.180044380
lea rcx, str.Highlight_aimbot_target
lea rdx, [rax + 0x10]
call fcn.18002bce0
mov edx, dword [0x1801a91d0]
cmp edx, 2
jne 0x1800428d9
lea rcx, str.Aimbot
call fcn.180029fd0
call fcn.180044380
lea rcx, str.Enable_aimbot
lea rdx, [rax + 0xa]
call fcn.18002bce0
call fcn.180044380
cmp byte [rax + 0xa], sil
je 0x1800428d9
call fcn.180044380
lea rcx, str.pSilent
lea rdx, [rax + 0xe]
call fcn.18002bce0
call fcn.180044380
lea rcx, str.Show_FOV
lea rdx, [rax + 0xb]
call fcn.18002bce0
call fcn.180044380
cmp byte [rax + 0xb], sil
je 0x180042849
movss xmm0, dword [0x18005f690]
movss dword [rbp + 0x67], xmm0
mov dword [rbp + 0x6f], 0x3f800000
call fcn.180044380
lea rcx, [rbp + 0x67]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x6f]
lea rcx, [0x18005ec44]
mov edx, 8
lea r8, [rax + 0x88]
call fcn.18002f050
call fcn.180044380
lea rdx, [rax + 0x80]
call fcn.18002d800
call fcn.180044380
cmp byte [rax + 0xe], sil
je 0x180042896
mov dword [rbp + 0x67], 0x3e8
mov dword [rbp + 0x6f], ebx
call fcn.180044380
lea rcx, [0x180051a94]
mov edx, 4
mov qword [rsp + 0x28], rcx
lea r9, [rbp + 0x6f]
lea rcx, [rbp + 0x67]
lea r8, [rax + 0x90]
jmp 0x1800428c8
movss xmm0, dword [0x18005f648]
movss dword [rbp + 0x67], xmm0
mov dword [rbp + 0x6f], 0x3f800000
call fcn.180044380
mov qword [rsp + 0x28], rdi
lea rcx, [rbp + 0x67]
lea r9, [rbp + 0x6f]
mov edx, 8
lea r8, [rax + 0x84]
mov qword [rsp + 0x20], rcx
lea rcx, str.Smooth
call fcn.18002f050
call fcn.18000de70
call fcn.18000da50
call fcn.180007ed0
mov rcx, qword [0x1801a9038]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1801a9038]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1801a9038]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x1801a9038]
mov r9d, ebx
mov dword [rsp + 0x30], esi
xor r8d, r8d
movss dword [rsp + 0x28], xmm9
xor edx, edx
mov dword [rsp + 0x20], esi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x1801a9038]
mov rax, qword [rcx]
call qword [rax + 0x148]
movaps xmm9, xmmword [rsp + 0x50]
mov rdi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0xc8]
test eax, eax
js 0x1800429b5
call fcn.180008250
mov rax, qword [0x1801a8fa0]
mov rcx, qword [rax + 0x1dc0]
mov rcx, qword [rcx]
add rcx, 0x40
cmp byte [rcx], sil
cmove rcx, rsi
call fcn.180027450
mov rcx, qword [0x1801a9038]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1801a9038]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x180042a80
mov rcx, qword [0x1801a9038]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x180042a80
cmp qword [0x1801a9188], rsi
je 0x180042a5b
mov rcx, qword [0x1801a9190]
test rcx, rcx
je 0x180042a17
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1801a9190], rsi
mov rcx, qword [0x1801a9180]
test rcx, rcx
je 0x180042a30
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1801a9180], rsi
mov rcx, qword [0x1801a9178]
test rcx, rcx
je 0x180042a5b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x1801a8fa0]
mov qword [0x1801a9178], rsi
mov rcx, qword [rax + 0xa8]
mov qword [rcx + 8], rsi
mov rcx, qword [0x1801a9038]
lea rdx, [0x1801a8fc0]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp qword [0x1801a9188], rsi
je 0x180042a80
call fcn.180027a30
add rsp, 0x98
pop rsi
pop rbp
ret