Function at 0x14003a134
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0xc8
call fcn.14001ed28
call fcn.14001f6b8
call fcn.14000d4d0
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14003a184
movzx eax, byte [0x14004b290]
test eax, eax
jne 0x14003a172
mov dword [rsp + 0x44], 1
jmp 0x14003a17a
mov dword [rsp + 0x44], 0
mov al, byte [rsp + 0x44]
mov byte [0x14004b290], al
movzx eax, byte [0x14004b290]
test eax, eax
je 0x14003a5a4
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 0
movss xmm2, dword [0x1400453c8]
movss xmm1, dword [0x1400453cc]
lea rcx, [rsp + 0x4c]
call fcn.14002ede8
xor edx, edx
lea rcx, [rsp + 0x4c]
call fcn.14000f938
mov r8d, 0x2a
xor edx, edx
lea rcx, str.proofexservices.xyz
call fcn.14000302c
lea rcx, [rsp + 0x88]
call fcn.140009354
lea rcx, [rsp + 0x90]
call fcn.140009370
movss xmm1, dword [0x14003fbb8]
xorps xmm0, xmm0
call fcn.14000f16c
xor edx, edx
lea rcx, str.TabBar
call fcn.140023814
movzx eax, al
test eax, eax
je 0x14003a2bc
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400448dc]
call fcn.140023ae4
movzx eax, al
test eax, eax
je 0x14003a255
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 0
call fcn.140024f78
xor r8d, r8d
xor edx, edx
lea rcx, str.Visuals
call fcn.140023ae4
movzx eax, al
test eax, eax
je 0x14003a286
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 1
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 0
call fcn.140024f78
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400448f0]
call fcn.140023ae4
movzx eax, al
test eax, eax
je 0x14003a2b7
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x42], 1
call fcn.140024f78
call fcn.140024ec8
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x14003a403
movss xmm2, dword [0x1400453d0]
movss xmm1, dword [0x1400453c4]
lea rcx, [rsp + 0x98]
call fcn.14002ede8
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier1
call fcn.1400055a4
lea rdx, [0x14004d39e]
lea rcx, str.Aimbot
call fcn.140024278
lea rcx, str.AimBone
call fcn.14002a4d0
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, str.Head
lea rdx, [0x14004d8cc]
lea rcx, str.
call fcn.140024adc
lea rdx, [0x14004d395]
lea rcx, str.Draw_Fov
call fcn.140024278
call fcn.140028d88
movss xmm0, dword [0x14003fb60]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140044944]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003fb84]
movss xmm2, dword [0x14003fb60]
lea rdx, [0x14004b29c]
lea rcx, str.Aim_Smoothness
call fcn.140028898
movss xmm0, dword [0x14003fb60]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003fba0]
movss xmm2, dword [0x1400453ac]
lea rdx, [0x14004b2a0]
lea rcx, str.Aimbot_FOV_Size
call fcn.140028898
call fcn.140028d88
lea rcx, str.Aim_Key
call fcn.14002a4d0
mov r8d, dword [0x14004d48c]
lea rdx, [0x14002ffd4]
mov ecx, dword [0x14004d464]
call fcn.1400361c0
call fcn.14000723c
movzx eax, byte [rsp + 0x41]
test eax, eax
je 0x14003a4c1
movss xmm2, dword [0x1400453d4]
movss xmm1, dword [0x1400453bc]
lea rcx, [rsp + 0xa0]
call fcn.14002ede8
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier2
call fcn.1400055a4
call fcn.140028d88
lea rcx, str.Visuals:
call fcn.14002a4d0
lea rdx, [0x14004d397]
lea rcx, str.Box_Esp
call fcn.140024278
lea rdx, [0x14004d3b1]
lea rcx, str.Filled_Box
call fcn.140024278
lea rdx, [0x14004d398]
lea rcx, str.Corner_Box
call fcn.140024278
lea rdx, [0x14004d3a7]
lea rcx, str.Distance
call fcn.140024278
lea rdx, [0x14004d39d]
lea rcx, str.Snaplines
call fcn.140024278
call fcn.140028d88
call fcn.140028d88
call fcn.14000723c
movzx eax, byte [rsp + 0x42]
test eax, eax
je 0x14003a552
movss xmm2, dword [0x1400453b8]
movss xmm1, dword [0x1400453c0]
lea rcx, [rsp + 0xa8]
call fcn.14002ede8
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
lea rcx, str.ChildIdentifier4
call fcn.1400055a4
lea rcx, str.Information
call fcn.14002a4d0
call fcn.1400285f4
lea rcx, [0x140044a14]
call fcn.14002a4d0
call fcn.140028d88
mov rdx, qword [0x14004d348]
lea rcx, str.__Base_ID_:__p__
call fcn.14002a4d0
lea rcx, str.__Working_on_Windows_10__Only__
call fcn.14002a4d0
lea rcx, str.Developer:_Proofex
call fcn.14002a4d0
call fcn.14000723c
call fcn.140009340
subss xmm0, dword [0x1400453a8]
call fcn.14000f66c
movss xmm2, dword [0x14004395c]
movss xmm1, dword [0x14003fb90]
lea rcx, [rsp + 0xb0]
call fcn.14002ede8
mov rdx, rax
lea rcx, str.Unhook
call fcn.140023b80
movzx eax, al
test eax, eax
je 0x14003a59f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.140007188
call fcn.140031fb4
call fcn.140007740
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x14004d8d8]
call qword [rsp + 0x58]
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x14004d8d8]
call qword [rsp + 0x60]
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x68], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x14004d8d8]
call qword [rsp + 0x68]
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x14003fb60]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14004d8d8]
call qword [rsp + 0x70]
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rcx, qword [0x14004d8d8]
call qword [rax + 0x148]
test eax, eax
jl 0x14003a6b7
call fcn.14000e2e4
call fcn.140008b4c
mov rcx, rax
call fcn.14001ed40
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rcx, qword [0x14004d8d8]
call qword [rax + 0x150]
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14004d8d8]
call qword [rsp + 0x78]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x88760868
jne 0x14003a74a
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rcx, qword [0x14004d8d8]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003a74a
call fcn.14001ecb0
mov rax, qword [0x14004d8d8]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x80], rax
lea rdx, [0x14004d420]
mov rcx, qword [0x14004d8d8]
call qword [rsp + 0x80]
call fcn.14001eb48
add rsp, 0xc8
ret