Function at 0x140036604
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x150
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov r12, r9
mov ebx, r8d
mov rdi, rcx
movaps xmmword [rax - 0x68], xmm8
cmp r8d, 0x21
jne 0x140036657
test byte [0x140131f5c], 0x50
je 0x140036714
lea eax, [r8 - 0x1d]
jmp 0x14003735e
cmp ebx, 0x453
jne 0x140036714
lea rcx, [rsp + 0x88]
mov edx, 0x19000
call fcn.140061694
mov rbx, qword [rsp + 0x88]
xor esi, esi
mov word [rbx], si
mov dword [rbx + 0x31ffc], esi
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0xa0]
lea r8, str.Text.Paramd
lea rdx, str.SOFTWAREPELOGON
mov rcx, 0xffffffff80000002
mov dword [rsp + 0xa0], esi
mov dword [rsp + 0x1a0], 0x31ffe
mov qword [rsp + 0x20], rbx
call fcn.14005a31c
cmp eax, esi
je 0x1400366d5
mov word [rbx], si
mov rdx, rbx
mov rcx, rdi
call fcn.14002a45c
mov rcx, qword [rsp + 0x198]
xor edx, edx
mov rbx, rax
bts rbx, 0xc
mov r8, rbx
or r8, 0x10
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
lea rcx, [rsp + 0x88]
call fcn.140058efc
mov rax, rbx
jmp 0x14003735e
call qword [sym.imp.USER32.dll_GetDesktopWindow]
xor esi, esi
mov rbp, rax
mov eax, dword [0x1401323b8]
cmp eax, esi
je 0x140036756
cmp eax, ebx
jne 0x140036756
mov rax, qword [0x140131f90]
cmp rax, rsi
je 0x14003675d
cmp rbp, rsi
je 0x14003675d
mov rcx, qword [rsp + 0x198]
mov rdx, rbp
mov qword [0x140131f90], rbp
call qword [sym.imp.USER32.dll_SetParent]
mov rax, qword [0x140131f90]
mov r13d, 0x110
mov r15d, 0x44f
cmp ebx, r13d
je 0x1400367a1
cmp ebx, r15d
je 0x1400367a1
cmp rbp, rsi
je 0x1400367a1
cmp rax, rsi
je 0x1400367a1
cmp rax, rbp
je 0x1400367a1
mov rcx, qword [rsp + 0x198]
mov rdx, rbp
mov qword [0x140131f90], rbp
call qword [sym.imp.USER32.dll_SetParent]
mov rax, qword [0x140131f90]
mov edi, 1
cmp ebx, r13d
ja 0x140036fbb
je 0x140036cd6
cmp ebx, 5
je 0x140036cb8
cmp ebx, 0xf
je 0x140036c65
cmp ebx, 0x14
je 0x1400367f8
cmp ebx, 0x21
je 0x1400367df
cmp ebx, 0x7e
je 0x140036fe6
jmp 0x140037193
mov al, byte [0x140131f5c]
and al, 0x50
neg al
sbb rax, rax
and rax, 3
inc rax
jmp 0x14003735e
lea rcx, [rsp + 0xb0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x98], rsi
mov r15, r12
mov rbx, rsi
mov ebp, esi
mov r13d, esi
mov dword [rsp + 0x1a0], esi
mov r14d, esi
call fcn.140058dc4
cmp byte [0x140131f5d], sil
jne 0x140036adc
mov ebx, dword [0x140131f70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r15d, dword [0x140131f74]
mov ecx, edi
mov dword [0x140131f70], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebp, dword [0x140131f70]
mov r13d, eax
mov dword [0x140131f74], eax
cmp ebx, ebp
jne 0x140036875
cmp r15d, eax
mov r15d, esi
je 0x140036878
mov r15d, edi
test byte [0x140131f5c], 0x40
je 0x1400368c7
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, edi
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 0x3d
mov r13d, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea edi, [rbx - 0x12c]
mov ecx, 0x3e
mov ebp, 0x12c
mov dword [rsp + 0x1a0], edi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea r14d, [rax - 0x50]
sub r13d, r14d
jmp 0x1400368c9
mov edi, esi
cmp r15d, esi
je 0x1400368f5
mov rcx, qword [rsp + 0x198]
mov dword [rsp + 0x30], 0x16
mov r9d, r14d
mov r8d, edi
xor edx, edx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], ebp
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, r12
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r8d, r13d
mov edx, ebp
mov rcx, r12
mov rbx, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rcx, rbx
mov qword [rsp + 0xc0], rbx
mov rdx, rax
mov qword [rsp + 0xb0], rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, qword [0x140131f60]
mov r15, rbx
mov qword [rsp + 0xb8], rax
cmp rcx, rsi
je 0x140036acc
lea rdx, [rsp + 0x80]
mov dword [rsp + 0x80], esi
mov dword [rsp + 0x84], esi
call qword [0x140131e10]
mov rcx, qword [0x140131f60]
lea rdx, [rsp + 0x84]
call qword [0x140131e18]
mov r11d, dword [rsp + 0x80]
movsxd r9, dword [0x140131f70]
mov ecx, dword [rsp + 0x84]
movsxd r8, dword [0x140131f74]
xor edx, edx
movsxd rax, edi
imul rax, r11
div r9
xor edx, edx
mov rdi, rax
movsxd rax, r14d
imul rax, rcx
div r8
xor edx, edx
mov qword [rsp + 0x88], rax
movsxd rax, ebp
imul rax, r11
div r9
xor edx, edx
mov qword [rsp + 0x90], rax
movsxd rax, r13d
imul rax, rcx
mov rcx, rbx
div r8
lea rdx, [rsp + 0x98]
mov qword [rsp + 0x1b0], rax
call qword [0x140131e28]
cmp eax, esi
jne 0x140036acc
mov rax, qword [rsp + 0x1b0]
mov rdx, qword [0x140131f60]
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x50], 2
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x90]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x88]
xor r9d, r9d
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], edi
xor r8d, r8d
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], ebp
call qword [0x140131e20]
mov r11, qword [0x140132230]
cmp r11, rsi
je 0x140036a85
cmp word [r11], si
je 0x140036a85
mov r8, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x190]
mov rdx, rbx
call fcn.140018d34
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov r9d, ebp
xor r8d, r8d
xor edx, edx
mov rcx, r12
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.GDI32.dll_BitBlt]
mov rcx, qword [rsp + 0x98]
cmp rcx, rsi
je 0x140036c34
call qword [0x140131e30]
jmp 0x140036c34
mov al, byte [0x140131d16]
cmp al, sil
je 0x140036aeb
mov r15, r12
jmp 0x140036ae2
mov al, byte [0x140131d16]
cmp al, sil
jne 0x140036be6
cmp byte [0x140131d13], sil
je 0x140036b88
cmp byte [0x140131f5e], sil
jne 0x140036b88
lea rdx, [rsp + 0x70]
cmp byte [0x140131f5d], sil
je 0x140036b36
mov rcx, qword [rsp + 0x198]
lea rax, [rsp + 0x70]
mov qword [0x140131f78], rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov rdx, qword [0x140131f78]
jmp 0x140036b9d
movdqu xmm0, xmmword [0x14012f248]
mov qword [0x140131f78], rdx
movdqu xmmword [rsp + 0x70], xmm0
mov eax, dword [rsp + 0x78]
cmp eax, esi
jg 0x140036b65
add eax, eax
sar eax, 1
sub eax, dword [rsp + 0x70]
add eax, dword [0x140131f70]
mov dword [rsp + 0x78], eax
mov ecx, dword [rsp + 0x7c]
cmp ecx, esi
jg 0x140036b9d
mov rax, qword [rsp + 0x70]
add ecx, ecx
shr rax, 0x20
sar ecx, 1
sub ecx, eax
add ecx, dword [0x140131f74]
mov dword [rsp + 0x7c], ecx
jmp 0x140036b9d
lea rdx, [0x140131f68]
mov byte [0x140131f5e], sil
mov qword [0x140131f78], rdx
mov eax, dword [rdx]
mov r14d, dword [rdx + 4]
mov ebp, dword [rdx + 8]
mov r13d, dword [rdx + 0xc]
mov ecx, dword [0x14012f01c]
mov dword [rsp + 0x1a0], eax
sub ebp, eax
sub r13d, r14d
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov rdx, qword [0x140131f78]
mov rcx, r15
mov r8, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rdx, r15
jmp 0x140036be9
mov rdx, r12
mov r8, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x190]
call fcn.140018d34
cmp r12, r15
je 0x140036c34
mov edx, dword [rsp + 0x1a0]
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], edx
mov r9d, ebp
mov r8d, r14d
mov rcx, r12
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r13d
call qword [sym.imp.GDI32.dll_BitBlt]
mov ecx, 5
call qword [sym.imp.GDI32.dll_GetStockObject]
lea rcx, [rsp + 0xb0]
mov rdi, rax
call fcn.140058e24
cmp rbx, rsi
je 0x140036c5d
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rax, rdi
jmp 0x14003735e
cmp rax, rsi
je 0x140036c87
cmp rax, rbp
je 0x140036c87
mov rcx, qword [rsp + 0x198]
mov rdx, rbp
mov qword [0x140131f90], rbp
call qword [sym.imp.USER32.dll_SetParent]
mov rcx, qword [rsp + 0x198]
lea rdx, [rsp + 0xd0]
call qword [sym.imp.USER32.dll_BeginPaint]
mov rcx, qword [rsp + 0x198]
lea rdx, [rsp + 0xd0]
call qword [sym.imp.USER32.dll_EndPaint]
jmp 0x140037193
cmp r12, rdi
jne 0x140037193
mov rcx, qword [rsp + 0x198]
mov edx, edi
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x140037193
call fcn.14005eed8
mov rcx, qword [rsp + 0x198]
mov ebx, 0xffffffec
mov edx, ebx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov rcx, qword [rsp + 0x198]
mov edx, ebx
bts rax, 0x1b
mov r8, rax
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
lea r13, [0x140133120]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea r8, str.LogohWnd
lea rdx, str.SOFTWAREPELOGON
mov rcx, 0xffffffff80000002
call fcn.14005a458
lea rax, [rsp + 0x198]
lea r9d, [rbx + 0x1f]
lea r8, str.LogohWnd
lea rdx, str.SOFTWAREPELOGON
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x20], rax
call fcn.14005a3dc
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r11b, byte [0x140131b68]
and r11b, 0xc
cmp r11b, 8
jne 0x140036d8f
mov rcx, qword [rsp + 0x198]
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, edi
mov dword [0x140131f70], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movdqu xmm0, xmmword [0x14012f248]
mov r11d, eax
mov dword [0x140131f74], eax
movdqu xmmword [rsp + 0x70], xmm0
mov ecx, dword [rsp + 0x78]
cmp ecx, esi
jg 0x140036dd2
add ecx, ecx
sar ecx, 1
sub ecx, dword [rsp + 0x70]
add ecx, dword [0x140131f70]
mov edx, dword [rsp + 0x7c]
cmp edx, esi
jg 0x140036dec
mov rax, qword [rsp + 0x70]
add edx, edx
shr rax, 0x20
sar edx, 1
sub edx, eax
add edx, r11d
cmp byte [0x140131f5d], sil
je 0x140036e23
mov r9d, dword [0x14012f24c]
mov r8d, dword [0x14012f248]
mov dword [rsp + 0x30], 0x14
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], ecx
mov rcx, qword [rsp + 0x198]
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowPos]
mov qword [0x140131f90], 0xffffffffffffeffb
cmp rbp, rsi
je 0x140036e4b
mov rcx, qword [rsp + 0x198]
mov rdx, rbp
mov qword [0x140131f90], rbp
call qword [sym.imp.USER32.dll_SetParent]
cmp byte [0x14012f259], sil
movzx eax, word [0x14012f25c]
mov ecx, 3
lea r9d, [rcx - 1]
mov ebx, 0xff
cmovge r9d, ecx
cmp ax, si
jl 0x140036e72
sub bl, al
mov edx, dword [0x14012f01c]
mov rcx, qword [rsp + 0x198]
or r9d, 2
mov r8b, bl
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
test byte [0x140131f5c], 0x40
mov ebp, dword [0x140131f70]
mov r12d, dword [0x140131f74]
mov r14d, esi
mov ebx, esi
je 0x140036ee6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, edi
mov r14d, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 0x3d
mov r12d, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 0x3e
mov ebp, 0x12c
add r14d, 0xfffffed4
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea ebx, [rax - 0x50]
sub r12d, ebx
mov rcx, qword [rsp + 0x198]
mov r9d, ebp
mov r8d, ebx
mov edx, r14d
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_MoveWindow]
mov r11b, byte [0x140131f5c]
mov al, byte [0x140131f5b]
mov rcx, qword [rsp + 0x198]
and r11b, 0x10
neg al
sbb rdx, rdx
cmp r11b, sil
mov r9d, ebx
cmovne rdx, rdi
mov edi, 0x11
mov r8d, r14d
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], ebp
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp eax, esi
jne 0x140036f70
mov rcx, qword [rsp + 0x198]
mov dword [rsp + 0x30], edi
mov r9d, ebx
mov r8d, r14d
xor edx, edx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], ebp
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r11, qword [rsp + 0x198]
mov rcx, r13
mov qword [0x140131f38], r11
mov qword [0x140131f40], r11
mov byte [0x140131f5a], 2
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsp + 0x198]
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x140037193
mov eax, ebx
sub eax, 0x111
je 0x14003716d
sub eax, 0x103
je 0x140037165
sub eax, 0x23b
je 0x140037155
cmp eax, edi
jne 0x140037193
lea r13, [0x140133120]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp ebx, 0x450
jne 0x140037098
lea rcx, [rsp + 0x90]
mov edx, 0x20a
call fcn.140061694
mov rbx, qword [rsp + 0x90]
lea rax, [rsp + 0xa4]
mov word [rbx], si
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0xa8]
lea r8, str.LogoFile
lea rdx, str.SOFTWAREPELOGON
mov rcx, 0xffffffff80000002
mov dword [rsp + 0xa8], esi
mov dword [rsp + 0xa4], 0x412
mov qword [rsp + 0x20], rbx
call fcn.14005a31c
mov ecx, esi
mov word [rbx + 0x410], si
cmp eax, esi
sete cl
cmp ecx, esi
je 0x14003708b
cmp word [rbx], si
je 0x14003708b
lea rcx, [0x1401321f8]
mov rdx, rbx
call fcn.14006d55c
lea rcx, [rsp + 0x90]
call fcn.140058efc
mov rbx, qword [0x1401321f8]
cmp rbx, rsi
je 0x1400370da
cmp word [rbx], si
je 0x1400370da
mov rcx, qword [0x140131f60]
cmp rcx, rsi
je 0x1400370c2
call qword [0x140131d98]
mov qword [0x140131f60], rsi
mov rax, qword [0x140131da8]
cmp rax, rsi
je 0x1400370da
lea rdx, [0x140131f60]
mov rcx, rbx
call rax
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, edi
mov dword [0x140131f70], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140131f74], eax
cmp byte [0x140131f5d], sil
jne 0x140037134
mov rcx, qword [rsp + 0x198]
mov dword [rsp + 0x30], 0x10
mov dword [rsp + 0x28], eax
mov eax, dword [0x140131f70]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [rsp + 0x198]
lea rdx, [0x140131f68]
mov r8d, edi
mov byte [0x140131f5e], dil
call qword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x14003715c
mov byte [0x140131f5a], 7
mov byte [0x140131f5a], sil
jmp 0x140037193
mov rax, rsi
jmp 0x14003735e
lea r13, [0x140133120]
cmp r12, 0x66
je 0x1400372b1
cmp r12, 0x67
je 0x14003719a
cmp r12, 2
jne 0x140037193
test byte [0x140131b68], 0xc
je 0x14003719a
xor eax, eax
jmp 0x14003735e
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x1401327b0], edi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp r12, 0x67
jne 0x1400371c8
mov rax, qword [rsp + 0x1b0]
cmp rax, rsi
je 0x1400371c8
mov byte [rax], sil
cmp byte [0x14012f259], sil
jge 0x140037287
test byte [0x140131b68], 2
jne 0x140037287
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xorps xmm7, xmm7
movss xmm8, dword [0x140117944]
mov r12d, eax
mov ebx, 0xff
movaps xmm6, xmm7
movaps xmm0, xmm7
mulss xmm0, dword [0x140117940]
divss xmm0, xmm8
cvttss2si rbp, xmm0
add ebp, r12d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, ebp
sub ecx, eax
cmp ecx, esi
jle 0x140037254
mov rcx, qword [rsp + 0x198]
mov r8d, ebx
unpcklps xmm6, xmm6
mov r9d, 2
xor edx, edx
cvtps2pd xmm0, xmm6
addsd xmm0, qword [0x140117938]
cvttsd2si rax, xmm0
sub r8b, al
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
addss xmm6, dword [0x140117934]
addss xmm7, dword [0x140117934]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub ebp, eax
cmp ebp, esi
jle 0x14003727d
mov edx, edi
mov ecx, 0xb
call qword [sym.imp.KERNEL32.dll_SleepEx]
comiss xmm8, xmm6
jae 0x1400371ff
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [0x1401327b0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [0x140131d18]
cmp rcx, rsi
je 0x1400372b1
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
and byte [0x140131b68], 0xfd
lea r8, str.LogohWnd
lea rdx, str.SOFTWAREPELOGON
mov rcx, 0xffffffff80000002
call fcn.14005a458
lea rcx, [0x1401321f8]
mov qword [0x140131f90], rsi
mov byte [0x14012f259], 0xff
call fcn.140058e7c
mov rcx, qword [0x140131f60]
cmp rcx, rsi
je 0x140037307
call qword [0x140131d98]
mov rax, qword [0x140131f40]
mov rcx, r13
mov qword [0x140131f60], rsi
cmp rax, qword [0x140131f38]
mov qword [0x140131f38], rsi
mov byte [0x140131f5d], sil
cmove rax, rsi
mov qword [0x140131f40], rax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov cl, byte [0x1401326c7]
call fcn.14005ef0c
mov rcx, qword [rsp + 0x198]
mov edx, 8
call qword [sym.imp.USER32.dll_EndDialog]
cdqe
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret