Function at 0x140039c80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x18], xmm7
mov rax, qword [0x14004c028]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140039cc6
cmp byte [0x14004d394], 0
sete byte [0x14004d394]
cmp qword [0x14004d510], 0
jne 0x140039cd5
call fcn.140023860
mov rcx, qword [0x14004d530]
lea rdx, [rbp - 0x39]
mov rdi, qword [0x14004d380]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 0x31]
lea rcx, [rbp - 0x41]
sub eax, dword [rbp - 0x39]
movd xmm1, eax
mov eax, dword [rbp - 0x2d]
sub eax, dword [rbp - 0x35]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x10], xmm1
movss dword [rdi + 0x14], xmm0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp - 0x41]
xorps xmm1, xmm1
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [0x14004d538]
cvtsi2ss xmm0, qword [0x14004d540]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [rdi + 0x18], xmm1
mov qword [0x14004d538], rcx
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, 0x10
and al, 1
mov byte [rdi + 0x130], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, 0x12
and al, 1
mov byte [rdi + 0x131], al
call qword [sym.imp.USER32.dll_GetKeyState]
mov rcx, qword [0x14004d380]
shr eax, 0xf
and al, 1
mov byte [rdi + 0x133], 0
mov byte [rdi + 0x132], al
cmp byte [rcx + 0x3af], 0
lea rbx, [rcx + 0x118]
je 0x140039ddc
cvttss2si eax, dword [rbx]
lea rdx, [rbp - 0x29]
mov dword [rbp - 0x29], eax
cvttss2si eax, dword [rcx + 0x11c]
mov rcx, qword [0x14004d530]
mov dword [rbp - 0x25], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [rbp - 0x25]
mov ecx, dword [rbp - 0x29]
call qword [sym.imp.USER32.dll_SetCursorPos]
mov dword [rbx], 0xff7fffff
mov dword [rbx + 4], 0xff7fffff
call qword [sym.imp.USER32.dll_GetActiveWindow]
cmp rax, qword [0x14004d530]
jne 0x140039e34
lea rcx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x140039e34
mov rcx, qword [0x14004d530]
lea rdx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x140039e34
movd xmm0, dword [rbp - 0x49]
movd xmm1, dword [rbp - 0x45]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbx], xmm0
movss dword [rbx + 4], xmm1
cmp byte [rdi + 0xd0], 0
je 0x140039e44
mov eax, 0xffffffff
jmp 0x140039e51
mov rax, qword [0x14004d380]
mov eax, dword [rax + 0x1d70]
cmp dword [0x14004c5d8], eax
je 0x140039e64
mov dword [0x14004c5d8], eax
call fcn.1400239b0
call fcn.140005e60
movss xmm7, dword [0x140042e38]
xor edi, edi
cmp byte [0x14004d394], dil
je 0x14003a683
movdqa xmm0, xmmword [0x1400430f0]
lea r8d, [rdi + 0x3b]
xor eax, eax
mov dword [rbp - 0x11], 0x6a666840
mov byte [rbp - 7], al
lea rcx, [0x14003e886]
mov byte [rbp - 0x23], al
xor edx, edx
mov byte [rbp - 0x19], al
mov byte [rbp + 9], al
mov rax, qword [0x14004d380]
movdqu xmmword [rbp + 0xf], xmm0
mov dword [rbp - 0xd], 0x492b6f65
movdqa xmm0, xmmword [str.7BFfxfma.M]
mov dword [rax + 0x1af4], 0x43c80000
mov dword [rax + 0x1af8], 0x43d20000
mov dword [rax + 0x1acc], 2
mov word [rbp - 9], 0x7e7e
mov word [rbp + 0x1f], 0x66
movdqu xmmword [rbp + 0x27], xmm0
mov dword [rbp - 0x29], 0x6a6a6f44
mov word [rbp - 0x25], 0x7e66
mov dword [rbp - 0x21], 0x64626d56
mov dword [rbp - 0x1d], 0x62647e6c
mov dword [rbp - 0x39], 0x6a6a6f44
mov dword [rbp - 0x35], 0x4e2b7e66
mov dword [rbp - 0x31], 0x6a6062
mov dword [rbp - 1], 0x6a6a6f44
mov dword [rbp + 3], 0x4a2b7e66
mov word [rbp + 7], 0x5842
call fcn.1400095f0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x140039f73
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x140039fa2
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, str.DaekyWareOct__3_2023
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x140042ee0]
addss xmm2, dword [0x140042ed0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.1400245a0
call fcn.140025e10
mov rcx, qword [0x14004d380]
lea rdx, [rbp - 0x49]
mov dword [rbp - 0x49], 0x42aa0000
mov dword [rbp - 0x45], 0x41c80000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
lea rcx, [0x140042c60]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm0, dword [0x140042ee8]
addss xmm2, dword [0x140042ef0]
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140024c20
test al, al
je 0x14003a0be
mov dword [0x14004ca30], edi
movss xmm1, dword [0x140042f38]
xorps xmm0, xmm0
call fcn.14000d290
lea rdx, [rbp - 0x49]
mov dword [rbp - 0x49], 0x42aa0000
lea rcx, str.Visuals
mov dword [rbp - 0x45], 0x41c80000
call fcn.140024c20
test al, al
je 0x14003a0fa
mov dword [0x14004ca30], 1
movss xmm1, dword [0x140042f38]
xorps xmm0, xmm0
call fcn.14000d290
lea rdx, [rbp - 0x49]
mov dword [rbp - 0x49], 0x42aa0000
lea rcx, str.Misc
mov dword [rbp - 0x45], 0x41c80000
call fcn.140024c20
test al, al
je 0x14003a136
mov dword [0x14004ca30], 2
movss xmm1, dword [0x140042f38]
xorps xmm0, xmm0
call fcn.14000d290
lea rdx, [rbp - 0x49]
mov dword [rbp - 0x49], 0x42aa0000
lea rcx, str.Settings
mov dword [rbp - 0x45], 0x41c80000
call fcn.140024c20
test al, al
je 0x14003a172
mov dword [0x14004ca30], 3
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a1a8
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a1d0
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
mov ecx, dword [0x14004ca30]
test ecx, ecx
je 0x14003a3ac
sub ecx, 1
je 0x14003a24a
sub ecx, 1
je 0x14003a1ff
cmp ecx, 1
jne 0x14003a67e
lea rcx, str.DEV_:_DAEKY
call fcn.1400245a0
jmp 0x14003a212
lea rdx, [0x14004d54a]
lea rcx, str.Spin_Bot
call fcn.1400258d0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a67e
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
jmp 0x14003a67e
mov edx, edi
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx + 5]
inc edx
xor byte [rbp + rcx - 0x11], al
cmp edx, 0xa
jb 0x14003a250
lea rdx, [0x14004c054]
mov byte [rbp - 7], dil
lea rcx, [rbp - 0x11]
call fcn.1400258d0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a2a4
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
mov edx, edi
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 5]
inc edx
xor byte [rbp + rcx + 0xf], al
cmp edx, 0x11
jb 0x14003a2b0
lea rdx, [0x14004c055]
mov byte [rbp + 0x20], dil
lea rcx, [rbp + 0xf]
call fcn.1400258d0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a304
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
mov edx, edi
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 5]
inc edx
xor byte [rbp + rcx + 0x27], al
cmp edx, 0xf
jb 0x14003a310
lea rdx, [0x14004d37a]
mov byte [rbp + 0x36], dil
lea rcx, [rbp + 0x27]
call fcn.1400258d0
mov edx, edi
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 5]
inc edx
xor byte [rbp + rcx - 0x21], al
cmp edx, 8
jb 0x14003a340
lea rdx, [0x14004d548]
mov byte [rbp - 0x19], dil
lea rcx, [rbp - 0x21]
call fcn.1400258d0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a394
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
lea rdx, [0x14004d37e]
lea rcx, str.Filled_Boxes
call fcn.1400258d0
jmp 0x14003a67e
mov edx, edi
nop
movsxd rcx, edx
lea eax, [rdx + 5]
inc edx
xor byte [rbp + rcx - 0x29], al
cmp edx, 6
jb 0x14003a3b0
lea rdx, [0x14004c5dd]
mov byte [rbp - 0x23], dil
lea rcx, [rbp - 0x29]
call fcn.1400258d0
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a404
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
lea rdx, [0x14004c5dc]
lea rcx, str.Circle_FOV
call fcn.1400258d0
cmp byte [0x14004c5dc], dil
je 0x14003a427
mov byte [0x14004d549], dil
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a456
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
lea rdx, [0x14004d549]
lea rcx, str.Square_FOV
call fcn.1400258d0
cmp byte [0x14004d549], dil
je 0x14003a479
mov byte [0x14004c5dc], dil
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a4a8
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
mov edx, edi
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 5]
inc edx
xor byte [rbp + rcx - 1], al
cmp edx, 0xa
jb 0x14003a4b0
movss dword [rsp + 0x30], xmm7
lea rax, [rbp - 0x41]
lea rbx, [0x140042730]
mov byte [rbp + 9], dil
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x49]
lea r8, [0x14004c058]
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp - 0x41], 0x5dc
lea rcx, [rbp - 1]
mov dword [rbp - 0x49], 0x19
call fcn.140027460
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a533
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
movss dword [rsp + 0x30], xmm7
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x41]
lea r8, [0x14004c600]
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp - 0x49], 0x1f4
lea rcx, str.Player_Render
mov dword [rbp - 0x41], 0x14
call fcn.140027460
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a59d
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
movss dword [rsp + 0x30], xmm7
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x41]
lea rax, [rbp - 0x49]
mov dword [rbp - 0x49], 0x41700000
lea r8, [0x14004c050]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp - 0x41], 0x40200000
lea rcx, str.Aimbot_Smooth
call fcn.140027460
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a611
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 5]
inc edx
xor byte [rbp + rcx - 0x39], al
cmp edx, 0xb
jb 0x14003a620
lea rcx, [rbp - 0x39]
mov byte [rbp - 0x2e], dil
call fcn.140026d40
mov rcx, qword [0x14004d380]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], dil
jne 0x14003a66d
xorps xmm1, xmm1
mov qword [rbp - 0x49], rdi
lea rcx, [rbp - 0x49]
call fcn.1400048a0
lea rcx, str.Aim_Key
call fcn.1400245a0
call fcn.140031fb0
call fcn.14000c570
call fcn.140037830
call fcn.140007020
mov rcx, qword [0x14004d598]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x14004d598]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x14004d598]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x14004d598]
mov r9d, 1
mov dword [rsp + 0x30], edi
xor r8d, r8d
movss dword [rsp + 0x28], xmm7
xor edx, edx
mov dword [rsp + 0x20], edi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x14004d598]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003a73f
call fcn.1400074b0
mov rcx, qword [0x14004d380]
add rcx, 0x1c70
cmp byte [rcx], dil
cmove rcx, rdi
call fcn.140022f90
mov rcx, qword [0x14004d598]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14004d598]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003a801
mov rcx, qword [0x14004d598]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003a801
cmp qword [0x14004d520], rdi
je 0x14003a7e5
mov rcx, qword [0x14004d528]
test rcx, rcx
je 0x14003a7a1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14004d528], rdi
mov rcx, qword [0x14004d518]
test rcx, rcx
je 0x14003a7ba
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14004d518], rdi
mov rcx, qword [0x14004d510]
mov rbx, qword [0x14004d380]
test rcx, rcx
je 0x14003a7d3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14004d510], rdi
mov rax, qword [rbx + 0xa0]
mov qword [rax + 8], rdi
mov rcx, qword [0x14004d598]
lea rdx, [0x14004d3b0]
mov rax, qword [rcx]
call qword [rax + 0x80]
call fcn.140023860
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14003c440
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret