Function at 0x140001bb0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x340
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140295040]
xor rax, rsp
mov qword [rbp + 0x220], rax
xor r14d, r14d
mov r12d, 0xff
movabs r15, 0x7fffffffffffffff
cmp byte [0x1402d3fc0], r14b
jne 0x140001cbe
movabs rbx, 0x7ffffffed5fa0dff
movabs rdi, 0x12a05f200
nop dword [rax + rax]
lea rcx, [0x1402d3f40]
call fcn.14002c340
cmp byte [0x1402d3fc0], r14b
jne 0x140001cbe
lea rcx, [rbp + 0x150]
call fcn.140001570
mov rax, qword [rbp + 0x150]
mov qword [rbp + 0x10], rax
cmp rax, rbx
je 0x140001ca8
mov ecx, 1
cmovl ecx, r12d
test cl, cl
jns 0x140001ca8
lea rcx, [rax + rdi]
mov qword [rbp + 0x10], rcx
jmp 0x140001cac
mov qword [rbp + 0x10], r15
lea rcx, [rbp + 0x10]
call fcn.140004960
cmp byte [0x1402d3fc0], r14b
je 0x140001c60
mov ecx, dword [0x1402d4028]
call fcn.140086380
call fcn.140086550
mov ecx, 1
call fcn.140089c90
mov qword [rbp + 0x150], rax
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140004df0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x140002e03
mov qword [rbp + 0x150], r14
cmp dword [rbp + 0x138], 0
je 0x140002df7
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002df7
xorps xmm0, xmm0
movaps xmmword [rbp + 0x130], xmm0
movdqa xmmword [rbp + 0x130], xmm0
mov ecx, 1
call fcn.140089c90
mov qword [rbp + 0x150], rax
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140004e20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x140002de4
mov qword [rbp + 0x150], r14
cmp dword [rbp + 0x138], 0
je 0x140002dd8
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002dd8
xorps xmm0, xmm0
movaps xmmword [rbp + 0x130], xmm0
movdqa xmmword [rbp + 0x130], xmm0
mov ecx, 1
call fcn.140089c90
mov qword [rbp + 0x150], rax
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140004e50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x140002dc5
mov qword [rbp + 0x150], r14
cmp dword [rbp + 0x138], 0
je 0x140002db9
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002db9
xorps xmm0, xmm0
movaps xmmword [rbp + 0x130], xmm0
movdqa xmmword [rbp + 0x130], xmm0
mov ecx, 1
call fcn.140089c90
mov qword [rbp + 0x150], rax
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140004e80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x140002da6
mov qword [rbp + 0x150], r14
cmp dword [rbp + 0x138], 0
je 0x140002d9a
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002d9a
xorps xmm0, xmm0
movaps xmmword [rbp + 0x130], xmm0
movdqa xmmword [rbp + 0x130], xmm0
cmp byte [0x1402d3cf3], al
je 0x140002d2a
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x190], xmm0
mov rsi, qword [0x1402d3df8]
mov rdi, qword [0x1402d3d98]
mov qword [rbp + 0x178], r14
movdqu xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x190], 1
mov rax, qword [0x1402d3df0]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x170], rdi
mov rbx, qword [0x1402d3d88]
mov ecx, 0x61c8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov r8, qword [0x1402d3d88]
test r8, r8
je 0x140001fd1
mov r10d, dword [r8 + 0x3f90]
movsx rax, word [r8 + 0x6078]
lea rdx, [r8 + 0x607c]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x140001fc6
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6078], cx
movsx rax, cx
lea rdx, [r8 + 0x607c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r14d
inc word [rdx + 4]
inc dword [r8 + 0x6070]
mov qword [rbp + 0x20], r9
lea rax, [rbp + 0x18]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x30], r9
test r9, r9
je 0x140001ff5
xor edx, edx
mov rcx, r9
call fcn.140038300
jmp 0x140001ff8
mov rax, r14
mov qword [0x1402d3d88], rax
call fcn.14003ca50
test rbx, rbx
je 0x140002010
mov qword [0x1402d3d88], rbx
mov rcx, qword [rbp + 0x160]
call fcn.140069900
mov rdx, rsi
mov rcx, rdi
call fcn.140069740
nop
mov rax, qword [0x1402d3d88]
mov dword [rax + 0x3900], 0x40e00000
mov dword [rax + 0x3904], 0x3f800000
mov qword [rax + 0x38f8], r14
mov dword [rax + 0x39d4], r14d
mov qword [rax + 0x3964], 0x40400000
mov dword [rax + 0x3924], 0x40a00000
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rax + 0x3b90], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x130], xmm1
movups xmmword [rax + 0x3bb0], xmm1
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rax + 0x3ba0], xmm0
movups xmmword [rbp + 0x130], xmm1
movups xmmword [rax + 0x3bc0], xmm1
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rax + 0x3be0], xmm0
movups xmmword [rbp + 0x130], xmm1
movups xmmword [rax + 0x3bd0], xmm1
movdqa xmm2, xmmword [0x140286c10]
movups xmmword [rbp + 0x130], xmm2
movups xmmword [rax + 0x3a20], xmm2
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rax + 0x3ac0], xmm0
movdqa xmm1, xmmword [0x140286d00]
movups xmmword [rbp + 0x130], xmm1
movups xmmword [rax + 0x3ad0], xmm1
movups xmmword [rbp + 0x130], xmm1
movups xmmword [rax + 0x3af0], xmm1
movups xmmword [rbp + 0x130], xmm1
movups xmmword [rax + 0x3ae0], xmm1
movups xmmword [rbp + 0x130], xmm2
movups xmmword [rax + 0x3a00], xmm2
movdqa xmm0, xmmword [0x140286c40]
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rax + 0x3a30], xmm0
mov rcx, qword [rbp + 0x170]
call fcn.14007d4b0
lea rcx, [0x1402d43d0]
call fcn.140006770
lea rcx, [0x1402d43d0]
call fcn.14000dcd0
lea rax, [0x140090c08]
mov qword [rbp + 0x50], rax
lea rax, [0x140085d10]
mov qword [rbp + 0x58], rax
movzx eax, byte [rbp + 0x138]
mov byte [rbp + 0x60], al
movzx eax, byte [rbp + 0x139]
mov byte [rbp + 0x61], al
movzx eax, byte [rbp + 0x13a]
mov byte [rbp + 0x62], al
movzx eax, byte [rbp + 0x13b]
mov byte [rbp + 0x63], al
lea rax, [rbp + 0x160]
mov qword [rbp + 0x68], rax
lea rax, [rbp + 0x50]
mov qword [rbp + 0x88], rax
lea rax, [rbp + 0x50]
mov qword [rbp + 0x20], rax
lea rdx, [rbp + 0x50]
call fcn.140086f40
nop
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x1400021e7
mov rax, qword [rcx]
lea rdx, [rbp + 0x50]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rbp + 0x88], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movabs rsi, 0x5ebc632c2c1eb8a
movabs r13, 0xe447450b135fa8de
movdqa xmm10, xmmword [0x140286d70]
movdqa xmm12, xmmword [0x140286a70]
movdqa xmm11, xmmword [0x140286c30]
movss xmm6, dword [0x1402866d0]
movss xmm8, dword [0x14028678c]
xorps xmm7, xmm7
movss xmm9, dword [0x140286718]
movss xmm13, dword [0x1402868c4]
movss xmm14, dword [0x1402868a8]
movss xmm15, dword [0x140286710]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x1402d3df0]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400022b0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx ecx, byte [rbp + 0x190]
mov rax, qword [0x1402d3d88]
mov byte [rax + 0x58], cl
lea rcx, [0x1402d3f40]
call fcn.140031790
call fcn.140034130
mov r8d, dword [rbp + 0x194]
mov r9d, dword [rbp + 0x198]
test r9d, r9d
jne 0x1400022ee
test r8d, r8d
je 0x14000237d
mov rcx, qword [0x1402d3e20]
test rcx, rcx
je 0x140002315
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1402d3e20], r14
mov r9d, dword [rbp + 0x198]
mov r8d, dword [rbp + 0x194]
mov rcx, qword [0x1402d3e08]
mov rax, qword [rcx]
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
xor edx, edx
call qword [rax + 0x68]
mov qword [rbp + 0x194], r14
mov rcx, qword [0x1402d3e08]
mov rax, qword [rcx]
lea r9, [rbp + 0x120]
lea r8, [0x140286630]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1402d3d98]
mov rax, qword [rcx]
lea r9, [0x1402d3e20]
xor r8d, r8d
mov rdx, qword [rbp + 0x120]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ecx, dword [0x1402d2b90]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400023da
cmp byte [0x1402d3f18], 0
jne 0x1400023e1
mov byte [0x1402d3f18], 1
cmp byte [rbp + 0x190], 0
sete al
mov byte [rbp + 0x190], al
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x160]
test al, al
je 0x1400023cc
mov r8d, 0x80000a8
call qword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x1400023e1
mov r8d, 0x80800a8
call qword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x1400023e1
mov byte [0x1402d3f18], 0
lea rdx, [rbp + 0x130]
mov rcx, qword [0x1402d3e00]
call qword [sym.imp.USER32.dll_GetClientRect]
mov r9d, 2
lea r8, [rbp + 0x130]
xor edx, edx
mov rcx, qword [0x1402d3e00]
call qword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [rbp + 0x13c]
mov r8d, dword [rbp + 0x134]
sub eax, r8d
mov r9d, dword [rbp + 0x138]
mov edx, dword [rbp + 0x130]
sub r9d, edx
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], eax
mov rcx, qword [0x1402d3df0]
call qword [sym.imp.USER32.dll_MoveWindow]
movzx eax, byte [0x1402d2b94]
cmp al, byte [0x1402d3cb0]
je 0x14000251e
mov byte [0x1402d3cb0], al
neg al
sbb edi, edi
and edi, 0x11
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x1400024f4
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x1400024f4
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rbx]
add r8, r10
mov edx, 0xfda9f954
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1400024ef
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x1400024d0
cmp edx, 0xdb0c4e9e
je 0x1400024f9
test r9d, r9d
jne 0x1400024b0
mov rax, qword [rax]
jmp 0x140002480
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [r8 + rcx*4]
add rax, r10
mov edx, edi
mov rcx, qword [0x1402d3df0]
call rax
mov rax, qword [0x1402d3d88]
test rax, rax
je 0x140002533
mov rcx, qword [rax + 0x98]
jmp 0x140002536
mov rcx, r14
cmp qword [rcx + 0x48], 0
jne 0x140002542
call fcn.1400690e0
call fcn.14006a310
call fcn.14003f320
cmp byte [0x1402d2b28], 0
je 0x140002610
mov rax, qword [0x1402d3d88]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003e980
mov rbx, rax
movups xmmword [rbp], xmm10
lea rcx, [rbp]
call fcn.14003a8e0
mov edi, eax
movd xmm2, dword [0x1402d2a54]
cvtdq2ps xmm2, xmm2
mov rcx, qword [0x1402d3d88]
movss xmm1, dword [rcx + 0x14]
mulss xmm1, xmm6
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm6
movss dword [rbp + 0x38], xmm0
movss dword [rbp + 0x3c], xmm1
test eax, 0xff000000
je 0x140002610
comiss xmm6, xmm2
ja 0x140002610
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm7
lea rdx, [rbp + 0x38]
mov rcx, rbx
call fcn.14005f160
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14005d780
mov dword [rbx + 0x78], r14d
cmp byte [0x1402d2b29], 0
je 0x1400026d4
mov rax, qword [0x1402d3d88]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003e980
mov rbx, rax
movups xmmword [rbp], xmm11
lea rcx, [rbp]
call fcn.14003a8e0
mov edi, eax
movd xmm2, dword [0x1402d2a78]
cvtdq2ps xmm2, xmm2
mov rcx, qword [0x1402d3d88]
movss xmm1, dword [rcx + 0x14]
mulss xmm1, xmm6
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm6
movss dword [rbp + 0x40], xmm0
movss dword [rbp + 0x44], xmm1
test eax, 0xff000000
je 0x1400026d4
comiss xmm6, xmm2
ja 0x1400026d4
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm7
lea rdx, [rbp + 0x40]
mov rcx, rbx
call fcn.14005f160
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14005d780
mov dword [rbx + 0x78], r14d
cmp byte [0x1402d2b10], 0
je 0x1400026e2
call fcn.14002a740
cmp byte [0x1402d2a8c], 0
je 0x1400026f0
call fcn.140027ed0
cmp byte [0x1402d2b9c], 0
je 0x140002b57
mov rax, qword [0x1402d3d88]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003e980
mov rbx, rax
movups xmmword [rbp], xmm12
lea rcx, [rbp]
call fcn.14003a8e0
mov rcx, qword [0x1402d3d88]
movss xmm0, dword [rcx + 0x10]
movss dword [rbp + 0x48], xmm0
mov dword [rbp + 0x4c], 0x41f00000
mov qword [rbp + 0x30], 0
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm7
mov r9d, eax
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x30]
mov rcx, rbx
call fcn.14005fbc0
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rdi, 0x62ae8c0296c2d034
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0xa3be26b66175bd2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x8137dcd48078184b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x17bb1b2be5ac6607
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x8b33247f703ad88d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x4a8ee966f98ff046
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xf0fb06c51210cf7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xe05290f4ef2c3808
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x17bb1b2be5850371
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x100]
vxorps xmm0, xmm0, xmmword [rbp + 0x200]
vmovdqa xmmword [rbp + 0x100], xmm0
mov rbx, qword [0x1402d3d88]
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x28], rax
vmovss dword [rsp + 0x20], xmm13
vmovaps xmm3, xmm14
vmovss xmm2, dword [rbx + 0x3d60]
lea rdx, [rbp + 0x10]
mov rcx, qword [rbx + 0x3d58]
vzeroupper
call fcn.140066880
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x10], xmm0
mov rax, qword [rbx + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003e980
mov rbx, rax
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0xa0], rcx
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0xa8], rcx
movabs rax, 0xa3be26b66175bd2f
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xb0], rcx
movabs rax, 0x8137dcd48078184b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x17bb1b2be5ac6607
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x8b33247f703ad88d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x4a8ee966f98ff046
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xf0fb06c51210cf7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xe05290f4ef2c3808
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x17bb1b2be5850371
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm0, ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0xa0], ymm0
vmovdqa xmm1, xmmword [rbp + 0xc0]
vxorps xmm1, xmm1, xmmword [rbp + 0x200]
vmovdqa xmmword [rbp + 0xc0], xmm1
vmovups xmmword [rbp], xmm10
lea rcx, [rbp]
vzeroupper
call fcn.14003a8e0
mov edx, eax
movss xmm0, dword [rbp + 0x14]
mulss xmm0, xmm6
movss xmm2, dword [0x1402867c8]
subss xmm2, xmm0
mov rcx, qword [0x1402d3d88]
movss xmm1, dword [rcx + 0x10]
mulss xmm1, xmm6
movss xmm0, dword [rbp + 0x10]
mulss xmm0, xmm6
subss xmm1, xmm0
movss dword [rbp + 0x150], xmm1
movss dword [rbp + 0x154], xmm2
test eax, 0xff000000
je 0x140002b2f
lea rcx, [rbp + 0xa0]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140002ac0
lea rcx, [rbp + 0xa0]
add rcx, rax
lea rax, [rbp + 0xa0]
cmp rax, rcx
je 0x140002b2f
mov rax, qword [rbx + 0x38]
movups xmm0, xmmword [rbx + 0x88]
movups xmmword [rbp], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm7
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0x150]
movss xmm2, dword [rax + 0x10]
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.140066aa0
mov ecx, 0x1b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140002b57
xor r8d, r8d
xor edx, edx
lea rcx, [0x1402d3f40]
call fcn.140035ae0
mov byte [0x1402d2b9c], 0
lea rcx, [rbp + 0x160]
call fcn.140084fe0
cmp byte [0x1402d2b95], 0
je 0x140002c2c
cmp byte [0x1402950c0], 0
je 0x140002c2c
mov rax, qword [0x1402d3d88]
mov dword [rax + 0x49f8], 0x41200000
mov qword [rax + 0x49fc], 0x41200000
mov dword [rax + 0x4a04], r14d
mov dword [rax + 0x49ec], 8
or dword [rax + 0x49e8], 3
mov dword [rax + 0x4a08], 0x430c0000
mov dword [rax + 0x4a0c], 0x42700000
mov dword [rax + 0x49f0], 1
mov r8d, 0x3109
lea rdx, [0x1402950c0]
lea rcx, str.Outside_Message
call fcn.1400457b0
cmp byte [0x1402d2b45], 0
je 0x140002bfd
lea rcx, str.GodMode
call fcn.14006d4d0
cmp byte [0x1402d2b2c], 0
je 0x140002c12
lea rcx, str.NoClip
call fcn.14006d4d0
cmp byte [0x1402d2b4d], 0
je 0x140002c27
lea rcx, str.Seat_Belt
call fcn.14006d4d0
call fcn.140047ac0
call fcn.140040f20
call fcn.140041340
mov rcx, qword [0x1402d3df8]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1402d3e20]
mov edx, 1
call qword [rax + 0x108]
mov rcx, qword [0x1402d3df8]
mov rax, qword [rcx]
lea r8, [0x1402d3f30]
mov rdx, qword [0x1402d3e20]
call qword [rax + 0x190]
mov rax, qword [0x1402d3d88]
mov rax, qword [rax + 0x4b00]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r14
cmp byte [rcx], r14b
cmovne rax, rcx
mov rcx, rax
call fcn.140068670
mov rcx, qword [0x1402d3e08]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x40]
cmp byte [0x1402d2b88], 0
jne 0x140002d92
movsxd rbx, dword [0x1402d2b98]
lea rcx, [rbp + 0x20]
call fcn.140001570
mov rax, qword [rbp + 0x20]
mov qword [rbp], rax
test rbx, rbx
je 0x140002d0e
js 0x140002d0e
imul rdx, rbx, 0xf4240
imul r8, rbx, 0xf4240
mov rcx, r15
sub rcx, r8
cmp rax, rcx
je 0x140002d0a
mov r8d, 1
cmovl r8d, r12d
test r8b, r8b
jns 0x140002d0a
lea rcx, [rax + rdx]
mov qword [rbp], rcx
jmp 0x140002d0e
mov qword [rbp], r15
lea rcx, [rbp]
call fcn.140004960
cmp dword [rbp + 0x1a8], 0x12
jne 0x140002270
call fcn.140085d60
nop
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.140089c70
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140085d60
nop
jmp 0x140002d2a
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x138], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x138], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x138], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x138], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3