Function at 0x14003b154
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
lea rsi, [rbp + 0x28]
movabs rbx, 0x7a5db90d33787107
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], rsi
mov rdi, qword [rsi]
xor rdi, rbx
mov qword [rbp - 0x30], rdi
xor r13d, r13d
mov qword [rsi], r13
lea ecx, [r13 + 0x2d]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003b1b5
cmp byte [0x14004c168], r13b
sete byte [0x14004c168]
call fcn.14001f6dc
call fcn.140020070
call fcn.14000e0c0
cmp byte [0x14004c168], r13b
je 0x14003be58
lea rax, [rbp + 0x28]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rax
mov r14, qword [rax]
xor r14, rbx
mov qword [rbp - 0x18], r14
mov qword [rax], r13
xor ecx, ecx
call fcn.140018870
call fcn.140009a5c
mov r12d, 0x3f800000
mov dword [rax], r12d
mov r8d, 0x41000000
mov dword [rax + 4], r8d
mov dword [rax + 8], r8d
mov edx, 0x40400000
mov dword [rax + 0xc], edx
mov dword [rax + 0x10], r12d
mov ecx, 0x42000000
mov dword [rax + 0x14], ecx
mov qword [rax + 0x18], rcx
mov r9d, 0x3f000000
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], edx
mov qword [rax + 0x28], r12
mov dword [rax + 0x30], r12d
mov ecx, 0x40800000
mov dword [rax + 0x34], ecx
mov dword [rax + 0x38], edx
mov qword [rax + 0x3c], rdx
mov dword [rax + 0x44], r8d
mov dword [rax + 0x48], ecx
mov dword [rax + 0x4c], ecx
mov dword [rax + 0x50], ecx
mov dword [rax + 0x5c], 0x41a80000
mov dword [rax + 0x60], 0x40c00000
mov dword [rax + 0x64], 0x41600000
mov dword [rax + 0x68], 0x41100000
mov dword [rax + 0x6c], 0x41a00000
mov dword [rax + 0x70], r12d
mov qword [rax + 0x74], rcx
mov dword [rax + 0x7c], r9d
mov dword [rax + 0x80], r9d
mov dword [rax + 0xa0], r13d
mov dword [rax + 0xa4], r12d
mov dword [rax + 0xa8], r12d
mov qword [rax + 0xac], r12
mov dword [rax + 0xb4], 0x3ecccccd
mov esi, 0x3ed0d0d1
mov dword [rax + 0xb8], esi
mov qword [rax + 0xbc], r12
mov qword [rax + 0xc4], r13
mov qword [rax + 0xcc], 0x3f7ae148
mov qword [rax + 0xd4], r13
mov dword [rax + 0xdc], r13d
mov dword [rax + 0xe0], 0x3e20a0a1
mov dword [rax + 0xe4], 0x3e74f4f5
mov r8d, 0x3e60e0e1
mov dword [rax + 0xe8], r8d
mov qword [rax + 0xec], 0x3f19999a
mov dword [rax + 0xf4], r12d
mov dword [rax + 0xf8], r12d
mov qword [rax + 0xfc], 0x3f266666
mov qword [rax + 0x104], r13
mov dword [rax + 0x10c], r13d
mov ecx, 0x3ee0e0e1
mov dword [rax + 0x110], ecx
mov r15d, 0x3f4ccccd
mov dword [rax + 0x114], r15d
mov dword [rax + 0x118], r15d
mov dword [rax + 0x11c], 0x3e3851ec
mov dword [rax + 0x120], ecx
mov dword [rax + 0x124], r15d
mov dword [rax + 0x128], r15d
mov edx, 0x3e8a3d71
mov dword [rax + 0x12c], edx
mov dword [rax + 0x130], ecx
mov dword [rax + 0x134], 0x3f4ececf
mov dword [rax + 0x138], 0x3f5bdbdc
mov dword [rax + 0x13c], 0x3f28f5c3
mov dword [rax + 0x140], 0x3e0c8c8d
mov r10d, 0x3e34b4b5
mov dword [rax + 0x144], r10d
mov dword [rax + 0x148], 0x3e54d4d5
mov qword [rax + 0x14c], 0x3f3ae148
mov dword [rax + 0x154], r12d
mov dword [rax + 0x158], r12d
mov qword [rax + 0x15c], rdx
mov qword [rax + 0x164], r13
mov qword [rax + 0x16c], 0x3f0a3d71
mov qword [rax + 0x174], r13
mov r11d, 0x3e4ccccd
mov dword [rax + 0x17c], r11d
mov dword [rax + 0x180], r8d
mov dword [rax + 0x184], 0x3e929293
mov dword [rax + 0x188], 0x3e989899
mov qword [rax + 0x18c], 0x3f35c28f
mov dword [rax + 0x194], r12d
mov dword [rax + 0x198], r12d
mov qword [rax + 0x19c], 0x3ee147ae
mov dword [rax + 0x1a4], r12d
mov dword [rax + 0x1a8], r12d
mov qword [rax + 0x1ac], 0x3f3d70a4
mov dword [rax + 0x1b4], r12d
mov dword [rax + 0x1b8], r12d
mov qword [rax + 0x1bc], r12
mov dword [rax + 0x1c4], r12d
mov dword [rax + 0x1c8], r12d
mov qword [rax + 0x1cc], 0x3f2e147b
mov dword [rax + 0x1d4], r12d
mov dword [rax + 0x1d8], r12d
mov qword [rax + 0x1dc], 0x3eb851ec
mov dword [rax + 0x1e4], r12d
mov dword [rax + 0x1e8], r12d
mov qword [rax + 0x1ec], 0x3f428f5c
mov ecx, 0x3f25a5a6
mov dword [rax + 0x1f4], ecx
mov dword [rax + 0x1f8], ecx
mov dword [rax + 0x1fc], 0x3eeb851f
mov dword [rax + 0x200], 0x3c008081
mov dword [rax + 0x204], r12d
mov dword [rax + 0x208], r12d
mov qword [rax + 0x20c], 0x3edc28f6
mov dword [rax + 0x214], r12d
mov dword [rax + 0x218], r12d
mov qword [rax + 0x21c], 0x3f1eb852
mov dword [rax + 0x224], r12d
mov dword [rax + 0x228], r12d
mov qword [rax + 0x22c], 0x3ea8f5c3
mov dword [rax + 0x234], r12d
mov dword [rax + 0x238], r12d
mov qword [rax + 0x23c], 0x3ed70a3d
mov dword [rax + 0x244], r12d
mov dword [rax + 0x248], r12d
mov qword [rax + 0x24c], 0x3f0a3d71
mov ecx, 0x3efefeff
mov dword [rax + 0x254], ecx
mov dword [rax + 0x258], ecx
mov qword [rax + 0x25c], 0x3ea8f5c3
mov dword [rax + 0x264], ecx
mov dword [rax + 0x268], ecx
mov qword [rax + 0x26c], 0x3ef0a3d7
mov ecx, 0x3f32b2b3
mov dword [rax + 0x274], ecx
mov dword [rax + 0x278], ecx
mov qword [rax + 0x27c], r12
mov dword [rax + 0x284], r12d
mov dword [rax + 0x288], r12d
mov qword [rax + 0x28c], 0x3f0a3d71
mov dword [rax + 0x294], r12d
mov dword [rax + 0x298], r12d
mov qword [rax + 0x29c], 0x3f3d70a4
mov dword [rax + 0x2a4], r12d
mov dword [rax + 0x2a8], r12d
mov dword [rax + 0x2ac], r12d
mov dword [rax + 0x2b0], r10d
mov dword [rax + 0x2b4], 0x3eb2b2b3
mov dword [rax + 0x2b8], 0x3f139394
mov dword [rax + 0x2bc], 0x3f5cac08
mov r8d, 0x3e848485
mov dword [rax + 0x2c0], r8d
mov edx, 0x3f169697
mov dword [rax + 0x2c4], edx
mov ecx, 0x3f79f9fa
mov dword [rax + 0x2c8], ecx
mov dword [rax + 0x2cc], r15d
mov dword [rax + 0x2d0], 0x3e48c8c9
mov dword [rax + 0x2d4], esi
mov dword [rax + 0x2d8], 0x3f2dadae
mov dword [rax + 0x2dc], r12d
mov dword [rax + 0x2e0], 0x3d888889
mov dword [rax + 0x2e4], 0x3dd0d0d1
mov dword [rax + 0x2e8], 0x3e149495
mov dword [rax + 0x2ec], 0x3f78ef35
mov dword [rax + 0x2f0], 0x3e088889
mov dword [rax + 0x2f4], r8d
mov dword [rax + 0x2f8], 0x3ed8d8d9
mov qword [rax + 0x2fc], r12
mov dword [rax + 0x304], r12d
mov dword [rax + 0x308], r12d
mov qword [rax + 0x30c], r12
mov dword [rax + 0x314], r12d
mov dword [rax + 0x318], r12d
mov qword [rax + 0x31c], r12
mov dword [rax + 0x324], r12d
mov dword [rax + 0x328], r12d
mov qword [rax + 0x32c], r12
mov dword [rax + 0x334], r12d
mov dword [rax + 0x338], r12d
mov qword [rax + 0x33c], r12
mov dword [rax + 0x344], r12d
mov dword [rax + 0x348], r12d
mov dword [rax + 0x34c], 0x3e6147ae
mov dword [rax + 0x350], r12d
mov qword [rax + 0x354], r12
mov dword [rax + 0x35c], 0x3f666666
mov dword [rax + 0x360], r8d
mov dword [rax + 0x364], edx
mov dword [rax + 0x368], ecx
mov dword [rax + 0x36c], r12d
mov dword [rax + 0x370], r12d
mov dword [rax + 0x374], r12d
mov dword [rax + 0x378], r12d
mov dword [rax + 0x37c], 0x3f333333
mov dword [rax + 0x380], r15d
mov dword [rax + 0x384], r15d
mov dword [rax + 0x388], r15d
mov dword [rax + 0x38c], r11d
mov dword [rax + 0x390], 0x3d20a0a1
mov dword [rax + 0x394], 0x3dc8c8c9
mov dword [rax + 0x398], 0x3db0b0b1
mov dword [rax + 0x39c], 0x3f028f5c
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43fa0000
mov edx, 2
lea rcx, [rbp + 0x30]
call fcn.1400107f0
xor edx, edx
lea r8d, [rdx + 0x22]
lea rcx, str.SubZeroFN_Public__.gg_subzerofn
call fcn.140003310
test al, al
je 0x14003be44
xor edx, edx
lea rcx, str.TabBar
call fcn.140025aa0
or r12d, 0xffffffff
lea r15, [0x14003fbcc]
test al, al
je 0x14003b9c3
xor r8d, r8d
xor edx, edx
lea rcx, str.Aimbot
call fcn.140025d70
test al, al
je 0x14003b9c3
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43c80000
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.140010ae4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.AimbotChild
call fcn.1400058f8
lea rdx, [0x14004c16e]
lea rcx, str.Enable
call fcn.140026504
cmp byte [0x14004c16e], r13b
je 0x14003b9b9
mov r8d, dword [0x140069a5c]
lea rdx, [0x140034ee4]
mov ecx, dword [0x140069a34]
call fcn.140039084
movss xmm0, dword [0x140044950]
call fcn.14000ee80
mov dword [rsp + 0x20], r12d
lea r9d, [r12 + 4]
lea r8, str.Head
lea rdx, [0x140069db8]
lea rcx, str.Hitbox_Position
call fcn.140029d3c
lea rdx, [0x1400697fe]
lea rcx, str.Crosshair
call fcn.140026504
lea rdx, [0x14004c16d]
lea rcx, str.Draw_FOV
call fcn.140026504
cmp byte [0x14004c16d], r13b
je 0x14003b997
lea rdx, [0x140069800]
lea rcx, str.Circle_FOV
call fcn.140026504
cmp byte [0x140069800], r13b
je 0x14003b91f
mov byte [0x140069802], r13b
mov byte [0x14006980b], r13b
lea rdx, [0x14006980b]
lea rcx, str.Filled_Circle_FOV
call fcn.140026504
cmp byte [0x14006980b], r13b
je 0x14003b949
mov byte [0x140069800], r13b
mov byte [0x140069802], r13b
lea rdx, [0x140069802]
lea rcx, str.Square_FOV
call fcn.140026504
cmp byte [0x140069802], r13b
je 0x14003b973
mov byte [0x14006980b], r13b
mov byte [0x140069800], r13b
mov qword [rsp + 0x20], r15
mov r9d, 0x12c
mov r8d, 0x32
lea rdx, [0x14004c190]
lea rcx, str.Fov_Size
call fcn.14002ee58
mov qword [rsp + 0x20], r15
mov r9d, 0xa
lea r8d, [r9 - 9]
lea rdx, [0x14004c184]
lea rcx, str.Smoothing
call fcn.14002ee58
call fcn.1400079d8
call fcn.14002aa44
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.140025d70
mov esi, dword [0x140069f20]
test al, al
je 0x14003bbe6
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069e88], eax
jle 0x14003ba34
lea rcx, [0x140069e88]
call fcn.14003d274
cmp dword [0x140069e88], r12d
jne 0x14003ba34
mov dword [0x140069e80], 0x44160000
mov dword [0x140069e84], 0x43c80000
lea rcx, [0x140069e88]
call fcn.14003d208
xor edx, edx
lea rcx, [0x140069e80]
call fcn.140010ae4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.VisualsChild
call fcn.1400058f8
lea rdx, [0x14004c16b]
lea rcx, str.Enable_ESP
call fcn.140026504
cmp byte [0x14004c16b], r13b
je 0x14003bbdc
lea rdx, [0x1400697f7]
lea rcx, str.Weapon_ESP
call fcn.140026504
lea rdx, [0x140069803]
lea rcx, str.Name_ESP
call fcn.140026504
lea rdx, [0x140069805]
lea rcx, str.AMMO_ESP
call fcn.140026504
lea rdx, [0x140069806]
lea rcx, str.enemy_alert_5m
call fcn.140026504
lea rdx, [0x1400697f5]
lea rcx, str.2D_Box
call fcn.140026504
cmp byte [0x1400697f5], r13b
je 0x14003bafd
mov byte [0x1400697f5], 1
mov byte [0x1400697fc], r13b
mov byte [0x1400697f8], r13b
movss xmm1, dword [0x14003fc8c]
xorps xmm0, xmm0
call fcn.14000fed4
lea rdx, [0x1400697f8]
lea rcx, str.CornerBox
call fcn.140026504
cmp byte [0x1400697f8], r13b
je 0x14003bb3e
mov byte [0x1400697f5], r13b
mov byte [0x1400697fc], r13b
mov byte [0x1400697f8], 1
movss xmm1, dword [0x14003fc8c]
xorps xmm0, xmm0
call fcn.14000fed4
lea rdx, [0x1400697fc]
lea rcx, str.3D_Box
call fcn.140026504
cmp byte [0x1400697fc], r13b
je 0x14003bb7f
mov byte [0x1400697f5], r13b
mov byte [0x1400697fc], 1
mov byte [0x1400697f8], r13b
lea rdx, [0x140069807]
lea rcx, str.Distance_ESP
call fcn.140026504
lea rdx, [0x1400697f6]
lea rcx, str.Skeleton
call fcn.140026504
lea rdx, [0x1400697fb]
lea rcx, str.Snaplines
call fcn.140026504
mov qword [rsp + 0x20], r15
mov r9d, 0x9c4
mov r8d, 0x12
lea rdx, [0x1400675ec]
lea rcx, str.Distance
call fcn.14002ee58
call fcn.1400079d8
call fcn.14002aa44
xor r8d, r8d
xor edx, edx
lea rcx, str.Extras
call fcn.140025d70
test al, al
je 0x14003bd43
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, 0x13b0
mov eax, dword [rax + rcx]
cmp dword [0x140069e98], eax
jle 0x14003bc51
lea rcx, [0x140069e98]
call fcn.14003d274
cmp dword [0x140069e98], r12d
jne 0x14003bc51
mov dword [0x140069e90], 0x44228000
mov dword [0x140069e94], 0x442a0000
lea rcx, [0x140069e98]
call fcn.14003d208
xor edx, edx
lea rcx, [0x140069e90]
call fcn.140010ae4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.ExtraChild
call fcn.1400058f8
mov qword [rsp + 0x20], r15
mov esi, 0x23
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004c188]
lea rcx, str.Thickness__ESP
call fcn.14002ee58
mov qword [rsp + 0x20], r15
mov r9d, esi
lea r8d, [rsi - 0x22]
lea rdx, [0x14004c18c]
lea rcx, str.Thickness__FOV
call fcn.14002ee58
lea rdx, [0x14006980f]
lea rcx, str.TP__LSHIFT_
call fcn.140026504
mov dword [rsp + 0x20], r12d
lea r9d, [rsi - 0x1e]
lea r8, str.Mega_City
lea rdx, [0x140069810]
lea rcx, str.Locations
call fcn.140029d3c
movss xmm0, dword [0x140044954]
call fcn.14000ee80
mov esi, 0x20
mov r8d, esi
lea rdx, [0x140069828]
lea rcx, str.Visible_Color
call fcn.140028098
mov r8d, esi
lea rdx, [0x140069838]
lea rcx, str.InVisible_Color
call fcn.140028098
call fcn.14000e9f4
call fcn.1400079d8
call fcn.14002aa44
xor r8d, r8d
xor edx, edx
lea rcx, str.Info
call fcn.140025d70
test al, al
je 0x14003be3f
mov dword [rbp + 0x30], 0x44160000
mov dword [rbp + 0x34], 0x43c80000
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.140010ae4
and dword [rbp + 0x30], 0
and dword [rbp + 0x34], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x30]
lea rcx, str.InfoChild
call fcn.1400058f8
lea rcx, str.Made_By_Payson_Holmes_and_Deano
call fcn.140030a64
lea rcx, str.discord.gg_subzerofn
call fcn.140030a64
call fcn.14002f344
call fcn.14002f344
lea rcx, str.Menu_Key:___INS__
call fcn.140030a64
call fcn.140009580
movss xmm1, dword [rax + 0x3ac]
cvtps2pd xmm1, xmm1
movq rdx, xmm1
lea rcx, str.Framerate:__.1f
call fcn.140030a64
call fcn.14002f344
lea rcx, str.Drivers_Loaded:_Yes
lea rax, str.Drivers_Loaded:_No
cmp qword [0x140069990], r13
cmovbe rcx, rax
call fcn.140030a64
call fcn.14002f344
mov dword [rbp + 0x30], 0x42960000
mov dword [rbp + 0x34], 0x41c80000
lea rdx, [rbp + 0x30]
lea rcx, str.Exit_Cheat
call fcn.140025e0c
test al, al
je 0x14003be35
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400079d8
call fcn.14002aa44
call fcn.14002a994
call fcn.140007924
nop
xor r14, rbx
lea rax, [rbp + 0x28]
mov qword [rax], r14
lea rsi, [rbp + 0x28]
call fcn.14003534c
call fcn.140007f28
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003bf7e
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss xmm0, dword [0x14003fc2c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r13d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
call fcn.14000f078
call fcn.140009354
mov rcx, rax
call fcn.14001f6f4
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003bf28
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003bf28
call fcn.14001f664
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
lea rdx, [0x1400698f0]
call qword [rax + 0x80]
call fcn.14001f4fc
cmp byte [0x140069e9c], r13b
jne 0x14003bf7e
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x140069e60]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov byte [0x140069e9c], 1
xor rbx, rdi
mov qword [rsi], rbx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret