Function at 0x140041050
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xe0
mov rax, qword [0x140056010]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004108d
cmp byte [0x140059340], 0
sete al
mov byte [0x140059340], al
jmp 0x140041094
movzx eax, byte [0x140059340]
test al, al
je 0x14004164c
mov qword [rsp + 0xf0], rbx
movaps xmmword [rsp + 0xd0], xmm6
call fcn.140040600
mov rcx, qword [0x140059b50]
lea rax, [rbp + 0xf]
mov qword [rsp + 0x70], rax
lea rdx, [0x140056050]
xor ebx, ebx
lea rax, [rbp + 0x17]
mov qword [rsp + 0x68], rbx
mov r9d, 0xffffffff
mov qword [rsp + 0x60], rax
mov r8d, 0x2eff
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x48], 1
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0xffffffff
mov qword [rbp + 0xf], rbx
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
test eax, eax
jne 0x14004112d
mov rax, qword [rbp + 0xf]
mov qword [0x140059b30], rax
mov rax, qword [0x140059a10]
lea rdx, [0x140059340]
mov r8d, 0x22
lea rcx, str._FREE____Infestation
or dword [rax + 0x49b8], 2
mov dword [rax + 0x49d8], 0x43c80000
mov dword [rax + 0x49dc], 0x43480000
mov dword [rax + 0x49c0], 2
call fcn.14000dd10
call fcn.14003be90
mov rcx, qword [0x140059a10]
lea r9, [rbp + 0xf]
lea r8, [rbp + 0x37]
mov dword [rbp + 0xf], 0x3f800000
lea rdx, [rbp - 9]
mov dword [rbp + 0x13], 0x3f800000
mov qword [rbp + 0x37], rbx
mov rax, qword [rcx + 0x4008]
mov dword [rbp - 9], 0x43960000
mov dword [rbp - 5], 0x42c80000
movss xmm0, dword [rax + 0x30]
mulss xmm0, dword [0x14004e8cc]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
subss xmm0, dword [0x14004e978]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
mov byte [rax + 0x151], 1
movss dword [rax + 0x110], xmm1
addss xmm0, dword [0x14004e968]
movaps xmm1, xmmword [0x14004eaf0]
movups xmmword [rbp + 0x17], xmm1
movss dword [rax + 0x114], xmm0
lea rax, [rbp - 1]
mov rcx, qword [0x140059b30]
xorps xmm0, xmm0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x17]
mov qword [rsp + 0x20], rax
movups xmmword [rbp - 1], xmm0
call fcn.1400330f0
lea rcx, str.Aimbot
call fcn.14003de40
movss xmm6, dword [0x14004e9c0]
test al, al
je 0x140041316
lea rdx, [0x140058f4f]
lea rcx, str.Enabled
call fcn.140033570
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140013830
movaps xmm0, xmmword [0x14004eae0]
lea rdx, [0x1400495d4]
lea rcx, [rbp + 0x17]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400313a0
xor ecx, ecx
call fcn.140007650
test al, al
je 0x1400412ad
lea rcx, str.Enable_Disable_Aimbot
call fcn.1400148c0
lea rax, [rbp + 0x37]
mov dword [rbp + 0x37], 0x42c80000
lea r9, [rbp + 0xf]
mov qword [rsp + 0x20], rax
mov dword [rbp + 0xf], ebx
call fcn.1400350a0
call fcn.140034de0
call fcn.140040e80
mov rdx, qword [0x140059a10]
mov rax, qword [rdx + 0x4008]
cmp byte [rax + 0xc3], bl
jne 0x140041316
mov r8, qword [rdx + 0x4e10]
test r8, r8
je 0x140041316
movsx rax, word [r8 + 0x78]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x140041316
mov rax, qword [rdx + 0x4008]
dec dword [rax + 0x100]
lea rcx, [0x14004e6bc]
call fcn.14003de40
test al, al
je 0x1400414fd
lea rdx, [0x140059a0c]
lea rcx, str.Enabled
call fcn.140033570
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140013830
movaps xmm0, xmmword [0x14004eae0]
lea rdx, [0x1400495d4]
lea rcx, [rbp + 0x17]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400313a0
xor ecx, ecx
call fcn.140007650
test al, al
je 0x14004137a
lea rcx, str.Enable_Disable_ESP
call fcn.1400148c0
lea rdx, [0x140059a0a]
lea rcx, str.Skeleton
call fcn.140033570
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140013830
movaps xmm0, xmmword [0x14004eae0]
lea rdx, [0x1400495d4]
lea rcx, [rbp + 0x17]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400313a0
xor ecx, ecx
call fcn.140007650
test al, al
je 0x1400413ca
lea rcx, str.Draw_enemies_skeleton
call fcn.1400148c0
lea rdx, [0x140059a0b]
lea rcx, str.Health
call fcn.140033570
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140013830
movaps xmm0, xmmword [0x14004eae0]
lea rdx, [0x1400495d4]
lea rcx, [rbp + 0x17]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400313a0
xor ecx, ecx
call fcn.140007650
test al, al
je 0x14004141a
lea rcx, str.Draw_enemies_health
call fcn.1400148c0
lea rdx, [0x140059a09]
lea rcx, str.Snap_Lines
call fcn.140033570
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140013830
movaps xmm0, xmmword [0x14004eae0]
lea rdx, [0x1400495d4]
lea rcx, [rbp + 0x17]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400313a0
xor ecx, ecx
call fcn.140007650
test al, al
je 0x14004146a
lea rcx, str.Draw_lines_to_enemies
call fcn.1400148c0
lea rdx, [0x140059a0d]
lea rcx, str.Distance
call fcn.140033570
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140013830
movaps xmm0, xmmword [0x14004eae0]
lea rdx, [0x1400495d4]
lea rcx, [rbp + 0x17]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400313a0
xor ecx, ecx
call fcn.140007650
test al, al
je 0x1400414ba
lea rcx, str.Draw_distance_to_enemies
call fcn.1400148c0
mov rdx, qword [0x140059a10]
mov rax, qword [rdx + 0x4008]
cmp byte [rax + 0xc3], bl
jne 0x1400414fd
mov r8, qword [rdx + 0x4e10]
test r8, r8
je 0x1400414fd
movsx rax, word [r8 + 0x78]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x1400414fd
mov rax, qword [rdx + 0x4008]
dec dword [rax + 0x100]
lea rcx, str.Misc
call fcn.14003de40
test al, al
je 0x140041632
lea rdx, [0x140058f50]
lea rcx, str.Team_Check
call fcn.140033570
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140013830
movaps xmm0, xmmword [0x14004eae0]
lea rdx, [0x1400495d4]
lea rcx, [rbp + 0x17]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400313a0
xor ecx, ecx
call fcn.140007650
test al, al
je 0x140041561
lea rcx, str.Enable_Disable_Team_Check
call fcn.1400148c0
lea rdx, [0x140058f51]
lea rcx, str.Watermark
call fcn.140033570
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140013830
movaps xmm0, xmmword [0x14004eae0]
lea rdx, [0x1400495d4]
lea rcx, [rbp + 0x17]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400313a0
xor ecx, ecx
call fcn.140007650
test al, al
je 0x1400415b1
lea rcx, str.Enable_Disable_Watermark
call fcn.1400148c0
lea rdx, [rbp - 9]
mov qword [rbp - 9], rbx
lea rcx, str.Website
call fcn.140031c40
test al, al
je 0x1400415ef
mov dword [rsp + 0x28], 1
lea r8, str.https:__www.infestation.com.br
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [0x140059a10]
mov rax, qword [rdx + 0x4008]
cmp byte [rax + 0xc3], bl
jne 0x140041632
mov r8, qword [rdx + 0x4e10]
test r8, r8
je 0x140041632
movsx rax, word [r8 + 0x78]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x140041632
mov rax, qword [rdx + 0x4008]
dec dword [rax + 0x100]
call fcn.14003c410
call fcn.1400100c0
movaps xmm6, xmmword [rsp + 0xd0]
mov rbx, qword [rsp + 0xf0]
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400463c0
add rsp, 0xe0
pop rbp
ret