Heavy obfuscation is what gives it the malware like execution. If you want updated links for PassatHook, here they are:
You must be registered for see links
Password: #unbanjannes
You must be registered for see links
The repository that got flagged on GitHub was the "CSGO-Cheats" repository, where a DLL got flagged as a RAT.
PassatHook has and will continue to be a free cheat with NO PAY WALL behind it. I do not earn or make ANY MONEY from it, nor do I wish to do so.
I kinda abandoned the project due to lack of motivation and people disrespecting me (other cheaters/pasters) for making such software.
Also to answer your questions:
1. Heavy obfuscations by VMP and string encryption, including opening handles to the game, reading the game's memory, and also having a Discord RPC.
2. The source contains a lot of private unused (mainly features and optimizations) code which I'd rather not share, as I either ported them to my new software, or it's a precious code of mine that I don't want to share.
3. I've stated them above.
If you want to take a look at the source live on screen share with me on Discord, I'll gladly do it

. "jannesbonk" is my name.