Function at 0x14003b0a0
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
lea rsi, [rbp + 0x28]
movabs rbx, 0x7a5db90d33787107
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], rsi
mov rdi, qword [rsi]
xor rdi, rbx
mov qword [rbp - 0x30], rdi
xor r13d, r13d
mov qword [rsi], r13
lea ecx, [r13 + 0x2d]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003b101
cmp byte [0x14004c168], r13b
sete byte [0x14004c168]
call fcn.14001f750
call fcn.1400200e0
call fcn.14000e05c
cmp byte [0x14004c168], r13b
je 0x14003bdc4
lea rax, [rbp + 0x28]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rax
mov r14, qword [rax]
xor r14, rbx
mov qword [rbp - 0x18], r14
mov qword [rax], r13
xor ecx, ecx
call fcn.14001893c
call fcn.140009a14
mov r12d, 0x3f800000
mov dword [rax], r12d
mov r8d, 0x41000000
mov dword [rax + 4], r8d
mov dword [rax + 8], r8d
mov edx, 0x40400000
mov dword [rax + 0xc], edx
mov dword [rax + 0x10], r12d
mov ecx, 0x42000000
mov dword [rax + 0x14], ecx
mov qword [rax + 0x18], rcx
mov r9d, 0x3f000000
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], edx
mov qword [rax + 0x28], r12
mov dword [rax + 0x30], r12d
mov ecx, 0x40800000
mov dword [rax + 0x34], ecx
mov dword [rax + 0x38], edx
mov qword [rax + 0x3c], rdx
mov dword [rax + 0x44], r8d
mov dword [rax + 0x48], ecx
mov dword [rax + 0x4c], ecx
mov dword [rax + 0x50], ecx
mov dword [rax + 0x5c], 0x41a80000
mov dword [rax + 0x60], 0x40c00000
mov dword [rax + 0x64], 0x41600000
mov dword [rax + 0x68], 0x41100000
mov dword [rax + 0x6c], 0x41a00000
mov dword [rax + 0x70], r12d
mov qword [rax + 0x74], rcx
mov dword [rax + 0x7c], r9d
mov dword [rax + 0x80], r9d
mov dword [rax + 0xa0], r13d
mov dword [rax + 0xa4], r12d
mov dword [rax + 0xa8], r12d
mov qword [rax + 0xac], r12
mov dword [rax + 0xb4], 0x3ecccccd
mov esi, 0x3ed0d0d1
mov dword [rax + 0xb8], esi
mov qword [rax + 0xbc], r12
mov qword [rax + 0xc4], r13
mov qword [rax + 0xcc], 0x3f7ae148
mov qword [rax + 0xd4], r13
mov dword [rax + 0xdc], r13d
mov dword [rax + 0xe0], 0x3e20a0a1
mov dword [rax + 0xe4], 0x3e74f4f5
mov r8d, 0x3e60e0e1
mov dword [rax + 0xe8], r8d
mov qword [rax + 0xec], 0x3f19999a
mov dword [rax + 0xf4], r12d
mov dword [rax + 0xf8], r12d
mov qword [rax + 0xfc], 0x3f266666
mov qword [rax + 0x104], r13
mov dword [rax + 0x10c], r13d
mov ecx, 0x3ee0e0e1
mov dword [rax + 0x110], ecx
mov r15d, 0x3f4ccccd
mov dword [rax + 0x114], r15d
mov dword [rax + 0x118], r15d
mov dword [rax + 0x11c], 0x3e3851ec
mov dword [rax + 0x120], ecx
mov dword [rax + 0x124], r15d
mov dword [rax + 0x128], r15d
mov edx, 0x3e8a3d71
mov dword [rax + 0x12c], edx
mov dword [rax + 0x130], ecx
mov dword [rax + 0x134], 0x3f4ececf
mov dword [rax + 0x138], 0x3f5bdbdc
mov dword [rax + 0x13c], 0x3f28f5c3
mov dword [rax + 0x140], 0x3e0c8c8d
mov r10d, 0x3e34b4b5
mov dword [rax + 0x144], r10d
mov dword [rax + 0x148], 0x3e54d4d5
mov qword [rax + 0x14c], 0x3f3ae148
mov dword [rax + 0x154], r12d
mov dword [rax + 0x158], r12d
mov qword [rax + 0x15c], rdx
mov qword [rax + 0x164], r13
mov qword [rax + 0x16c], 0x3f0a3d71
mov qword [rax + 0x174], r13
mov r11d, 0x3e4ccccd
mov dword [rax + 0x17c], r11d
mov dword [rax + 0x180], r8d
mov dword [rax + 0x184], 0x3e929293
mov dword [rax + 0x188], 0x3e989899
mov qword [rax + 0x18c], 0x3f35c28f
mov dword [rax + 0x194], r12d
mov dword [rax + 0x198], r12d
mov qword [rax + 0x19c], 0x3ee147ae
mov dword [rax + 0x1a4], r12d
mov dword [rax + 0x1a8], r12d
mov qword [rax + 0x1ac], 0x3f3d70a4
mov dword [rax + 0x1b4], r12d
mov dword [rax + 0x1b8], r12d
mov qword [rax + 0x1bc], r12
mov dword [rax + 0x1c4], r12d
mov dword [rax + 0x1c8], r12d
mov qword [rax + 0x1cc], 0x3f2e147b
mov dword [rax + 0x1d4], r12d
mov dword [rax + 0x1d8], r12d
mov qword [rax + 0x1dc], 0x3eb851ec
mov dword [rax + 0x1e4], r12d
mov dword [rax + 0x1e8], r12d
mov qword [rax + 0x1ec], 0x3f428f5c
mov ecx, 0x3f25a5a6
mov dword [rax + 0x1f4], ecx
mov dword [rax + 0x1f8], ecx
mov dword [rax + 0x1fc], 0x3eeb851f
mov dword [rax + 0x200], 0x3c008081
mov dword [rax + 0x204], r12d
mov dword [rax + 0x208], r12d
mov qword [rax + 0x20c], 0x3edc28f6
mov dword [rax + 0x214], r12d
mov dword [rax + 0x218], r12d
mov qword [rax + 0x21c], 0x3f1eb852
mov dword [rax + 0x224], r12d
mov dword [rax + 0x228], r12d
mov qword [rax + 0x22c], 0x3ea8f5c3
mov dword [rax + 0x234], r12d
mov dword [rax + 0x238], r12d
mov qword [rax + 0x23c], 0x3ed70a3d
mov dword [rax + 0x244], r12d
mov dword [rax + 0x248], r12d
mov qword [rax + 0x24c], 0x3f0a3d71
mov ecx, 0x3efefeff
mov dword [rax + 0x254], ecx
mov dword [rax + 0x258], ecx
mov qword [rax + 0x25c], 0x3ea8f5c3
mov dword [rax + 0x264], ecx
mov dword [rax + 0x268], ecx
mov qword [rax + 0x26c], 0x3ef0a3d7
mov ecx, 0x3f32b2b3
mov dword [rax + 0x274], ecx
mov dword [rax + 0x278], ecx
mov qword [rax + 0x27c], r12
mov dword [rax + 0x284], r12d
mov dword [rax + 0x288], r12d
mov qword [rax + 0x28c], 0x3f0a3d71
mov dword [rax + 0x294], r12d
mov dword [rax + 0x298], r12d
mov qword [rax + 0x29c], 0x3f3d70a4
mov dword [rax + 0x2a4], r12d
mov dword [rax + 0x2a8], r12d
mov dword [rax + 0x2ac], r12d
mov dword [rax + 0x2b0], r10d
mov dword [rax + 0x2b4], 0x3eb2b2b3
mov dword [rax + 0x2b8], 0x3f139394
mov dword [rax + 0x2bc], 0x3f5cac08
mov r8d, 0x3e848485
mov dword [rax + 0x2c0], r8d
mov edx, 0x3f169697
mov dword [rax + 0x2c4], edx
mov ecx, 0x3f79f9fa
mov dword [rax + 0x2c8], ecx
mov dword [rax + 0x2cc], r15d
mov dword [rax + 0x2d0], 0x3e48c8c9
mov dword [rax + 0x2d4], esi
mov dword [rax + 0x2d8], 0x3f2dadae
mov dword [rax + 0x2dc], r12d
mov dword [rax + 0x2e0], 0x3d888889
mov dword [rax + 0x2e4], 0x3dd0d0d1
mov dword [rax + 0x2e8], 0x3e149495
mov dword [rax + 0x2ec], 0x3f78ef35
mov dword [rax + 0x2f0], 0x3e088889
mov dword [rax + 0x2f4], r8d
mov dword [rax + 0x2f8], 0x3ed8d8d9
mov qword [rax + 0x2fc], r12
mov dword [rax + 0x304], r12d
mov dword [rax + 0x308], r12d
mov qword [rax + 0x30c], r12
mov dword [rax + 0x314], r12d
mov dword [rax + 0x318], r12d
mov qword [rax + 0x31c], r12
mov dword [rax + 0x324], r12d
mov dword [rax + 0x328], r12d
mov qword [rax + 0x32c], r12
mov dword [rax + 0x334], r12d
mov dword [rax + 0x338], r12d
mov qword [rax + 0x33c], r12
mov dword [rax + 0x344], r12d
mov dword [rax + 0x348], r12d
mov dword [rax + 0x34c], 0x3e6147ae
mov dword [rax + 0x350], r12d
mov qword [rax + 0x354], r12
mov dword [rax + 0x35c], 0x3f666666
mov dword [rax + 0x360], r8d
mov dword [rax + 0x364], edx
mov dword [rax + 0x368], ecx
mov dword [rax + 0x36c], r12d
mov dword [rax + 0x370], r12d
mov dword [rax + 0x374], r12d
mov dword [rax + 0x378], r12d
mov dword [rax + 0x37c], 0x3f333333
mov dword [rax + 0x380], r15d
mov dword [rax + 0x384], r15d
mov dword [rax + 0x388], r15d
mov dword [rax + 0x38c], r11d
mov dword [rax + 0x390], 0x3d20a0a1
mov dword [rax + 0x394], 0x3dc8c8c9
mov dword [rax + 0x398], 0x3db0b0b1
mov dword [rax + 0x39c], 0x3f028f5c
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43fa0000
mov edx, 2
lea rcx, [rbp + 0x30]
call fcn.1400107b0
xor edx, edx
lea r8d, [rdx + 0x22]
lea rcx, str.SubZeroFN_Private
call fcn.14000333c
test al, al
je 0x14003bdb0
xor edx, edx
lea rcx, str.TabBar
call fcn.140025a1c
or r15d, 0xffffffff
lea r12, [0x14003fbcc]
test al, al
je 0x14003b905
xor r8d, r8d
xor edx, edx
lea rcx, str.Aimbot
call fcn.140025cec
test al, al
je 0x14003b905
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43c80000
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.140010aa4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.AimbotChild
call fcn.1400058b4
lea rdx, [0x14004c16e]
lea rcx, str.Enable
call fcn.140026480
cmp byte [0x14004c16e], r13b
je 0x14003b8fb
mov r8d, dword [0x140069aac]
lea rdx, [0x140034e70]
mov ecx, dword [0x140069a84]
call fcn.140038fd8
movss xmm0, dword [0x14003fd98]
call fcn.14000ee18
mov dword [rsp + 0x20], r15d
lea r9d, [r15 + 4]
lea r8, str.Head
lea rdx, [0x140069de8]
lea rcx, str.Hitbox_Position
call fcn.140029c88
call fcn.14002f214
lea rdx, [0x14004c16d]
lea rcx, str.Draw_FOV
call fcn.140026480
cmp byte [0x14004c16d], r13b
je 0x14003b8d9
lea rdx, [0x140069850]
lea rcx, str.Circle_FOV
call fcn.140026480
cmp byte [0x140069850], r13b
je 0x14003b85c
mov byte [0x140069852], r13b
mov byte [0x14006985b], r13b
lea rdx, [0x14006985b]
lea rcx, str.Filled_Circle_FOV
call fcn.140026480
cmp byte [0x14006985b], r13b
je 0x14003b886
mov byte [0x140069850], r13b
mov byte [0x140069852], r13b
lea rdx, [0x140069852]
lea rcx, str.Square_FOV
call fcn.140026480
cmp byte [0x140069852], r13b
je 0x14003b8b0
mov byte [0x14006985b], r13b
mov byte [0x140069850], r13b
call fcn.14002f214
mov qword [rsp + 0x20], r12
mov r9d, 0x12c
mov r8d, 0x32
lea rdx, [0x14004c190]
lea rcx, str.FOV_Size
call fcn.14002ed28
mov qword [rsp + 0x20], r12
mov r9d, 0xa
lea r8d, [r9 - 9]
lea rdx, [0x14004c184]
lea rcx, str.Smoothing
call fcn.14002ed28
call fcn.140007994
call fcn.14002a990
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.140025cec
mov esi, dword [0x140069f60]
test al, al
je 0x14003bb28
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069eb8], eax
jle 0x14003b976
lea rcx, [0x140069eb8]
call fcn.14003d288
cmp dword [0x140069eb8], r15d
jne 0x14003b976
mov dword [0x140069eb0], 0x44160000
mov dword [0x140069eb4], 0x43c80000
lea rcx, [0x140069eb8]
call fcn.14003d21c
xor edx, edx
lea rcx, [0x140069eb0]
call fcn.140010aa4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.VisualsChild
call fcn.1400058b4
lea rdx, [0x14004c16b]
lea rcx, str.Enable_ESP
call fcn.140026480
cmp byte [0x14004c16b], r13b
je 0x14003bb1e
lea rdx, [0x140069847]
lea rcx, str.Weapon_ESP__WORKS_
call fcn.140026480
lea rdx, [0x140069853]
lea rcx, str.Name_ESP__DOESNT_WORK_
call fcn.140026480
lea rdx, [0x140069855]
lea rcx, str.Ammo_ESP__WORKS_
call fcn.140026480
lea rdx, [0x140069856]
lea rcx, str.Enemy_Alert__5m_
call fcn.140026480
lea rdx, [0x140069845]
lea rcx, str.2D_Box
call fcn.140026480
cmp byte [0x140069845], r13b
je 0x14003ba3f
mov byte [0x140069845], 1
mov byte [0x14006984c], r13b
mov byte [0x140069848], r13b
movss xmm1, dword [0x14003fc8c]
xorps xmm0, xmm0
call fcn.14000fe98
lea rdx, [0x140069848]
lea rcx, str.Corner_Box
call fcn.140026480
cmp byte [0x140069848], r13b
je 0x14003ba80
mov byte [0x140069845], r13b
mov byte [0x14006984c], r13b
mov byte [0x140069848], 1
movss xmm1, dword [0x14003fc8c]
xorps xmm0, xmm0
call fcn.14000fe98
lea rdx, [0x14006984c]
lea rcx, str.3D_Box
call fcn.140026480
cmp byte [0x14006984c], r13b
je 0x14003bac1
mov byte [0x140069845], r13b
mov byte [0x14006984c], 1
mov byte [0x140069848], r13b
lea rdx, [0x140069857]
lea rcx, str.Distance_ESP__WORKS_
call fcn.140026480
lea rdx, [0x140069846]
lea rcx, str.Skeleton
call fcn.140026480
lea rdx, [0x14006984b]
lea rcx, str.Snaplines
call fcn.140026480
mov qword [rsp + 0x20], r12
mov r9d, 0x9c4
mov r8d, 0x12
lea rdx, [0x1400675ec]
lea rcx, str.Distance
call fcn.14002ed28
call fcn.140007994
call fcn.14002a990
xor r8d, r8d
xor edx, edx
lea rcx, str.Exploits
call fcn.140025cec
test al, al
je 0x14003bc14
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ec8], eax
jle 0x14003bb93
lea rcx, [0x140069ec8]
call fcn.14003d288
cmp dword [0x140069ec8], r15d
jne 0x14003bb93
mov dword [0x140069ec0], 0x44160000
mov dword [0x140069ec4], 0x43c80000
lea rcx, [0x140069ec8]
call fcn.14003d21c
xor edx, edx
lea rcx, [0x140069ec0]
call fcn.140010aa4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.ExtraChild
call fcn.1400058b4
lea rdx, [0x14006985f]
lea rcx, str.Player_TP__LShift_
call fcn.140026480
lea rdx, [0x140069860]
lea rcx, str.No_Recoil
call fcn.140026480
mov dword [rsp + 0x20], r15d
mov r9d, 5
lea r8, str.Mega_City
lea rdx, [0x140069864]
lea rcx, str.Locations
call fcn.140029c88
call fcn.140007994
call fcn.14002a990
xor r8d, r8d
xor edx, edx
lea rcx, str.Misc
call fcn.140025cec
test al, al
je 0x14003bdab
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ed8], eax
jle 0x14003bc7f
lea rcx, [0x140069ed8]
call fcn.14003d288
cmp dword [0x140069ed8], r15d
jne 0x14003bc7f
mov dword [0x140069ed0], 0x44228000
mov dword [0x140069ed4], 0x442a0000
lea rcx, [0x140069ed8]
call fcn.14003d21c
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.InfoChild
call fcn.1400058b4
call fcn.140009538
movss xmm1, dword [rax + 0x3ac]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
lea rcx, str.Framerate:__.1f
call fcn.140030954
call fcn.14002f214
mov qword [rsp + 0x20], r12
mov esi, 0x23
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004c188]
lea rcx, str.Thickness__ESP
call fcn.14002ed28
mov qword [rsp + 0x20], r12
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004c18c]
lea rcx, str.Thickness__FOV
call fcn.14002ed28
movss xmm0, dword [0x14003fd9c]
call fcn.14000ee18
call fcn.14002f214
mov esi, 0x20
mov r8d, esi
lea rdx, [0x140069878]
lea rcx, str.Visible_Color
call fcn.140027fe0
mov r8d, esi
lea rdx, [0x140069888]
lea rcx, str.Invisible_Color
call fcn.140027fe0
call fcn.14000e98c
call fcn.14002f214
lea rcx, str.Drivers_Loaded:_Yes
lea rax, str.Drivers_Loaded:_No
cmp qword [0x1400699e0], r13
cmovbe rcx, rax
call fcn.140030954
call fcn.14002f214
mov dword [rbp + 0x30], 0x42960000
mov dword [rbp + 0x34], 0x41c80000
lea rdx, [rbp + 0x30]
lea rcx, str.Exit_Cheat
call fcn.140025d88
test al, al
je 0x14003bda1
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140007994
call fcn.14002a990
call fcn.14002a8e0
call fcn.1400078e0
nop
xor r14, rbx
lea rax, [rbp + 0x28]
mov qword [rax], r14
lea rsi, [rbp + 0x28]
call fcn.1400352d8
call fcn.140007ee0
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003beea
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss xmm0, dword [0x14003fc2c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r13d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
call fcn.14000f010
call fcn.14000930c
mov rcx, rax
call fcn.14001f768
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003be94
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003be94
call fcn.14001f6d8
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
lea rdx, [0x140069940]
call qword [rax + 0x80]
call fcn.14001f570
cmp byte [0x140069edc], r13b
jne 0x14003beea
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069e90]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov byte [0x140069edc], 1
xor rbx, rdi
mov qword [rsi], rbx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret