Function at 0x140043dbc
Capabilities:
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0xd8
call fcn.1400248e4
call fcn.1400252b4
call fcn.14000e1a8
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x140043e0c
movzx eax, byte [0x140059162]
test eax, eax
jne 0x140043dfa
mov dword [rsp + 0x44], 1
jmp 0x140043e02
mov dword [rsp + 0x44], 0
mov al, byte [rsp + 0x44]
mov byte [0x140059162], al
movzx eax, byte [0x140059162]
test eax, eax
je 0x14004448e
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x42], 0
mov byte [rsp + 0x43], 0
movss xmm2, dword [0x140050e50]
movss xmm1, dword [0x140050e5c]
lea rcx, [rsp + 0x4c]
call fcn.140036988
xor edx, edx
lea rcx, [rsp + 0x4c]
call fcn.140012480
mov r8d, 0x2a
xor edx, edx
lea rcx, str.D4rkWare
call fcn.14000359c
lea rcx, [rsp + 0x88]
call fcn.1400093d8
lea rcx, [rsp + 0x90]
call fcn.1400093f4
movss xmm2, dword [0x14004b2bc]
movss xmm1, dword [0x14004b1d4]
lea rcx, [rsp + 0x98]
call fcn.140036988
mov rdx, rax
lea rcx, str.Discord_Server
call fcn.14002cf2c
movzx eax, al
test eax, eax
je 0x140043ec3
lea rcx, str.start_https:__discord.gg_d4rkware
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movss xmm1, dword [0x140049970]
xorps xmm0, xmm0
call fcn.140011790
xor edx, edx
lea rcx, str.TabBar
call fcn.14002cb1c
movzx eax, al
test eax, eax
je 0x140043fb5
xor r8d, r8d
xor edx, edx
lea rcx, str.Aimbot
call fcn.14002ceac
movzx eax, al
test eax, eax
je 0x140043f1d
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x42], 0
mov byte [rsp + 0x43], 0
call fcn.14002e4d0
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.14002ceac
movzx eax, al
test eax, eax
je 0x140043f4e
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 1
mov byte [rsp + 0x42], 0
mov byte [rsp + 0x43], 0
call fcn.14002e4d0
xor r8d, r8d
xor edx, edx
lea rcx, [0x140050470]
call fcn.14002ceac
movzx eax, al
test eax, eax
je 0x140043f7f
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x42], 1
mov byte [rsp + 0x43], 0
call fcn.14002e4d0
xor r8d, r8d
xor edx, edx
lea rcx, str.Info
call fcn.14002ceac
movzx eax, al
test eax, eax
je 0x140043fb0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x42], 0
mov byte [rsp + 0x43], 1
call fcn.14002e4d0
call fcn.14002e3b0
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x14004418d
movss xmm2, dword [0x140050e54]
movss xmm1, dword [0x140050e4c]
lea rcx, [rsp + 0xa0]
call fcn.140036988
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier1
call fcn.140005128
lea rdx, [0x14005ae23]
lea rcx, [0x14005049c]
call fcn.14002d850
lea rcx, str.Aimbot_Bone
call fcn.140032290
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, str.Head
lea rdx, [0x14005b130]
lea rcx, str.
call fcn.14002e2f4
lea rcx, str.Fov_Type
call fcn.140032290
lea rdx, [0x14005ae19]
lea rcx, str.Circle_FOV
call fcn.14002d850
movzx eax, byte [0x14005ae19]
test eax, eax
je 0x140044073
mov byte [0x14005ae29], 0
mov byte [0x14005ae36], 0
movss xmm1, dword [0x140049970]
xorps xmm0, xmm0
call fcn.140011790
lea rdx, [0x14005ae36]
lea rcx, str.Filled_Circle_FOV
call fcn.14002d850
movzx eax, byte [0x14005ae36]
test eax, eax
je 0x1400440af
mov byte [0x14005ae19], 0
mov byte [0x14005ae29], 0
movss xmm1, dword [0x140049970]
xorps xmm0, xmm0
call fcn.140011790
lea rdx, [0x14005ae29]
lea rcx, str.Square_FOV
call fcn.14002d850
movzx eax, byte [0x14005ae29]
test eax, eax
je 0x1400440eb
mov byte [0x14005ae36], 0
mov byte [0x14005ae19], 0
call fcn.1400303cc
mov dword [rsp + 0x28], 0
lea rax, [0x140050504]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14004996c]
movss xmm2, dword [0x140049968]
lea rdx, [0x140059170]
lea rcx, str.Aim_Smoothness
call fcn.14002fe3c
mov dword [rsp + 0x28], 0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14004b1e0]
movss xmm2, dword [0x14004b2c4]
lea rdx, [0x140059174]
lea rcx, str.Aimbot_FOV_Size
call fcn.14002fe3c
call fcn.1400303cc
lea rcx, str.Aim_Key
call fcn.140032290
mov r8d, dword [0x14005b100]
lea rdx, [0x140037b0c]
mov ecx, dword [0x14005af08]
call fcn.14003f1ec
call fcn.1400072f0
movzx eax, byte [rsp + 0x41]
test eax, eax
je 0x1400442d4
movss xmm2, dword [0x140050e58]
movss xmm1, dword [0x140050e44]
lea rcx, [rsp + 0xa8]
call fcn.140036988
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier2
call fcn.140005128
mov dword [rsp + 0x28], 0
lea rax, [0x140050554]
mov qword [rsp + 0x20], rax
mov r9d, 0x1f4
mov r8d, 0x14
lea rdx, [0x14005919c]
lea rcx, [0x140050558]
call fcn.14002fe80
call fcn.1400303cc
call fcn.1400303cc
lea rcx, str.Visuals:
call fcn.140032290
call fcn.1400303cc
lea rdx, [0x14005ae1c]
lea rcx, str.Enable_Esp
call fcn.14002d850
lea rdx, [0x14005ae1e]
lea rcx, str.Box_Esp
call fcn.14002d850
lea rdx, [0x14005ae35]
lea rcx, str.Filled_Boxes_Esp
call fcn.14002d850
lea rdx, [0x14005ae20]
lea rcx, str.Cornered_Box
call fcn.14002d850
lea rdx, [0x14005ae24]
lea rcx, str.3D_Box_Esp
call fcn.14002d850
lea rdx, [0x14005b068]
lea rcx, str.Crosshair
call fcn.14002d850
lea rdx, [0x14005ae1f]
lea rcx, str.Skeleton_Esp
call fcn.14002d850
lea rdx, [0x14005ae2d]
lea rcx, str.Distance
call fcn.14002d850
lea rdx, [0x14005ae22]
lea rcx, str.Snaplines
call fcn.14002d850
call fcn.1400303cc
call fcn.1400303cc
call fcn.1400072f0
movzx eax, byte [rsp + 0x42]
test eax, eax
je 0x14004438e
movss xmm2, dword [0x140050e58]
movss xmm1, dword [0x140050e60]
lea rcx, [rsp + 0xb0]
call fcn.140036988
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier3
call fcn.140005128
lea rcx, str.Exploits
call fcn.140032290
lea rdx, [0x14005ae1b]
lea rcx, str.Stream_Proof
call fcn.14002d850
call fcn.1400303cc
lea rdx, [0x14005ae39]
lea rcx, str.Instant_Reload
call fcn.14002d850
call fcn.1400303cc
lea rdx, [0x14005ae2f]
lea rcx, str.Fov_Changer
call fcn.14002d850
call fcn.1400303cc
lea rcx, str.I_Dont_Know_If_They_Working._Probably_Outdated
call fcn.140032290
call fcn.1400303cc
lea rcx, str.Soon_More...
call fcn.140032290
call fcn.1400303cc
call fcn.1400072f0
movzx eax, byte [rsp + 0x43]
test eax, eax
je 0x14004443c
movss xmm2, dword [0x14004b2d0]
movss xmm1, dword [0x140050e48]
lea rcx, [rsp + 0xb8]
call fcn.140036988
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier4
call fcn.140005128
lea rcx, str.Information
call fcn.140032290
call fcn.14002f62c
lea rcx, [0x1400506bc]
call fcn.140032290
call fcn.1400303cc
mov rdx, qword [0x14005af58]
lea rcx, str.__Base_ID_:__p__
call fcn.140032290
lea rcx, str.IF_BASE_00000000000_MEANS_THAT_DRIVERS_ARENT_LOADED
call fcn.140032290
lea rcx, str.__Working_on_Windows_10___11__
call fcn.140032290
lea rcx, str.https:__discord.gg_d4rkware__
call fcn.140032290
call fcn.1400303cc
lea rcx, str.Made_By_D4rkWare_With_Love_:_t_
call fcn.140032290
call fcn.1400072f0
call fcn.1400093c4
subss xmm0, dword [0x14004b2c0]
call fcn.1400120d4
movss xmm2, dword [0x14004b2bc]
movss xmm1, dword [0x14004b1d4]
lea rcx, [rsp + 0xc0]
call fcn.140036988
mov rdx, rax
lea rcx, str.Exit_Cheat
call fcn.14002cf2c
movzx eax, al
test eax, eax
je 0x140044489
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.1400071a4
call fcn.1400397b8
call fcn.140007528
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x14005b140]
call qword [rsp + 0x58]
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x14005b140]
call qword [rsp + 0x60]
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x68], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x14005b140]
call qword [rsp + 0x68]
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x140049968]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14005b140]
call qword [rsp + 0x70]
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rcx, qword [0x14005b140]
call qword [rax + 0x148]
test eax, eax
jl 0x1400445a1
call fcn.14000f334
call fcn.140008a5c
mov rcx, rax
call fcn.1400248fc
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rcx, qword [0x14005b140]
call qword [rax + 0x150]
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14005b140]
call qword [rsp + 0x78]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x88760868
jne 0x140044634
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rcx, qword [0x14005b140]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140044634
call fcn.14002486c
mov rax, qword [0x14005b140]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x80], rax
lea rdx, [0x14005aeb0]
mov rcx, qword [0x14005b140]
call qword [rsp + 0x80]
call fcn.14002470c
add rsp, 0xd8
ret