Function at 0x14003b19c
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
lea rsi, [rbp + 0x28]
movabs rbx, 0x7a5db90d33787107
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], rsi
mov rdi, qword [rsi]
xor rdi, rbx
mov qword [rbp - 0x30], rdi
xor r13d, r13d
mov qword [rsi], r13
lea ecx, [r13 + 0x2d]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003b1fd
cmp byte [0x14004d168], r13b
sete byte [0x14004d168]
call fcn.14001f6dc
call fcn.140020070
call fcn.14000e0c0
cmp byte [0x14004d168], r13b
je 0x14003bec0
lea rax, [rbp + 0x28]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rax
mov r14, qword [rax]
xor r14, rbx
mov qword [rbp - 0x18], r14
mov qword [rax], r13
xor ecx, ecx
call fcn.140018910
call fcn.140009a5c
mov r12d, 0x3f800000
mov dword [rax], r12d
mov r8d, 0x41000000
mov dword [rax + 4], r8d
mov dword [rax + 8], r8d
mov edx, 0x40400000
mov dword [rax + 0xc], edx
mov dword [rax + 0x10], r12d
mov ecx, 0x42000000
mov dword [rax + 0x14], ecx
mov qword [rax + 0x18], rcx
mov r9d, 0x3f000000
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], edx
mov qword [rax + 0x28], r12
mov dword [rax + 0x30], r12d
mov ecx, 0x40800000
mov dword [rax + 0x34], ecx
mov dword [rax + 0x38], edx
mov qword [rax + 0x3c], rdx
mov dword [rax + 0x44], r8d
mov dword [rax + 0x48], ecx
mov dword [rax + 0x4c], ecx
mov dword [rax + 0x50], ecx
mov dword [rax + 0x5c], 0x41a80000
mov dword [rax + 0x60], 0x40c00000
mov dword [rax + 0x64], 0x41600000
mov dword [rax + 0x68], 0x41100000
mov dword [rax + 0x6c], 0x41a00000
mov dword [rax + 0x70], r12d
mov qword [rax + 0x74], rcx
mov dword [rax + 0x7c], r9d
mov dword [rax + 0x80], r9d
mov dword [rax + 0xa0], r13d
mov dword [rax + 0xa4], r12d
mov dword [rax + 0xa8], r12d
mov qword [rax + 0xac], r12
mov dword [rax + 0xb4], 0x3ecccccd
mov esi, 0x3ed0d0d1
mov dword [rax + 0xb8], esi
mov qword [rax + 0xbc], r12
mov qword [rax + 0xc4], r13
mov qword [rax + 0xcc], 0x3f7ae148
mov qword [rax + 0xd4], r13
mov dword [rax + 0xdc], r13d
mov dword [rax + 0xe0], 0x3e20a0a1
mov dword [rax + 0xe4], 0x3e74f4f5
mov r8d, 0x3e60e0e1
mov dword [rax + 0xe8], r8d
mov qword [rax + 0xec], 0x3f19999a
mov dword [rax + 0xf4], r12d
mov dword [rax + 0xf8], r12d
mov qword [rax + 0xfc], 0x3f266666
mov qword [rax + 0x104], r13
mov dword [rax + 0x10c], r13d
mov ecx, 0x3ee0e0e1
mov dword [rax + 0x110], ecx
mov r15d, 0x3f4ccccd
mov dword [rax + 0x114], r15d
mov dword [rax + 0x118], r15d
mov dword [rax + 0x11c], 0x3e3851ec
mov dword [rax + 0x120], ecx
mov dword [rax + 0x124], r15d
mov dword [rax + 0x128], r15d
mov edx, 0x3e8a3d71
mov dword [rax + 0x12c], edx
mov dword [rax + 0x130], ecx
mov dword [rax + 0x134], 0x3f4ececf
mov dword [rax + 0x138], 0x3f5bdbdc
mov dword [rax + 0x13c], 0x3f28f5c3
mov dword [rax + 0x140], 0x3e0c8c8d
mov r10d, 0x3e34b4b5
mov dword [rax + 0x144], r10d
mov dword [rax + 0x148], 0x3e54d4d5
mov qword [rax + 0x14c], 0x3f3ae148
mov dword [rax + 0x154], r12d
mov dword [rax + 0x158], r12d
mov qword [rax + 0x15c], rdx
mov qword [rax + 0x164], r13
mov qword [rax + 0x16c], 0x3f0a3d71
mov qword [rax + 0x174], r13
mov r11d, 0x3e4ccccd
mov dword [rax + 0x17c], r11d
mov dword [rax + 0x180], r8d
mov dword [rax + 0x184], 0x3e929293
mov dword [rax + 0x188], 0x3e989899
mov qword [rax + 0x18c], 0x3f35c28f
mov dword [rax + 0x194], r12d
mov dword [rax + 0x198], r12d
mov qword [rax + 0x19c], 0x3ee147ae
mov dword [rax + 0x1a4], r12d
mov dword [rax + 0x1a8], r12d
mov qword [rax + 0x1ac], 0x3f3d70a4
mov dword [rax + 0x1b4], r12d
mov dword [rax + 0x1b8], r12d
mov qword [rax + 0x1bc], r12
mov dword [rax + 0x1c4], r12d
mov dword [rax + 0x1c8], r12d
mov qword [rax + 0x1cc], 0x3f2e147b
mov dword [rax + 0x1d4], r12d
mov dword [rax + 0x1d8], r12d
mov qword [rax + 0x1dc], 0x3eb851ec
mov dword [rax + 0x1e4], r12d
mov dword [rax + 0x1e8], r12d
mov qword [rax + 0x1ec], 0x3f428f5c
mov ecx, 0x3f25a5a6
mov dword [rax + 0x1f4], ecx
mov dword [rax + 0x1f8], ecx
mov dword [rax + 0x1fc], 0x3eeb851f
mov dword [rax + 0x200], 0x3c008081
mov dword [rax + 0x204], r12d
mov dword [rax + 0x208], r12d
mov qword [rax + 0x20c], 0x3edc28f6
mov dword [rax + 0x214], r12d
mov dword [rax + 0x218], r12d
mov qword [rax + 0x21c], 0x3f1eb852
mov dword [rax + 0x224], r12d
mov dword [rax + 0x228], r12d
mov qword [rax + 0x22c], 0x3ea8f5c3
mov dword [rax + 0x234], r12d
mov dword [rax + 0x238], r12d
mov qword [rax + 0x23c], 0x3ed70a3d
mov dword [rax + 0x244], r12d
mov dword [rax + 0x248], r12d
mov qword [rax + 0x24c], 0x3f0a3d71
mov ecx, 0x3efefeff
mov dword [rax + 0x254], ecx
mov dword [rax + 0x258], ecx
mov qword [rax + 0x25c], 0x3ea8f5c3
mov dword [rax + 0x264], ecx
mov dword [rax + 0x268], ecx
mov qword [rax + 0x26c], 0x3ef0a3d7
mov ecx, 0x3f32b2b3
mov dword [rax + 0x274], ecx
mov dword [rax + 0x278], ecx
mov qword [rax + 0x27c], r12
mov dword [rax + 0x284], r12d
mov dword [rax + 0x288], r12d
mov qword [rax + 0x28c], 0x3f0a3d71
mov dword [rax + 0x294], r12d
mov dword [rax + 0x298], r12d
mov qword [rax + 0x29c], 0x3f3d70a4
mov dword [rax + 0x2a4], r12d
mov dword [rax + 0x2a8], r12d
mov dword [rax + 0x2ac], r12d
mov dword [rax + 0x2b0], r10d
mov dword [rax + 0x2b4], 0x3eb2b2b3
mov dword [rax + 0x2b8], 0x3f139394
mov dword [rax + 0x2bc], 0x3f5cac08
mov r8d, 0x3e848485
mov dword [rax + 0x2c0], r8d
mov edx, 0x3f169697
mov dword [rax + 0x2c4], edx
mov ecx, 0x3f79f9fa
mov dword [rax + 0x2c8], ecx
mov dword [rax + 0x2cc], r15d
mov dword [rax + 0x2d0], 0x3e48c8c9
mov dword [rax + 0x2d4], esi
mov dword [rax + 0x2d8], 0x3f2dadae
mov dword [rax + 0x2dc], r12d
mov dword [rax + 0x2e0], 0x3d888889
mov dword [rax + 0x2e4], 0x3dd0d0d1
mov dword [rax + 0x2e8], 0x3e149495
mov dword [rax + 0x2ec], 0x3f78ef35
mov dword [rax + 0x2f0], 0x3e088889
mov dword [rax + 0x2f4], r8d
mov dword [rax + 0x2f8], 0x3ed8d8d9
mov qword [rax + 0x2fc], r12
mov dword [rax + 0x304], r12d
mov dword [rax + 0x308], r12d
mov qword [rax + 0x30c], r12
mov dword [rax + 0x314], r12d
mov dword [rax + 0x318], r12d
mov qword [rax + 0x31c], r12
mov dword [rax + 0x324], r12d
mov dword [rax + 0x328], r12d
mov qword [rax + 0x32c], r12
mov dword [rax + 0x334], r12d
mov dword [rax + 0x338], r12d
mov qword [rax + 0x33c], r12
mov dword [rax + 0x344], r12d
mov dword [rax + 0x348], r12d
mov dword [rax + 0x34c], 0x3e6147ae
mov dword [rax + 0x350], r12d
mov qword [rax + 0x354], r12
mov dword [rax + 0x35c], 0x3f666666
mov dword [rax + 0x360], r8d
mov dword [rax + 0x364], edx
mov dword [rax + 0x368], ecx
mov dword [rax + 0x36c], r12d
mov dword [rax + 0x370], r12d
mov dword [rax + 0x374], r12d
mov dword [rax + 0x378], r12d
mov dword [rax + 0x37c], 0x3f333333
mov dword [rax + 0x380], r15d
mov dword [rax + 0x384], r15d
mov dword [rax + 0x388], r15d
mov dword [rax + 0x38c], r11d
mov dword [rax + 0x390], 0x3d20a0a1
mov dword [rax + 0x394], 0x3dc8c8c9
mov dword [rax + 0x398], 0x3db0b0b1
mov dword [rax + 0x39c], 0x3f028f5c
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43fa0000
mov edx, 2
lea rcx, [rbp + 0x30]
call fcn.1400107f0
xor edx, edx
lea r8d, [rdx + 0x22]
lea rcx, str.SubZeroFN_Private
call fcn.140003310
test al, al
je 0x14003beac
xor edx, edx
lea rcx, str.TabBar
call fcn.140025aa0
or r15d, 0xffffffff
lea r12, [0x140040bcc]
test al, al
je 0x14003ba01
xor r8d, r8d
xor edx, edx
lea rcx, str.Aimbot
call fcn.140025d70
test al, al
je 0x14003ba01
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43c80000
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.140010ae4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.AimbotChild
call fcn.1400058f8
lea rdx, [0x14004d16e]
lea rcx, str.Enable
call fcn.140026504
cmp byte [0x14004d16e], r13b
je 0x14003b9f7
mov r8d, dword [0x14006aa5c]
lea rdx, [0x140034ee4]
mov ecx, dword [0x14006aa34]
call fcn.1400390cc
movss xmm0, dword [0x140040d98]
call fcn.14000ee80
mov dword [rsp + 0x20], r15d
lea r9d, [r15 + 4]
lea r8, str.Head
lea rdx, [0x14006adb8]
lea rcx, str.Hitbox_Position
call fcn.140029d3c
call fcn.14002f344
lea rdx, [0x14004d16d]
lea rcx, str.Draw_FOV
call fcn.140026504
cmp byte [0x14004d16d], r13b
je 0x14003b9d5
lea rdx, [0x14006a800]
lea rcx, str.Circle_FOV
call fcn.140026504
cmp byte [0x14006a800], r13b
je 0x14003b958
mov byte [0x14006a802], r13b
mov byte [0x14006a80b], r13b
lea rdx, [0x14006a80b]
lea rcx, str.Filled_Circle_FOV
call fcn.140026504
cmp byte [0x14006a80b], r13b
je 0x14003b982
mov byte [0x14006a800], r13b
mov byte [0x14006a802], r13b
lea rdx, [0x14006a802]
lea rcx, str.Square_FOV
call fcn.140026504
cmp byte [0x14006a802], r13b
je 0x14003b9ac
mov byte [0x14006a80b], r13b
mov byte [0x14006a800], r13b
call fcn.14002f344
mov qword [rsp + 0x20], r12
mov r9d, 0x12c
mov r8d, 0x32
lea rdx, [0x14004d190]
lea rcx, str.FOV_Size
call fcn.14002ee58
mov qword [rsp + 0x20], r12
mov r9d, 0xa
lea r8d, [r9 - 9]
lea rdx, [0x14004d184]
lea rcx, str.Smoothing
call fcn.14002ee58
call fcn.1400079d8
call fcn.14002aa44
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.140025d70
mov esi, dword [0x14006af30]
test al, al
je 0x14003bc24
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x14006ae88], eax
jle 0x14003ba72
lea rcx, [0x14006ae88]
call fcn.14003d390
cmp dword [0x14006ae88], r15d
jne 0x14003ba72
mov dword [0x14006ae80], 0x44160000
mov dword [0x14006ae84], 0x43c80000
lea rcx, [0x14006ae88]
call fcn.14003d324
xor edx, edx
lea rcx, [0x14006ae80]
call fcn.140010ae4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.VisualsChild
call fcn.1400058f8
lea rdx, [0x14004d16b]
lea rcx, str.Enable_ESP
call fcn.140026504
cmp byte [0x14004d16b], r13b
je 0x14003bc1a
lea rdx, [0x14006a7f7]
lea rcx, str.Weapon_ESP__WORKS_
call fcn.140026504
lea rdx, [0x14006a803]
lea rcx, str.Name_ESP__DOESNT_WORK_
call fcn.140026504
lea rdx, [0x14006a805]
lea rcx, str.Ammo_ESP__WORKS_
call fcn.140026504
lea rdx, [0x14006a806]
lea rcx, str.Enemy_Alert__5m_
call fcn.140026504
lea rdx, [0x14006a7f5]
lea rcx, str.2D_Box
call fcn.140026504
cmp byte [0x14006a7f5], r13b
je 0x14003bb3b
mov byte [0x14006a7f5], 1
mov byte [0x14006a7fc], r13b
mov byte [0x14006a7f8], r13b
movss xmm1, dword [0x140040c8c]
xorps xmm0, xmm0
call fcn.14000fed4
lea rdx, [0x14006a7f8]
lea rcx, str.Corner_Box
call fcn.140026504
cmp byte [0x14006a7f8], r13b
je 0x14003bb7c
mov byte [0x14006a7f5], r13b
mov byte [0x14006a7fc], r13b
mov byte [0x14006a7f8], 1
movss xmm1, dword [0x140040c8c]
xorps xmm0, xmm0
call fcn.14000fed4
lea rdx, [0x14006a7fc]
lea rcx, str.3D_Box
call fcn.140026504
cmp byte [0x14006a7fc], r13b
je 0x14003bbbd
mov byte [0x14006a7f5], r13b
mov byte [0x14006a7fc], 1
mov byte [0x14006a7f8], r13b
lea rdx, [0x14006a807]
lea rcx, str.Distance_ESP__WORKS_
call fcn.140026504
lea rdx, [0x14006a7f6]
lea rcx, str.Skeleton
call fcn.140026504
lea rdx, [0x14006a7fb]
lea rcx, str.Snaplines
call fcn.140026504
mov qword [rsp + 0x20], r12
mov r9d, 0x9c4
mov r8d, 0x12
lea rdx, [0x1400685ec]
lea rcx, str.Distance
call fcn.14002ee58
call fcn.1400079d8
call fcn.14002aa44
xor r8d, r8d
xor edx, edx
lea rcx, str.Exploits
call fcn.140025d70
test al, al
je 0x14003bd10
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x14006ae98], eax
jle 0x14003bc8f
lea rcx, [0x14006ae98]
call fcn.14003d390
cmp dword [0x14006ae98], r15d
jne 0x14003bc8f
mov dword [0x14006ae90], 0x44160000
mov dword [0x14006ae94], 0x43c80000
lea rcx, [0x14006ae98]
call fcn.14003d324
xor edx, edx
lea rcx, [0x14006ae90]
call fcn.140010ae4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.ExtraChild
call fcn.1400058f8
lea rdx, [0x14006a80f]
lea rcx, str.Player_TP__LShift_
call fcn.140026504
lea rdx, [0x14006a810]
lea rcx, str.No_Recoil
call fcn.140026504
mov dword [rsp + 0x20], r15d
mov r9d, 5
lea r8, str.Mega_City
lea rdx, [0x14006a814]
lea rcx, str.Locations
call fcn.140029d3c
call fcn.1400079d8
call fcn.14002aa44
xor r8d, r8d
xor edx, edx
lea rcx, str.Misc
call fcn.140025d70
test al, al
je 0x14003bea7
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x14006aea8], eax
jle 0x14003bd7b
lea rcx, [0x14006aea8]
call fcn.14003d390
cmp dword [0x14006aea8], r15d
jne 0x14003bd7b
mov dword [0x14006aea0], 0x44228000
mov dword [0x14006aea4], 0x442a0000
lea rcx, [0x14006aea8]
call fcn.14003d324
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.InfoChild
call fcn.1400058f8
call fcn.140009580
movss xmm1, dword [rax + 0x3ac]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
lea rcx, str.Framerate:__.1f
call fcn.140030a64
call fcn.14002f344
mov qword [rsp + 0x20], r12
mov esi, 0x23
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004d188]
lea rcx, str.Thickness__ESP
call fcn.14002ee58
mov qword [rsp + 0x20], r12
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004d18c]
lea rcx, str.Thickness__FOV
call fcn.14002ee58
movss xmm0, dword [0x140040d9c]
call fcn.14000ee80
call fcn.14002f344
mov esi, 0x20
mov r8d, esi
lea rdx, [0x14006a828]
lea rcx, str.Visible_Color
call fcn.140028098
mov r8d, esi
lea rdx, [0x14006a838]
lea rcx, str.Invisible_Color
call fcn.140028098
call fcn.14000e9f4
call fcn.14002f344
lea rcx, str.Drivers_Loaded:_Yes
lea rax, str.Drivers_Loaded:_No
cmp qword [0x14006a990], r13
cmovbe rcx, rax
call fcn.140030a64
call fcn.14002f344
mov dword [rbp + 0x30], 0x42960000
mov dword [rbp + 0x34], 0x41c80000
lea rdx, [rbp + 0x30]
lea rcx, str.Exit_Cheat
call fcn.140025e0c
test al, al
je 0x14003be9d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400079d8
call fcn.14002aa44
call fcn.14002a994
call fcn.140007924
nop
xor r14, rbx
lea rax, [rbp + 0x28]
mov qword [rax], r14
lea rsi, [rbp + 0x28]
call fcn.14003534c
call fcn.140007f28
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003bfe6
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss xmm0, dword [0x140040c2c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r13d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
call fcn.14000f078
call fcn.140009354
mov rcx, rax
call fcn.14001f6f4
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003bf90
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003bf90
call fcn.14001f664
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
lea rdx, [0x14006a8f0]
call qword [rax + 0x80]
call fcn.14001f4fc
cmp byte [0x14006aeac], r13b
jne 0x14003bfe6
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x14006ae60]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov byte [0x14006aeac], 1
xor rbx, rdi
mov qword [rsi], rbx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret