Function at 0x140031050
Capabilities:
Enumerate process modules
Hide graphical window
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x6a8]
sub rsp, 0x770
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rbp + 0x50], 0x50
mov dword [rbp + 0x54], 0x40
lea rax, [0x14002fd80]
mov qword [rbp + 0x58], rax
xor esi, esi
mov qword [rbp + 0x60], rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x68], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x80], xmm1
lea rax, str.Login_Panel
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], rsi
lea rcx, [rbp + 0x50]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov eax, dword [rbp + 0xac]
cdq
sub eax, edx
sar eax, 1
lea r8d, [rax - 0x5a]
mov eax, dword [rbp + 0xa8]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x96
mov qword [rsp + 0x58], rsi
mov rcx, qword [rbp + 0x68]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0xb4
mov dword [rsp + 0x30], 0x12c
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.dasdasdasdasd
mov rdx, qword [rbp + 0x90]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r13, rax
mov qword [rbp - 0x28], rax
lea r9d, [rsi + 1]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea ecx, [rsi + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x14008b358], rax
test rax, rax
je 0x140032a64
mov qword [0x14008b370], rsi
mov qword [0x14008b37c], rsi
mov dword [0x14008b384], esi
mov qword [0x14008b38c], rsi
mov dword [0x14008b394], esi
mov qword [0x14008b3a4], rsi
mov dword [0x14008b398], 1
mov dword [0x14008b388], 1
mov dword [0x14008b378], esi
mov dword [0x14008b39c], 1
mov dword [0x14008b3a0], 0x50
mov dword [0x14008b3ac], 0x80000000
mov rax, qword [rax]
lea rdx, [0x14008b360]
mov qword [rsp + 0x30], rdx
lea rdx, [0x14008b370]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, r13
xor edx, edx
lea r8d, [rsi + 1]
call qword [rax + 0x80]
test eax, eax
js 0x140032a5d
lea edx, [rsi + 0xa]
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r13
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsi - 1]
mov rcx, r13
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x14008b100]
test rax, rax
je 0x1400312c8
inc dword [rax + 0x3b4]
mov ecx, 0x3db8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x6c0], rax
lea rcx, [rbp + 0x6b8]
mov qword [rbp + 0x6c8], rcx
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1400312fd
xor edx, edx
mov rcx, rax
call fcn.140001810
jmp 0x140031300
mov rax, rsi
cmp qword [0x14008b100], 0
jne 0x140031311
mov qword [0x14008b100], rax
mov rcx, rax
call fcn.140007e40
mov rbx, qword [0x14008b100]
test rbx, rbx
jne 0x140031346
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x1400358c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14008b100]
lea rax, [0x14006f668]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
movss xmm3, dword [0x14007022c]
mov r8d, 0x10
lea rdx, [0x140076090]
mov rcx, qword [rbx + 0xa8]
call fcn.140024470
cmp qword [0x14008b100], 0
jne 0x14003139c
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x1400358c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
or dword [rbx + 8], 1
xor ecx, ecx
call fcn.14001fae0
lea rcx, [0x14008b350]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140031554
lea rcx, [0x14008b348]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140031554
mov qword [0x14008b340], r13
mov rax, qword [0x14008b100]
test rax, rax
jne 0x140031405
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x1400358c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
or dword [rax + 0xc], 6
lea rcx, str.imgui_impl_win32
mov qword [rax + 0xd8], rcx
mov qword [rax + 0x120], r13
mov dword [rax + 0x3c], 9
mov dword [rax + 0x40], 0x25
mov dword [rax + 0x44], 0x27
mov dword [rax + 0x48], 0x26
mov dword [rax + 0x4c], 0x28
mov dword [rax + 0x50], 0x21
mov dword [rax + 0x54], 0x22
mov dword [rax + 0x58], 0x24
mov dword [rax + 0x5c], 0x23
mov dword [rax + 0x60], 0x2d
mov dword [rax + 0x64], 0x2e
mov dword [rax + 0x68], 8
mov dword [rax + 0x6c], 0x20
mov dword [rax + 0x70], 0xd
mov dword [rax + 0x74], 0x1b
mov dword [rax + 0x78], 0xd
mov dword [rax + 0x7c], 0x41
mov dword [rax + 0x80], 0x43
mov dword [rax + 0x84], 0x56
mov dword [rax + 0x88], 0x58
mov dword [rax + 0x8c], 0x59
mov dword [rax + 0x90], 0x5a
lea rax, str.xinput1_4.dll
mov qword [rbp - 0x58], rax
lea rax, str.xinput1_3.dll
mov qword [rbp - 0x50], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp - 0x48], rax
lea rax, str.xinput1_2.dll
mov qword [rbp - 0x40], rax
lea rax, str.xinput1_1.dll
mov qword [rbp - 0x38], rax
mov rbx, rsi
mov rcx, qword [rbp + rbx*8 - 0x58]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
jne 0x14003151f
inc rbx
cmp rbx, 5
jl 0x140031501
jmp 0x140031554
mov qword [0x14008b328], rdi
lea rdx, str.XInputGetCapabilities
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b330], rax
lea rdx, str.XInputGetState
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b338], rax
mov rbx, qword [0x14008b360]
mov rax, qword [0x14008b100]
test rax, rax
jne 0x140031588
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x1400358c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
lea rcx, str.imgui_impl_dx9
mov qword [rax + 0xe0], rcx
or dword [rax + 0xc], 8
mov qword [0x14008b310], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov rax, qword [0x14008b100]
test rax, rax
jne 0x1400315d7
mov r8d, 0x952
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x1400358c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
mov dword [rax + 0x156c], esi
mov dword [rax + 0x15a0], 0x40400000
mov dword [rax + 0x1570], 0x3f800000
mov dword [rax + 0x157c], 0x3f000000
mov dword [rax + 0x1580], 0x3f000000
mov word [rax + 0x1618], 0x101
mov byte [rax + 0x161a], 1
movaps xmm0, xmmword [0x140070440]
movups xmmword [rax + 0x1774], xmm0
test rax, rax
jne 0x140031649
mov r8d, 0x952
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x1400358c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
movaps xmm0, xmmword [0x1400704a0]
movups xmmword [rax + 0x1624], xmm0
movaps xmm1, xmmword [0x140070470]
movups xmmword [rax + 0x1634], xmm1
movaps xmm0, xmmword [0x140070390]
movups xmmword [rax + 0x1644], xmm0
movaps xmm1, xmmword [0x1400703e0]
movups xmmword [rax + 0x1654], xmm1
movaps xmm0, xmmword [0x140070380]
movups xmmword [rax + 0x1664], xmm0
movaps xmm1, xmmword [0x140070330]
movups xmmword [rax + 0x1674], xmm1
xorps xmm0, xmm0
movups xmmword [rax + 0x1684], xmm0
movaps xmm1, xmmword [0x140070400]
movups xmmword [rax + 0x1694], xmm1
movaps xmm0, xmmword [0x140070430]
movups xmmword [rax + 0x16a4], xmm0
movaps xmm1, xmmword [0x140070490]
movups xmmword [rax + 0x16b4], xmm1
movaps xmm0, xmmword [0x1400703c0]
movups xmmword [rax + 0x16c4], xmm0
movaps xmm1, xmmword [0x1400703d0]
movups xmmword [rax + 0x16d4], xmm1
movaps xmm0, xmmword [0x140070340]
movups xmmword [rax + 0x16e4], xmm0
movaps xmm1, xmmword [0x1400703e0]
movups xmmword [rax + 0x16f4], xmm1
movaps xmm0, xmmword [0x140070350]
movups xmmword [rax + 0x1704], xmm0
movaps xmm1, xmmword [0x140070420]
movups xmmword [rax + 0x1714], xmm1
movaps xmm0, xmmword [0x140070450]
movups xmmword [rax + 0x1724], xmm0
movaps xmm1, xmmword [0x140070480]
movups xmmword [rax + 0x1734], xmm1
movaps xmm0, xmmword [0x1400704a0]
movups xmmword [rax + 0x1744], xmm0
movaps xmm1, xmmword [0x140070400]
movups xmmword [rax + 0x1754], xmm1
movaps xmm0, xmmword [0x140070490]
movups xmmword [rax + 0x1764], xmm0
movups xmmword [rax + 0x1774], xmm1
movaps xmm0, xmmword [0x140070430]
movups xmmword [rax + 0x1784], xmm0
movaps xmm1, xmmword [0x140070490]
movups xmmword [rax + 0x1794], xmm1
movaps xmm0, xmmword [0x1400703f0]
movups xmmword [rax + 0x17a4], xmm0
movaps xmm1, xmmword [0x140070430]
movups xmmword [rax + 0x17b4], xmm1
movaps xmm0, xmmword [0x140070490]
movups xmmword [rax + 0x17c4], xmm0
movaps xmm1, xmmword [0x140070360]
movups xmmword [rax + 0x17d4], xmm1
movaps xmm0, xmmword [0x140070370]
movups xmmword [rax + 0x17e4], xmm0
movaps xmm1, xmmword [0x140070410]
movups xmmword [rax + 0x17f4], xmm1
movaps xmm0, xmmword [0x140070360]
movups xmmword [rax + 0x1804], xmm0
movaps xmm1, xmmword [0x140070370]
movups xmmword [rax + 0x1814], xmm1
movaps xmm0, xmmword [0x140070410]
movups xmmword [rax + 0x1824], xmm0
movaps xmm1, xmmword [0x1400703e0]
movups xmmword [rax + 0x1834], xmm1
movaps xmm0, xmmword [0x140070430]
movups xmmword [rax + 0x1844], xmm0
movaps xmm1, xmmword [0x140070490]
movups xmmword [rax + 0x1854], xmm1
movaps xmm0, xmmword [0x1400703e0]
movups xmmword [rax + 0x1864], xmm0
call fcn.1400306b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movabs rdi, 0xc3471b60748dbabf
movabs rbx, 0xc7347b4de9677558
movabs r12, 0x9279bc293cbb37e4
lea r14, [0x14008b3e0]
lea r15, [0x14008b4b0]
xorps xmm14, xmm14
movss xmm13, dword [0x140070274]
movss xmm15, dword [0x140070238]
movss xmm9, dword [0x1400701d8]
movss xmm10, dword [0x1400701e8]
movss xmm11, dword [0x140070204]
movss xmm12, dword [0x1400701f0]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x110]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140031910
lea rcx, [rbp + 0x110]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x110]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x14003293e
cmp byte [0x14008afa0], 0
je 0x140032a54
cmp qword [0x14008b300], 0
jne 0x14003192c
call fcn.14002ee40
call fcn.14002f530
call fcn.140006b50
mov rax, qword [0x14008b100]
mov dword [rax + 0x1ba8], 0x43960000
mov dword [rax + 0x1bac], 0x43340000
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm14
unpcklps xmm0, xmm14
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm14
unpcklps xmm1, xmm14
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], r12
movabs rax, 0x46f003de281b12b1
mov qword [rbp - 0x80], rax
movabs rax, 0x756beb5730169f8e
mov qword [rbp - 0x78], rax
movabs rax, 0xe86e39c4860332d3
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rbx
movabs rax, 0x861154403bdfeaf2
mov qword [rbp - 0x58], rax
movabs rax, 0xdb59c0097aee67b6
mov qword [rbp - 0x50], rax
movabs rax, 0x16bf238a7a5e41ff
mov qword [rbp - 0x48], rax
movabs rax, 0x3a27a8771636d1cb
mov qword [rbp - 0x40], rax
movabs rax, 0xe86e39c486037780
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rbx
movups xmm0, xmmword [rbp - 0x58]
movups xmm1, xmmword [rbp - 0x48]
movups xmm2, xmmword [rbp - 0x38]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm1, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0x30], xmm1
xorps xmm2, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x40], xmm2
mov r8d, 0x13e
lea rdx, [0x14008afa0]
lea rcx, [rbp + 0x20]
call fcn.14000c4b0
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
mov r12, qword [rax + 0x2b8]
mov ebx, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x14008b3d0], eax
jle 0x140031acd
lea rcx, [0x14008b3d0]
call fcn.140033374
cmp dword [0x14008b3d0], 0xffffffff
jne 0x140031acd
mov rax, r14
mov ecx, 0x19
nop dword [rax + rax]
mov qword [rax], 0
lea rax, [rax + 8]
sub rcx, 1
jne 0x140031ab0
lea rcx, [0x14008b3d0]
call fcn.140033308
mov eax, dword [rbx + rdi]
cmp dword [0x14008b578], eax
jle 0x140031b04
lea rcx, [0x14008b578]
call fcn.140033374
cmp dword [0x14008b578], 0xffffffff
jne 0x140031b04
mov qword [0x14008b580], 0
lea rcx, [0x14008b578]
call fcn.140033308
mov eax, dword [rbx + rdi]
cmp dword [0x14008b57c], eax
jle 0x140031b4b
lea rcx, [0x14008b57c]
call fcn.140033374
cmp dword [0x14008b57c], 0xffffffff
jne 0x140031b4b
mov rax, r15
mov ecx, 0x19
xor edi, edi
nop
mov qword [rax], rdi
lea rax, [rax + 8]
sub rcx, 1
jne 0x140031b30
lea rcx, [0x14008b57c]
call fcn.140033308
jmp 0x140031b4d
xor edi, edi
cmp byte [0x14008b3b8], 0
jne 0x140031c52
mov rbx, rdi
nop dword [rax]
mov rax, qword [0x14008b100]
mov rcx, qword [rax + 0x1ae0]
movss xmm6, dword [rcx + 0x1c]
movss xmm7, dword [rcx + 0x14]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm13
addss xmm8, xmm7
mov rax, qword [0x14008b100]
mov rcx, qword [rax + 0x1ae0]
movss xmm6, dword [rcx + 0x18]
movss xmm7, dword [rcx + 0x10]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, xmm13
addss xmm0, xmm7
movss dword [rbx + r14], xmm0
movss dword [rbx + r14 + 4], xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbx + r15], xmm0
movss dword [rbx + r15 + 4], xmm6
add rbx, 8
cmp rbx, 0xc8
jl 0x140031b60
mov byte [0x14008b3b8], 1
cmp qword [0x14008b100], 0
jne 0x140031c76
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x1400358c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r15d, 1
lea rsi, [0x14008b3e4]
cmp r15d, 0x19
jge 0x140031d73
lea rbx, [rsi + 4]
movsxd rax, r15d
lea rdi, [r14 + rax*8]
mov r14d, 0x19
sub r14d, r15d
lea r13, [0x14008b3e0]
nop dword [rax + rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [rsi]
movss xmm0, dword [rbx]
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm15
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm14
jbe 0x140031d4e
mov dword [rbp + 0x10], 0x3f800000
mov dword [rbp + 0x14], 0x3f800000
mov dword [rbp + 0x18], 0x3f800000
mov rax, qword [0x14008b100]
movups xmm0, xmmword [rbp + 0x10]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rsp + 0x60], xmm0
mulss xmm1, dword [rax + 0x1560]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.140003000
lea ecx, [r15 - 1]
movsxd rdx, ecx
lea rdx, [rdx*8]
add rdx, r13
movss dword [rsp + 0x20], xmm9
mov r9d, eax
mov r8, rdi
mov rcx, r12
call fcn.140022c40
add rdi, 8
add rbx, 8
sub r14, 1
jne 0x140031cb0
inc r15d
add rsi, 8
lea r14, [0x14008b3e0]
jmp 0x140031c83
cmp qword [0x14008b100], 0
jne 0x140031d97
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.cpp
lea rcx, [0x1400358c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b100]
movss xmm13, dword [rax + 0x18]
xor edi, edi
mov ebx, edi
lea r15d, [rdi + 0x19]
nop dword [rax]
movaps xmm1, xmm13
lea rax, [0x14008b4b0]
mulss xmm1, dword [rbx + rax]
addss xmm1, dword [rbx + r14]
movss dword [rbx + r14], xmm1
movaps xmm2, xmm13
mulss xmm2, dword [rbx + rax + 4]
addss xmm2, dword [rbx + r14 + 4]
movss dword [rbx + r14 + 4], xmm2
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
movss xmm3, dword [rax + 0x10]
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm3
comiss xmm3, xmm1
jbe 0x140031e0d
movss dword [rbx + r14], xmm0
jmp 0x140031e18
comiss xmm1, xmm0
jbe 0x140031e18
movss dword [rbx + r14], xmm3
mov rax, qword [rcx + 0x1ae0]
movss xmm1, dword [rax + 0x14]
movss xmm0, dword [rax + 0x1c]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x140031e3b
movss dword [rbx + r14 + 4], xmm0
jmp 0x140031e47
comiss xmm2, xmm0
jbe 0x140031e47
movss dword [rbx + r14 + 4], xmm1
mov rax, qword [0x14008b100]
movsd xmm8, qword [rax + 0x1a60]
cvtpd2ps xmm8, xmm8
mov qword [rsp + 0x60], 0xa
mov ecx, 0x50
call fcn.14003362c
mov r14, rax
mov qword [rsp + 0x60], rax
mov edx, 0xa
mov rcx, rax
nop
mov qword [rcx], 0
lea rcx, [rcx + 8]
sub rdx, 1
jne 0x140031e80
mov esi, edi
lea rdi, [rax + 4]
lea r13, [0x14008b3e0]
nop
xorps xmm6, xmm6
cvtsi2ss xmm6, esi
mulss xmm6, xmm10
addss xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm11
addss xmm7, dword [rbx + r13]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm11
addss xmm0, dword [rbx + r13 + 4]
movss dword [rdi - 4], xmm7
movss dword [rdi], xmm0
lea eax, [rsi + 1]
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, xmm10
addss xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm12
addss xmm7, dword [rbx + r13]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm12
addss xmm0, dword [rbx + r13 + 4]
movss dword [rdi + 4], xmm7
movss dword [rdi + 8], xmm0
add esi, 2
add rdi, 0x10
cmp esi, 0xa
jl 0x140031ea0
mov r9d, 0xffffffff
mov r8d, 0xa
mov rdx, r14
mov rcx, r12
call fcn.140021e80
mov rcx, r14
call fcn.140033254
add rbx, 8
sub r15, 1
lea r14, [0x14008b3e0]
mov edi, 0
jne 0x140031db0
lea rbx, [0x140070058]
mov qword [rbp + 0x140], rbx
lea rax, str.0.30
mov qword [rbp + 0x148], rax
lea rax, str.0.35
mov qword [rbp + 0x150], rax
lea rax, [0x140070080]
mov qword [rbp + 0x158], rax
lea rax, str.0.45
mov qword [rbp + 0x160], rax
lea rax, [0x14007008c]
mov qword [rbp + 0x168], rax
lea rax, [0x140070090]
mov qword [rbp + 0x170], rax
lea rax, [0x140070030]
mov qword [rbp + 0x178], rax
mov dword [rsp + 0x20], 8
lea r9, [rbp + 0x140]
lea rdx, [0x14008b3c4]
lea rcx, [0x140070098]
call fcn.14002de40
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], dil
mov r13, qword [rbp - 0x28]
movss xmm7, dword [0x140070284]
jne 0x140032048
mov qword [rbp - 0x20], rdi
movaps xmm1, xmm7
lea rcx, [rbp - 0x20]
call fcn.14000fdb0
mov qword [rbp + 0xb0], rbx
lea rdi, [0x1400700c0]
mov qword [rbp + 0xb8], rdi
lea rsi, [0x1400700c4]
mov qword [rbp + 0xc0], rsi
lea r14, [0x1400700c8]
mov qword [rbp + 0xc8], r14
lea r15, [0x1400700cc]
mov qword [rbp + 0xd0], r15
lea r12, [0x1400700d0]
mov qword [rbp + 0xd8], r12
mov dword [rsp + 0x20], 6
lea r9, [rbp + 0xb0]
lea rdx, [0x14008b3bc]
lea rcx, [0x1400700d8]
call fcn.14002de40
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x1400320f0
mov qword [rbp - 0x18], 0
movaps xmm1, xmm7
lea rcx, [rbp - 0x18]
call fcn.14000fdb0
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], r12
mov dword [rsp + 0x20], 6
lea r9, [rbp + 0xe0]
lea rdx, [0x14008b3c0]
lea rcx, [0x140070100]
call fcn.14002de40
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003217c
mov qword [rbp - 0x10], 0
movaps xmm1, xmm7
lea rcx, [rbp - 0x10]
call fcn.14000fdb0
mov rcx, qword [0x14008b100]
mov rax, qword [rcx + 0x1ae0]
movss xmm6, dword [rax + 0x18]
subss xmm6, dword [0x140070240]
mulss xmm6, dword [0x1400701a4]
mov dword [rbp - 8], 0
mov dword [rbp - 4], 0x40600000
lea rcx, [rbp - 8]
call fcn.14002d2b0
mov r11, qword [0x14008b100]
mov rax, qword [r11 + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [r11 + 0x1ae0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, xmm6
movss dword [rax + 0xd8], xmm1
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140032224
cmp byte [0x14008ad86], 0
sete al
mov byte [0x14008ad86], al
neg al
sbb edx, edx
and edx, 0xa
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rbp], 0x42c80000
lea rdx, [rbp]
call fcn.14002c080
movzx r12d, al
movaps xmm0, xmmword [0x140070460]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [0x1400358ba]
lea rcx, [rsp + 0x60]
call fcn.14002b8b0
test r12b, r12b
je 0x1400327e9
call fcn.140030980
mov edi, eax
xor esi, esi
mov edx, eax
lea ecx, [rsi + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400322d5
mov dword [rbp + 0x190], 0x438
lea rdx, [rbp + 0x190]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x1400322d5
nop word [rax + rax]
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400322ce
lea rdx, [rbp + 0x190]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x1400322a0
jmp 0x1400322d5
mov rsi, qword [rbp + 0x1a8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp + 0x20], 0x18
mov dword [rbp + 0x24], 0x10
mov dword [rbp + 0x28], 0xb8
mov qword [rbp + 0x2c], 0x38
mov dword [rbp + 0x34], 0x320
mov ecx, 0x18
call fcn.14003363c
mov r14, rax
mov qword [rbp - 0x58], rax
lea rdi, [rax + 0x18]
mov qword [rbp - 0x48], rdi
mov r8d, 0x18
lea rdx, [rbp + 0x20]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x50], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov ecx, 0x18
call fcn.14003363c
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rcx, [rax + 0x18]
mov qword [rbp - 0x80], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x18]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x2902aa8]
mov rcx, r15
call fcn.140030cf0
movsxd rcx, dword [0x14008b3c4]
cmp ecx, 7
ja case.default.0x1400323b3
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x32b04]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6b8], 0x3deb851f
jmp case.default.0x1400323b3
mov dword [rbp + 0x6b8], 0x3e99999a
jmp case.default.0x1400323b3
mov dword [rbp + 0x6b8], 0x3eb33333
jmp case.default.0x1400323b3
mov dword [rbp + 0x6b8], 0x3ecccccd
jmp case.default.0x1400323b3
mov dword [rbp + 0x6b8], 0x3ee66666
jmp case.default.0x1400323b3
mov dword [rbp + 0x6b8], 0x3f000000
jmp case.default.0x1400323b3
mov dword [rbp + 0x6b8], 0x3f4ccccd
jmp case.default.0x1400323b3
mov dword [rbp + 0x6b8], 0x3f800000
test r15, r15
je 0x14003243a
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x6b8]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140032456
mov edx, 0x18
mov rcx, r14
call fcn.140033254
test r12b, r12b
je 0x1400327e9
call fcn.140030980
mov edi, eax
xor esi, esi
mov edx, eax
lea ecx, [rsi + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400324d5
mov dword [rbp + 0x190], 0x438
lea rdx, [rbp + 0x190]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x1400324d5
nop word [rax + rax]
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400324ce
lea rdx, [rbp + 0x190]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x1400324a0
jmp 0x1400324d5
mov rsi, qword [rbp + 0x1a8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp + 8], 0x40
mov dword [rbp + 0xc], 0x28c
mov ecx, 8
call fcn.14003363c
mov r14, rax
mov qword [rbp - 0x58], rax
lea rdi, [rax + 8]
mov qword [rbp - 0x48], rdi
mov rcx, qword [rbp + 8]
mov qword [rax], rcx
mov qword [rbp - 0x50], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 0
mov ecx, 8
call fcn.14003363c
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rcx, [rax + 8]
mov qword [rbp - 0x80], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140030cf0
movsxd rcx, dword [0x14008b3bc]
cmp ecx, 5
ja case.default.0x14003259a
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x32b24]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6c0], 0x41480000
jmp case.default.0x14003259a
mov dword [rbp + 0x6c0], 0x41700000
jmp case.default.0x14003259a
mov dword [rbp + 0x6c0], 0x41a00000
jmp case.default.0x14003259a
mov dword [rbp + 0x6c0], 0x41c80000
jmp case.default.0x14003259a
mov dword [rbp + 0x6c0], 0x42480000
jmp case.default.0x14003259a
mov dword [rbp + 0x6c0], 0x42c80000
test r15, r15
je 0x140032609
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x6c0]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140032625
mov edx, 8
mov rcx, r14
call fcn.140033254
test r12b, r12b
je 0x1400327e9
call fcn.140030980
mov edi, eax
xor r12d, r12d
mov esi, r12d
mov edx, eax
lea ecx, [r12 + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400326a5
mov dword [rbp + 0x190], 0x438
lea rdx, [rbp + 0x190]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x1400326a5
nop
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003269e
lea rdx, [rbp + 0x190]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x140032670
jmp 0x1400326a5
mov rsi, qword [rbp + 0x1a8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp - 0x60], 0x40
mov dword [rbp - 0x5c], 0x1cc
mov ecx, 8
call fcn.14003363c
mov r14, rax
mov qword [rbp - 0x58], rax
lea rdi, [rax + 8]
mov qword [rbp - 0x48], rdi
mov rcx, qword [rbp - 0x60]
mov qword [rax], rcx
mov qword [rbp - 0x50], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov ecx, 8
call fcn.14003363c
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rcx, [rax + 8]
mov qword [rbp - 0x80], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140030cf0
movsxd rcx, dword [0x14008b3c0]
cmp ecx, 5
ja case.default.0x140032762
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x32b3c]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6c8], 0x41200000
jmp case.default.0x140032762
mov dword [rbp + 0x6c8], 0x41700000
jmp case.default.0x140032762
mov dword [rbp + 0x6c8], 0x41a00000
jmp case.default.0x140032762
mov dword [rbp + 0x6c8], 0x41c80000
jmp case.default.0x140032762
mov dword [rbp + 0x6c8], 0x42480000
jmp case.default.0x140032762
mov dword [rbp + 0x6c8], 0x42c80000
test r15, r15
je 0x1400327cd
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x6c8]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x1400327e9
mov edx, 8
mov rcx, r14
call fcn.140033254
call fcn.14000eb30
call fcn.140008e30
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
xor esi, esi
mov dword [rsp + 0x30], esi
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], esi
lea r9d, [rsi + 3]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003288f
call fcn.1400092c0
mov rbx, qword [0x14008b100]
cmp dword [rbx + 0x1c90], esi
jg 0x14003285f
mov r8d, 0x675
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loaderimguiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x1c98]
mov rcx, qword [rax]
add rcx, 0x40
mov rax, rsi
cmp byte [rcx], sil
cmovne rax, rcx
mov rcx, rax
call fcn.14002e860
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140032909
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140032909
call fcn.14002efd0
mov rcx, qword [0x14008b360]
mov rax, qword [rcx]
lea rdx, [0x14008b370]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x140032904
mov r8d, 0x2d
lea rdx, str.D:ALL_SRCExternal_Overlay__Loader__1_External_Overlay__Loadermain.h
lea rcx, [0x1400358bc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14002ee40
movss xmm13, dword [0x140070274]
lea r14, [0x14008b3e0]
lea r15, [0x14008b4b0]
movabs rbx, 0xc7347b4de9677558
movabs rdi, 0xc3471b60748dbabf
movabs r12, 0x9279bc293cbb37e4
cmp dword [rbp + 0x118], 0x12
jne 0x1400318d0
call fcn.14002efd0
mov rcx, qword [0x14008b310]
test rcx, rcx
je 0x140032969
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b310], rsi
mov rcx, qword [0x14008b328]
test rcx, rcx
je 0x14003297b
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x14008b328], rsi
mov qword [0x14008b330], rsi
mov qword [0x14008b338], rsi
mov qword [0x14008b340], rsi
mov qword [0x14008b348], rsi
mov qword [0x14008b350], rsi
mov dword [0x14008af40], 9
mov byte [0x14008b320], 0
mov byte [0x14008ad85], 1
mov rbx, qword [0x14008b100]
mov rcx, rbx
call fcn.140008150
cmp qword [0x14008b100], rbx
jne 0x1400329dc
mov qword [0x14008b100], rsi
test rbx, rbx
je 0x140032a04
mov rcx, rbx
call fcn.140017e50
mov rax, qword [0x14008b100]
test rax, rax
je 0x1400329fb
dec dword [rax + 0x3b4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14008b360]
test rcx, rcx
je 0x140032a1d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b360], rsi
mov rcx, qword [0x14008b358]
test rcx, rcx
je 0x140032a36
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b358], rsi
mov rcx, r13
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140032aaf
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x14008b358]
mov rdx, qword [0x14008b360]
test rdx, rdx
je 0x140032a87
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x14008b360], rsi
mov rcx, qword [0x14008b358]
test rcx, rcx
je 0x140032a99
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov qword [0x14008b358], rsi
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
lea r11, [rsp + 0x770]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret