Function at 0x14001edb0
Capabilities:
Enumerate process modules
Execute command
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x1060]
mov eax, 0x1160
call fcn.140087e20
sub rsp, rax
mov rax, qword [0x1400ac080]
xor rax, rsp
mov qword [rbp + 0x1050], rax
lea rcx, str.Tesseract_Esp
xor r14d, r14d
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea ecx, [r14 + 0x38]
call fcn.140087660
mov qword [rbp - 0x20], rax
lea rcx, vtable.std::_Ref_count_obj2_class_pProcess_.0
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax], xmm0
mov qword [rax], rcx
lea rcx, [rax + 0x10]
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 0x20], rdx
mov rbx, qword [0x1400ad990]
mov qword [0x1400ad988], rcx
mov qword [0x1400ad990], rax
test rbx, rbx
je 0x14001ee80
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14001ee80
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14001ee80
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
lea rcx, [0x14009c820]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x14008c470]
lea rdx, str._Config__Reading_configuration_file.
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14001c3f0
mov rcx, qword [0x14008c470]
lea rdx, str._Config__Sucessfully_read_configuration_file.
test al, al
jne 0x14001eece
lea rdx, str._Config__Error_reading_config_file__reseting_to_the_default_config.
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140004070
mov rcx, qword [0x14008c470]
lea rdx, str._Counter_Strike__Waiting_you_open_the_CS2...
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs rsi, 0x7fffffffc46535fe
movabs rdi, 0x7fffffffffffffff
nop
mov rbx, qword [0x1400ad988]
call fcn.1400246e0
mov dword [rbx], eax
test eax, eax
je 0x14001efef
mov ecx, eax
call fcn.140024430
mov qword [rbx + 8], rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x14001f05a
mov rcx, qword [0x14008c470]
lea rdx, str._Process_Search__Handle_Hijack_failed__falling_back_to_OpenProcess_method.
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400246e0
mov dword [rbx], eax
test eax, eax
je 0x14001efe5
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r9, [rbp - 0x18]
mov dword [rsp + 0x20], 2
mov rcx, rax
mov qword [rbx + 8], rax
mov r8d, 0x7f8
lea rdx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rbp + 0x50]
lea r8, [rbp - 0x10]
mov rcx, qword [rbx + 8]
mov r9d, Ordinal_26
mov qword [rbx + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rbp - 8]
mov edx, dword [rbx]
mov qword [rbx + 0x20], rax
call fcn.140024910
mov qword [rbx + 0x10], rax
mov al, 1
jmp 0x14001efe7
xor al, al
test al, al
jne 0x14001f0ad
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14001f00d
imul rax, rax, 0x64
jmp 0x14001f02b
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rsi
jg 0x14001f048
add rax, 0x3b9aca00
lea rcx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
call fcn.140024300
jmp 0x14001ef20
lea rcx, [rbp - 0x20]
mov qword [rbp - 0x20], rdi
call fcn.140024300
jmp 0x14001ef20
lea r9, [rbp - 0x14]
mov dword [rsp + 0x20], 2
mov r8d, 0x7f8
lea rdx, [rbp + 0x850]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rbp + 0x850]
lea r8, [rbp + 8]
mov rcx, qword [rbx + 8]
mov r9d, Ordinal_26
mov qword [rbx + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rbp + 0x10]
mov edx, dword [rbx]
mov qword [rbx + 0x20], rax
call fcn.140024910
mov qword [rbx + 0x10], rax
mov rcx, qword [0x14008c470]
lea rdx, str._Counter_Strike__Attached_to_cs2.exe
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x14008c470]
lea rdx, str._Updates__Reading_offsets_from_file_offsets.json.
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400051b0
mov rcx, qword [0x14008c470]
lea rdx, str._Updates__Sucessfully_read_offsets_file.
test al, al
jne 0x14001f111
lea rdx, str._Updates__Error_reading_offsets_file__reseting_to_the_default_state.
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x14008c470]
lea rdx, str._Counter_Strike__Waiting_client.dll_load.
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop dword [rax]
mov rcx, qword [0x1400ad988]
lea r8, str.client.dll
lea rdx, [rsp + 0x68]
call fcn.1400249d0
mov rcx, qword [0x1400ad988]
lea r8, str.engine2.dll
lea rdx, [rsp + 0x78]
movups xmm0, xmmword [rax]
movups xmmword [0x1400ad5f0], xmm0
call fcn.1400249d0
movups xmm0, xmmword [rax]
mov rax, qword [0x1400ad5f0]
movups xmmword [0x1400ad5e0], xmm0
test rax, rax
je 0x14001f1aa
movq rcx, xmm0
test rcx, rcx
jne 0x14001f212
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14001f1c8
imul rax, rax, 0x64
jmp 0x14001f1e6
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rsi
jg 0x14001f1f7
add rax, 0x3b9aca00
mov qword [rbp - 0x20], rax
jmp 0x14001f1fb
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140024300
mov rax, qword [0x1400ad5f0]
mov rcx, qword [0x1400ad5e0]
test rax, rax
je 0x14001f150
test rcx, rcx
je 0x14001f150
mov rdx, qword [0x1400ac0d0]
lea r8, [rbp - 0x20]
add rdx, rcx
mov qword [rbp - 0x20], r14
mov rcx, qword [0x1400ad988]
mov r9d, 8
mov qword [rsp + 0x20], r14
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rax, dword [0x1400ac118]
mov rcx, qword [0x14008c470]
cmp qword [rbp - 0x20], rax
je 0x14001f2d7
lea rdx, str._Counter_Strike__Build_number_doesnt_match__the_game_has_been_updated_and_this_esp_most_likely_wont_work.
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x14008c470]
lea rdx, str._Warn__If_the_esp_doesnt_work__contact_an_administrator
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x14008c470]
lea rdx, str._Counter_Strike__Press_any_key_to_continue
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x14008c480]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
jmp 0x14001f2f3
lea rdx, str._Counter_Strike__Offsets_up_to_date_
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x14008c470]
lea rdx, str._Overlay__Open_the_game_to_create_Overlay...
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x14008c470]
lea rdx, str._Overlay__Make_sure_your_game_is_in__Full_Screen_Windowed_
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [0x1400ad988]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [rbx + 0x10]
je 0x14001f3e9
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14001f36e
imul rax, rax, 0x64
jmp 0x14001f38c
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rsi
jg 0x14001f39d
add rax, 0x3b9aca00
mov qword [rbp - 0x20], rax
jmp 0x14001f3a1
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140024300
mov rbx, qword [0x1400ad988]
mov edx, dword [rbx]
call fcn.140024910
mov qword [rbx + 0x10], rax
mov edx, 1
mov rcx, qword [0x1400ad988]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rbx, qword [0x1400ad988]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [rbx + 0x10]
jne 0x14001f350
mov rcx, qword [0x14008c470]
lea rdx, str._Overlay__Creating_window_overlay...
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x1400ad988]
lea rax, [0x14001ebc0]
xorps xmm0, xmm0
mov qword [rbp - 0x60], r14
movdqa xmmword [rbp - 0x50], xmm0
mov edx, 0xfffffffa
mov qword [rbp - 0x28], r14
mov dword [rbp - 0x70], 0x50
mov qword [rbp - 0x68], rax
mov dword [rbp - 0x6c], 3
mov qword [rbp - 0x40], r14
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_GetWindowLongA]
movsxd rcx, eax
lea rbx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp - 0x58], rcx
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rcx, qword [0x1400ad988]
lea rdx, [0x1400ad600]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [0x1400ad600]
lea r8, str.tesseract_esp
mov ecx, dword [0x1400ad60c]
mov r9d, 0x80000000
mov eax, dword [0x1400ad608]
add ecx, edx
mov qword [rsp + 0x58], r14
sub eax, edx
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], ecx
mov ecx, 0x800a8
mov dword [rsp + 0x30], eax
mov eax, dword [0x1400ad604]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
mov rdx, rbx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, rax
test rax, rax
je 0x14001f6d4
xor r9d, r9d
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r14d
xor r8d, r8d
mov rcx, rax
mov dword [rsp + 0x20], r14d
lea rdx, [r9 - 1]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 1
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [0x14009c820]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x14008c470]
lea rdx, str._n_Settings__In_Game_keybinds:_n_t_INSERT__Enable_or_Disable_the_ESP_n_t_HOME__Enable_or_Disable_the_ESP_TEAM_n_t_END__Unload_Tesseract_from_your_Game_n
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor r9d, r9d
lea rcx, [rbp + 0x20]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x14001f635
nop dword [rax + rax]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14001f635
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14001f5b7
cmp byte [0x1400ad5d8], r14b
sete byte [0x1400ad5d8]
call fcn.14001c7d0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14001f5ea
cmp byte [reloc.WS2_32.dll_accept], r14b
sete byte [0x1400ac130]
call fcn.14001c7d0
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [rbp + 0x20]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x20]
call qword [sym.imp.USER32.dll_DispatchMessageA]
lea rdx, [rbp - 0x18]
mov dword [rbp - 0x18], reloc.WLDAP32.dll_Ordinal_50
lea rcx, [rsp + 0x60]
call fcn.140023c60
mov rcx, rax
call fcn.140023c70
xor r9d, r9d
lea rcx, [rbp + 0x20]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x14001f570
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, 0x64
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov rcx, qword [0x14008c470]
lea rdx, str._Overlay__Destroying_overlay_window.
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x1400ad9a0]
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [0x1400ad9a8]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, rbx
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rcx, qword [0x14008c470]
lea rdx, str._Counter_Strike__Deataching_from_process
call fcn.14000a390
lea rdx, [0x14000a560]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140023c50
mov rcx, rax
call fcn.140024c70
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rbp + 0x1050]
xor rcx, rsp
call fcn.140087640
lea r11, [rsp + 0x1160]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret