Function at 0x14003a8d8
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r13
push r14
mov rbp, rsp
sub rsp, 0x70
lea r12, [rbp + 0x28]
movabs rdi, 0x7a5db90d33787107
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], r12
mov rbx, qword [r12]
xor rbx, rdi
mov qword [rbp - 0x30], rbx
xor r14d, r14d
mov qword [r12], r14
lea ecx, [r14 + 0x2d]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003a935
cmp byte [0x1400675bc], r14b
sete byte [0x1400675bc]
call fcn.14001f214
call fcn.14001fba8
call fcn.14000df6c
cmp byte [0x1400675bc], r14b
je 0x14003b3b6
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], r12
mov rsi, qword [r12]
xor rsi, rdi
mov qword [rbp - 0x18], rsi
mov qword [r12], r14
xor ecx, ecx
call fcn.1400187c0
call fcn.140009988
mov r10d, 0x3f800000
mov dword [rax], r10d
mov r8d, 0x41000000
mov dword [rax + 4], r8d
mov dword [rax + 8], r8d
mov edx, 0x40400000
mov dword [rax + 0xc], edx
mov dword [rax + 0x10], r10d
mov ecx, 0x42000000
mov dword [rax + 0x14], ecx
mov qword [rax + 0x18], rcx
mov r9d, 0x3f000000
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], edx
mov qword [rax + 0x28], r10
mov dword [rax + 0x30], r10d
mov ecx, 0x40800000
mov dword [rax + 0x34], ecx
mov dword [rax + 0x38], edx
mov qword [rax + 0x3c], rdx
mov dword [rax + 0x44], r8d
mov dword [rax + 0x48], ecx
mov dword [rax + 0x4c], ecx
mov dword [rax + 0x50], ecx
mov dword [rax + 0x5c], 0x41a80000
mov dword [rax + 0x60], 0x40c00000
mov dword [rax + 0x64], 0x41600000
mov dword [rax + 0x68], 0x41100000
mov dword [rax + 0x6c], 0x41a00000
mov dword [rax + 0x70], r10d
mov qword [rax + 0x74], rcx
mov dword [rax + 0x7c], r9d
mov dword [rax + 0x80], r9d
movaps xmm0, xmmword [0x140044d70]
movdqu xmmword [rax + 0xa0], xmm0
movaps xmm1, xmmword [0x140044d20]
movdqu xmmword [rax + 0xb0], xmm1
movaps xmm0, xmmword [0x140044cf0]
movdqu xmmword [rax + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rax + 0xd0], xmm1
movaps xmm0, xmmword [0x140044c30]
movdqu xmmword [rax + 0xe0], xmm0
movaps xmm1, xmmword [0x140044c50]
movdqu xmmword [rax + 0xf0], xmm1
xorps xmm0, xmm0
movdqu xmmword [rax + 0x100], xmm0
movaps xmm1, xmmword [0x140044b20]
movdqu xmmword [rax + 0x110], xmm1
movaps xmm0, xmmword [0x140044b50]
movdqu xmmword [rax + 0x120], xmm0
movaps xmm1, xmmword [0x140044c60]
movdqu xmmword [rax + 0x130], xmm1
movaps xmm0, xmmword [0x140044c90]
movdqu xmmword [rax + 0x140], xmm0
movaps xmm1, xmmword [0x140044b60]
movdqu xmmword [rax + 0x150], xmm1
movaps xmm0, xmmword [0x140044c10]
movdqu xmmword [rax + 0x160], xmm0
movaps xmm1, xmmword [0x140044b30]
movdqu xmmword [rax + 0x170], xmm1
movaps xmm0, xmmword [0x140044c80]
movdqu xmmword [rax + 0x180], xmm0
movaps xmm1, xmmword [0x140044bd0]
movdqu xmmword [rax + 0x190], xmm1
movaps xmm0, xmmword [0x140044ca0]
movdqu xmmword [rax + 0x1a0], xmm0
movaps xmm1, xmmword [0x140044d70]
movdqu xmmword [rax + 0x1b0], xmm1
movaps xmm0, xmmword [0x140044c70]
movdqu xmmword [rax + 0x1c0], xmm0
movaps xmm1, xmmword [0x140044b90]
movdqu xmmword [rax + 0x1d0], xmm1
movaps xmm0, xmmword [0x140044cb0]
movdqu xmmword [rax + 0x1e0], xmm0
movaps xmm1, xmmword [0x140044be0]
movdqu xmmword [rax + 0x1f0], xmm1
movaps xmm0, xmmword [0x140044bb0]
movdqu xmmword [rax + 0x200], xmm0
movaps xmm1, xmmword [0x140044c40]
movdqu xmmword [rax + 0x210], xmm1
movaps xmm0, xmmword [0x140044b80]
movdqu xmmword [rax + 0x220], xmm0
movaps xmm1, xmmword [0x140044ba0]
movdqu xmmword [rax + 0x230], xmm1
movaps xmm0, xmmword [0x140044c20]
movdqu xmmword [rax + 0x240], xmm0
movaps xmm1, xmmword [0x140044b70]
movdqu xmmword [rax + 0x250], xmm1
movaps xmm0, xmmword [0x140044bf0]
movdqu xmmword [rax + 0x260], xmm0
movaps xmm1, xmmword [0x140044d50]
movdqu xmmword [rax + 0x270], xmm1
movaps xmm0, xmmword [0x140044c20]
movdqu xmmword [rax + 0x280], xmm0
movaps xmm1, xmmword [0x140044ca0]
movdqu xmmword [rax + 0x290], xmm1
movaps xmm0, xmmword [0x140044d70]
movdqu xmmword [rax + 0x2a0], xmm0
movaps xmm1, xmmword [0x140044cd0]
movdqu xmmword [rax + 0x2b0], xmm1
movaps xmm0, xmmword [0x140044cc0]
movdqu xmmword [rax + 0x2c0], xmm0
movaps xmm1, xmmword [0x140044d40]
movdqu xmmword [rax + 0x2d0], xmm1
movaps xmm0, xmmword [0x140044ce0]
movdqu xmmword [rax + 0x2e0], xmm0
movaps xmm1, xmmword [0x140044d30]
movdqu xmmword [rax + 0x2f0], xmm1
movaps xmm0, xmmword [0x140044d70]
movdqu xmmword [rax + 0x300], xmm0
movaps xmm1, xmm0
movdqu xmmword [rax + 0x310], xmm0
movdqu xmmword [rax + 0x320], xmm0
movdqu xmmword [rax + 0x330], xmm0
movaps xmm0, xmmword [0x140044b40]
movdqu xmmword [rax + 0x340], xmm0
movaps xmm1, xmmword [0x140043940]
movdqu xmmword [rax + 0x350], xmm1
movaps xmm0, xmmword [0x140044d60]
movdqu xmmword [rax + 0x360], xmm0
movaps xmm1, xmmword [0x140043910]
movdqu xmmword [rax + 0x370], xmm1
movaps xmm0, xmmword [0x140043860]
movdqu xmmword [rax + 0x380], xmm0
movaps xmm1, xmmword [0x140044c00]
movdqu xmmword [rax + 0x390], xmm1
mov dword [rbp + 0x30], 0x44160000
movss xmm1, dword [0x14003fd44]
movss dword [rbp + 0x34], xmm1
mov edx, 2
lea rcx, [rbp + 0x30]
call fcn.1400106fc
xor edx, edx
lea r8d, [rdx + 0x22]
lea rcx, str.SubZeroFN_Private
call fcn.1400031e4
test al, al
je 0x14003b3a9
xor edx, edx
lea rcx, str.TabBar
call fcn.1400255f8
or r13d, 0xffffffff
lea rdi, [0x14003fb6c]
test al, al
je 0x14003aece
xor r8d, r8d
xor edx, edx
lea rcx, str.Aimbot
call fcn.1400258c8
test al, al
je 0x14003aece
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43c80000
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.140010a50
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.AimbotChild
call fcn.1400057e8
lea rdx, [0x1400675c2]
lea rcx, str.Enable
call fcn.140026070
cmp byte [0x1400675c2], r14b
je 0x14003aec4
mov r8d, dword [0x140069abc]
lea rdx, [0x140034464]
mov ecx, dword [0x14006987c]
call fcn.1400387b4
movss xmm0, dword [0x14003fd38]
call fcn.14000ed54
mov dword [rsp + 0x20], r13d
lea r9d, [r13 + 4]
lea r8, str.Head
lea rdx, [0x140069db8]
lea rcx, str.Hitbox_Position
call fcn.1400297ec
call fcn.14002ef00
lea rdx, [0x1400675c1]
lea rcx, str.Draw_FOV
call fcn.140026070
cmp byte [0x1400675c1], r14b
je 0x14003aea2
lea rdx, [0x1400698fc]
lea rcx, str.Circle_FOV
call fcn.140026070
cmp byte [0x1400698fc], r14b
je 0x14003ae25
mov byte [0x1400698fe], r14b
mov byte [0x140069907], r14b
lea rdx, [0x140069907]
lea rcx, str.Filled_Circle_FOV
call fcn.140026070
cmp byte [0x140069907], r14b
je 0x14003ae4f
mov byte [0x1400698fc], r14b
mov byte [0x1400698fe], r14b
lea rdx, [0x1400698fe]
lea rcx, str.Square_FOV
call fcn.140026070
cmp byte [0x1400698fe], r14b
je 0x14003ae79
mov byte [0x140069907], r14b
mov byte [0x1400698fc], r14b
call fcn.14002ef00
mov qword [rsp + 0x20], rdi
mov r9d, 0x12c
mov r8d, 0x32
lea rdx, [0x1400675e4]
lea rcx, str.FOV_Size
call fcn.14002ea14
mov qword [rsp + 0x20], rdi
mov r9d, 0xa
lea r8d, [r9 - 9]
lea rdx, [0x1400675d8]
lea rcx, str.Smoothing
call fcn.14002ea14
call fcn.1400078f8
call fcn.14002a4f4
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.1400258c8
mov edi, dword [0x140069f68]
test al, al
je 0x14003b0f8
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rdi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069e88], eax
jle 0x14003af3f
lea rcx, [0x140069e88]
call fcn.14003c880
cmp dword [0x140069e88], r13d
jne 0x14003af3f
mov dword [0x140069e80], 0x44160000
mov dword [0x140069e84], 0x43c80000
lea rcx, [0x140069e88]
call fcn.14003c820
xor edx, edx
lea rcx, [0x140069e80]
call fcn.140010a50
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.VisualsChild
call fcn.1400057e8
lea rdx, [0x1400675bf]
lea rcx, str.Enable_ESP
call fcn.140026070
cmp byte [0x1400675bf], r14b
je 0x14003b0ee
lea rdx, [0x1400698f3]
lea rcx, str.Weapon_ESP__WORKS_
call fcn.140026070
lea rdx, [0x1400698ff]
lea rcx, str.Name_ESP__DOESNT_WORK_
call fcn.140026070
lea rdx, [0x140069901]
lea rcx, str.Ammo_ESP__WORKS_
call fcn.140026070
lea rdx, [0x140069902]
lea rcx, str.Enemy_Alert__5m_
call fcn.140026070
lea rdx, [0x1400698f1]
lea rcx, str.2D_Box
call fcn.140026070
cmp byte [0x1400698f1], r14b
je 0x14003b008
mov byte [0x1400698f1], 1
mov byte [0x1400698f8], r14b
mov byte [0x1400698f4], r14b
movss xmm1, dword [0x14003fc2c]
xorps xmm0, xmm0
call fcn.14000fde0
lea rdx, [0x1400698f4]
lea rcx, str.Corner_Box
call fcn.140026070
cmp byte [0x1400698f4], r14b
je 0x14003b049
mov byte [0x1400698f1], r14b
mov byte [0x1400698f8], r14b
mov byte [0x1400698f4], 1
movss xmm1, dword [0x14003fc2c]
xorps xmm0, xmm0
call fcn.14000fde0
lea rdx, [0x1400698f8]
lea rcx, str.3D_Box
call fcn.140026070
cmp byte [0x1400698f8], r14b
je 0x14003b08a
mov byte [0x1400698f1], r14b
mov byte [0x1400698f8], 1
mov byte [0x1400698f4], r14b
lea rdx, [0x140069903]
lea rcx, str.Distance_ESP__WORKS_
call fcn.140026070
lea rdx, [0x1400698f2]
lea rcx, str.Skeleton
call fcn.140026070
lea rdx, [0x1400698f7]
lea rcx, str.Snaplines
call fcn.140026070
lea rax, [0x14003fb6c]
mov qword [rsp + 0x20], rax
mov r9d, 0x9c4
mov r8d, 0x12
lea rdx, [0x1400675e8]
lea rcx, str.Distance
call fcn.14002ea14
call fcn.1400078f8
call fcn.14002a4f4
xor r8d, r8d
xor edx, edx
lea rcx, str.Exploits
call fcn.1400258c8
test al, al
je 0x14003b1e4
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rdi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069e98], eax
jle 0x14003b163
lea rcx, [0x140069e98]
call fcn.14003c880
cmp dword [0x140069e98], r13d
jne 0x14003b163
mov dword [0x140069e90], 0x44160000
mov dword [0x140069e94], 0x43c80000
lea rcx, [0x140069e98]
call fcn.14003c820
xor edx, edx
lea rcx, [0x140069e90]
call fcn.140010a50
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.ExtraChild
call fcn.1400057e8
lea rdx, [0x14006990b]
lea rcx, str.Player_TP__LShift_
call fcn.140026070
lea rdx, [0x14006990c]
lea rcx, str.No_Recoil
call fcn.140026070
mov dword [rsp + 0x20], r13d
mov r9d, 5
lea r8, str.Mega_City
lea rdx, [0x140069910]
lea rcx, str.Locations
call fcn.1400297ec
call fcn.1400078f8
call fcn.14002a4f4
xor r8d, r8d
xor edx, edx
lea rcx, str.Misc
call fcn.1400258c8
test al, al
je 0x14003b39a
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rdi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ea8], eax
jle 0x14003b25b
lea rcx, [0x140069ea8]
call fcn.14003c880
cmp dword [0x140069ea8], r13d
jne 0x14003b25b
movss xmm0, dword [0x14003fd48]
movss dword [0x140069ea0], xmm0
movss xmm1, dword [0x14003fd4c]
movss dword [0x140069ea4], xmm1
lea rcx, [0x140069ea8]
call fcn.14003c820
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.InfoChild
call fcn.1400057e8
call fcn.1400094ac
movss xmm1, dword [rax + 0x3ac]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
lea rcx, str.Framerate:__.1f
call fcn.1400305a4
call fcn.14002ef00
lea r13, [0x14003fb6c]
mov qword [rsp + 0x20], r13
mov edi, 0x23
mov r9d, edi
lea r8d, [rdi - 0x22]
lea rdx, [0x1400675dc]
lea rcx, str.Thickness__ESP
call fcn.14002ea14
mov qword [rsp + 0x20], r13
mov r9d, edi
lea r8d, [rdi - 0x22]
lea rdx, [0x1400675e0]
lea rcx, str.Thickness__FOV
call fcn.14002ea14
movss xmm0, dword [0x14003fd3c]
call fcn.14000ed54
call fcn.14002ef00
mov edi, 0x20
mov r8d, edi
lea rdx, [0x140069928]
lea rcx, str.Visible_Color
call fcn.140027b18
mov r8d, edi
lea rdx, [0x140069938]
lea rcx, str.Invisible_Color
call fcn.140027b18
call fcn.14000e8b8
call fcn.14002ef00
lea rcx, str.Drivers_Loaded:_Yes
lea rax, str.Drivers_Loaded:_No
cmp qword [0x140069840], r14
cmovbe rcx, rax
call fcn.1400305a4
call fcn.14002ef00
movss xmm0, dword [0x140044b04]
movss dword [rbp + 0x30], xmm0
movss xmm1, dword [0x140044b00]
movss dword [rbp + 0x34], xmm1
lea rdx, [rbp + 0x30]
lea rcx, str.Exit_Cheat
call fcn.140025964
test al, al
je 0x14003b390
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400078f8
call fcn.14002a4f4
call fcn.14002a444
movabs rdi, 0x7a5db90d33787107
call fcn.140007844
nop
xor rsi, rdi
mov qword [r12], rsi
call fcn.1400348c4
call fcn.140007e4c
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003b4dc
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r14d
movss xmm0, dword [0x14003fbcc]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r14d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
call fcn.14000ef4c
call fcn.14000927c
mov rcx, rax
call fcn.14001f22c
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003b486
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003b486
call fcn.14001f19c
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
lea rdx, [0x1400699f0]
call qword [rax + 0x80]
call fcn.14001f034
cmp byte [0x140069eac], r14b
jne 0x14003b4dc
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov byte [0x140069eac], 1
xor rbx, rdi
mov qword [r12], rbx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret