Function at 0x14002fe90
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5b8]
sub rsp, 0x680
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
mov rax, qword [0x140040040]
xor rax, rsp
mov qword [rbp + 0x4d0], rax
mov edi, r9d
mov rsi, rcx
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rbx, rax
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r9, rbx
lea r8, [0x140039608]
lea rdx, str.CONOUT_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rbx, rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r9, rbx
lea r8, [0x140039618]
lea rdx, str.CONIN_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
lea rdx, [0x140039624]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002f6c0
mov dword [rbp + 0x390], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
test rax, rax
je 0x140030abc
lea rdx, [rbp + 0x390]
mov rcx, rax
call sub.KERNEL32.dll_Process32Next
xor r12d, r12d
test eax, eax
je 0x140030024
lea r14, str.cs2.exe
nop
mov rcx, r12
lea rdx, [rbp + 0x3bc]
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r14 + rcx - 1]
jne 0x140030011
cmp rcx, 8
jne 0x14002ffd0
lea rdx, str.Found_Process__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002f6c0
mov ecx, dword [rbp + 0x398]
mov dword [0x140040200], ecx
call fcn.14002f9e0
mov qword [0x1400401f8], rax
jmp 0x14003002b
lea rdx, [rbp + 0x390]
mov rcx, rbx
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x14002ffc0
mov rax, qword [0x1400401f8]
test rax, rax
je 0x140030abc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0xe0], 0x238
mov edx, dword [0x140040200]
mov ecx, 8
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
lea rdx, [rbp + 0xe0]
mov rcx, rax
call sub.KERNEL32.dll_Module32Next
test eax, eax
je 0x14003009e
nop dword [rax]
lea rdx, str.client.dll
lea rcx, [rbp + 0x110]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140030756
lea rdx, [rbp + 0xe0]
mov rcx, rbx
call sub.KERNEL32.dll_Module32Next
test eax, eax
jne 0x140030070
mov r13, qword [rbp - 0x70]
mov qword [rsp + 0x78], r13
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x10], r12
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x30], xmm1
mov qword [rbp + 0x48], r12
mov dword [rbp], 0x50
mov dword [rbp + 4], 3
lea rax, [0x14002fe30]
mov qword [rbp + 8], rax
mov qword [rbp + 0x18], rsi
lea rbx, str.Notepad
mov qword [rbp + 0x40], rbx
lea rcx, [rbp]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], r12
mov rax, qword [rbp + 0x18]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov eax, dword [0x140040028]
mov dword [rsp + 0x38], eax
mov eax, dword [0x140040024]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x3b
mov dword [rsp + 0x20], 0x6a
mov r9d, 0x80000000
mov r8, rbx
mov rdx, qword [rbp + 0x40]
mov ecx, 0x800a8
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r14, rax
mov qword [rbp - 8], rax
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x320], xmm0
lea rdx, [rbp + 0x320]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
movups xmmword [rbp + 0x380], xmm0
lea rdx, [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rsp + 0x68], r12
lea rdx, [rsp + 0x68]
mov rcx, r14
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rsp + 0x68]
mov dword [rbp + 0x330], eax
mov eax, dword [rsp + 0x6c]
mov dword [rbp + 0x334], eax
mov eax, dword [rbp + 0x328]
mov dword [rbp + 0x338], eax
mov eax, dword [rbp + 0x32c]
mov dword [rbp + 0x33c], eax
lea rdx, [rbp + 0x330]
mov rcx, r14
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov qword [rbp + 0x90], r12
mov qword [rbp + 0xa4], r12
mov qword [rbp + 0xac], 1
mov qword [rbp + 0xb8], 2
mov qword [rbp + 0xd0], 2
mov dword [rbp + 0x98], 0x3c
mov dword [rbp + 0x9c], 1
mov dword [rbp + 0xa0], 0x1c
mov dword [rbp + 0xb4], 0x20
mov qword [rbp + 0xc0], r14
mov qword [rbp + 0xc8], 1
mov dword [rbp - 0x48], 0xb000
mov dword [rbp - 0x44], 0xa000
mov qword [rbp - 0x50], r12
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov dword [rbp - 0x68], r12d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call sub.d3d11.dll_D3D11CreateDeviceAndSwapChain
mov qword [rbp - 0x58], r12
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea r9, [rbp - 0x58]
lea r8, [0x1400395f8]
xor edx, edx
call qword [rax + 0x48]
mov rdx, qword [rbp - 0x58]
test rdx, rdx
je 0x140030ab5
mov rcx, qword [rbp - 0x50]
mov rax, qword [rcx]
lea r9, [rbp - 0x78]
xor r8d, r8d
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov edx, edi
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call fcn.140007730
xor ecx, ecx
call fcn.140020e90
call fcn.140009b50
mov rcx, r14
call fcn.14002a790
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x50]
call fcn.140029790
mov sil, 1
mov dword [rsp + 0x60], esi
xorps xmm13, xmm13
movss xmm9, dword [0x140039678]
movss xmm15, dword [0x140039674]
movss xmm14, dword [0x140034df8]
nop dword [rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400303f7
xor r13d, r13d
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx esi, sil
cmp dword [rbp + 0x68], 0x12
cmove esi, r13d
movzx ebx, sil
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400303a1
mov r13, qword [rsp + 0x78]
mov dword [rsp + 0x60], esi
test bl, bl
je 0x140030a42
xor r12d, r12d
call fcn.1400299f0
call fcn.14002a920
call fcn.14000ef40
lea rdx, [r13 + 0x16d4f48]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp - 0x38]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, qword [rbp - 0x38]
test r15, r15
je 0x1400309bb
lea rdx, [r15 + 0x3bf]
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 4]
lea r8, [rbp - 0x64]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r13 + 0x17ce6a0]
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 8]
lea r8, [rbp - 0x30]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp - 0x30]
mov qword [rbp + 0x330], rsi
mov dword [rbp + 0x338], esi
lea rdx, [r15 + 0x1224]
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 0xc]
lea r8, [rbp + 0x330]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea edi, [rsi + 1]
mov r12d, dword [rbp - 0x64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
mov qword [rsp + 0x20], rsi
mov r9d, 0x40
lea r8, [rbp + 0x340]
lea rdx, [r13 + 0x182cea0]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, edi
and edx, 0x7fff
shl edx, 3
sar edx, 9
add rdx, 0x10
add rdx, r14
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp - 0x28]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1400309a4
mov eax, edi
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp - 0x20]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x1400309a4
add rdx, 0x7ec
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp - 0x60]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp - 0x60]
mov edx, ebx
shr edx, 9
and edx, 0x3f
shl edx, 3
add rdx, 0x10
add rdx, r14
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp - 0x18]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
and ebx, 0x1ff
imul edx, ebx, 0x78
add rdx, qword [rbp - 0x18]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp - 0x10]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x10]
cmp r15, rbx
je 0x1400309a4
lea rdx, [rbx + 0x32c]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp - 0x5c]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0x5c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm1, qword [0x140039658]
comisd xmm1, xmm0
jae 0x1400309a4
cmp eax, 0x64
jg 0x1400309a4
lea rdx, [rbx + 0x3bf]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x68]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbx + 0x310]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x380]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x320], 0
mov dword [rbp + 0x328], 0
lea rdx, [rbx + 0x1224]
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp + 0x320]
mov rcx, qword [0x1400401f8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm10, dword [rbp + 0x328]
movaps xmm5, xmm10
addss xmm5, dword [0x140039670]
subss xmm10, dword [0x140034e20]
movss xmm11, dword [rbp + 0x320]
movss xmm12, dword [rbp + 0x324]
movss xmm2, dword [rbp + 0x370]
movaps xmm3, xmm2
mulss xmm3, xmm11
movss xmm4, dword [rbp + 0x374]
movaps xmm0, xmm4
mulss xmm0, xmm12
addss xmm3, xmm0
movss xmm6, dword [rbp + 0x378]
movaps xmm1, xmm6
mulss xmm1, xmm5
addss xmm3, xmm1
movss xmm1, dword [rbp + 0x37c]
addss xmm3, xmm1
movss xmm7, dword [0x140039650]
comiss xmm7, xmm3
jbe 0x140030796
xor al, al
movaps xmm8, xmm13
movaps xmm9, xmm13
jmp 0x14003086e
mov r13, qword [rbp + 0xf8]
mov qword [rsp + 0x78], r13
lea rdx, str.Found:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002f6c0
mov rcx, rax
mov rdx, r13
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x14002f920]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400300a7
movss xmm2, dword [rbp + 0x340]
mulss xmm2, xmm11
movss xmm0, dword [rbp + 0x344]
mulss xmm0, xmm12
addss xmm2, xmm0
movss xmm1, dword [rbp + 0x348]
mulss xmm1, xmm5
addss xmm2, xmm1
addss xmm2, dword [rbp + 0x34c]
movss xmm7, dword [rbp + 0x350]
mulss xmm7, xmm11
movss xmm0, dword [rbp + 0x354]
mulss xmm0, xmm12
addss xmm7, xmm0
movss xmm1, dword [rbp + 0x358]
mulss xmm1, xmm5
addss xmm7, xmm1
addss xmm7, dword [rbp + 0x35c]
movss xmm0, dword [0x140039654]
divss xmm0, xmm3
movaps xmm6, xmm0
mulss xmm6, xmm2
mulss xmm7, xmm0
call fcn.140009b50
mov al, 1
movaps xmm8, xmm6
mulss xmm8, xmm9
addss xmm6, xmm9
addss xmm8, xmm6
movaps xmm9, xmm7
addss xmm9, xmm15
mulss xmm7, xmm15
subss xmm9, xmm7
movss xmm1, dword [rbp + 0x37c]
movss xmm6, dword [rbp + 0x378]
movss xmm4, dword [rbp + 0x374]
movss xmm2, dword [rbp + 0x370]
movss xmm7, dword [0x140039650]
test al, al
je 0x14003099b
mulss xmm2, xmm11
mulss xmm4, xmm12
addss xmm2, xmm4
movaps xmm0, xmm10
mulss xmm0, xmm6
addss xmm2, xmm0
addss xmm2, xmm1
comiss xmm7, xmm2
jbe 0x1400308a1
xor al, al
movaps xmm3, xmm13
jmp 0x1400308fa
movss xmm0, dword [rbp + 0x354]
mulss xmm0, xmm12
mulss xmm11, dword [rbp + 0x350]
addss xmm0, xmm11
mulss xmm10, dword [rbp + 0x358]
addss xmm0, xmm10
addss xmm0, dword [rbp + 0x35c]
movss xmm6, dword [0x140039654]
divss xmm6, xmm2
mulss xmm6, xmm0
call fcn.140009b50
mov al, 1
movaps xmm3, xmm6
addss xmm3, xmm15
mulss xmm6, xmm15
subss xmm3, xmm6
test al, al
je 0x14003099b
movaps xmm0, xmm3
subss xmm0, xmm9
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mulsd xmm1, qword [0x140039660]
cvtpd2ps xmm2, xmm1
cmp r12d, dword [rsp + 0x68]
je 0x14003099b
movaps xmm0, xmm8
addss xmm0, xmm2
subss xmm0, xmm14
movss dword [rbp - 0x40], xmm0
addss xmm3, xmm14
movss dword [rbp - 0x3c], xmm3
subss xmm8, xmm2
subss xmm8, xmm14
movss dword [rbp - 0x70], xmm8
subss xmm9, xmm14
movss dword [rbp - 0x6c], xmm9
movaps xmm0, xmmword [0x140034f00]
movups xmmword [rbp + 0x50], xmm0
lea rcx, [rbp + 0x50]
call fcn.140007650
mov ebx, eax
call fcn.140009680
mov rcx, rax
movss dword [rsp + 0x30], xmm14
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm13
mov r9d, ebx
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x70]
call fcn.14001bac0
movss xmm9, dword [0x140039678]
inc edi
cmp edi, 0x20
jl 0x1400304b6
mov esi, dword [rsp + 0x60]
mov r13, qword [rsp + 0x78]
xor r12d, r12d
call fcn.140010630
xorps xmm0, xmm0
movups xmmword [rbp + 0x4c0], xmm0
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp - 0x78]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea r8, [rbp + 0x4c0]
mov rdx, qword [rbp - 0x78]
call qword [rax + 0x190]
call fcn.140009850
mov rcx, rax
call fcn.140029a30
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x40]
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ecx, ax
mov edx, r12d
movzx eax, sil
test cx, cx
cmovns edx, eax
movzx esi, dl
mov dword [rsp + 0x60], esi
test dl, dl
jne 0x140030380
call fcn.14002a690
call fcn.14002ac40
xor ecx, ecx
call fcn.1400081b0
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x140030a62
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140030a72
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x140030a81
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rcx, qword [0x1400401f8]
test rcx, rcx
je 0x140030aab
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
xor eax, eax
jmp 0x140030ac1
mov eax, 1
jmp 0x140030ac1
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x4d0]
xor rcx, rsp
call fcn.140030db0
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret