Function at 0x14003b0bc
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
lea rsi, [rbp + 0x28]
movabs rbx, 0x7a5db90d33787107
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], rsi
mov rdi, qword [rsi]
xor rdi, rbx
mov qword [rbp - 0x30], rdi
xor r13d, r13d
mov qword [rsi], r13
lea ecx, [r13 + 0x2d]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003b11d
cmp byte [0x14004c168], r13b
sete byte [0x14004c168]
call fcn.14001f730
call fcn.1400200c0
call fcn.14000e058
cmp byte [0x14004c168], r13b
je 0x14003bde0
lea rax, [rbp + 0x28]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rax
mov r14, qword [rax]
xor r14, rbx
mov qword [rbp - 0x18], r14
mov qword [rax], r13
xor ecx, ecx
call fcn.140018918
call fcn.140009a0c
mov r12d, 0x3f800000
mov dword [rax], r12d
mov r8d, 0x41000000
mov dword [rax + 4], r8d
mov dword [rax + 8], r8d
mov edx, 0x40400000
mov dword [rax + 0xc], edx
mov dword [rax + 0x10], r12d
mov ecx, 0x42000000
mov dword [rax + 0x14], ecx
mov qword [rax + 0x18], rcx
mov r9d, 0x3f000000
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], edx
mov qword [rax + 0x28], r12
mov dword [rax + 0x30], r12d
mov ecx, 0x40800000
mov dword [rax + 0x34], ecx
mov dword [rax + 0x38], edx
mov qword [rax + 0x3c], rdx
mov dword [rax + 0x44], r8d
mov dword [rax + 0x48], ecx
mov dword [rax + 0x4c], ecx
mov dword [rax + 0x50], ecx
mov dword [rax + 0x5c], 0x41a80000
mov dword [rax + 0x60], 0x40c00000
mov dword [rax + 0x64], 0x41600000
mov dword [rax + 0x68], 0x41100000
mov dword [rax + 0x6c], 0x41a00000
mov dword [rax + 0x70], r12d
mov qword [rax + 0x74], rcx
mov dword [rax + 0x7c], r9d
mov dword [rax + 0x80], r9d
mov dword [rax + 0xa0], r13d
mov dword [rax + 0xa4], r12d
mov dword [rax + 0xa8], r12d
mov qword [rax + 0xac], r12
mov dword [rax + 0xb4], 0x3ecccccd
mov esi, 0x3ed0d0d1
mov dword [rax + 0xb8], esi
mov qword [rax + 0xbc], r12
mov qword [rax + 0xc4], r13
mov qword [rax + 0xcc], 0x3f7ae148
mov qword [rax + 0xd4], r13
mov dword [rax + 0xdc], r13d
mov dword [rax + 0xe0], 0x3e20a0a1
mov dword [rax + 0xe4], 0x3e74f4f5
mov r8d, 0x3e60e0e1
mov dword [rax + 0xe8], r8d
mov qword [rax + 0xec], 0x3f19999a
mov dword [rax + 0xf4], r12d
mov dword [rax + 0xf8], r12d
mov qword [rax + 0xfc], 0x3f266666
mov qword [rax + 0x104], r13
mov dword [rax + 0x10c], r13d
mov ecx, 0x3ee0e0e1
mov dword [rax + 0x110], ecx
mov r15d, 0x3f4ccccd
mov dword [rax + 0x114], r15d
mov dword [rax + 0x118], r15d
mov dword [rax + 0x11c], 0x3e3851ec
mov dword [rax + 0x120], ecx
mov dword [rax + 0x124], r15d
mov dword [rax + 0x128], r15d
mov edx, 0x3e8a3d71
mov dword [rax + 0x12c], edx
mov dword [rax + 0x130], ecx
mov dword [rax + 0x134], 0x3f4ececf
mov dword [rax + 0x138], 0x3f5bdbdc
mov dword [rax + 0x13c], 0x3f28f5c3
mov dword [rax + 0x140], 0x3e0c8c8d
mov r10d, 0x3e34b4b5
mov dword [rax + 0x144], r10d
mov dword [rax + 0x148], 0x3e54d4d5
mov qword [rax + 0x14c], 0x3f3ae148
mov dword [rax + 0x154], r12d
mov dword [rax + 0x158], r12d
mov qword [rax + 0x15c], rdx
mov qword [rax + 0x164], r13
mov qword [rax + 0x16c], 0x3f0a3d71
mov qword [rax + 0x174], r13
mov r11d, 0x3e4ccccd
mov dword [rax + 0x17c], r11d
mov dword [rax + 0x180], r8d
mov dword [rax + 0x184], 0x3e929293
mov dword [rax + 0x188], 0x3e989899
mov qword [rax + 0x18c], 0x3f35c28f
mov dword [rax + 0x194], r12d
mov dword [rax + 0x198], r12d
mov qword [rax + 0x19c], 0x3ee147ae
mov dword [rax + 0x1a4], r12d
mov dword [rax + 0x1a8], r12d
mov qword [rax + 0x1ac], 0x3f3d70a4
mov dword [rax + 0x1b4], r12d
mov dword [rax + 0x1b8], r12d
mov qword [rax + 0x1bc], r12
mov dword [rax + 0x1c4], r12d
mov dword [rax + 0x1c8], r12d
mov qword [rax + 0x1cc], 0x3f2e147b
mov dword [rax + 0x1d4], r12d
mov dword [rax + 0x1d8], r12d
mov qword [rax + 0x1dc], 0x3eb851ec
mov dword [rax + 0x1e4], r12d
mov dword [rax + 0x1e8], r12d
mov qword [rax + 0x1ec], 0x3f428f5c
mov ecx, 0x3f25a5a6
mov dword [rax + 0x1f4], ecx
mov dword [rax + 0x1f8], ecx
mov dword [rax + 0x1fc], 0x3eeb851f
mov dword [rax + 0x200], 0x3c008081
mov dword [rax + 0x204], r12d
mov dword [rax + 0x208], r12d
mov qword [rax + 0x20c], 0x3edc28f6
mov dword [rax + 0x214], r12d
mov dword [rax + 0x218], r12d
mov qword [rax + 0x21c], 0x3f1eb852
mov dword [rax + 0x224], r12d
mov dword [rax + 0x228], r12d
mov qword [rax + 0x22c], 0x3ea8f5c3
mov dword [rax + 0x234], r12d
mov dword [rax + 0x238], r12d
mov qword [rax + 0x23c], 0x3ed70a3d
mov dword [rax + 0x244], r12d
mov dword [rax + 0x248], r12d
mov qword [rax + 0x24c], 0x3f0a3d71
mov ecx, 0x3efefeff
mov dword [rax + 0x254], ecx
mov dword [rax + 0x258], ecx
mov qword [rax + 0x25c], 0x3ea8f5c3
mov dword [rax + 0x264], ecx
mov dword [rax + 0x268], ecx
mov qword [rax + 0x26c], 0x3ef0a3d7
mov ecx, 0x3f32b2b3
mov dword [rax + 0x274], ecx
mov dword [rax + 0x278], ecx
mov qword [rax + 0x27c], r12
mov dword [rax + 0x284], r12d
mov dword [rax + 0x288], r12d
mov qword [rax + 0x28c], 0x3f0a3d71
mov dword [rax + 0x294], r12d
mov dword [rax + 0x298], r12d
mov qword [rax + 0x29c], 0x3f3d70a4
mov dword [rax + 0x2a4], r12d
mov dword [rax + 0x2a8], r12d
mov dword [rax + 0x2ac], r12d
mov dword [rax + 0x2b0], r10d
mov dword [rax + 0x2b4], 0x3eb2b2b3
mov dword [rax + 0x2b8], 0x3f139394
mov dword [rax + 0x2bc], 0x3f5cac08
mov r8d, 0x3e848485
mov dword [rax + 0x2c0], r8d
mov edx, 0x3f169697
mov dword [rax + 0x2c4], edx
mov ecx, 0x3f79f9fa
mov dword [rax + 0x2c8], ecx
mov dword [rax + 0x2cc], r15d
mov dword [rax + 0x2d0], 0x3e48c8c9
mov dword [rax + 0x2d4], esi
mov dword [rax + 0x2d8], 0x3f2dadae
mov dword [rax + 0x2dc], r12d
mov dword [rax + 0x2e0], 0x3d888889
mov dword [rax + 0x2e4], 0x3dd0d0d1
mov dword [rax + 0x2e8], 0x3e149495
mov dword [rax + 0x2ec], 0x3f78ef35
mov dword [rax + 0x2f0], 0x3e088889
mov dword [rax + 0x2f4], r8d
mov dword [rax + 0x2f8], 0x3ed8d8d9
mov qword [rax + 0x2fc], r12
mov dword [rax + 0x304], r12d
mov dword [rax + 0x308], r12d
mov qword [rax + 0x30c], r12
mov dword [rax + 0x314], r12d
mov dword [rax + 0x318], r12d
mov qword [rax + 0x31c], r12
mov dword [rax + 0x324], r12d
mov dword [rax + 0x328], r12d
mov qword [rax + 0x32c], r12
mov dword [rax + 0x334], r12d
mov dword [rax + 0x338], r12d
mov qword [rax + 0x33c], r12
mov dword [rax + 0x344], r12d
mov dword [rax + 0x348], r12d
mov dword [rax + 0x34c], 0x3e6147ae
mov dword [rax + 0x350], r12d
mov qword [rax + 0x354], r12
mov dword [rax + 0x35c], 0x3f666666
mov dword [rax + 0x360], r8d
mov dword [rax + 0x364], edx
mov dword [rax + 0x368], ecx
mov dword [rax + 0x36c], r12d
mov dword [rax + 0x370], r12d
mov dword [rax + 0x374], r12d
mov dword [rax + 0x378], r12d
mov dword [rax + 0x37c], 0x3f333333
mov dword [rax + 0x380], r15d
mov dword [rax + 0x384], r15d
mov dword [rax + 0x388], r15d
mov dword [rax + 0x38c], r11d
mov dword [rax + 0x390], 0x3d20a0a1
mov dword [rax + 0x394], 0x3dc8c8c9
mov dword [rax + 0x398], 0x3db0b0b1
mov dword [rax + 0x39c], 0x3f028f5c
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43fa0000
mov edx, 2
lea rcx, [rbp + 0x30]
call fcn.1400107ac
xor edx, edx
lea r8d, [rdx + 0x22]
lea rcx, str.SubZeroFN_Private
call fcn.14000332c
test al, al
je 0x14003bdcc
xor edx, edx
lea rcx, str.TabBar
call fcn.1400259f8
or r15d, 0xffffffff
lea r12, [0x14003fbbc]
test al, al
je 0x14003b921
xor r8d, r8d
xor edx, edx
lea rcx, str.Aimbot
call fcn.140025cc8
test al, al
je 0x14003b921
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43c80000
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.140010aa0
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.AimbotChild
call fcn.1400058a4
lea rdx, [0x14004c16e]
lea rcx, str.Enable
call fcn.14002645c
cmp byte [0x14004c16e], r13b
je 0x14003b917
mov r8d, dword [0x140069aac]
lea rdx, [0x140034ee8]
mov ecx, dword [0x140069a84]
call fcn.140038ff8
movss xmm0, dword [0x14003fd88]
call fcn.14000ee14
mov dword [rsp + 0x20], r15d
lea r9d, [r15 + 4]
lea r8, str.Head
lea rdx, [0x140069e08]
lea rcx, str.Hitbox_Position
call fcn.140029c40
call fcn.14002f1cc
lea rdx, [0x14004c16d]
lea rcx, str.Draw_FOV
call fcn.14002645c
cmp byte [0x14004c16d], r13b
je 0x14003b8f5
lea rdx, [0x140069850]
lea rcx, str.Circle_FOV
call fcn.14002645c
cmp byte [0x140069850], r13b
je 0x14003b878
mov byte [0x140069852], r13b
mov byte [0x14006985b], r13b
lea rdx, [0x14006985b]
lea rcx, str.Filled_Circle_FOV
call fcn.14002645c
cmp byte [0x14006985b], r13b
je 0x14003b8a2
mov byte [0x140069850], r13b
mov byte [0x140069852], r13b
lea rdx, [0x140069852]
lea rcx, str.Square_FOV
call fcn.14002645c
cmp byte [0x140069852], r13b
je 0x14003b8cc
mov byte [0x14006985b], r13b
mov byte [0x140069850], r13b
call fcn.14002f1cc
mov qword [rsp + 0x20], r12
mov r9d, 0x12c
mov r8d, 0x32
lea rdx, [0x14004c190]
lea rcx, str.FOV_Size
call fcn.14002ece0
mov qword [rsp + 0x20], r12
mov r9d, 0xa
lea r8d, [r9 - 9]
lea rdx, [0x14004c184]
lea rcx, str.Smoothing
call fcn.14002ece0
call fcn.140007984
call fcn.14002a948
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.140025cc8
mov esi, dword [0x140069f80]
test al, al
je 0x14003bb44
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ed8], eax
jle 0x14003b992
lea rcx, [0x140069ed8]
call fcn.14003d258
cmp dword [0x140069ed8], r15d
jne 0x14003b992
mov dword [0x140069ed0], 0x44160000
mov dword [0x140069ed4], 0x43c80000
lea rcx, [0x140069ed8]
call fcn.14003d1ec
xor edx, edx
lea rcx, [0x140069ed0]
call fcn.140010aa0
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.VisualsChild
call fcn.1400058a4
lea rdx, [0x14004c16b]
lea rcx, str.Enable_ESP
call fcn.14002645c
cmp byte [0x14004c16b], r13b
je 0x14003bb3a
lea rdx, [0x140069847]
lea rcx, str.Weapon_ESP__WORKS_
call fcn.14002645c
lea rdx, [0x140069853]
lea rcx, str.Name_ESP__DOESNT_WORK_
call fcn.14002645c
lea rdx, [0x140069855]
lea rcx, str.Ammo_ESP__WORKS_
call fcn.14002645c
lea rdx, [0x140069856]
lea rcx, str.Enemy_Alert__5m_
call fcn.14002645c
lea rdx, [0x140069845]
lea rcx, str.2D_Box
call fcn.14002645c
cmp byte [0x140069845], r13b
je 0x14003ba5b
mov byte [0x140069845], 1
mov byte [0x14006984c], r13b
mov byte [0x140069848], r13b
movss xmm1, dword [0x14003fc7c]
xorps xmm0, xmm0
call fcn.14000fe94
lea rdx, [0x140069848]
lea rcx, str.Corner_Box
call fcn.14002645c
cmp byte [0x140069848], r13b
je 0x14003ba9c
mov byte [0x140069845], r13b
mov byte [0x14006984c], r13b
mov byte [0x140069848], 1
movss xmm1, dword [0x14003fc7c]
xorps xmm0, xmm0
call fcn.14000fe94
lea rdx, [0x14006984c]
lea rcx, str.3D_Box
call fcn.14002645c
cmp byte [0x14006984c], r13b
je 0x14003badd
mov byte [0x140069845], r13b
mov byte [0x14006984c], 1
mov byte [0x140069848], r13b
lea rdx, [0x140069857]
lea rcx, str.Distance_ESP__WORKS_
call fcn.14002645c
lea rdx, [0x140069846]
lea rcx, str.Skeleton
call fcn.14002645c
lea rdx, [0x14006984b]
lea rcx, str.Snaplines
call fcn.14002645c
mov qword [rsp + 0x20], r12
mov r9d, 0x9c4
mov r8d, 0x12
lea rdx, [0x1400675ec]
lea rcx, str.Distance
call fcn.14002ece0
call fcn.140007984
call fcn.14002a948
xor r8d, r8d
xor edx, edx
lea rcx, str.Exploits
call fcn.140025cc8
test al, al
je 0x14003bc30
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ee8], eax
jle 0x14003bbaf
lea rcx, [0x140069ee8]
call fcn.14003d258
cmp dword [0x140069ee8], r15d
jne 0x14003bbaf
mov dword [0x140069ee0], 0x44160000
mov dword [0x140069ee4], 0x43c80000
lea rcx, [0x140069ee8]
call fcn.14003d1ec
xor edx, edx
lea rcx, [0x140069ee0]
call fcn.140010aa0
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.ExtraChild
call fcn.1400058a4
lea rdx, [0x14006985f]
lea rcx, str.Player_TP__LShift_
call fcn.14002645c
lea rdx, [0x140069860]
lea rcx, str.No_Recoil
call fcn.14002645c
mov dword [rsp + 0x20], r15d
mov r9d, 5
lea r8, str.Mega_City
lea rdx, [0x140069864]
lea rcx, str.Locations
call fcn.140029c40
call fcn.140007984
call fcn.14002a948
xor r8d, r8d
xor edx, edx
lea rcx, str.Misc
call fcn.140025cc8
test al, al
je 0x14003bdc7
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ef8], eax
jle 0x14003bc9b
lea rcx, [0x140069ef8]
call fcn.14003d258
cmp dword [0x140069ef8], r15d
jne 0x14003bc9b
mov dword [0x140069ef0], 0x44228000
mov dword [0x140069ef4], 0x442a0000
lea rcx, [0x140069ef8]
call fcn.14003d1ec
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.InfoChild
call fcn.1400058a4
call fcn.140009530
movss xmm1, dword [rax + 0x3ac]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
lea rcx, str.Framerate:__.1f
call fcn.140030914
call fcn.14002f1cc
mov qword [rsp + 0x20], r12
mov esi, 0x23
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004c188]
lea rcx, str.Thickness__ESP
call fcn.14002ece0
mov qword [rsp + 0x20], r12
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004c18c]
lea rcx, str.Thickness__FOV
call fcn.14002ece0
movss xmm0, dword [0x14003fd8c]
call fcn.14000ee14
call fcn.14002f1cc
mov esi, 0x20
mov r8d, esi
lea rdx, [0x140069878]
lea rcx, str.Visible_Color
call fcn.140027f98
mov r8d, esi
lea rdx, [0x140069888]
lea rcx, str.Invisible_Color
call fcn.140027f98
call fcn.14000e988
call fcn.14002f1cc
lea rcx, str.Drivers_Loaded:_Yes
lea rax, str.Drivers_Loaded:_No
cmp qword [0x1400699e0], r13
cmovbe rcx, rax
call fcn.140030914
call fcn.14002f1cc
mov dword [rbp + 0x30], 0x42960000
mov dword [rbp + 0x34], 0x41c80000
lea rdx, [rbp + 0x30]
lea rcx, str.Exit_Cheat
call fcn.140025d64
test al, al
je 0x14003bdbd
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140007984
call fcn.14002a948
call fcn.14002a898
call fcn.1400078d0
nop
xor r14, rbx
lea rax, [rbp + 0x28]
mov qword [rax], r14
lea rsi, [rbp + 0x28]
call fcn.140035350
call fcn.140007ed0
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003bf06
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss xmm0, dword [0x14003fc1c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r13d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
call fcn.14000f00c
call fcn.140009304
mov rcx, rax
call fcn.14001f748
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003beb0
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003beb0
call fcn.14001f6b8
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
lea rdx, [0x140069940]
call qword [rax + 0x80]
call fcn.14001f550
cmp byte [0x140069efc], r13b
jne 0x14003bf06
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov byte [0x140069efc], 1
xor rbx, rdi
mov qword [rsi], rbx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret