Function at 0x1800441f0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rsi
lea rbp, [rax - 0x5f]
sub rsp, 0x98
mov qword [rax + 0x20], rbx
mov ecx, 0x70
mov qword [rax - 0x18], rdi
movaps xmmword [rax - 0x58], xmm9
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180044230
call fcn.180046900
movzx ebx, byte [rax]
call fcn.180046900
test bl, bl
sete cl
mov byte [rax], cl
cmp qword [0x18005fa58], 0
jne 0x180044249
cmp qword [0x18005fa68], 0
je 0x180044249
call fcn.180029d60
mov rcx, qword [0x18005fa98]
lea rdx, [rbp - 9]
mov rbx, qword [0x18005f8f0]
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 1]
lea rcx, [rbp + 0x77]
sub eax, dword [rbp - 9]
xor esi, esi
mov qword [rbp + 0x77], rsi
movd xmm1, eax
mov eax, dword [rbp + 3]
sub eax, dword [rbp - 5]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x10], xmm1
movss dword [rbx + 0x14], xmm0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x77]
xorps xmm1, xmm1
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [0x18005faa0]
cvtsi2ss xmm0, qword [0x18005faa8]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [rbx + 0x18], xmm1
mov qword [0x18005faa0], rcx
lea ecx, [rsi + 0x11]
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
lea ecx, [rsi + 0x10]
and al, 1
mov byte [rbx + 0x140], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
lea ecx, [rsi + 0x12]
and al, 1
mov byte [rbx + 0x141], al
call qword [sym.imp.USER32.dll_GetKeyState]
mov rdi, qword [0x18005f8f0]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x143], sil
mov byte [rbx + 0x142], al
cmp byte [rdi + 0x39b], sil
je 0x180044359
cvttss2si eax, dword [rdi + 0x128]
mov rcx, qword [0x18005fa98]
lea rdx, [rbp + 0x67]
mov dword [rbp + 0x67], eax
cvttss2si eax, dword [rdi + 0x12c]
mov dword [rbp + 0x6b], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x180044359
mov edx, dword [rbp + 0x6b]
mov ecx, dword [rbp + 0x67]
call qword [sym.imp.USER32.dll_SetCursorPos]
mov dword [rdi + 0x128], 0xff7fffff
mov dword [rdi + 0x12c], 0xff7fffff
call qword [sym.imp.USER32.dll_GetActiveWindow]
cmp rax, qword [0x18005fa98]
jne 0x1800443bf
lea rcx, [rbp + 0x6f]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x1800443bf
mov rcx, qword [0x18005fa98]
lea rdx, [rbp + 0x6f]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x1800443bf
movd xmm0, dword [rbp + 0x6f]
movd xmm1, dword [rbp + 0x73]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rdi + 0x128], xmm0
movss dword [rdi + 0x12c], xmm1
cmp byte [rbx + 0xc8], sil
je 0x1800443cf
mov eax, 0xffffffff
jmp 0x1800443dc
mov rax, qword [0x18005f8f0]
mov eax, dword [rax + 0x1f48]
cmp dword [0x18005f530], eax
je 0x1800443ef
mov dword [0x18005f530], eax
call fcn.180029f60
call fcn.18002a0e0
call fcn.180008140
call fcn.1800422d0
call fcn.180046900
movaps xmm1, xmmword [0x180054f80]
movaps xmm0, xmmword [0x180055000]
movzx ecx, byte [rax]
mov rax, qword [0x18005f8f0]
mov byte [rax + 0xc8], cl
movups xmmword [rax + 0x1634], xmm1
xorps xmm1, xmm1
movups xmmword [rax + 0x1624], xmm0
movaps xmm0, xmmword [0x180054e10]
movups xmmword [rax + 0x1654], xmm1
movaps xmm1, xmmword [0x180054c20]
movups xmmword [rax + 0x1644], xmm0
movaps xmm0, xmmword [0x180054e40]
movups xmmword [rax + 0x1674], xmm1
movaps xmm1, xmmword [0x180054d30]
movups xmmword [rax + 0x1664], xmm0
movaps xmm0, xmmword [0x180054c10]
movups xmmword [rax + 0x1694], xmm1
movaps xmm1, xmmword [0x180054f00]
movups xmmword [rax + 0x1684], xmm0
movaps xmm0, xmmword [0x180054d40]
movups xmmword [rax + 0x16b4], xmm1
movaps xmm1, xmmword [0x180054ed0]
movups xmmword [rax + 0x16a4], xmm0
movaps xmm0, xmmword [0x180054e80]
movups xmmword [rax + 0x16d4], xmm1
movaps xmm1, xmmword [0x180054ee0]
movups xmmword [rax + 0x16c4], xmm0
movups xmmword [rax + 0x16e4], xmm0
movaps xmm0, xmmword [0x180054d30]
movups xmmword [rax + 0x16f4], xmm1
movaps xmm1, xmmword [0x180054d50]
movups xmmword [rax + 0x1704], xmm0
movaps xmm0, xmmword [0x180054d60]
movups xmmword [rax + 0x1714], xmm1
movaps xmm1, xmmword [0x180054d80]
movups xmmword [rax + 0x1724], xmm0
movaps xmm0, xmmword [0x180054fc0]
movups xmmword [rax + 0x1734], xmm1
movaps xmm1, xmmword [0x180054d50]
movups xmmword [rax + 0x1744], xmm0
movaps xmm0, xmmword [0x180054d80]
movups xmmword [rax + 0x1754], xmm1
movaps xmm1, xmmword [0x180054d90]
movups xmmword [rax + 0x1764], xmm0
movaps xmm0, xmmword [0x180054d40]
movups xmmword [rax + 0x1774], xmm1
movaps xmm1, xmmword [0x180054f00]
movups xmmword [rax + 0x1784], xmm0
movaps xmm0, xmmword [0x180054d10]
movups xmmword [rax + 0x1794], xmm1
movaps xmm1, xmmword [0x180054ca0]
movups xmmword [rax + 0x17a4], xmm0
movaps xmm0, xmmword [0x180054c60]
movups xmmword [rax + 0x17b4], xmm1
movaps xmm1, xmmword [0x180054c30]
movups xmmword [rax + 0x17c4], xmm0
movaps xmm0, xmmword [0x180054c40]
movups xmmword [rax + 0x17d4], xmm1
movaps xmm1, xmmword [0x180054f60]
movups xmmword [rax + 0x17e4], xmm0
movaps xmm0, xmmword [0x180054c30]
movups xmmword [rax + 0x17f4], xmm1
movaps xmm1, xmmword [0x180054c40]
movups xmmword [rax + 0x1804], xmm0
movaps xmm0, xmmword [0x180054f60]
movups xmmword [rax + 0x1814], xmm1
movaps xmm1, xmmword [0x180054d10]
movups xmmword [rax + 0x1824], xmm0
movaps xmm0, xmmword [0x180054ee0]
movups xmmword [rax + 0x1834], xmm1
movaps xmm1, xmmword [0x180054cb0]
movups xmmword [rax + 0x1844], xmm0
movaps xmm0, xmmword [0x180054d10]
movups xmmword [rax + 0x1854], xmm1
movaps xmm1, xmmword [0x180054ee0]
movups xmmword [rax + 0x1864], xmm0
movaps xmm0, xmmword [0x180054e90]
movups xmmword [rax + 0x1874], xmm1
movups xmmword [rax + 0x1884], xmm0
movups xmmword [rax + 0x1894], xmm0
movups xmmword [rax + 0x18a4], xmm0
movups xmmword [rax + 0x18b4], xmm0
movaps xmm1, xmm0
movaps xmm0, xmmword [0x180054d10]
movups xmmword [rax + 0x18c4], xmm0
movups xmmword [rax + 0x18d4], xmm0
movaps xmm1, xmm0
movaps xmm0, xmmword [0x180054c30]
movups xmmword [rax + 0x18e4], xmm0
movaps xmm0, xmmword [0x180054bd0]
xorps xmm1, xmm1
movups xmmword [rax + 0x1904], xmm0
movaps xmm0, xmmword [0x180054fc0]
movups xmmword [rax + 0x18f4], xmm1
movaps xmm1, xmmword [0x180054f00]
movups xmmword [rax + 0x1924], xmm0
movaps xmm0, xmmword [0x180054dd0]
movups xmmword [rax + 0x1914], xmm1
movaps xmm1, xmmword [0x180054e90]
movups xmmword [rax + 0x1944], xmm0
movaps xmm0, xmmword [0x180054c70]
movups xmmword [rax + 0x1934], xmm1
movaps xmm1, xmmword [0x180054be0]
movups xmmword [rax + 0x1964], xmm0
movups xmmword [rax + 0x1954], xmm1
mov dword [rax + 0x1564], 0x41000000
mov dword [rax + 0x1568], 0x41000000
mov dword [rax + 0x1598], 0x40a00000
mov dword [rax + 0x159c], 0x40000000
mov dword [rax + 0x15b8], 0x40c00000
mov qword [rax + 0x15bc], 0x40c00000
mov dword [rax + 0x15a8], 0x40c00000
mov dword [rax + 0x15ac], 0x40c00000
mov dword [rax + 0x15b0], 0x40c00000
mov dword [rax + 0x15b4], 0x40c00000
mov dword [rax + 0x15c4], esi
mov dword [rax + 0x15c8], 0x41c80000
mov dword [rax + 0x15d0], 0x41700000
mov dword [rax + 0x15d8], 0x41200000
mov dword [rax + 0x1570], 0x3f800000
mov dword [rax + 0x158c], 0x3f800000
mov dword [rax + 0x1594], 0x3f800000
mov dword [rax + 0x15a4], 0x3f800000
mov dword [rax + 0x15e8], 0x3f800000
mov dword [rax + 0x156c], 0x40e00000
mov dword [rax + 0x1588], 0x40800000
mov dword [rax + 0x15a0], 0x40400000
mov dword [rax + 0x1590], 0x40800000
mov dword [rax + 0x15d4], 0x41100000
mov dword [rax + 0x15dc], 0x40400000
mov dword [rax + 0x15e0], 0x40800000
mov dword [rax + 0x15e4], 0x40800000
call fcn.180046900
movss xmm9, dword [0x1800549ac]
mov ebx, 1
cmp byte [rax], sil
je 0x180044dc1
movaps xmmword [rsp + 0x80], xmm6
call fcn.180044f70
mov rax, qword [0x18005f8f0]
mov ecx, ebx
mov dword [rax + 0x130], esi
mov byte [rax + 0x134], sil
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rcx, qword [0x18005f8f0]
test ax, ax
je 0x180044836
mov byte [rcx + 0x130], bl
or dword [rcx + 0x1cb0], 2
xor edx, edx
mov dword [rcx + 0x1cd0], 0x43960000
mov dword [rcx + 0x1cd4], 0x43c80000
mov dword [rcx + 0x1cb8], ebx
lea rcx, str.menu
lea r8d, [rdx + 0x2a]
call fcn.18000dac0
mov rcx, qword [0x18005f8f0]
lea rdx, [rbp + 0x67]
movss xmm6, dword [0x180054a70]
mov dword [rbp + 0x67], 0x42a00000
mov dword [rbp + 0x6b], 0x41a00000
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
movss xmm0, dword [rax + 0xf0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, dword [0x180054a60]
movss dword [rax + 0xd8], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Visuals
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.18002ccb0
mov ecx, dword [0x18005fab0]
lea rdx, [rbp + 0x67]
test al, al
mov dword [rbp + 0x67], 0x42a00000
mov dword [rbp + 0x6b], 0x41a00000
cmovne ecx, esi
mov dword [0x18005fab0], ecx
mov rcx, qword [0x18005f8f0]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
movss xmm0, dword [rax + 0xf0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, dword [0x180054a94]
movss dword [rax + 0xd8], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Misc
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.18002ccb0
mov ecx, dword [0x18005fab0]
test al, al
cmovne ecx, ebx
mov dword [0x18005fab0], ecx
mov rcx, qword [0x18005f8f0]
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
movss xmm0, dword [rax + 0xf0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, dword [0x180054aac]
maxss xmm0, xmm1
movss dword [rax + 0xd8], xmm1
movss dword [rax + 0xf0], xmm0
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
lea rdx, [rbp + 0x67]
mov rax, qword [rcx + 0x1c10]
lea rcx, str.Aimbot
mov dword [rbp + 0x67], 0x42a00000
mov dword [rbp + 0x6b], 0x41a00000
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, xmm6
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm1
movss dword [rax + 0xf4], xmm0
call fcn.18002ccb0
mov edx, dword [0x18005fab0]
test al, al
mov ecx, 2
cmovne edx, ecx
mov rcx, qword [0x18005f8f0]
mov dword [0x18005fab0], edx
mov rax, qword [rcx + 0x1c10]
mov byte [rax + 0x90], bl
mov rax, qword [rcx + 0x1c10]
movss xmm0, dword [rax + 0xf4]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x60]
addss xmm1, dword [0x180054a78]
movss dword [rax + 0xdc], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf4], xmm0
test edx, edx
jne 0x180044d8d
call fcn.180046900
lea rcx, str.ESP_Box
lea rdx, [rax + 2]
call fcn.18002df80
call fcn.180046900
lea rdi, str._.3f
cmp byte [rax + 2], sil
je 0x180044b53
movss xmm0, dword [0x18005494c]
movss dword [rbp + 0x6f], xmm0
mov dword [rbp + 0x67], 0x41200000
call fcn.180046900
lea rcx, [rbp + 0x67]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x6f]
lea rcx, str.ESP_Box_Thinkness
mov edx, 8
lea r8, [rax + 0x8c]
call fcn.180030610
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm8
call fcn.180046900
lea rcx, str.ESP_Snaplines
lea rdx, [rax + 7]
call fcn.18002df80
call fcn.180046900
lea rcx, str.ESP_Type
lea rdx, [rax + 6]
call fcn.18002df80
call fcn.180046900
lea rcx, str.ESP_Distance
lea rdx, [rax + 5]
call fcn.18002df80
call fcn.180046900
lea rcx, str.ESP_Chests
lea rdx, [rax + 0xa]
call fcn.18002df80
call fcn.180046900
lea rcx, str.ESP_Loot
lea rdx, [rax + 0xb]
call fcn.18002df80
call fcn.180046900
lea rcx, str.ESP_Altars
lea rdx, [rax + 0xc]
call fcn.18002df80
call fcn.180046900
lea rcx, str.ESP_Portals
lea rdx, [rax + 0xd]
call fcn.18002df80
call fcn.180046900
lea rcx, str.ESP_Players
lea rdx, [rax + 0x11]
call fcn.18002df80
call fcn.180046900
lea rcx, str.ESP_Mobs
lea rdx, [rax + 0x10]
call fcn.18002df80
mov dword [rbp + 0x67], 0x15f90
mov dword [rbp + 0x6f], 0x1388
call fcn.180046900
lea rcx, [0x180053bf4]
mov edx, 4
mov qword [rsp + 0x28], rcx
lea r9, [rbp + 0x6f]
lea rcx, [rbp + 0x67]
mov qword [rsp + 0x20], rcx
lea r8, [rax + 0x88]
lea rcx, str.Update_delay
call fcn.180030610
movss xmm0, dword [0x180054acc]
movss dword [rbp + 0x67], xmm0
mov dword [rbp + 0x6f], 0x3f800000
call fcn.180046900
lea rcx, [rbp + 0x67]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x6f]
lea rcx, str.Max_Distance
mov edx, 8
lea r8, [rax + 0x98]
call fcn.180030610
call fcn.180046900
mov r8d, 0x202
lea rcx, str.ESP_Player
lea rdx, [rax + 0x2c]
call fcn.1800361b0
test al, al
je 0x180044d11
call fcn.180046900
movss xmm8, dword [rax + 0x34]
call fcn.180046900
movss xmm7, dword [rax + 0x30]
call fcn.180046900
mov dword [rbp + 3], 0x3f800000
movss xmm6, dword [rax + 0x2c]
call fcn.180046900
movups xmm0, xmmword [rbp - 9]
movss xmm0, xmm6
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm7
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm8
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 9], xmm0
movups xmmword [rax + 0x1c], xmm0
call fcn.180046900
mov r8d, 0x202
lea rcx, str.ESP_Monster
lea rdx, [rax + 0x48]
call fcn.1800361b0
test al, al
je 0x180044d7c
call fcn.180046900
movss xmm8, dword [rax + 0x50]
call fcn.180046900
movss xmm7, dword [rax + 0x4c]
call fcn.180046900
mov dword [rbp + 3], 0x3f800000
movss xmm6, dword [rax + 0x48]
call fcn.180046900
movups xmm0, xmmword [rbp - 9]
movss xmm0, xmm6
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm7
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm8
shufps xmm0, xmm0, 0xc9
movups xmmword [rax + 0x38], xmm0
mov edx, dword [0x18005fab0]
movaps xmm7, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x60]
movaps xmm6, xmmword [rsp + 0x80]
cmp edx, ebx
jne 0x180044dab
lea rcx, str.Misc
call fcn.18002c270
mov edx, dword [0x18005fab0]
cmp edx, 2
jne 0x180044dbc
lea rcx, str.Aimbot
call fcn.18002c270
call fcn.18000fe90
call fcn.18000a310
mov rcx, qword [0x18005f998]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x18005f998]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x18005f998]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x18005f998]
mov r9d, ebx
mov dword [rsp + 0x30], esi
xor r8d, r8d
movss dword [rsp + 0x28], xmm9
xor edx, edx
mov dword [rsp + 0x20], esi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x18005f998]
mov rax, qword [rcx]
call qword [rax + 0x148]
movaps xmm9, xmmword [rsp + 0x50]
mov rdi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0xc8]
test eax, eax
js 0x180044e93
call fcn.18000a690
mov rax, qword [0x18005f8f0]
mov rcx, qword [rax + 0x1dc0]
mov rcx, qword [rcx]
add rcx, 0x40
cmp byte [rcx], sil
cmove rcx, rsi
call fcn.180029780
mov rcx, qword [0x18005f998]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x18005f998]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x180044f5e
mov rcx, qword [0x18005f998]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x180044f5e
cmp qword [0x18005fa68], rsi
je 0x180044f39
mov rcx, qword [0x18005fa70]
test rcx, rcx
je 0x180044ef5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x18005fa70], rsi
mov rcx, qword [0x18005fa60]
test rcx, rcx
je 0x180044f0e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x18005fa60], rsi
mov rcx, qword [0x18005fa58]
test rcx, rcx
je 0x180044f39
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x18005f8f0]
mov qword [0x18005fa58], rsi
mov rcx, qword [rax + 0xa8]
mov qword [rcx + 8], rsi
mov rcx, qword [0x18005f998]
lea rdx, [0x18005f920]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp qword [0x18005fa68], rsi
je 0x180044f5e
call fcn.180029d60
add rsp, 0x98
pop rsi
pop rbp
ret