Function at 0x140002c10
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x118]
sub rsp, 0x210
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
mov rax, qword [0x1400cd740]
xor rax, rsp
mov qword [rbp + 0xc8], rax
xor esi, esi
call fcn.1400024a0
test eax, eax
jne 0x140002c84
mov edx, dword [0x1400ce070]
lea rcx, str.Aim_keybind:_0x_x_n
call fcn.140001f50
mov edx, dword [0x1400ce074]
lea rcx, str.ESP_keybind:_0x_x_n
call fcn.140001f50
lea rcx, str.____Searching_for_target_window..._n
call fcn.140001f50
mov rcx, qword [0x1400ce068]
test rcx, rcx
je 0x1400031ec
lea rdx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [rbp + 0x10]
test eax, eax
je 0x1400031fe
mov dword [0x1400ce000], eax
lea rcx, [0x1400ce000]
call fcn.140001fd0
test al, al
je 0x1400031da
lea rcx, str.____Drawing..._n
call fcn.140001f50
mov qword [rbp + 0x44], rsi
mov qword [rbp + 0x58], 2
mov qword [rbp + 0x70], 2
mov qword [rbp + 0x30], rsi
mov dword [rbp + 0x40], Ordinal_33
mov dword [rbp + 0x38], 1
mov dword [rbp + 0x3c], 1
mov dword [rbp + 0x54], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [0x1400ce068]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x4c], 1
mov qword [rbp + 0x68], 1
mov dword [rbp + 0xc0], 0xb000
mov dword [rbp + 0xc4], 0xa000
lea rbx, [0x1400ce0a0]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x18]
mov qword [rsp + 0x50], rax
lea rdi, [0x1400ce098]
mov qword [rsp + 0x48], rdi
lea r14, [0x1400ce088]
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x30]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x140002df8
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x18]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r14
lea rax, [rbp + 0x30]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140002e4d
lea rcx, str.failed
call fcn.140001f50
call fcn.140003210
mov rcx, qword [rbp + 0xc8]
xor rcx, rsp
call fcn.1400a6800
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop rbp
ret
mov rcx, qword [0x1400ce088]
mov rax, qword [rcx]
lea r9, [rbp]
lea r8, [0x1400bd5e8]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1400ce098]
mov rax, qword [rcx]
lea r9, [0x1400ce080]
xor r8d, r8d
mov rdx, qword [rbp]
call qword [rax + 0x48]
mov rcx, qword [rbp]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, 8
call fcn.1400a6820
lea rcx, [0x140002ba0]
mov qword [rax], rcx
mov qword [rbp], rax
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140008130]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1400031cb
cmp dword [rbp + 0x28], 0
jne 0x140002ee4
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x140002f04
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov edx, 0xa
mov rcx, qword [0x1400ce068]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400ce068]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1400ce050]
mov ecx, 0x61c8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov r8, qword [0x1400ce050]
test r8, r8
je 0x140002fab
mov r10d, dword [r8 + 0x3f60]
movsx rax, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x140002fa0
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [r8 + 0x607c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], esi
inc word [rdx + 4]
inc dword [r8 + 0x6070]
mov qword [rbp], r9
lea rax, [rsp + 0x60]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0x18], r9
test r9, r9
je 0x140002fd0
xor edx, edx
mov rcx, r9
call fcn.1400081e0
jmp 0x140002fd3
mov rax, rsi
mov qword [0x1400ce050], rax
call fcn.14000cc30
mov rax, qword [0x1400ce050]
test rbx, rbx
cmovne rax, rbx
mov qword [0x1400ce050], rax
or dword [rax + 8], 0x23
mov rdi, qword [rax + 0x38]
mov qword [rbp], rsi
lea r8, [rbp]
lea rsi, str.data_font_Inter_Semibold.ttf
mov rcx, rsi
call fcn.140009f30
mov rbx, rax
test rax, rax
je 0x14000319c
xorps xmm2, xmm2
movups xmmword [rsp + 0x70], xmm2
movups xmmword [rbp - 0x80], xmm2
movups xmmword [rbp - 0x40], xmm2
mov byte [rsp + 0x7c], 1
mov dword [rbp - 0x78], 2
mov dword [rbp - 0x74], 1
movss xmm1, dword [0x1400bf018]
mov dword [rbp - 0x40], 0x3f800000
mov dword [rbp - 0x3c], 0x3f800000
mov eax, 0xffff
mov word [rbp - 0x38], ax
movaps xmm4, xmmword [rsp + 0x70]
movaps xmmword [rbp + 0x30], xmm4
movaps xmm5, xmmword [rbp - 0x80]
movaps xmmword [rbp + 0x40], xmm5
movaps xmmword [rbp + 0x50], xmm2
xorps xmm6, xmm6
movaps xmmword [rbp + 0x60], xmm6
xorps xmm3, xmm3
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xe1
movaps xmmword [rbp - 0x50], xmm3
movaps xmmword [rbp + 0x70], xmm3
movaps xmm1, xmmword [rbp - 0x40]
movaps xmmword [rbp + 0x80], xmm1
xorps xmm7, xmm7
movaps xmmword [rbp + 0x90], xmm7
xorps xmm8, xmm8
movaps xmmword [rbp + 0xa0], xmm8
xorps xmm9, xmm9
movaps xmmword [rbp + 0xb0], xmm9
movdqa xmm0, xmm1
psrldq xmm0, 0xa
movd eax, xmm0
test al, al
jne 0x14000314f
lea r9, [0x1400bd51c]
nop dword [rax]
lea rcx, [r9 - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x1400030f7
cmp al, 0x5c
je 0x1400030f7
mov r9, rcx
cmp rcx, rsi
ja 0x1400030e0
movsd xmm0, qword [0x1400bef90]
movsd qword [rsp + 0x20], xmm0
lea r8, str._s___.0fpx
mov edx, Ordinal_41
lea rcx, [rbp + 0x8a]
call fcn.140009b70
movaps xmm9, xmmword [rbp + 0xb0]
movaps xmm8, xmmword [rbp + 0xa0]
movaps xmm7, xmmword [rbp + 0x90]
movaps xmm1, xmmword [rbp + 0x80]
movaps xmm3, xmmword [rbp + 0x70]
movaps xmm6, xmmword [rbp + 0x60]
movaps xmm2, xmmword [rbp + 0x50]
movaps xmm5, xmmword [rbp + 0x40]
movaps xmm4, xmmword [rbp + 0x30]
movaps xmmword [rsp + 0x70], xmm4
movaps xmmword [rbp - 0x80], xmm5
movaps xmmword [rbp - 0x70], xmm2
movaps xmmword [rbp - 0x60], xmm6
movaps xmmword [rbp - 0x50], xmm3
movaps xmmword [rbp - 0x40], xmm1
movaps xmmword [rbp - 0x30], xmm7
movaps xmmword [rbp - 0x20], xmm8
movaps xmmword [rbp - 0x10], xmm9
mov qword [rsp + 0x70], rbx
mov eax, dword [rbp]
mov dword [rsp + 0x78], eax
movss xmm0, dword [0x1400befc4]
movss dword [rbp - 0x7c], xmm0
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.14002e970
xor ecx, ecx
call fcn.14002a210
call fcn.140003ca0
mov rcx, qword [0x1400ce068]
call fcn.140034b40
call fcn.140034970
nop
cmp dword [rbp + 0x28], 0
je 0x140002e0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp + 0x28], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rcx, str.____Failed_to_connect_to_the_process_overlay_backend_n
call fcn.140001f50
call fcn.140002bf0
int3
lea rcx, str.____Target_window_not_found_n
call fcn.140001f50
call fcn.140002bf0
int3
lea rcx, str.____Failed_to_resolve_process_ID_n
call fcn.140001f50
call fcn.140002bf0
int3