Function at 0x140031050
Capabilities:
Enumerate process modules
Hide graphical window
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x6b8]
sub rsp, 0x780
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x80]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rbp + 0x30], 0x50
mov dword [rbp + 0x34], 0x40
lea rax, [0x14002fd80]
mov qword [rbp + 0x38], rax
xor esi, esi
mov qword [rbp + 0x40], rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x48], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
lea rax, str.Login_Panel
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rsi
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov eax, dword [rbp + 0x8c]
cdq
sub eax, edx
sar eax, 1
lea r8d, [rax - 0x5a]
mov eax, dword [rbp + 0x88]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x96
mov qword [rsp + 0x58], rsi
mov rcx, qword [rbp + 0x48]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0xb4
mov dword [rsp + 0x30], 0x12c
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.dasdasdasdasd
mov rdx, qword [rbp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r13, rax
mov qword [rbp - 0x28], rax
lea r9d, [rsi + 1]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea ecx, [rsi + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x14008b358], rax
test rax, rax
je 0x140032a51
mov qword [0x14008b370], rsi
mov qword [0x14008b37c], rsi
mov dword [0x14008b384], esi
mov qword [0x14008b38c], rsi
mov dword [0x14008b394], esi
mov qword [0x14008b3a4], rsi
mov dword [0x14008b398], 1
mov dword [0x14008b388], 1
mov dword [0x14008b378], esi
mov dword [0x14008b39c], 1
mov dword [0x14008b3a0], 0x50
mov dword [0x14008b3ac], 0x80000000
mov rax, qword [rax]
lea rdx, [0x14008b360]
mov qword [rsp + 0x30], rdx
lea rdx, [0x14008b370]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, r13
xor edx, edx
lea r8d, [rsi + 1]
call qword [rax + 0x80]
test eax, eax
js 0x140032a4a
lea edx, [rsi + 0xa]
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r13
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsi - 1]
mov rcx, r13
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x14008b100]
test rax, rax
je 0x1400312bc
inc dword [rax + 0x3b4]
mov ecx, 0x3db8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x6d0], rax
lea rcx, [rbp + 0x6c8]
mov qword [rbp + 0x6d8], rcx
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1400312f1
xor edx, edx
mov rcx, rax
call fcn.140001810
jmp 0x1400312f4
mov rax, rsi
cmp qword [0x14008b100], 0
jne 0x140031305
mov qword [0x14008b100], rax
mov rcx, rax
call fcn.140007e40
mov rbx, qword [0x14008b100]
test rbx, rbx
jne 0x14003133a
mov r8d, 0xd3d
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x140035870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14008b100]
lea rax, [0x14006f5b8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
movss xmm3, dword [0x1400700fc]
mov r8d, 0x10
lea rdx, [0x140076090]
mov rcx, qword [rbx + 0xa8]
call fcn.140024470
cmp qword [0x14008b100], 0
jne 0x140031390
mov r8d, 0xd3d
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x140035870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
or dword [rbx + 8], 1
xor ecx, ecx
call fcn.14001fae0
lea rcx, [0x14008b350]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140031548
lea rcx, [0x14008b348]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140031548
mov qword [0x14008b340], r13
mov rax, qword [0x14008b100]
test rax, rax
jne 0x1400313f9
mov r8d, 0xd3d
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x140035870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
or dword [rax + 0xc], 6
lea rcx, str.imgui_impl_win32
mov qword [rax + 0xd8], rcx
mov qword [rax + 0x120], r13
mov dword [rax + 0x3c], 9
mov dword [rax + 0x40], 0x25
mov dword [rax + 0x44], 0x27
mov dword [rax + 0x48], 0x26
mov dword [rax + 0x4c], 0x28
mov dword [rax + 0x50], 0x21
mov dword [rax + 0x54], 0x22
mov dword [rax + 0x58], 0x24
mov dword [rax + 0x5c], 0x23
mov dword [rax + 0x60], 0x2d
mov dword [rax + 0x64], 0x2e
mov dword [rax + 0x68], 8
mov dword [rax + 0x6c], 0x20
mov dword [rax + 0x70], 0xd
mov dword [rax + 0x74], 0x1b
mov dword [rax + 0x78], 0xd
mov dword [rax + 0x7c], 0x41
mov dword [rax + 0x80], 0x43
mov dword [rax + 0x84], 0x56
mov dword [rax + 0x88], 0x58
mov dword [rax + 0x8c], 0x59
mov dword [rax + 0x90], 0x5a
lea rax, str.xinput1_4.dll
mov qword [rbp - 0x58], rax
lea rax, str.xinput1_3.dll
mov qword [rbp - 0x50], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp - 0x48], rax
lea rax, str.xinput1_2.dll
mov qword [rbp - 0x40], rax
lea rax, str.xinput1_1.dll
mov qword [rbp - 0x38], rax
mov rbx, rsi
mov rcx, qword [rbp + rbx*8 - 0x58]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
jne 0x140031513
inc rbx
cmp rbx, 5
jl 0x1400314f5
jmp 0x140031548
mov qword [0x14008b328], rdi
lea rdx, str.XInputGetCapabilities
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b330], rax
lea rdx, str.XInputGetState
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b338], rax
mov rbx, qword [0x14008b360]
mov rax, qword [0x14008b100]
test rax, rax
jne 0x14003157c
mov r8d, 0xd3d
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x140035870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
lea rcx, str.imgui_impl_dx9
mov qword [rax + 0xe0], rcx
or dword [rax + 0xc], 8
mov qword [0x14008b310], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov rax, qword [0x14008b100]
test rax, rax
jne 0x1400315cb
mov r8d, 0x952
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x140035870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
mov dword [rax + 0x156c], esi
mov dword [rax + 0x15a0], 0x40400000
mov dword [rax + 0x1570], 0x3f800000
mov dword [rax + 0x157c], 0x3f000000
mov dword [rax + 0x1580], 0x3f000000
mov word [rax + 0x1618], 0x101
mov byte [rax + 0x161a], 1
movaps xmm0, xmmword [0x140070310]
movups xmmword [rax + 0x1774], xmm0
test rax, rax
jne 0x14003163d
mov r8d, 0x952
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x140035870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
movaps xmm0, xmmword [0x140070370]
movups xmmword [rax + 0x1624], xmm0
movaps xmm1, xmmword [0x140070340]
movups xmmword [rax + 0x1634], xmm1
movaps xmm0, xmmword [0x140070260]
movups xmmword [rax + 0x1644], xmm0
movaps xmm1, xmmword [0x1400702b0]
movups xmmword [rax + 0x1654], xmm1
movaps xmm0, xmmword [0x140070250]
movups xmmword [rax + 0x1664], xmm0
movaps xmm1, xmmword [0x140070200]
movups xmmword [rax + 0x1674], xmm1
xorps xmm0, xmm0
movups xmmword [rax + 0x1684], xmm0
movaps xmm1, xmmword [0x1400702d0]
movups xmmword [rax + 0x1694], xmm1
movaps xmm0, xmmword [0x140070300]
movups xmmword [rax + 0x16a4], xmm0
movaps xmm1, xmmword [0x140070360]
movups xmmword [rax + 0x16b4], xmm1
movaps xmm0, xmmword [0x140070290]
movups xmmword [rax + 0x16c4], xmm0
movaps xmm1, xmmword [0x1400702a0]
movups xmmword [rax + 0x16d4], xmm1
movaps xmm0, xmmword [0x140070210]
movups xmmword [rax + 0x16e4], xmm0
movaps xmm1, xmmword [0x1400702b0]
movups xmmword [rax + 0x16f4], xmm1
movaps xmm0, xmmword [0x140070220]
movups xmmword [rax + 0x1704], xmm0
movaps xmm1, xmmword [0x1400702f0]
movups xmmword [rax + 0x1714], xmm1
movaps xmm0, xmmword [0x140070320]
movups xmmword [rax + 0x1724], xmm0
movaps xmm1, xmmword [0x140070350]
movups xmmword [rax + 0x1734], xmm1
movaps xmm0, xmmword [0x140070370]
movups xmmword [rax + 0x1744], xmm0
movaps xmm1, xmmword [0x1400702d0]
movups xmmword [rax + 0x1754], xmm1
movaps xmm0, xmmword [0x140070360]
movups xmmword [rax + 0x1764], xmm0
movups xmmword [rax + 0x1774], xmm1
movaps xmm0, xmmword [0x140070300]
movups xmmword [rax + 0x1784], xmm0
movaps xmm1, xmmword [0x140070360]
movups xmmword [rax + 0x1794], xmm1
movaps xmm0, xmmword [0x1400702c0]
movups xmmword [rax + 0x17a4], xmm0
movaps xmm1, xmmword [0x140070300]
movups xmmword [rax + 0x17b4], xmm1
movaps xmm0, xmmword [0x140070360]
movups xmmword [rax + 0x17c4], xmm0
movaps xmm1, xmmword [0x140070230]
movups xmmword [rax + 0x17d4], xmm1
movaps xmm0, xmmword [0x140070240]
movups xmmword [rax + 0x17e4], xmm0
movaps xmm1, xmmword [0x1400702e0]
movups xmmword [rax + 0x17f4], xmm1
movaps xmm0, xmmword [0x140070230]
movups xmmword [rax + 0x1804], xmm0
movaps xmm1, xmmword [0x140070240]
movups xmmword [rax + 0x1814], xmm1
movaps xmm0, xmmword [0x1400702e0]
movups xmmword [rax + 0x1824], xmm0
movaps xmm1, xmmword [0x1400702b0]
movups xmmword [rax + 0x1834], xmm1
movaps xmm0, xmmword [0x140070300]
movups xmmword [rax + 0x1844], xmm0
movaps xmm1, xmmword [0x140070360]
movups xmmword [rax + 0x1854], xmm1
movaps xmm0, xmmword [0x1400702b0]
movups xmmword [rax + 0x1864], xmm0
call fcn.1400306b0
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movabs rdi, 0x27a117a1b08d2bb
movabs rbx, 0xcbe1acabd11902c0
movabs r12, 0x62efa3378a05241c
lea r14, [0x14008b3e0]
lea r15, [0x14008b4b0]
xorps xmm14, xmm14
movss xmm13, dword [0x140070144]
movss xmm15, dword [0x140070108]
movss xmm9, dword [0x1400700a8]
movss xmm10, dword [0x1400700b8]
movss xmm11, dword [0x1400700d4]
movss xmm12, dword [0x1400700c0]
nop dword [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xf0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140031900
lea rcx, [rbp + 0xf0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x14003292e
cmp byte [0x14008afa0], 0
je 0x140032a41
cmp qword [0x14008b300], 0
jne 0x14003191c
call fcn.14002ee40
call fcn.14002f530
call fcn.140006b50
mov rax, qword [0x14008b100]
mov dword [rax + 0x1ba8], 0x43960000
mov dword [rax + 0x1bac], 0x43340000
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm14
unpcklps xmm0, xmm14
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm14
unpcklps xmm1, xmm14
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], r12
movabs rax, 0x4b5dcacc108528bd
mov qword [rbp - 0x80], rax
movabs rax, 0x120e5e89c0e59e4e
mov qword [rbp - 0x78], rax
movabs rax, 0xe4dba80e2ca6d6cf
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rbx
movabs rax, 0x543531285e4081fa
mov qword [rbp - 0x58], rax
movabs rax, 0x4293836ecb497659
mov qword [rbp - 0x50], rax
movabs rax, 0x47d9e9e55d666f4
mov qword [rbp - 0x48], rax
movabs rax, 0x5e4d7eafe0abdb1e
mov qword [rbp - 0x40], rax
movabs rax, 0xe4dba80e2ce38580
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rbx
movups xmm0, xmmword [rbp - 0x58]
movups xmm1, xmmword [rbp - 0x48]
movups xmm2, xmmword [rbp - 0x38]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x160], xmm0
xorps xmm1, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0x170], xmm1
xorps xmm2, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x180], xmm2
mov r8d, 0x13e
lea rdx, [0x14008afa0]
lea rcx, [rbp + 0x160]
call fcn.14000c4b0
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
mov r12, qword [rax + 0x2b8]
mov ebx, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x14008b3d0], eax
jle 0x140031acd
lea rcx, [0x14008b3d0]
call fcn.140033354
cmp dword [0x14008b3d0], 0xffffffff
jne 0x140031acd
mov rax, r14
mov ecx, 0x19
nop dword [rax]
nop dword [rax + rax]
mov qword [rax], 0
lea rax, [rax + 8]
sub rcx, 1
jne 0x140031ab0
lea rcx, [0x14008b3d0]
call fcn.1400332e8
mov eax, dword [rbx + rdi]
cmp dword [0x14008b578], eax
jle 0x140031b04
lea rcx, [0x14008b578]
call fcn.140033354
cmp dword [0x14008b578], 0xffffffff
jne 0x140031b04
mov qword [0x14008b580], 0
lea rcx, [0x14008b578]
call fcn.1400332e8
mov eax, dword [rbx + rdi]
cmp dword [0x14008b57c], eax
jle 0x140031b4b
lea rcx, [0x14008b57c]
call fcn.140033354
cmp dword [0x14008b57c], 0xffffffff
jne 0x140031b4b
mov rax, r15
mov ecx, 0x19
xor edi, edi
nop
mov qword [rax], rdi
lea rax, [rax + 8]
sub rcx, 1
jne 0x140031b30
lea rcx, [0x14008b57c]
call fcn.1400332e8
jmp 0x140031b4d
xor edi, edi
cmp byte [0x14008b3b8], 0
jne 0x140031c52
mov rbx, rdi
nop dword [rax]
mov rax, qword [0x14008b100]
mov rcx, qword [rax + 0x1ae0]
movss xmm6, dword [rcx + 0x1c]
movss xmm7, dword [rcx + 0x14]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm13
addss xmm8, xmm7
mov rax, qword [0x14008b100]
mov rcx, qword [rax + 0x1ae0]
movss xmm6, dword [rcx + 0x18]
movss xmm7, dword [rcx + 0x10]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, xmm13
addss xmm0, xmm7
movss dword [rbx + r14], xmm0
movss dword [rbx + r14 + 4], xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbx + r15], xmm0
movss dword [rbx + r15 + 4], xmm6
add rbx, 8
cmp rbx, 0xc8
jl 0x140031b60
mov byte [0x14008b3b8], 1
cmp qword [0x14008b100], 0
jne 0x140031c76
mov r8d, 0xd3d
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x140035870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r15d, 1
lea rsi, [0x14008b3e4]
cmp r15d, 0x19
jge 0x140031d73
lea rbx, [rsi + 4]
movsxd rax, r15d
lea rdi, [r14 + rax*8]
mov r14d, 0x19
sub r14d, r15d
lea r13, [0x14008b3e0]
nop dword [rax + rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [rsi]
movss xmm0, dword [rbx]
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm15
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm14
jbe 0x140031d4e
mov dword [rbp + 0x10], 0x3f800000
mov dword [rbp + 0x14], 0x3f800000
mov dword [rbp + 0x18], 0x3f800000
mov rax, qword [0x14008b100]
movups xmm0, xmmword [rbp + 0x10]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rsp + 0x60], xmm0
mulss xmm1, dword [rax + 0x1560]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.140003000
lea ecx, [r15 - 1]
movsxd rdx, ecx
lea rdx, [rdx*8]
add rdx, r13
movss dword [rsp + 0x20], xmm9
mov r9d, eax
mov r8, rdi
mov rcx, r12
call fcn.140022c40
add rdi, 8
add rbx, 8
sub r14, 1
jne 0x140031cb0
inc r15d
add rsi, 8
lea r14, [0x14008b3e0]
jmp 0x140031c83
cmp qword [0x14008b100], 0
jne 0x140031d97
mov r8d, 0xd3d
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x140035870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
movss xmm13, dword [rax + 0x18]
xor edi, edi
mov ebx, edi
lea r15d, [rdi + 0x19]
nop dword [rax]
movaps xmm1, xmm13
lea rax, [0x14008b4b0]
mulss xmm1, dword [rbx + rax]
addss xmm1, dword [rbx + r14]
movss dword [rbx + r14], xmm1
movaps xmm2, xmm13
mulss xmm2, dword [rbx + rax + 4]
addss xmm2, dword [rbx + r14 + 4]
movss dword [rbx + r14 + 4], xmm2
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
movss xmm3, dword [rax + 0x10]
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm3
comiss xmm3, xmm1
jbe 0x140031e0d
movss dword [rbx + r14], xmm0
jmp 0x140031e18
comiss xmm1, xmm0
jbe 0x140031e18
movss dword [rbx + r14], xmm3
mov rax, qword [rcx + 0x1ae0]
movss xmm1, dword [rax + 0x14]
movss xmm0, dword [rax + 0x1c]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x140031e3b
movss dword [rbx + r14 + 4], xmm0
jmp 0x140031e47
comiss xmm2, xmm0
jbe 0x140031e47
movss dword [rbx + r14 + 4], xmm1
mov rax, qword [0x14008b100]
movsd xmm8, qword [rax + 0x1a60]
cvtpd2ps xmm8, xmm8
mov qword [rsp + 0x60], 0xa
mov ecx, 0x50
call fcn.14003360c
mov r14, rax
mov qword [rsp + 0x60], rax
mov edx, 0xa
mov rcx, rax
nop
mov qword [rcx], 0
lea rcx, [rcx + 8]
sub rdx, 1
jne 0x140031e80
mov esi, edi
lea rdi, [rax + 4]
lea r13, [0x14008b3e0]
nop
xorps xmm6, xmm6
cvtsi2ss xmm6, esi
mulss xmm6, xmm10
addss xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm11
addss xmm7, dword [rbx + r13]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm11
addss xmm0, dword [rbx + r13 + 4]
movss dword [rdi - 4], xmm7
movss dword [rdi], xmm0
lea eax, [rsi + 1]
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, xmm10
addss xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm12
addss xmm7, dword [rbx + r13]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm12
addss xmm0, dword [rbx + r13 + 4]
movss dword [rdi + 4], xmm7
movss dword [rdi + 8], xmm0
add esi, 2
add rdi, 0x10
cmp esi, 0xa
jl 0x140031ea0
mov r9d, 0xffffffff
mov r8d, 0xa
mov rdx, r14
mov rcx, r12
call fcn.140021e80
mov rcx, r14
call fcn.140033234
add rbx, 8
sub r15, 1
lea r14, [0x14008b3e0]
mov edi, 0
jne 0x140031db0
lea rbx, [0x14006ff28]
mov qword [rbp + 0x120], rbx
lea rax, str.0.30
mov qword [rbp + 0x128], rax
lea rax, str.0.35
mov qword [rbp + 0x130], rax
lea rax, [0x14006ff50]
mov qword [rbp + 0x138], rax
lea rax, str.0.45
mov qword [rbp + 0x140], rax
lea rax, [0x14006ff5c]
mov qword [rbp + 0x148], rax
lea rax, [0x14006ff60]
mov qword [rbp + 0x150], rax
lea rax, [0x14006ff00]
mov qword [rbp + 0x158], rax
mov dword [rsp + 0x20], 8
lea r9, [rbp + 0x120]
lea rdx, [0x14008b3c4]
lea rcx, [0x14006ff68]
call fcn.14002de40
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], dil
mov r13, qword [rbp - 0x28]
movss xmm7, dword [0x140070154]
jne 0x140032048
mov qword [rbp - 0x20], rdi
movaps xmm1, xmm7
lea rcx, [rbp - 0x20]
call fcn.14000fdb0
mov qword [rbp + 0x90], rbx
lea rdi, [0x14006ff90]
mov qword [rbp + 0x98], rdi
lea rsi, [0x14006ff94]
mov qword [rbp + 0xa0], rsi
lea r14, [0x14006ff98]
mov qword [rbp + 0xa8], r14
lea r15, [0x14006ff9c]
mov qword [rbp + 0xb0], r15
lea r12, [0x14006ffa0]
mov qword [rbp + 0xb8], r12
mov dword [rsp + 0x20], 6
lea r9, [rbp + 0x90]
lea rdx, [0x14008b3bc]
lea rcx, [0x14006ffa8]
call fcn.14002de40
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x1400320f0
mov qword [rbp - 0x18], 0
movaps xmm1, xmm7
lea rcx, [rbp - 0x18]
call fcn.14000fdb0
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], rdi
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], r14
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], r12
mov dword [rsp + 0x20], 6
lea r9, [rbp + 0xc0]
lea rdx, [0x14008b3c0]
lea rcx, [0x14006ffd0]
call fcn.14002de40
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003217c
mov qword [rbp - 0x10], 0
movaps xmm1, xmm7
lea rcx, [rbp - 0x10]
call fcn.14000fdb0
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
movss xmm6, dword [rax + 0x18]
subss xmm6, dword [0x140070110]
mulss xmm6, dword [0x140070074]
mov dword [rbp - 8], 0
mov dword [rbp - 4], 0x40600000
lea rcx, [rbp - 8]
call fcn.14002d2b0
mov r11, qword [0x14008b100]
mov rax, qword [r11 + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [r11 + 0x1ae0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, xmm6
movss dword [rax + 0xd8], xmm1
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140032224
cmp byte [0x14008ad86], 0
sete al
mov byte [0x14008ad86], al
neg al
sbb edx, edx
and edx, 0xa
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rbp], 0x42c80000
lea rdx, [rbp]
call fcn.14002c080
movzx r12d, al
movaps xmm0, xmmword [0x140070330]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [0x14003586a]
lea rcx, [rsp + 0x60]
call fcn.14002b8b0
test r12b, r12b
je 0x1400327d9
call fcn.140030980
mov edi, eax
xor esi, esi
mov edx, eax
lea ecx, [rsi + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400322d5
mov dword [rbp + 0x1a0], 0x438
lea rdx, [rbp + 0x1a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x1400322d5
nop word [rax + rax]
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400322ce
lea rdx, [rbp + 0x1a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x1400322a0
jmp 0x1400322d5
mov rsi, qword [rbp + 0x1b8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp + 0x20], 0x60
mov qword [rbp + 0x24], 0x20
mov dword [rbp + 0x2c], 0x60
mov ecx, 0x10
call fcn.14003361c
mov r14, rax
mov qword [rbp - 0x58], rax
lea rdi, [rax + 0x10]
mov qword [rbp - 0x48], rdi
mov r8d, 0x10
lea rdx, [rbp + 0x20]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x50], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov ecx, 0x10
call fcn.14003361c
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rcx, [rax + 0x10]
mov qword [rbp - 0x80], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x10]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140030cf0
movsxd rcx, dword [0x14008b3c4]
cmp ecx, 7
ja case.default.0x1400323a5
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x32aec]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6c8], 0x3deb851f
jmp case.default.0x1400323a5
mov dword [rbp + 0x6c8], 0x3e99999a
jmp case.default.0x1400323a5
mov dword [rbp + 0x6c8], 0x3eb33333
jmp case.default.0x1400323a5
mov dword [rbp + 0x6c8], 0x3ecccccd
jmp case.default.0x1400323a5
mov dword [rbp + 0x6c8], 0x3ee66666
jmp case.default.0x1400323a5
mov dword [rbp + 0x6c8], 0x3f000000
jmp case.default.0x1400323a5
mov dword [rbp + 0x6c8], 0x3f4ccccd
jmp case.default.0x1400323a5
mov dword [rbp + 0x6c8], 0x3f800000
test r15, r15
je 0x14003242c
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x6c8]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140032448
mov edx, 0x10
mov rcx, r14
call fcn.140033234
test r12b, r12b
je 0x1400327d9
call fcn.140030980
mov edi, eax
xor esi, esi
mov edx, eax
lea ecx, [rsi + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400324c5
mov dword [rbp + 0x1a0], 0x438
lea rdx, [rbp + 0x1a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x1400324c5
nop dword [rax]
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400324be
lea rdx, [rbp + 0x1a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x140032490
jmp 0x1400324c5
mov rsi, qword [rbp + 0x1b8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp + 8], 0x40
mov dword [rbp + 0xc], 0x28c
mov ecx, 8
call fcn.14003361c
mov r14, rax
mov qword [rbp - 0x58], rax
lea rdi, [rax + 8]
mov qword [rbp - 0x48], rdi
mov rcx, qword [rbp + 8]
mov qword [rax], rcx
mov qword [rbp - 0x50], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 0
mov ecx, 8
call fcn.14003361c
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rcx, [rax + 8]
mov qword [rbp - 0x80], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140030cf0
movsxd rcx, dword [0x14008b3bc]
cmp ecx, 5
ja case.default.0x14003258a
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x32b0c]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6d0], 0x41480000
jmp case.default.0x14003258a
mov dword [rbp + 0x6d0], 0x41700000
jmp case.default.0x14003258a
mov dword [rbp + 0x6d0], 0x41a00000
jmp case.default.0x14003258a
mov dword [rbp + 0x6d0], 0x41c80000
jmp case.default.0x14003258a
mov dword [rbp + 0x6d0], 0x42480000
jmp case.default.0x14003258a
mov dword [rbp + 0x6d0], 0x42c80000
test r15, r15
je 0x1400325f9
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x6d0]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140032615
mov edx, 8
mov rcx, r14
call fcn.140033234
test r12b, r12b
je 0x1400327d9
call fcn.140030980
mov edi, eax
xor r12d, r12d
mov esi, r12d
mov edx, eax
lea ecx, [r12 + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140032695
mov dword [rbp + 0x1a0], 0x438
lea rdx, [rbp + 0x1a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x140032695
nop
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003268e
lea rdx, [rbp + 0x1a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x140032660
jmp 0x140032695
mov rsi, qword [rbp + 0x1b8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp - 0x60], 0x40
mov dword [rbp - 0x5c], 0x1cc
mov ecx, 8
call fcn.14003361c
mov r14, rax
mov qword [rbp - 0x58], rax
lea rdi, [rax + 8]
mov qword [rbp - 0x48], rdi
mov rcx, qword [rbp - 0x60]
mov qword [rax], rcx
mov qword [rbp - 0x50], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov ecx, 8
call fcn.14003361c
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rcx, [rax + 8]
mov qword [rbp - 0x80], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140030cf0
movsxd rcx, dword [0x14008b3c0]
cmp ecx, 5
ja case.default.0x140032752
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x32b24]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6d8], 0x41200000
jmp case.default.0x140032752
mov dword [rbp + 0x6d8], 0x41700000
jmp case.default.0x140032752
mov dword [rbp + 0x6d8], 0x41a00000
jmp case.default.0x140032752
mov dword [rbp + 0x6d8], 0x41c80000
jmp case.default.0x140032752
mov dword [rbp + 0x6d8], 0x42480000
jmp case.default.0x140032752
mov dword [rbp + 0x6d8], 0x42c80000
test r15, r15
je 0x1400327bd
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x6d8]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x1400327d9
mov edx, 8
mov rcx, r14
call fcn.140033234
call fcn.14000eb30
call fcn.140008e30
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
xor esi, esi
mov dword [rsp + 0x30], esi
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], esi
lea r9d, [rsi + 3]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003287f
call fcn.1400092c0
mov rbx, qword [0x14008b100]
cmp dword [rbx + 0x1c90], esi
jg 0x14003284f
mov r8d, 0x675
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loaderimguiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x1c98]
mov rcx, qword [rax]
add rcx, 0x40
mov rax, rsi
cmp byte [rcx], sil
cmovne rax, rcx
mov rcx, rax
call fcn.14002e860
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400328f9
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x1400328f9
call fcn.14002efd0
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
lea rdx, [0x14008b370]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x1400328f4
mov r8d, 0x2d
lea rdx, str.C:UsershenryDownloadsExternal_Overlay__Loadermain.h
lea rcx, [0x14003586c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14002ee40
movss xmm13, dword [0x140070144]
lea r14, [0x14008b3e0]
lea r15, [0x14008b4b0]
movabs rbx, 0xcbe1acabd11902c0
movabs rdi, 0x27a117a1b08d2bb
movabs r12, 0x62efa3378a05241c
cmp dword [rbp + 0xf8], 0x12
jne 0x1400318c0
call fcn.14002efd0
mov rcx, qword [0x14008b310]
test rcx, rcx
je 0x140032959
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b310], rsi
mov rcx, qword [0x14008b328]
test rcx, rcx
je 0x14003296b
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x14008b328], rsi
mov qword [0x14008b330], rsi
mov qword [0x14008b338], rsi
mov qword [0x14008b340], rsi
mov qword [0x14008b348], rsi
mov qword [0x14008b350], rsi
mov dword [0x14008af40], 9
mov byte [0x14008b320], 0
mov byte [0x14008ad85], 1
mov rbx, qword [0x14008b100]
mov rcx, rbx
call fcn.140008150
cmp qword [0x14008b100], rbx
jne 0x1400329cc
mov qword [0x14008b100], rsi
test rbx, rbx
je 0x1400329f4
mov rcx, rbx
call fcn.140017e50
mov rax, qword [0x14008b100]
test rax, rax
je 0x1400329eb
dec dword [rax + 0x3b4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14008b360]
test rcx, rcx
je 0x140032a0d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b360], rsi
mov rcx, qword [0x14008b358]
test rcx, rcx
je 0x140032a26
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b358], rsi
mov rcx, r13
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140032a99
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x14008b358]
mov rdx, qword [0x14008b360]
test rdx, rdx
je 0x140032a74
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x14008b360], rsi
mov rcx, qword [0x14008b358]
test rcx, rcx
je 0x140032a86
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov qword [0x14008b358], rsi
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
lea r11, [rsp + 0x780]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret