Function at 0x140001490
Capabilities:
Clear windows event logs
Create process on windows
Create thread
Self delete
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
push rbp
lea rbp, [rax - 0xa8]
sub rsp, 0x1a0
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x14005a040]
xor rax, rsp
mov qword [rbp + 0x80], rax
xor edi, edi
cmp byte [0x14005a0b8], dil
je 0x140002b88
mov rcx, qword [0x14005a990]
mov eax, dword [rcx + 0x40f0]
or eax, 2
mov dword [rcx + 0x40f0], eax
movsd xmm0, qword [0x14005a0c0]
movsd qword [rcx + 0x4114], xmm0
mov dword [rcx + 0x40f8], 1
or eax, 0x40
mov dword [rcx + 0x40f0], eax
mov dword [rcx + 0x4150], 0x3f800000
mov r8d, 0x12a
lea rdx, [0x14005a0b8]
lea rcx, [0x14004a850]
call fcn.1400116c0
test al, al
je 0x140002b88
movdqa xmm6, xmmword [0x140051d10]
mov rbx, qword [0x14005a990]
mov dword [rsp + 0x40], 0x15
movups xmm0, xmmword [rbx + 0x3b20]
movups xmmword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rsp + 0x40]
call fcn.1400288b0
movups xmmword [rbx + 0x3b20], xmm6
movdqa xmm6, xmmword [0x140051d20]
mov rbx, qword [0x14005a990]
mov dword [rsp + 0x40], 0x16
movups xmm0, xmmword [rbx + 0x3b30]
movups xmmword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rsp + 0x40]
call fcn.1400288b0
movups xmmword [rbx + 0x3b30], xmm6
mov rbx, qword [0x14005a990]
mov dword [rsp + 0x40], 0x17
movups xmm0, xmmword [rbx + 0x3b40]
movups xmmword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rsp + 0x40]
call fcn.1400288b0
movups xmmword [rbx + 0x3b40], xmm6
mov rbx, qword [0x14005a990]
movss xmm0, dword [rbx + 0x394c]
mov dword [rbp + 0x70], 0xc
movss dword [rbp + 0x74], xmm0
lea rcx, [rbx + 0x4190]
lea rdx, [rbp + 0x70]
call fcn.1400287c0
mov dword [rbx + 0x394c], 0x41a00000
mov dword [rsp + 0x30], 0x41a00000
mov dword [rsp + 0x34], 0x41400000
lea rdx, [rsp + 0x30]
mov ecx, 0xb
call fcn.140006b70
mov rbx, qword [0x14005a990]
mov dword [rbp + 0x70], 7
movss xmm0, dword [rbx + 0x3934]
movss dword [rbp + 0x74], xmm0
lea rcx, [rbx + 0x4190]
lea rdx, [rbp + 0x70]
call fcn.1400287c0
mov dword [rbx + 0x3934], 0x40a00000
mov dword [rsp + 0x30], 0x43480000
mov dword [rsp + 0x34], 0x42480000
lea rdx, [rsp + 0x30]
lea rcx, str.Deep_cleaning
call fcn.140040500
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
test al, al
je 0x140001d9f
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.C:WindowsResourcesThemesDeep_cleaning.bat
lea rcx, [rsp + 0x60]
call fcn.140003890
nop
cmp qword [rbp - 0x18], rdi
jne 0x1400016e6
lea rdx, str.Error:_Unable_to_open_batch_file_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003e40
mov rcx, rax
lea rdx, [0x140004020]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140001d0e
lea rdx, str._echo_off_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.rmdir__s__q_C:WindowsTemp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.mkdir_C:WindowsTemp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q__temp__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.rmdir__s__q__temp__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.mkdir__temp__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q_C:WINDOWSPrefetch_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q_C:WindowsHistory_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q_C:WindowsCookies_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q_C:WindowsRecent_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q_C:Windows_spoolprinters_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.if_exist_C:WIN386.SWP_del_C:WIN386.SWP_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_appmarket.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_androidemulator.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_aow_exe.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_QMEmulatorService.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_RuntimeBroker.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_adb.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_GameLoader.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_TSettingCenter.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.taskkill__f__im_syzs_dl_svr.exe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.TaskKill__F__IM_process__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.net_stop_aow_drv_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.net_stop_Tensafe_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q_c:windows_temp._n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.rd__s__q_c:windows_temp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.md_c:windows_temp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q_C:WINDOWSPrefetch_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__s__f__q__temp_._n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.rd__s__q__temp__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.exit_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.deltree__y_c:windows_tempor1_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.deltree__y_c:windows_temp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.deltree__y_c:windows_tmp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.deltree__y_c:windowshistory_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.deltree__y_c:windowscookies_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.deltree__y_c:windows_recent_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del__q__C:WindowsFontsArial__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.FOR__D___p_IN___C:WindowsFontsArial___DO_rmdir____p___s__q_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.deltree__y_c:windows_spoolprinters_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.del_c:WIN386.SWP_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.cls_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.FOR__F__tokens1__2______V_IN__bcdedit__DO_SET_adminTest__V_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.IF___adminTest___Access__goto_noAdmin_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.for__F__tokens____G_in__wevtutil.exe_el__DO__call_:do_clear____G___n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.echo._n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.echo_Event_Logs_have_been_cleared___press_any_key__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.goto_theEnd_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.:do_clear_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.echo_clearing__1_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.wevtutil.exe_cl__1_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.goto_:eof_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.:noAdmin_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.echo_You_must_run_this_script_as_an_Administrator___n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.echo__press_any_key__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.cls_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.ipconfig__flushdns_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_reset_all_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_ipv4_reset_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_ipv6_reset_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_ip_reset_c:_resetlog.txt_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_ip_reset_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_6to4_reset_all_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_httpstunnel_reset_all_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_isatap_reset_all_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_tcp_reset_all_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_teredo_reset_all_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_int_portproxy_reset_all_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_branchcache_reset_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_winhttp_reset_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_winsock_reset_c:winsock.log_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_winsock_reset_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_winsock_reset_all_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_winsock_reset_catalog_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_firewall_reset_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_advfirewall_reset_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.ipconfig__release_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.ipconfig__renew_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.cmd__C_type__C:WindowsSystem32DriversEtchosts__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_interface_ip_set_address__Ethernet__sourcedhcp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_interface_ip_set_dns__Ethernet__sourcedhcp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_interface_ip_set_address__Loopback_Pseudo_Interface_1__sourcedhcp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_interface_ip_set_dns__Loopback_Pseudo_Interface_1__sourcedhcp_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.ipconfig__flushdns_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.ipconfig__registerdns_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_interface_ip_delete_arpcache_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_interface_ipv4_delete_destinationcache_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_interface_ipv4_delete_neighbors_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.netsh_interface_show_interface_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.exit_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rcx, [rsp + 0x68]
call fcn.140003d50
test rax, rax
jne 0x140001d0e
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x60]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
lea r9, str._c_C:WindowsResourcesThemesDeep_cleaning.bat
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp rax, 0x20
jg 0x140001e0f
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error:_Unable_to_execute_batch_file_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x60], rbx
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x68]
call fcn.140003820
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rdx, [rsp + 0x30]
lea rcx, str.Gameloop_Tweak
call fcn.140040500
test al, al
je 0x1400028e9
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.C:WindowsResourcesThemesGameloop_Tweak.bat
lea rcx, [rsp + 0x60]
call fcn.140003890
nop
cmp qword [rbp - 0x18], 0
jne 0x140001ebc
lea rdx, str.Error:_Unable_to_open_batch_file_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003e40
mov rcx, rax
lea rdx, [0x140004020]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140002858
mov ecx, 1
call fcn.140047e50
mov qword [rbp + 0x70], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140004320]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140001eac
cmp dword [rsp + 0x48], 0
je 0x140001ea0
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140001ea0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov r9d, 0x40
lea r8, str.Success
lea rdx, str.Deep_cleaning_process_completed_successfully_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
cmp dword [rsp + 0x48], 0
je 0x140001d5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, str._echo_off_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePC__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._TempPath__C:TempTxGameDownloadComponent__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._UserLanguage__en__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._abtestid___Component_:_0___n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Region__GB__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._sf__C:TempTxGameDownloadMobileGamePCShared__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._GraphicsCard__Nvidia__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str.___GraphicsCard__AMD__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._SetGraphicsCard_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._GraphicsCardEnabled_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._syzs_country__Egypt__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._QqOpenidValidStatus_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._isInstall_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._UI_VerifyPeFile_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._syzs_emulator_hwnd_dword:000901f0_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._CPUScore_dword:00000fa0_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._GpsLocation__22.540323_113.934578__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._tsyzs_220214_aow_251658244_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._com.tencent.ig_ContentScale_dword:00000002_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VSyncEnabled_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._LocalShaderCacheEnabled_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._ShaderCacheEnabled_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMDPI_dword:000003e8_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._FxaaQuality_dword:00000002_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._ForceDirectX_dword:00000003_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._RenderOptimizeEnabled_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._AdbDisable_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMMemorySizeInMB_dword:00004000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMCpuCount_dword:00000005_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._FaceCheckSwitch_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._dpiAware_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._PreorderGameAutoDownload_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HideAdvancedWatermark_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMResWidth_dword:00000780_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMResHeight_dword:00000438_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._audioRenderType_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._AudioRenderEndpoint__0.0.0.00000000.88c47e7a_80e2_4399_810f_d526231b3197__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._AudioCaptureEndpoint__0.0.1.00000000.a5021733_5bdc_4ec7_aede_39d21580ace5__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._EnableGLESv3_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._RootEnabled_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMDeviceManufacturer__ASUS_ROG_8_Pro__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMDeviceModel__AI2401__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._com.tencent.ig_FPSLevel_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._com.tencent.ig_RenderQuality_dword:00000002_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._shift_run_pubgmhd_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._KeyMindTipsPressed_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._ml_timer_user_switch_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._SysbarHelpBtnTipWndApkList___tq.tech.Fps_ad_ph.spacedesk.beta_ad_com.ace.ex.file.manager_ad__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VtEnable_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._tsyzs_220214_vdi_8_dword:00000001_n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCBeacon__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_GLP_installer_1000218456_market.exe__B8DE3380_3C35_4B5A_8110_0EB530ABEF89__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_AppMarket.exe__5A09E57B_4812_4AAA_A30A_EA4069A4F1B0__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_AndroidEmulatorEn.exe__2AEF6A22_AD3D_44FC_85D5_A886981336B5__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_AndroidEmulatorEx.exe__D216F2E8_80E1_4397_8BE6_6AA07908928C__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_bugreport.exe__8C9AF513_4CFE_41B6_9B1E_7B60C93A5643__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_TxGaDcc.exe__A9E60F52_E7F6_4C49_9DDC_FA47455E9DB6__n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCDeviceInfo__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._glVendor__NVIDIA__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._glRender__NVIDIA_GeForce_RTX_2060_Super_PCIe_SSE2__n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePC__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._TempPath__C:TempTxGameDownloadComponent__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._UserLanguage__en__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._abtestid___Component_:_0___n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Region__GB__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._sf__C:TempTxGameDownloadMobileGamePCShared__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._GraphicsCard__Nvidia__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._SetGraphicsCard_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._GraphicsCardEnabled_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._syzs_country__Egypt__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._QqOpenidValidStatus_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._isInstall_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._UI_VerifyPeFile_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._syzs_emulator_hwnd_dword:000901f0_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._CPUScore_dword:00000fa0_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._GpsLocation__22.540323_113.934578__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._tsyzs_220214_aow_251658244_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._com.tencent.ig_ContentScale_dword:00000002_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VSyncEnabled_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._LocalShaderCacheEnabled_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._ShaderCacheEnabled_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMDPI_dword:000003e8_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._FxaaQuality_dword:00000002_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._ForceDirectX_dword:00000003_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._RenderOptimizeEnabled_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._AdbDisable_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMMemorySizeInMB_dword:00004000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMCpuCount_dword:00000005_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._FaceCheckSwitch_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._dpiAware_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._PreorderGameAutoDownload_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HideAdvancedWatermark_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMResWidth_dword:00000780_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMResHeight_dword:00000438_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._audioRenderType_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._AudioRenderEndpoint__0.0.0.00000000.88c47e7a_80e2_4399_810f_d526231b3197__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._AudioCaptureEndpoint__0.0.1.00000000.a5021733_5bdc_4ec7_aede_39d21580ace5__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._EnableGLESv3_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._RootEnabled_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMDeviceManufacturer__ASUS_ROG_8_Pro__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMDeviceModel__AI2401__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._com.tencent.ig_FPSLevel_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._com.tencent.ig_RenderQuality_dword:00000002_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._shift_run_pubgmhd_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._KeyMindTipsPressed_dword:00000001_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VMDeviceManufacturer__ASUS_ROG_8_Pro__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._ml_timer_user_switch_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._SysbarHelpBtnTipWndApkList___tq.tech.Fps_ad_ph.spacedesk.beta_ad_com.ace.ex.file.manager_ad__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._VtEnable_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._tsyzs_220214_vdi_8_dword:00000001_n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCBeacon__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_GLP_installer_1000218456_market.exe__B8DE3380_3C35_4B5A_8110_0EB530ABEF89__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_AppMarket.exe__5A09E57B_4812_4AAA_A30A_EA4069A4F1B0__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_AndroidEmulatorEn.exe__2AEF6A22_AD3D_44FC_85D5_A886981336B5__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_AndroidEmulatorEx.exe__D216F2E8_80E1_4397_8BE6_6AA07908928C__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_bugreport.exe__8C9AF513_4CFE_41B6_9B1E_7B60C93A5643__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Last_Sid_TxGaDcc.exe__A9E60F52_E7F6_4C49_9DDC_FA47455E9DB6__n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCDeviceInfo__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._glVendor__NVIDIA__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._glRender__NVIDIA_GeForce_RTX_2060_Super_PCIe_SSE2__n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCDuration__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Aria2Interval_hex_b_:96_13_70_eb_90_01_00_00_n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCEngineFalgs__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Aow71Installing_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._Vdi71Installing_dword:00000000_n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCGameDownload__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._DownloadSpeed_dword:00000000_n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCGameHistory__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._ReverseOrder__com.tencent.igcom.android.settingsandroidcom.ace.ex.file.managercom.twitter.androidcom.android.packageinstallereu.tsoml.graphicssettingscom.android.browsercom.facebook.katana__n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCGameSidebarCfg__n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCGameSidebarCfgcom.tencent.ig__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._enable_dword:00000000_n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCNewOpGuidTip__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._com.tencent.ig_dpiguid_dword:00000001_n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._HKEY_CURRENT_USERSOFTWARETencentMobileGamePCEngineFlags__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._ApkRuning_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._GameStatus_dword:00000000_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._MatchRuleId_dword:00000198_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._MatchRuleApk__com.tencent.ig__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._MatchRule__7ziI98CVLCRSZIJR8JV4nCghkfKPQz1I__n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rdx, str._par__p2__n_n
lea rcx, [rsp + 0x60]
call fcn.140003e40
lea rcx, [rsp + 0x68]
call fcn.140003d50
test rax, rax
jne 0x140002858
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x60]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
lea r9, str._c_C:WindowsResourcesThemesGameloop_Tweak.bat
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp rax, 0x20
jg 0x140002941
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Error:_Gameloop_Tweak_Unable_to_execute_batch_file_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x60], rbx
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x68]
call fcn.140003820
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov r8, qword [0x14005a990]
movsxd rax, dword [r8 + 0x4190]
lea rcx, [rax + rax*2]
mov rdx, qword [r8 + 0x4198]
movsxd rax, dword [rdx + rcx*4 - 0xc]
lea r10, [rax + rax*2]
lea r11, [0x14004c670]
mov r9d, dword [r11 + r10*4 + 8]
cmp dword [r11 + r10*4], 8
jne 0x140002a0b
mov eax, dword [r11 + r10*4 + 4]
cmp eax, 1
jne 0x1400029ee
mov eax, dword [rdx + rcx*4 - 8]
mov dword [r9 + r8 + 0x3908], eax
jmp 0x140002a0b
mov ecx, 1
call fcn.140047e50
mov qword [rbp + 0x70], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140004400]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400029de
cmp dword [rsp + 0x48], 0
je 0x1400029d2
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp + 0x70], xmm0
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400029d2
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov r9d, 0x40
lea r8, str.Success
lea rdx, str.Gameloop_Tweak_completed_successfully_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
cmp dword [rsp + 0x48], 0
je 0x1400028a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
cmp eax, 2
jne 0x140002a0b
mov eax, dword [rdx + rcx*4 - 8]
mov dword [r9 + r8 + 0x3908], eax
mov eax, dword [rdx + rcx*4 - 4]
mov dword [r9 + r8 + 0x390c], eax
movsxd rcx, dword [r8 + 0x4190]
lea eax, [rcx - 1]
mov dword [r8 + 0x4190], eax
lea rax, [rcx - 2]
lea rcx, [rax + rax*2]
mov rdx, qword [r8 + 0x4198]
movsxd rax, dword [rdx + rcx*4]
lea r10, [rax + rax*2]
mov r9d, dword [r11 + r10*4 + 8]
cmp dword [r11 + r10*4], 8
jne 0x140002a74
mov eax, dword [r11 + r10*4 + 4]
cmp eax, 1
jne 0x140002a57
mov eax, dword [rdx + rcx*4 + 4]
mov dword [r9 + r8 + 0x3908], eax
jmp 0x140002a74
cmp eax, 2
jne 0x140002a74
mov eax, dword [rdx + rcx*4 + 4]
mov dword [r9 + r8 + 0x3908], eax
mov eax, dword [rdx + rcx*4 + 8]
mov dword [r9 + r8 + 0x390c], eax
movsxd rcx, dword [r8 + 0x4190]
lea eax, [rcx - 1]
mov dword [r8 + 0x4190], eax
lea rax, [rcx - 2]
lea rcx, [rax + rax*2]
mov rdx, qword [r8 + 0x4198]
movsxd rax, dword [rdx + rcx*4]
lea r10, [rax + rax*2]
mov r9d, dword [r11 + r10*4 + 8]
cmp dword [r11 + r10*4], 8
jne 0x140002add
mov eax, dword [r11 + r10*4 + 4]
cmp eax, 1
jne 0x140002ac0
mov eax, dword [rdx + rcx*4 + 4]
mov dword [r9 + r8 + 0x3908], eax
jmp 0x140002add
cmp eax, 2
jne 0x140002add
mov eax, dword [rdx + rcx*4 + 4]
mov dword [r9 + r8 + 0x3908], eax
mov eax, dword [rdx + rcx*4 + 8]
mov dword [r9 + r8 + 0x390c], eax
dec dword [r8 + 0x4190]
movsxd rax, dword [r8 + 0x4180]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4188]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, 0x39d
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x4180]
lea eax, [rcx - 1]
mov dword [r8 + 0x4180], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4188]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x39d
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x4180]
lea eax, [rcx - 1]
mov dword [r8 + 0x4180], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4188]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x39d
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x4180]
call fcn.1400143e0
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.140047e30
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret