Function at 0x14003fb60
Capabilities:
Check for foreground window switch
Get graphical window text
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x15e0]
mov eax, 0x16e0
call fcn.140044bb0
sub rsp, rax
movaps xmmword [rsp + 0x16d0], xmm6
movaps xmmword [rsp + 0x16c0], xmm7
movaps xmmword [rsp + 0x16b0], xmm8
movaps xmmword [rsp + 0x16a0], xmm9
movaps xmmword [rsp + 0x1690], xmm10
movaps xmmword [rsp + 0x1680], xmm11
movaps xmmword [rsp + 0x1670], xmm12
movaps xmmword [rsp + 0x1660], xmm13
movaps xmmword [rsp + 0x1650], xmm14
movaps xmmword [rsp + 0x1640], xmm15
mov rax, qword [0x140055040]
xor rax, rsp
mov qword [rbp + 0x1538], rax
mov r14d, r9d
mov rsi, rcx
xor r12d, r12d
mov qword [rbp + 0x1240], r12
mov edi, r12d
mov r13d, r12d
mov qword [rbp + 0x1248], r12
mov dword [rbp + 0x13f0], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x13f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14003fcaa
lea r15, str.cs2.exe
nop
mov rcx, r12
lea rdx, [rbp + 0x141c]
nop word [rax + rax]
movzx eax, byte [r15 + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x14003fd17
cmp rcx, 8
jne 0x14003fc50
mov edi, dword [rbp + 0x13f8]
mov dword [rbp + 0x1240], edi
mov ecx, edi
call fcn.140043670
mov r13, rax
mov qword [rbp + 0x1248], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x14003fcaa
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r13, rax
mov qword [rbp + 0x1248], rax
test rbx, rbx
je 0x14003fcb8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp - 0x10], 0x238
mov edx, edi
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov r15, r12
mov qword [rsp + 0x70], r12
lea rdx, [rbp - 0x10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
je 0x14003fd3d
nop dword [rax + rax]
lea rdx, [rbp + 0x20]
lea rcx, str.client.dll
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x14003fd34
lea rdx, [rbp - 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x14003fcf0
jmp 0x14003fd3d
lea rdx, [rbp + 0x13f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14003fc40
jmp 0x14003fcaa
mov r15, qword [rbp + 8]
mov qword [rsp + 0x70], r15
test rbx, rbx
je 0x14003fd4b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x140057fb0], 0x50
mov dword [0x140057fb4], 3
lea rax, [0x14003e9f0]
mov qword [0x140057fb8], rax
mov qword [0x140057fc8], rsi
lea rbx, str.cs2yinlei
mov qword [0x140057ff0], rbx
lea rcx, [0x140057fb0]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], r12
mov rax, qword [0x140057fc8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov eax, dword [0x1400557cc]
mov dword [rsp + 0x38], eax
mov eax, dword [0x1400557c8]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
mov r9d, 0x80000000
mov r8, rbx
mov rdx, qword [0x140057ff0]
mov ecx, 0x80028
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140058000], rax
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1250], xmm0
lea rdx, [rbp + 0x1250]
mov rcx, qword [0x140058000]
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1270], xmm0
lea rdx, [rbp + 0x1270]
mov rcx, qword [0x140058000]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp - 0x18], r12
lea rdx, [rbp - 0x18]
mov rcx, qword [0x140058000]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp - 0x18]
mov dword [rbp + 0x1280], eax
mov eax, dword [rbp - 0x14]
mov dword [rbp + 0x1284], eax
mov eax, dword [rbp + 0x1258]
mov dword [rbp + 0x1288], eax
mov eax, dword [rbp + 0x125c]
mov dword [rbp + 0x128c], eax
lea rdx, [rbp + 0x1280]
mov rcx, qword [0x140058000]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, r14d
mov rcx, qword [0x140058000]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140058000]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
xor r14d, r14d
mov qword [0x140057f40], r14
mov qword [0x140057f54], r14
mov qword [0x140057f5c], 1
mov qword [0x140057f68], 2
mov qword [0x140057f80], 2
mov dword [0x140057f48], 0x3c
mov dword [0x140057f4c], 1
mov dword [0x140057f50], 0x1c
mov dword [0x140057f64], 0x20
mov rax, qword [0x140058000]
mov qword [0x140057f70], rax
mov qword [0x140057f78], 1
mov dword [rbp + 0x1520], 0xb000
mov dword [rbp + 0x1524], 0xa000
lea rax, [0x140057fa0]
mov qword [rsp + 0x58], rax
lea rax, [0x140057f9c]
mov qword [rsp + 0x50], rax
lea rax, [0x140057fa8]
mov qword [rsp + 0x48], rax
lea rax, [0x140057f90]
mov qword [rsp + 0x40], rax
lea rax, [0x140057f40]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x1520]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov qword [rbp - 0x18], r14
mov rcx, qword [0x140057f90]
mov rax, qword [rcx]
lea r9, [rbp - 0x18]
lea r8, [0x14004df70]
xor edx, edx
call qword [rax + 0x48]
mov rdx, qword [rbp - 0x18]
test rdx, rdx
je 0x14003ffe5
mov rcx, qword [0x140057fa8]
mov rax, qword [rcx]
lea r9, [0x140057f30]
xor r8d, r8d
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
call fcn.14003ea70
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1220], xmm0
mov qword [rbp + 0x1230], r14
movabs rdi, 0xe38e38e38e38e39
movzx eax, byte [0x1400550d4]
test al, al
je 0x1400414ec
movzx ebx, byte [rbp + 0x1200]
xorps xmm8, xmm8
mov rcx, qword [rbp + 0x1220]
mov rdx, qword [rbp + 0x1228]
cmp rcx, rdx
je 0x140040046
call fcn.1400419b0
mov rax, qword [rbp + 0x1220]
mov qword [rbp + 0x1228], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140040063
cmp byte [0x1400550d3], 0
sete byte [0x1400550d3]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x12a0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400400db
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rbp + 0x12a0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x12a0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x12a8], 0x12
jne 0x1400400ba
mov byte [0x1400550d4], 0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x12a0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140040090
mov rax, qword [0x140055798]
test rax, rax
je 0x1400400f0
mov rcx, qword [rax + 0x98]
jmp 0x1400400f3
mov rcx, r14
cmp qword [rcx + 0x48], 0
jne 0x1400400ff
call fcn.14002f350
call fcn.140030590
call fcn.140008600
nop
call fcn.14003f000
lea rdx, [r15 + 0x17371a8]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp - 0x18]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12, qword [rbp - 0x18]
lea rdx, [r12 + 0x127c]
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x68], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rsp + 0x60]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r12 + 0xc58]
mov qword [rbp - 0x70], 0
mov dword [rbp - 0x68], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x70]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r12 + 0x3cb]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1264]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1260]
lea rdx, [r12 + 0x14b8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r12 + 0x3d4]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x129c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r12 + 0x15a4]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x13a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x19241a0]
mov qword [rsp + 0x20], r14
mov r9d, 0x40
lea r8, [rbp + 0x13b0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x18c2d58]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1390]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x1390]
mov qword [rbp + 0x1520], rsi
cmp byte [0x1400550d2], 0
je 0x1400402b5
movss xmm0, dword [rbp + 0x1260]
comiss xmm0, xmm8
jbe 0x1400402b5
mov dword [rbp + 0x1208], 0
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1208]
lea rdx, [r12 + 0x14b8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140057f88], 0
je 0x14004040f
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004040f
mov eax, dword [rbp + 0x129c]
add eax, 0xfffeff7f
test eax, 0xfffffffd
je 0x140040318
mov dword [rbp + 0x1208], pe_nt_image_headers64
lea rdx, [r15 + 0x1730530]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1208]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14004040f
lea rcx, [rbp - 0x28]
call fcn.14003f8c0
mov rax, qword [rbp - 0x28]
movabs rdx, 0x7ffffffffff0bdbf
mov ebx, 0xff
cmp rax, rdx
je 0x14004034c
mov ecx, 1
cmovl ecx, ebx
test cl, cl
lea rdi, [rax + 0xf4240]
js 0x140040356
movabs rdi, 0x7fffffffffffffff
movabs rsi, 0x431bde82d7b634db
movabs r12, 0x4e94914effff
nop word [rax + rax]
lea rcx, [rbp - 0x20]
call fcn.14003f8c0
mov rax, qword [rbp - 0x20]
cmp rdi, rax
je 0x1400403d1
mov ecx, 1
cmovl ecx, ebx
test cl, cl
jle 0x1400403d1
mov rcx, rdi
sub rcx, rax
cmp rcx, r12
jg 0x1400403c5
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x1400403bc
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140040370
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140040370
mov dword [rbp + 0x1208], 0x10001
lea rdx, [r15 + 0x1730530]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1208]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ebx, byte [rbp + 0x1200]
mov rsi, qword [rbp + 0x1520]
mov r12, qword [rbp - 0x18]
mov eax, 1
mov dword [rbp + 0x1208], eax
movss xmm9, dword [rsp + 0x68]
movss xmm10, dword [rsp + 0x64]
movss xmm11, dword [rsp + 0x60]
nop
and eax, 0x7fff
shl eax, 3
sar eax, 9
mov edx, eax
add rdx, 0x10
add rdx, rsi
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1398]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x1398]
test rcx, rcx
je 0x140040f33
mov eax, dword [rbp + 0x1208]
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1360]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x1360]
test r14, r14
je 0x140040f30
lea rdx, [r14 + 0x3cb]
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 4]
lea r8, [rbp + 0x1238]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea r8, [r14 + 0x638]
lea rdx, [rbp + 0x12a0]
lea rcx, [rbp + 0x1240]
call fcn.1400417b0
mov eax, dword [rbp + 0x1264]
cmp dword [rbp + 0x1238], eax
jne 0x140040543
mov rdx, qword [rbp + 0x12b8]
cmp rdx, 0xf
jbe 0x140040537
inc rdx
mov rcx, qword [rbp + 0x12a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040532
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400415e8
call fcn.140043ecc
mov r13, qword [rbp + 0x1248]
jmp 0x140040f30
lea rdx, [r14 + 0x7e4]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x1268]
mov r13, qword [rbp + 0x1248]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0x1268]
mov edx, edi
shr edx, 9
and edx, 0x3f
shl edx, 3
add rdx, 0x10
add rdx, rsi
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x1368]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x1368]
test rcx, rcx
jne 0x1400405f5
mov rdx, qword [rbp + 0x12b8]
cmp rdx, 0xf
jbe 0x140040f30
inc rdx
mov rcx, qword [rbp + 0x12a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400405eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400415e8
call fcn.140043ecc
jmp 0x140040f30
and edi, 0x1ff
imul edx, edi, 0x78
add rdx, rcx
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x1370]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x1370]
test rsi, rsi
je 0x140040ee8
cmp rsi, r12
je 0x140040ee8
lea rdx, [rsi + 0x334]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x121c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rsi + 0x338]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x1290]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x121c]
dec eax
cmp eax, 0x63
ja 0x140040ee8
cmp dword [rbp + 0x1290], 0x100
jne 0x140040ee8
cmp byte [0x140058013], r15b
je 0x1400406ee
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x1218]
lea rdx, [r14 + 0x16a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [rbp + 0x1200], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x1200]
lea rdx, [r14 + 0x16a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x1400550d5], r15b
je 0x140040723
mov dword [rbp + 0x1210], 0x47a8c000
lea rdx, [rsi + 0x1440]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x1210]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp + 0x12d0], xmm0
mov qword [rbp + 0x12e0], r15
mov qword [rbp + 0x12e8], 0xf
mov byte [rbp + 0x12d0], r15b
mov qword [rbp + 0x1318], r15
movaps xmmword [rbp + 0x1320], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0x1330], xmm1
mov qword [rbp + 0x1340], r15
mov qword [rbp + 0x134c], r15
mov qword [rbp + 0x1354], r15
lea r9, [rbp + 0x12a0]
mov r12, qword [rbp + 0x12a0]
mov r15, qword [rbp + 0x12b8]
cmp r15, 0xf
cmova r9, r12
mov rdi, qword [rbp + 0x12b0]
lea rcx, [rbp + 0x12d0]
cmp rdi, 0xf
ja 0x1400407c0
mov qword [rbp + 0x12e0], rdi
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rdi + 0x12d0], 0
jmp 0x1400407d6
mov rdx, rdi
call fcn.140041a40
mov r12, qword [rbp + 0x12a0]
mov r15, qword [rbp + 0x12b8]
mov qword [rbp + 0x12f0], rsi
mov qword [rbp + 0x12f8], r14
mov edi, dword [rbp + 0x121c]
mov dword [rbp + 0x1300], edi
mov dword [rbp + 0x1310], pe_nt_image_headers64
mov eax, dword [rbp + 0x1238]
mov dword [rbp + 0x1304], eax
mov qword [rbp - 0x7c], 0
mov dword [rbp - 0x74], 0
lea rdx, [rsi + 0x127c]
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp - 0x7c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x7c]
movss dword [rbp + 0x1324], xmm6
movss xmm8, dword [rbp - 0x78]
movss dword [rbp + 0x1328], xmm8
movss xmm7, dword [rbp - 0x74]
movss dword [rbp + 0x132c], xmm7
mov qword [rbp - 0x58], r14
mov dword [rbp - 0x50], r14d
lea rdx, [rsi + 0xc58]
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp - 0x58]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp - 0x58]
movsd qword [rbp + 0x1330], xmm0
mov eax, dword [rbp - 0x50]
mov dword [rbp + 0x1338], eax
subss xmm7, xmm9
subss xmm8, xmm10
subss xmm6, xmm11
mulss xmm8, xmm8
mulss xmm6, xmm6
addss xmm8, xmm6
mulss xmm7, xmm7
addss xmm8, xmm7
xorps xmm0, xmm0
ucomiss xmm0, xmm8
ja 0x1400408d2
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x1400408db
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss dword [rbp + 0x1348], xmm0
lea rdx, [rsi + 0x318]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1378]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1378]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1380]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x78], r14
mov dword [rbp - 0x80], r14d
mov rdx, qword [rbp + 0x1380]
add rdx, 0xc0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rsp + 0x78]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x78]
movss dword [rbp + 0x1318], xmm0
movss xmm1, dword [rsp + 0x7c]
movss dword [rbp + 0x131c], xmm1
movss xmm0, dword [rbp - 0x80]
movss dword [rbp + 0x1320], xmm0
mov rax, qword [rbp + 0x1228]
cmp rax, qword [rbp + 0x1230]
je 0x1400409b3
lea rdx, [rbp + 0x12d0]
mov rcx, rax
call fcn.140042ab0
add qword [rbp + 0x1228], 0x90
jmp 0x1400409c9
lea r8, [rbp + 0x12d0]
mov rdx, rax
lea rcx, [rbp + 0x1220]
call fcn.140042000
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0x230]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rdx, [0x14004e0b0]
lea rcx, [rbp + 0x230]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140040aa8
lea rdx, str.Counter
lea rcx, [rbp + 0x230]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140040aa8
mov rdx, qword [rbp + 0x12e8]
cmp rdx, 0xf
jbe 0x140040a60
inc rdx
mov rcx, qword [rbp + 0x12d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040a5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400415e8
call fcn.140043ecc
cmp r15, 0xf
jbe 0x140040a98
lea rdx, [r15 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140040a90
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400415e8
mov rcx, r12
call fcn.140043ecc
mov rsi, qword [rbp + 0x1520]
mov r12, qword [rbp - 0x18]
jmp 0x140040f33
movss xmm11, dword [rbp + 0x13c0]
movaps xmm6, xmm11
movss xmm10, dword [rbp + 0x1324]
mulss xmm6, xmm10
movss xmm5, dword [rbp + 0x13c4]
movaps xmm0, xmm5
mulss xmm0, dword [rbp + 0x1328]
addss xmm6, xmm0
movss xmm12, dword [rbp + 0x13c8]
movaps xmm1, xmm12
mulss xmm1, dword [rbp + 0x132c]
addss xmm6, xmm1
movss xmm15, dword [rbp + 0x13cc]
addss xmm6, xmm15
movss xmm13, dword [rbp + 0x13e0]
movaps xmm4, xmm13
mulss xmm4, xmm10
movss xmm7, dword [rbp + 0x13e4]
movaps xmm0, xmm7
mulss xmm0, dword [rbp + 0x1328]
addss xmm4, xmm0
movss xmm14, dword [rbp + 0x13e8]
movaps xmm1, xmm14
mulss xmm1, dword [rbp + 0x132c]
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x13ec]
movss xmm0, dword [0x14004e0d8]
comiss xmm0, xmm4
ja 0x140040e4e
movss xmm0, dword [0x14004e15c]
divss xmm0, xmm4
mov ecx, dword [0x1400557cc]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm9, xmm9
cvtsi2ss xmm9, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, ecx
movss dword [rbp + 0x1210], xmm1
mulss xmm0, xmm6
mulss xmm0, dword [0x14004e124]
mulss xmm0, xmm1
addss xmm0, dword [0x14004e124]
movaps xmm8, xmm9
subss xmm8, xmm0
movss xmm6, dword [rbp + 0x13b4]
movss xmm4, dword [rbp + 0x131c]
mulss xmm6, xmm4
movss xmm0, dword [rbp + 0x13b0]
movss xmm3, dword [rbp + 0x1318]
mulss xmm0, xmm3
addss xmm6, xmm0
movss xmm1, dword [rbp + 0x13b8]
movss xmm2, dword [rbp + 0x1320]
mulss xmm1, xmm2
addss xmm6, xmm1
addss xmm6, dword [rbp + 0x13bc]
mulss xmm5, xmm4
mulss xmm11, xmm3
addss xmm5, xmm11
mulss xmm12, xmm2
addss xmm5, xmm12
addss xmm5, xmm15
mulss xmm7, xmm4
mulss xmm13, xmm3
addss xmm7, xmm13
mulss xmm14, xmm2
addss xmm7, xmm14
addss xmm7, dword [rbp + 0x13ec]
movss xmm0, dword [0x14004e0d8]
comiss xmm0, xmm7
ja 0x140040e47
movss xmm13, dword [0x14004e15c]
movaps xmm1, xmm13
divss xmm1, xmm7
mulss xmm6, xmm1
movss xmm12, dword [0x14004e124]
mulss xmm6, xmm12
mov eax, dword [0x1400557c8]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm6, xmm0
addss xmm6, xmm12
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm6, xmm0
mulss xmm5, xmm1
mulss xmm5, xmm12
mulss xmm5, dword [rbp + 0x1210]
addss xmm5, xmm12
subss xmm9, xmm5
xorps xmm11, xmm11
ucomiss xmm10, xmm11
jp 0x140040cbc
je 0x140040e47
subss xmm8, xmm9
movaps xmm0, xmm8
divss xmm0, dword [0x14004e190]
movaps xmm7, xmm0
mulss xmm7, xmm12
cmp byte [0x1400550d1], r14b
je 0x140040d7f
cvttss2si r14d, xmm8
cvttss2si edi, xmm0
cvttss2si r15d, xmm9
movaps xmm0, xmm6
subss xmm0, xmm7
cvttss2si esi, xmm0
mov rax, qword [0x140055798]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007cb0
lea ecx, [rsi + rdi]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x34], xmm0
lea ecx, [r15 + r14]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x30], xmm1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x4c], xmm0
movd xmm1, r15d
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x48], xmm1
movss dword [rsp + 0x30], xmm13
movss dword [rsp + 0x20], xmm11
mov r9d, 0xff0000ff
lea r8, [rbp - 0x34]
lea rdx, [rbp - 0x4c]
mov rcx, rax
call fcn.140028870
mov edi, dword [rbp + 0x121c]
xor r14d, r14d
cmp byte [0x1400550d0], 0
je 0x140040e47
mov eax, 0x64
sub eax, edi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm8
divss xmm0, dword [0x14004e1ec]
subss xmm8, xmm0
cvttss2si esi, xmm8
addss xmm0, xmm9
cvttss2si r14d, xmm0
addss xmm7, dword [0x14004e1d0]
subss xmm6, xmm7
cvttss2si edi, xmm6
mov rax, qword [0x140055798]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007cb0
lea ecx, [rdi + 2]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x44], xmm0
lea ecx, [rsi + r14]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x40], xmm1
movd xmm0, edi
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x3c], xmm0
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x38], xmm1
xor r14d, r14d
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm11
mov r9d, 0xff00ff00
lea r8, [rbp - 0x44]
lea rdx, [rbp - 0x3c]
mov rcx, rax
call fcn.140028980
movss xmm9, dword [rsp + 0x68]
mov rdx, qword [rbp + 0x12e8]
cmp rdx, 0xf
jbe 0x140040e8f
inc rdx
mov rcx, qword [rbp + 0x12d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040e8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400415e8
call fcn.140043ecc
mov rdx, qword [rbp + 0x12b8]
cmp rdx, 0xf
jbe 0x140040ecd
inc rdx
mov rax, r12
cmp rdx, 0x1000
jb 0x140040ec5
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400415e8
mov rcx, r12
call fcn.140043ecc
movss xmm10, dword [rsp + 0x64]
movss xmm11, dword [rsp + 0x60]
mov rsi, qword [rbp + 0x1520]
mov r12, qword [rbp - 0x18]
jmp 0x140040f33
mov rdx, qword [rbp + 0x12b8]
cmp rdx, 0xf
jbe 0x140040f29
inc rdx
mov rcx, qword [rbp + 0x12a0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140040f24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400415e8
call fcn.140043ecc
mov rsi, qword [rbp + 0x1520]
xor r14d, r14d
mov eax, dword [rbp + 0x1208]
inc eax
mov dword [rbp + 0x1208], eax
cmp eax, 0x40
jl 0x140040430
movabs rdi, 0xe38e38e38e38e39
cmp byte [0x140057f98], 0
je 0x140041232
mov rcx, qword [rbp + 0x1228]
sub rcx, qword [rbp + 0x1220]
mov rax, rdi
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140041232
mov ecx, 0x45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140041232
mov r14, qword [rbp + 0x1220]
mov r15, qword [rbp + 0x1228]
mov r8, r15
sub r8, r14
mov rax, rdi
imul r8
mov rsi, rdx
sar rsi, 3
mov rax, rsi
shr rax, 0x3f
add rsi, rax
cmp rsi, 0x20
jg 0x140040fde
mov rdx, r15
mov rcx, r14
call fcn.140041be0
jmp 0x140041096
mov rax, rsi
cqo
sub rax, rdx
sar rax, 1
mov rdi, rsi
sub rdi, rax
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
cmp rdi, rcx
cmovl rax, rdi
cmp rdi, 0x1c
jbe 0x140041051
mov rdi, rax
movabs rcx, 0x1c71c71c71c71c7
cmp rax, rcx
ja 0x140041042
test rax, rax
jle 0x140041042
lea rcx, [rdi + rdi*8]
shl rcx, 4
lea rdx, [0x140046650]
call fcn.140044150
test rax, rax
jne 0x140041145
shr rdi, 1
jne 0x140041020
xor eax, eax
mov rcx, rax
call fcn.140044164
mov edi, 0x1c
lea rax, [rbp + 0x240]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x238], rdi
mov byte [rsp + 0x28], bl
mov qword [rsp + 0x20], rdi
mov r9, rax
mov r8, rsi
mov rdx, r15
mov rcx, r14
call fcn.140041f00
cmp qword [rbp + 0x238], 0x1c
jbe 0x140041096
mov rcx, qword [rbp + 0x230]
call fcn.140044164
movss xmm8, dword [rbp - 0x68]
addss xmm8, xmm9
movss xmm1, dword [rbp - 0x6c]
addss xmm1, xmm10
mov rdi, qword [rbp + 0x1220]
movss xmm0, dword [rbp - 0x70]
addss xmm0, xmm11
movss xmm6, dword [rdi + 0x48]
subss xmm6, xmm0
movss xmm7, dword [rdi + 0x4c]
subss xmm7, xmm1
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
movsd xmm11, qword [0x14004e1b0]
mulsd xmm1, xmm11
movsd xmm12, qword [0x14004e188]
divsd xmm1, xmm12
cvtpd2ps xmm10, xmm1
movss xmm9, dword [rdi + 0x50]
subss xmm9, xmm8
cvtps2pd xmm0, xmm6
movsd xmm1, qword [0x14004e180]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm7
movsd xmm1, qword [0x14004e180]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x140041154
xorps xmm1, xmm1
sqrtsd xmm1, xmm0
jmp 0x14004115c
cmp rdi, 0x1c
jbe 0x140041044
jmp 0x140041058
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm1, xmm0
cvtps2pd xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
mulsd xmm0, xmm11
divsd xmm0, xmm12
xorps xmm0, xmmword [0x14004e2f0]
cvtsd2ss xmm0, xmm0
unpcklps xmm0, xmm10
movsd qword [rbp + 0x1280], xmm0
xorps xmm8, xmm8
movss dword [rbp + 0x1288], xmm8
mov r15, qword [rsp + 0x70]
lea rdx, [r15 + 0x19309b0]
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp + 0x1280]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x1210], 0x10001
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 4]
lea r8, [rbp + 0x1210]
lea rdx, [r15 + 0x1730020]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0x1520], 1
lea rcx, [rbp + 0x1520]
call fcn.1400416e0
mov dword [rbp + 0x1210], pe_nt_image_headers64
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 4]
lea r8, [rbp + 0x1210]
lea rdx, [r15 + 0x1730020]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movabs rdi, 0xe38e38e38e38e39
jmp 0x14004123b
xorps xmm8, xmm8
mov r15, qword [rsp + 0x70]
cmp byte [0x140058012], 0
je 0x14004143a
lea rdx, [r12 + 0x147c]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1294]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x19209e8]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1388]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1388]
add rdx, 0x40
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1298]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r12 + 0x17a0]
mov qword [rbp + 0x1250], r14
mov qword [rbp + 0x1258], r14
mov qword [rsp + 0x20], r14
mov r9d, 0x10
lea r8, [rbp + 0x1250]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1258]
test rdx, rdx
je 0x1400414dd
mov rcx, qword [rbp + 0x1250]
lea rax, [rcx - 1]
cmp rax, 0xfffd
ja 0x1400414dd
dec rcx
lea rax, [rcx + rcx*2]
lea rdx, [rdx + rax*4]
mov qword [rbp - 0x64], 0
mov dword [rbp - 0x5c], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x64]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x1294], 1
jle 0x140041425
mov qword [rbp + 0x1270], 0
mov dword [rbp + 0x1278], 0
lea rdx, [r15 + 0x19309b0]
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp + 0x1270]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp - 0x60]
addss xmm7, xmm7
movss xmm6, dword [rbp - 0x64]
addss xmm6, xmm6
movss xmm1, dword [0x14005801c]
subss xmm1, xmm7
movss xmm3, dword [rbp + 0x1274]
movaps xmm0, xmm3
addss xmm0, xmm1
subss xmm3, xmm0
movss xmm2, dword [rbp + 0x1298]
mulss xmm2, dword [0x14004e0dc]
movss xmm0, dword [0x140058018]
subss xmm0, xmm6
movss xmm1, dword [rbp + 0x1270]
addss xmm0, xmm1
subss xmm1, xmm0
divss xmm1, xmm2
cvttss2si edx, xmm1
divss xmm3, xmm2
cvttss2si r8d, xmm3
neg r8d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
movss xmm1, dword [rbp - 0x5c]
addss xmm1, xmm1
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [0x140058018], xmm0
movss dword [0x140058020], xmm1
jmp 0x14004143a
mov qword [0x14005801c], 0
mov dword [0x140058018], 0
call fcn.14000a2e0
call fcn.14000a700
xorps xmm0, xmm0
movups xmmword [rbp + 0x1528], xmm0
mov rcx, qword [0x140057fa0]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140057f30]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x140057fa0]
mov rax, qword [rcx]
lea r8, [rbp + 0x1528]
mov rdx, qword [0x140057f30]
call qword [rax + 0x190]
mov rax, qword [0x140055798]
mov rax, qword [rax + 0x4b00]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r14
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14002e8f0
mov rcx, qword [0x140057f90]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [rax + 0x40]
nop
mov qword [rbp + 0x1520], 4
lea rcx, [rbp + 0x1520]
call fcn.1400416e0
movzx eax, byte [0x1400550d4]
test al, al
jne 0x140040020
call fcn.14003edc0
nop
mov rcx, qword [0x140057f30]
test rcx, rcx
je 0x14004150b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140057f30], r14
mov rcx, qword [0x140057f90]
test rcx, rcx
je 0x140041524
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140057f90], r14
mov rcx, qword [0x140057fa0]
test rcx, rcx
je 0x14004153d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140057fa0], r14
mov rcx, qword [0x140057fa8]
test rcx, rcx
je 0x140041556
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140057fa8], r14
mov rcx, qword [0x140058000]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x140057fc8]
mov rcx, qword [0x140057ff0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rcx, qword [rbp + 0x1220]
test rcx, rcx
je 0x140041609
mov rdx, qword [rbp + 0x1228]
call fcn.1400419b0
mov rcx, qword [rbp + 0x1230]
mov r8, qword [rbp + 0x1220]
sub rcx, r8
mov rax, rdi
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 4
mov rax, r8
cmp rdx, 0x1000
jb 0x1400415ef
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400415ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.140043ecc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1220], xmm0
mov qword [rbp + 0x1230], r14
test r13, r13
je 0x140041617
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400557b0]
test rcx, rcx
je 0x140041629
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rcx, qword [rbp + 0x1538]
xor rcx, rsp
call fcn.140043d30
lea r11, [rsp + 0x16e0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret