Function at 0x14004a2c4
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0xc8
call fcn.140024ea4
call fcn.140025874
call fcn.14000e710
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14004a314
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x14004a302
mov dword [rsp + 0x44], 1
jmp 0x14004a30a
mov dword [rsp + 0x44], 0
mov al, byte [rsp + 0x44]
mov byte [reloc.WS2_32.dll_accept], al
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x14004a8a3
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 0
movss xmm2, dword [0x1400ba3e8]
movss xmm1, dword [0x1400ba3f4]
lea rcx, [rsp + 0x4c]
call fcn.140039f68
xor edx, edx
lea rcx, [rsp + 0x4c]
call fcn.1400129e8
mov r8d, Ordinal_46
xor edx, edx
lea rcx, [0x1400b7b48]
call fcn.140003b04
lea rcx, [rsp + 0x88]
call fcn.140009940
lea rcx, [rsp + 0x90]
call fcn.14000995c
movss xmm1, dword [0x1400b1fb0]
xorps xmm0, xmm0
call fcn.140011cf8
xor edx, edx
lea rcx, str.TabBar
call fcn.14002d0dc
movzx eax, al
test eax, eax
je 0x14004a47d
xor r8d, r8d
xor edx, edx
lea rcx, str.AIMBOT
call fcn.14002d46c
movzx eax, al
test eax, eax
je 0x14004a3e5
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 0
call fcn.14002ea90
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400b7b68]
call fcn.14002d46c
movzx eax, al
test eax, eax
je 0x14004a416
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 1
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 0
call fcn.14002ea90
xor r8d, r8d
xor edx, edx
lea rcx, str.INFO
call fcn.14002d46c
movzx eax, al
test eax, eax
je 0x14004a447
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 1
call fcn.14002ea90
xor r8d, r8d
xor edx, edx
lea rcx, str.CONFIG_t
call fcn.14002d46c
movzx eax, al
test eax, eax
je 0x14004a478
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 0
call fcn.14002ea90
call fcn.14002e970
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x14004a655
movss xmm2, dword [0x1400ba3ec]
movss xmm1, dword [0x1400ba3e4]
lea rcx, [rsp + 0x98]
call fcn.140039f68
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier1
call fcn.140005690
lea rdx, [0x1400d90da]
lea rcx, [0x1400b7b94]
call fcn.14002de10
lea rcx, str.Aimbot_Bone
call fcn.140032850
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, str.Head
lea rdx, [0x1400d9660]
lea rcx, str.
call fcn.14002e8b4
lea rcx, str.Fov_Type
call fcn.140032850
lea rdx, [0x1400d90cd]
lea rcx, str.Circle_FOV
call fcn.14002de10
movzx eax, byte [0x1400d90cd]
test eax, eax
je 0x14004a53b
mov byte [0x1400d90e1], 0
mov byte [0x1400d90ee], 0
movss xmm1, dword [0x1400b1fb0]
xorps xmm0, xmm0
call fcn.140011cf8
lea rdx, [0x1400d90ee]
lea rcx, str.Filled_Circle_FOV
call fcn.14002de10
movzx eax, byte [0x1400d90ee]
test eax, eax
je 0x14004a577
mov byte [0x1400d90cd], 0
mov byte [0x1400d90e1], 0
movss xmm1, dword [0x1400b1fb0]
xorps xmm0, xmm0
call fcn.140011cf8
lea rdx, [0x1400d90e1]
lea rcx, str.Square_FOV
call fcn.14002de10
movzx eax, byte [0x1400d90e1]
test eax, eax
je 0x14004a5b3
mov byte [0x1400d90ee], 0
mov byte [0x1400d90cd], 0
call fcn.14003098c
mov dword [rsp + 0x28], 0
lea rax, [0x1400b7bfc]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1400b3808]
movss xmm2, dword [0x1400b1fa8]
lea rdx, [0x1400d7030]
lea rcx, str.Aim_Smoothness
call fcn.1400303fc
mov dword [rsp + 0x28], 0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1400b3820]
movss xmm2, dword [0x1400b3960]
lea rdx, [0x1400d7034]
lea rcx, str.Aimbot_FOV_Size
call fcn.1400303fc
call fcn.14003098c
lea rcx, str.Aim_Key
call fcn.140032850
mov r8d, dword [0x1400d9630]
lea rdx, [0x14003c188]
mov ecx, dword [0x1400d91b8]
call fcn.140043a74
call fcn.140007858
movzx eax, byte [rsp + 0x41]
test eax, eax
je 0x14004a7af
movss xmm2, dword [0x1400ba3f0]
movss xmm1, dword [0x1400ba3dc]
lea rcx, [rsp + 0xa0]
call fcn.140039f68
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier2
call fcn.140005690
mov dword [rsp + 0x28], 0
lea rax, [0x1400b7c4c]
mov qword [rsp + 0x20], rax
mov r9d, 0x1f4
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, [0x1400d719c]
lea rcx, [0x1400b7c50]
call fcn.140030440
call fcn.14003098c
call fcn.14003098c
lea rcx, str.Visuals:
call fcn.140032850
call fcn.14003098c
lea rdx, [0x1400d90d1]
lea rcx, str.Enable_Esp
call fcn.14002de10
lea rdx, [0x1400d90d3]
lea rcx, str.Box_Esp
call fcn.14002de10
lea rdx, [0x1400d90ed]
lea rcx, str.Filled_Boxes_Esp
call fcn.14002de10
lea rdx, [0x1400d90d7]
lea rcx, str.Cornered_Box
call fcn.14002de10
lea rdx, [0x1400d90db]
lea rcx, str.3D_Box_Esp
call fcn.14002de10
lea rdx, [0x1400d960e]
lea rcx, str.Crosshair
call fcn.14002de10
lea rdx, [0x1400d90d6]
lea rcx, str.Skeleton_Esp
call fcn.14002de10
lea rdx, [0x1400d90e5]
lea rcx, str.Distance
call fcn.14002de10
lea rdx, [0x1400d90d9]
lea rcx, str.Snaplines
call fcn.14002de10
lea rdx, [0x1400d90d5]
lea rcx, str.Ammo_Count
call fcn.14002de10
call fcn.14003098c
call fcn.14003098c
call fcn.140007858
movzx eax, byte [rsp + 0x42]
test eax, eax
je 0x14004a851
movss xmm2, dword [0x1400b396c]
movss xmm1, dword [0x1400ba3e0]
lea rcx, [rsp + 0xa8]
call fcn.140039f68
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier4
call fcn.140005690
lea rcx, str.Information
call fcn.140032850
call fcn.14002fbec
lea rcx, [0x1400b7d2c]
call fcn.140032850
call fcn.14003098c
mov rdx, qword [0x1400d91d0]
lea rcx, str.__Base_ID_:__p__
call fcn.140032850
lea rcx, str.IF_BASE_00000000000_MEANS_THAT_DRIVERS_ARENT_LOADED
call fcn.140032850
lea rcx, str.__Working_on_Windows_10___11__
call fcn.140032850
lea rcx, str.___Discord:_https:__discord.gg_QmgCKSZQg4
call fcn.140032850
call fcn.14003098c
call fcn.140007858
call fcn.14000992c
subss xmm0, dword [0x1400b395c]
call fcn.14001263c
movss xmm2, dword [0x1400b3958]
movss xmm1, dword [0x1400b3814]
lea rcx, [rsp + 0xb0]
call fcn.140039f68
mov rdx, rax
lea rcx, str.Exit_Cheat
call fcn.14002d4ec
movzx eax, al
test eax, eax
je 0x14004a89e
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.14000770c
call fcn.14003de50
call fcn.140007a90
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x1400d9670]
call qword [rsp + 0x58]
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov rcx, qword [0x1400d9670]
call qword [rsp + 0x60]
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x68], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x1400d9670]
call qword [rsp + 0x68]
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x1400b1fa8]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400d9670]
call qword [rsp + reloc.WS2_32.dll_WSASetLastError]
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rcx, qword [0x1400d9670]
call qword [rax + 0x148]
test eax, eax
jl 0x14004a9b6
call fcn.14000f89c
call fcn.140008fc4
mov rcx, rax
call fcn.140024ebc
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rcx, qword [0x1400d9670]
call qword [rax + 0x150]
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400d9670]
call qword [rsp + 0x78]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x88760868
jne 0x14004aa49
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rcx, qword [0x1400d9670]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14004aa49
call fcn.140024e2c
mov rax, qword [0x1400d9670]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x80], rax
lea rdx, [0x1400d9160]
mov rcx, qword [0x1400d9670]
call qword [rsp + 0x80]
call fcn.140024ccc
add rsp, 0xc8
ret