Function at 0x14003b04c
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
lea rsi, [rbp + 0x28]
movabs rbx, 0x7a5db90d33787107
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], rsi
mov rdi, qword [rsi]
xor rdi, rbx
mov qword [rbp - 0x30], rdi
xor r13d, r13d
mov qword [rsi], r13
lea ecx, [r13 + 0x2d]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003b0ad
cmp byte [0x14004c168], r13b
sete byte [0x14004c168]
call fcn.14001f6c0
call fcn.140020050
call fcn.14000dfe8
cmp byte [0x14004c168], r13b
je 0x14003bd70
lea rax, [rbp + 0x28]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rax
mov r14, qword [rax]
xor r14, rbx
mov qword [rbp - 0x18], r14
mov qword [rax], r13
xor ecx, ecx
call fcn.1400188a8
call fcn.14000999c
mov r12d, 0x3f800000
mov dword [rax], r12d
mov r8d, 0x41000000
mov dword [rax + 4], r8d
mov dword [rax + 8], r8d
mov edx, 0x40400000
mov dword [rax + 0xc], edx
mov dword [rax + 0x10], r12d
mov ecx, 0x42000000
mov dword [rax + 0x14], ecx
mov qword [rax + 0x18], rcx
mov r9d, 0x3f000000
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], edx
mov qword [rax + 0x28], r12
mov dword [rax + 0x30], r12d
mov ecx, 0x40800000
mov dword [rax + 0x34], ecx
mov dword [rax + 0x38], edx
mov qword [rax + 0x3c], rdx
mov dword [rax + 0x44], r8d
mov dword [rax + 0x48], ecx
mov dword [rax + 0x4c], ecx
mov dword [rax + 0x50], ecx
mov dword [rax + 0x5c], 0x41a80000
mov dword [rax + 0x60], 0x40c00000
mov dword [rax + 0x64], 0x41600000
mov dword [rax + 0x68], 0x41100000
mov dword [rax + 0x6c], 0x41a00000
mov dword [rax + 0x70], r12d
mov qword [rax + 0x74], rcx
mov dword [rax + 0x7c], r9d
mov dword [rax + 0x80], r9d
mov dword [rax + 0xa0], r13d
mov dword [rax + 0xa4], r12d
mov dword [rax + 0xa8], r12d
mov qword [rax + 0xac], r12
mov dword [rax + 0xb4], 0x3ecccccd
mov esi, 0x3ed0d0d1
mov dword [rax + 0xb8], esi
mov qword [rax + 0xbc], r12
mov qword [rax + 0xc4], r13
mov qword [rax + 0xcc], 0x3f7ae148
mov qword [rax + 0xd4], r13
mov dword [rax + 0xdc], r13d
mov dword [rax + 0xe0], 0x3e20a0a1
mov dword [rax + 0xe4], 0x3e74f4f5
mov r8d, 0x3e60e0e1
mov dword [rax + 0xe8], r8d
mov qword [rax + 0xec], 0x3f19999a
mov dword [rax + 0xf4], r12d
mov dword [rax + 0xf8], r12d
mov qword [rax + 0xfc], 0x3f266666
mov qword [rax + 0x104], r13
mov dword [rax + 0x10c], r13d
mov ecx, 0x3ee0e0e1
mov dword [rax + 0x110], ecx
mov r15d, 0x3f4ccccd
mov dword [rax + 0x114], r15d
mov dword [rax + 0x118], r15d
mov dword [rax + 0x11c], 0x3e3851ec
mov dword [rax + 0x120], ecx
mov dword [rax + 0x124], r15d
mov dword [rax + 0x128], r15d
mov edx, 0x3e8a3d71
mov dword [rax + 0x12c], edx
mov dword [rax + 0x130], ecx
mov dword [rax + 0x134], 0x3f4ececf
mov dword [rax + 0x138], 0x3f5bdbdc
mov dword [rax + 0x13c], 0x3f28f5c3
mov dword [rax + 0x140], 0x3e0c8c8d
mov r10d, 0x3e34b4b5
mov dword [rax + 0x144], r10d
mov dword [rax + 0x148], 0x3e54d4d5
mov qword [rax + 0x14c], 0x3f3ae148
mov dword [rax + 0x154], r12d
mov dword [rax + 0x158], r12d
mov qword [rax + 0x15c], rdx
mov qword [rax + 0x164], r13
mov qword [rax + 0x16c], 0x3f0a3d71
mov qword [rax + 0x174], r13
mov r11d, 0x3e4ccccd
mov dword [rax + 0x17c], r11d
mov dword [rax + 0x180], r8d
mov dword [rax + 0x184], 0x3e929293
mov dword [rax + 0x188], 0x3e989899
mov qword [rax + 0x18c], 0x3f35c28f
mov dword [rax + 0x194], r12d
mov dword [rax + 0x198], r12d
mov qword [rax + 0x19c], 0x3ee147ae
mov dword [rax + 0x1a4], r12d
mov dword [rax + 0x1a8], r12d
mov qword [rax + 0x1ac], 0x3f3d70a4
mov dword [rax + 0x1b4], r12d
mov dword [rax + 0x1b8], r12d
mov qword [rax + 0x1bc], r12
mov dword [rax + 0x1c4], r12d
mov dword [rax + 0x1c8], r12d
mov qword [rax + 0x1cc], 0x3f2e147b
mov dword [rax + 0x1d4], r12d
mov dword [rax + 0x1d8], r12d
mov qword [rax + 0x1dc], 0x3eb851ec
mov dword [rax + 0x1e4], r12d
mov dword [rax + 0x1e8], r12d
mov qword [rax + 0x1ec], 0x3f428f5c
mov ecx, 0x3f25a5a6
mov dword [rax + 0x1f4], ecx
mov dword [rax + 0x1f8], ecx
mov dword [rax + 0x1fc], 0x3eeb851f
mov dword [rax + 0x200], 0x3c008081
mov dword [rax + 0x204], r12d
mov dword [rax + 0x208], r12d
mov qword [rax + 0x20c], 0x3edc28f6
mov dword [rax + 0x214], r12d
mov dword [rax + 0x218], r12d
mov qword [rax + 0x21c], 0x3f1eb852
mov dword [rax + 0x224], r12d
mov dword [rax + 0x228], r12d
mov qword [rax + 0x22c], 0x3ea8f5c3
mov dword [rax + 0x234], r12d
mov dword [rax + 0x238], r12d
mov qword [rax + 0x23c], 0x3ed70a3d
mov dword [rax + 0x244], r12d
mov dword [rax + 0x248], r12d
mov qword [rax + 0x24c], 0x3f0a3d71
mov ecx, 0x3efefeff
mov dword [rax + 0x254], ecx
mov dword [rax + 0x258], ecx
mov qword [rax + 0x25c], 0x3ea8f5c3
mov dword [rax + 0x264], ecx
mov dword [rax + 0x268], ecx
mov qword [rax + 0x26c], 0x3ef0a3d7
mov ecx, 0x3f32b2b3
mov dword [rax + 0x274], ecx
mov dword [rax + 0x278], ecx
mov qword [rax + 0x27c], r12
mov dword [rax + 0x284], r12d
mov dword [rax + 0x288], r12d
mov qword [rax + 0x28c], 0x3f0a3d71
mov dword [rax + 0x294], r12d
mov dword [rax + 0x298], r12d
mov qword [rax + 0x29c], 0x3f3d70a4
mov dword [rax + 0x2a4], r12d
mov dword [rax + 0x2a8], r12d
mov dword [rax + 0x2ac], r12d
mov dword [rax + 0x2b0], r10d
mov dword [rax + 0x2b4], 0x3eb2b2b3
mov dword [rax + 0x2b8], 0x3f139394
mov dword [rax + 0x2bc], 0x3f5cac08
mov r8d, 0x3e848485
mov dword [rax + 0x2c0], r8d
mov edx, 0x3f169697
mov dword [rax + 0x2c4], edx
mov ecx, 0x3f79f9fa
mov dword [rax + 0x2c8], ecx
mov dword [rax + 0x2cc], r15d
mov dword [rax + 0x2d0], 0x3e48c8c9
mov dword [rax + 0x2d4], esi
mov dword [rax + 0x2d8], 0x3f2dadae
mov dword [rax + 0x2dc], r12d
mov dword [rax + 0x2e0], 0x3d888889
mov dword [rax + 0x2e4], 0x3dd0d0d1
mov dword [rax + 0x2e8], 0x3e149495
mov dword [rax + 0x2ec], 0x3f78ef35
mov dword [rax + 0x2f0], 0x3e088889
mov dword [rax + 0x2f4], r8d
mov dword [rax + 0x2f8], 0x3ed8d8d9
mov qword [rax + 0x2fc], r12
mov dword [rax + 0x304], r12d
mov dword [rax + 0x308], r12d
mov qword [rax + 0x30c], r12
mov dword [rax + 0x314], r12d
mov dword [rax + 0x318], r12d
mov qword [rax + 0x31c], r12
mov dword [rax + 0x324], r12d
mov dword [rax + 0x328], r12d
mov qword [rax + 0x32c], r12
mov dword [rax + 0x334], r12d
mov dword [rax + 0x338], r12d
mov qword [rax + 0x33c], r12
mov dword [rax + 0x344], r12d
mov dword [rax + 0x348], r12d
mov dword [rax + 0x34c], 0x3e6147ae
mov dword [rax + 0x350], r12d
mov qword [rax + 0x354], r12
mov dword [rax + 0x35c], 0x3f666666
mov dword [rax + 0x360], r8d
mov dword [rax + 0x364], edx
mov dword [rax + 0x368], ecx
mov dword [rax + 0x36c], r12d
mov dword [rax + 0x370], r12d
mov dword [rax + 0x374], r12d
mov dword [rax + 0x378], r12d
mov dword [rax + 0x37c], 0x3f333333
mov dword [rax + 0x380], r15d
mov dword [rax + 0x384], r15d
mov dword [rax + 0x388], r15d
mov dword [rax + 0x38c], r11d
mov dword [rax + 0x390], 0x3d20a0a1
mov dword [rax + 0x394], 0x3dc8c8c9
mov dword [rax + 0x398], 0x3db0b0b1
mov dword [rax + 0x39c], 0x3f028f5c
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43fa0000
mov edx, 2
lea rcx, [rbp + 0x30]
call fcn.14001073c
xor edx, edx
lea r8d, [rdx + 0x22]
lea rcx, str.SubZeroFN_Private
call fcn.1400032bc
test al, al
je 0x14003bd5c
xor edx, edx
lea rcx, str.TabBar
call fcn.140025988
or r15d, 0xffffffff
lea r12, [0x14003fbcc]
test al, al
je 0x14003b8b1
xor r8d, r8d
xor edx, edx
lea rcx, str.Aimbot
call fcn.140025c58
test al, al
je 0x14003b8b1
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43c80000
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.140010a30
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.AimbotChild
call fcn.140005834
lea rdx, [0x14004c16e]
lea rcx, str.Enable
call fcn.1400263ec
cmp byte [0x14004c16e], r13b
je 0x14003b8a7
mov r8d, dword [0x140069aec]
lea rdx, [0x140034e78]
mov ecx, dword [0x140069ac4]
call fcn.140038f88
movss xmm0, dword [0x14003fd98]
call fcn.14000eda4
mov dword [rsp + 0x20], r15d
lea r9d, [r15 + 4]
lea r8, str.Head
lea rdx, [0x140069e08]
lea rcx, str.Hitbox_Position
call fcn.140029bd0
call fcn.14002f15c
lea rdx, [0x14004c16d]
lea rcx, str.Draw_FOV
call fcn.1400263ec
cmp byte [0x14004c16d], r13b
je 0x14003b885
lea rdx, [0x140069890]
lea rcx, str.Circle_FOV
call fcn.1400263ec
cmp byte [0x140069890], r13b
je 0x14003b808
mov byte [0x140069892], r13b
mov byte [0x14006989b], r13b
lea rdx, [0x14006989b]
lea rcx, str.Filled_Circle_FOV
call fcn.1400263ec
cmp byte [0x14006989b], r13b
je 0x14003b832
mov byte [0x140069890], r13b
mov byte [0x140069892], r13b
lea rdx, [0x140069892]
lea rcx, str.Square_FOV
call fcn.1400263ec
cmp byte [0x140069892], r13b
je 0x14003b85c
mov byte [0x14006989b], r13b
mov byte [0x140069890], r13b
call fcn.14002f15c
mov qword [rsp + 0x20], r12
mov r9d, 0x12c
mov r8d, 0x32
lea rdx, [0x14004c190]
lea rcx, str.FOV_Size
call fcn.14002ec70
mov qword [rsp + 0x20], r12
mov r9d, 0xa
lea r8d, [r9 - 9]
lea rdx, [0x14004c184]
lea rcx, str.Smoothing
call fcn.14002ec70
call fcn.140007914
call fcn.14002a8d8
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.140025c58
mov esi, dword [0x140069f80]
test al, al
je 0x14003bad4
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ed8], eax
jle 0x14003b922
lea rcx, [0x140069ed8]
call fcn.14003d234
cmp dword [0x140069ed8], r15d
jne 0x14003b922
mov dword [0x140069ed0], 0x44160000
mov dword [0x140069ed4], 0x43c80000
lea rcx, [0x140069ed8]
call fcn.14003d1c8
xor edx, edx
lea rcx, [0x140069ed0]
call fcn.140010a30
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.VisualsChild
call fcn.140005834
lea rdx, [0x14004c16b]
lea rcx, str.Enable_ESP
call fcn.1400263ec
cmp byte [0x14004c16b], r13b
je 0x14003baca
lea rdx, [0x140069887]
lea rcx, str.Weapon_ESP__WORKS_
call fcn.1400263ec
lea rdx, [0x140069893]
lea rcx, str.Name_ESP__DOESNT_WORK_
call fcn.1400263ec
lea rdx, [0x140069895]
lea rcx, str.Ammo_ESP__WORKS_
call fcn.1400263ec
lea rdx, [0x140069896]
lea rcx, str.Enemy_Alert__5m_
call fcn.1400263ec
lea rdx, [0x140069885]
lea rcx, str.2D_Box
call fcn.1400263ec
cmp byte [0x140069885], r13b
je 0x14003b9eb
mov byte [0x140069885], 1
mov byte [0x14006988c], r13b
mov byte [0x140069888], r13b
movss xmm1, dword [0x14003fc8c]
xorps xmm0, xmm0
call fcn.14000fe24
lea rdx, [0x140069888]
lea rcx, str.Corner_Box
call fcn.1400263ec
cmp byte [0x140069888], r13b
je 0x14003ba2c
mov byte [0x140069885], r13b
mov byte [0x14006988c], r13b
mov byte [0x140069888], 1
movss xmm1, dword [0x14003fc8c]
xorps xmm0, xmm0
call fcn.14000fe24
lea rdx, [0x14006988c]
lea rcx, str.3D_Box
call fcn.1400263ec
cmp byte [0x14006988c], r13b
je 0x14003ba6d
mov byte [0x140069885], r13b
mov byte [0x14006988c], 1
mov byte [0x140069888], r13b
lea rdx, [0x140069897]
lea rcx, str.Distance_ESP__WORKS_
call fcn.1400263ec
lea rdx, [0x140069886]
lea rcx, str.Skeleton
call fcn.1400263ec
lea rdx, [0x14006988b]
lea rcx, str.Snaplines
call fcn.1400263ec
mov qword [rsp + 0x20], r12
mov r9d, 0x9c4
mov r8d, 0x12
lea rdx, [0x1400675ec]
lea rcx, str.Distance
call fcn.14002ec70
call fcn.140007914
call fcn.14002a8d8
xor r8d, r8d
xor edx, edx
lea rcx, str.Exploits
call fcn.140025c58
test al, al
je 0x14003bbc0
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ee8], eax
jle 0x14003bb3f
lea rcx, [0x140069ee8]
call fcn.14003d234
cmp dword [0x140069ee8], r15d
jne 0x14003bb3f
mov dword [0x140069ee0], 0x44160000
mov dword [0x140069ee4], 0x43c80000
lea rcx, [0x140069ee8]
call fcn.14003d1c8
xor edx, edx
lea rcx, [0x140069ee0]
call fcn.140010a30
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.ExtraChild
call fcn.140005834
lea rdx, [0x14006989f]
lea rcx, str.Player_TP__LShift_
call fcn.1400263ec
lea rdx, [0x1400698a0]
lea rcx, str.No_Recoil
call fcn.1400263ec
mov dword [rsp + 0x20], r15d
mov r9d, 5
lea r8, str.Mega_City
lea rdx, [0x1400698a4]
lea rcx, str.Locations
call fcn.140029bd0
call fcn.140007914
call fcn.14002a8d8
xor r8d, r8d
xor edx, edx
lea rcx, str.Misc
call fcn.140025c58
test al, al
je 0x14003bd57
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069ef8], eax
jle 0x14003bc2b
lea rcx, [0x140069ef8]
call fcn.14003d234
cmp dword [0x140069ef8], r15d
jne 0x14003bc2b
mov dword [0x140069ef0], 0x44228000
mov dword [0x140069ef4], 0x442a0000
lea rcx, [0x140069ef8]
call fcn.14003d1c8
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.InfoChild
call fcn.140005834
call fcn.1400094c0
movss xmm1, dword [rax + 0x3ac]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
lea rcx, str.Framerate:__.1f
call fcn.1400308a4
call fcn.14002f15c
mov qword [rsp + 0x20], r12
mov esi, 0x23
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004c188]
lea rcx, str.Thickness__ESP
call fcn.14002ec70
mov qword [rsp + 0x20], r12
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004c18c]
lea rcx, str.Thickness__FOV
call fcn.14002ec70
movss xmm0, dword [0x14003fd9c]
call fcn.14000eda4
call fcn.14002f15c
mov esi, 0x20
mov r8d, esi
lea rdx, [0x1400698b8]
lea rcx, str.Visible_Color
call fcn.140027f28
mov r8d, esi
lea rdx, [0x1400698c8]
lea rcx, str.Invisible_Color
call fcn.140027f28
call fcn.14000e918
call fcn.14002f15c
lea rcx, str.Drivers_Loaded:_Yes
lea rax, str.Drivers_Loaded:_No
cmp qword [0x140069a20], r13
cmovbe rcx, rax
call fcn.1400308a4
call fcn.14002f15c
mov dword [rbp + 0x30], 0x42960000
mov dword [rbp + 0x34], 0x41c80000
lea rdx, [rbp + 0x30]
lea rcx, str.Exit_Cheat
call fcn.140025cf4
test al, al
je 0x14003bd4d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140007914
call fcn.14002a8d8
call fcn.14002a828
call fcn.140007860
nop
xor r14, rbx
lea rax, [rbp + 0x28]
mov qword [rax], r14
lea rsi, [rbp + 0x28]
call fcn.1400352e0
call fcn.140007e60
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003be96
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss xmm0, dword [0x14003fc2c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r13d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
call fcn.14000ef9c
call fcn.140009294
mov rcx, rax
call fcn.14001f6d8
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003be40
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003be40
call fcn.14001f648
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
lea rdx, [0x140069980]
call qword [rax + 0x80]
call fcn.14001f4e0
cmp byte [0x140069efc], r13b
jne 0x14003be96
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069eb0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov byte [0x140069efc], 1
xor rbx, rdi
mov qword [rsi], rbx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret