Function at 0x18000e660
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
lea rbp, [r11 - 0x68]
sub rsp, 0x150
mov rax, qword [0x18011f3c0]
xor rax, rsp
mov qword [rbp - 0x58], rax
cmp byte [0x180177606], 0
je 0x18000f342
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], r12
mov qword [r11 + 0x18], r13
mov qword [r11 - 0x20], r14
mov qword [r11 - 0x28], r15
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
movaps xmmword [r11 - 0x58], xmm8
movaps xmmword [r11 - 0x68], xmm9
movaps xmmword [r11 - 0x78], xmm10
movaps xmmword [r11 - 0x88], xmm11
movaps xmmword [r11 - 0x98], xmm12
movaps xmmword [r11 - 0xa8], xmm13
movaps xmmword [r11 - 0xb8], xmm14
call fcn.18000e260
xor edi, edi
movabs rsi, 0xd80958fc74e988a6
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], rsi
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov ecx, dword [rax]
movabs rax, 0x3a87e44bb9a01d54
mov qword [0x180178a98], rax
mov dword [rbp - 0x80], ecx
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
lea rax, [rbp - 0x74]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c78], rax
mov dword [rbp - 0x80], 1
mov rax, qword [rbp - 0x80]
mov qword [0x180138c80], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 3
call fcn.180028960
movabs r13, 0x4f8644af03d0e0d6
mov dword [0x180138b98], edi
mov qword [0x180178a98], r13
mov dword [0x180138ba8], edi
call fcn.180028960
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], rsi
call fcn.180028960
movabs rax, 0x837765a25378f0bb
mov dword [0x180138ba8], edi
mov qword [0x180178a98], rax
mov qword [0x180138c70], rdi
mov dword [0x180138b98], 1
call fcn.180028960
xorps xmm8, xmm8
xorps xmm7, xmm7
movsd xmm2, qword [rax + 0x10]
movups xmm1, xmmword [rax]
movsd qword [rbp - 0x60], xmm2
mulss xmm1, dword [0x180104158]
mulss xmm2, dword [0x180104158]
cvtss2sd xmm8, xmm1
cvtss2sd xmm7, xmm2
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movaps xmm0, xmm7
andps xmm1, xmmword [0x1801045c0]
cvtps2pd xmm6, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
xorps xmm1, xmm1
xorps xmm11, xmm11
cvtsd2ss xmm1, xmm0
movaps xmm0, xmm7
xorps xmm1, xmmword [0x1801045e0]
cvtss2sd xmm1, xmm1
mulsd xmm1, xmm6
cvtsd2ss xmm11, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
cvtps2pd xmm2, xmm1
mulsd xmm2, xmm6
movaps xmm0, xmm8
cvtpd2ps xmm10, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
movabs rax, 0x14d6f5678d8f1b37
mov dword [0x180138b98], edi
mov qword [0x180178a98], rax
mov dword [0x180138ba8], edi
xorps xmm9, xmm9
cvtsd2ss xmm9, xmm0
call fcn.180028960
mov qword [0x180178a98], rsi
movups xmm7, xmmword [rax]
movsd xmm12, qword [rax + 0x10]
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov ecx, dword [rax]
movabs rax, 0x3fef770d40960d5a
mov dword [rbp - 0x80], ecx
mov qword [0x180178a98], rax
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c70], rax
mov dword [rbp - 0x80], 1
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 2
call fcn.180028960
xorps xmm4, xmm4
xorps xmm1, xmm1
movaps xmm8, xmm7
shufps xmm8, xmm7, 0xaa
movups xmm2, xmmword [rax]
movsd xmm3, qword [rax + 0x10]
movaps xmm0, xmm2
movsd qword [rbp - 0x60], xmm3
subss xmm0, xmm7
shufps xmm2, xmm2, 0xaa
subss xmm2, xmm8
movsd qword [rbp - 0x60], xmm12
subss xmm3, xmm12
cvtss2sd xmm1, xmm0
cvtss2sd xmm4, xmm2
mulsd xmm1, xmm1
xorps xmm0, xmm0
mulsd xmm4, xmm4
cvtss2sd xmm0, xmm3
addsd xmm4, xmm1
xorps xmm1, xmm1
addsd xmm4, xmm0
ucomisd xmm1, xmm4
ja 0x18000e957
sqrtpd xmm0, xmm4
jmp 0x18000e95f
movaps xmm0, xmm4
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r13
movaps xmm6, xmm11
addss xmm0, dword [0x1801042c0]
mulss xmm6, xmm0
addss xmm6, xmm7
movaps xmm7, xmm10
mulss xmm7, xmm0
addss xmm7, xmm8
movaps xmm8, xmm9
mulss xmm8, xmm0
addss xmm8, xmm12
call fcn.180028960
cmp byte [0x18017766f], dil
movabs r15, 0x5e6cc07646bbeab8
movabs r12, 0xe83d4f9ba2a38914
movabs r14, 0x8e2530aa8ada980e
mov ebx, dword [rax]
je 0x18000edc5
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r13
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov ecx, dword [rax]
movabs rax, 0x2975c866e6713290
mov qword [0x180178a98], rax
mov dword [rbp - 0x80], ecx
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
lea rax, [rbp - 0x78]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 2
call fcn.180028960
cmp dword [rax], edi
je 0x18000edc5
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000edc5
movabs rax, 0x3fef770d40960d5a
mov qword [rbp - 0x80], rdi
mov qword [0x180178a98], rax
mov eax, dword [rbp - 0x78]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov dword [0x180138ba8], edi
mov qword [0x180138c78], rdi
mov dword [0x180138b98], 2
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], ebx
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c70], rax
mov dword [rbp - 0x80], 1
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r15
mov dword [0x180138b98], 2
call fcn.180028960
movabs rax, 0x524ac5ecea15343e
mov qword [rbp - 0x80], rdi
mov qword [0x180178a98], rax
mov eax, dword [rbp - 0x78]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 1
call fcn.180028960
cmp dword [rax], edi
je 0x18000ebb7
movabs rax, 0x997abd671d25ca0b
mov qword [rbp - 0x80], rdi
mov qword [0x180178a98], rax
mov eax, dword [rbp - 0x78]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c70], rax
mov dword [rbp - 0x80], 1
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 2
call fcn.180028960
cmp dword [rax], edi
je 0x18000ebb7
movabs rax, 0x9a9112a0fe9a4713
mov qword [rbp - 0x80], rdi
mov qword [0x180178a98], rax
mov eax, dword [rbp - 0x78]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov dword [0x180138ba8], edi
mov qword [0x180138c78], rdi
mov dword [0x180138b98], 2
call fcn.180028960
mov ecx, dword [rax]
mov dword [rbp - 0x78], ecx
jmp 0x18000ebba
mov ecx, dword [rbp - 0x78]
call fcn.1800183f0
movabs rax, 0x6ac7003fa6e5575e
mov qword [rbp - 0x80], rdi
mov qword [0x180178a98], rax
mov eax, dword [rbp - 0x78]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 1
call fcn.180028960
cmp dword [rax], edi
je 0x18000ec75
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], ebx
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r12
mov dword [0x180138b98], 1
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov qword [0x180178a98], r14
movss xmm0, dword [rax]
mov eax, dword [rbp - 0x78]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
movss dword [rbp - 0x80], xmm0
mov qword [0x180138c70], rax
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 2
call fcn.180028960
mov ecx, dword [rbp - 0x78]
movaps xmm3, xmm8
mov dword [rsp + 0x30], edi
movaps xmm2, xmm7
mov dword [rsp + 0x28], edi
movaps xmm1, xmm6
mov dword [rsp + 0x20], edi
call fcn.18001b920
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000edc5
mov r8d, dword [rbp - 0x78]
call fcn.18001b140
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], ebx
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r12
mov dword [0x180138b98], 1
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov qword [0x180178a98], r14
movss xmm0, dword [rax]
mov eax, dword [rbp - 0x78]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
movss dword [rbp - 0x80], xmm0
mov qword [0x180138c70], rax
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 2
call fcn.180028960
movss xmm0, dword [0x18010440c]
mov edx, dword [rbp - 0x78]
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x48], edi
mulss xmm9, xmm0
mulss xmm10, xmm0
mulss xmm11, xmm0
xorps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x38], xmm0
movss dword [rsp + 0x30], xmm0
movaps xmm3, xmm11
movss dword [rsp + 0x28], xmm9
movss dword [rsp + 0x20], xmm10
call fcn.18001b770
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], ebx
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov byte [0x18017766f], dil
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r15
mov qword [0x180138c78], rdi
mov dword [0x180138b98], 2
call fcn.180028960
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r13
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov ecx, dword [rax]
movabs rax, 0x2975c866e6713290
mov qword [0x180178a98], rax
mov dword [rbp - 0x80], ecx
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
lea rax, [rbp - 0x78]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 2
call fcn.180028960
mov r13, qword [rsp + 0x180]
cmp dword [rax], edi
jne 0x18000ee6a
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], ebx
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov byte [0x18017766f], 1
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r15
mov qword [0x180138c78], rdi
mov dword [0x180138b98], 2
call fcn.180028960
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], rsi
call fcn.180028960
lea r9, str.meditiate_idle
lea r8, str.rcmcollect_paperleadinout_
mov ecx, dword [rax]
call fcn.1800181f0
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], rsi
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov ebx, dword [rax]
movabs rax, 0x3fef770d40960d5a
mov qword [0x180178a98], rax
mov dword [rbp - 0x80], ebx
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c70], rax
mov dword [rbp - 0x80], 1
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 2
call fcn.180028960
movsd xmm0, qword [rax + 0x10]
movups xmm11, xmmword [rax]
movabs rax, 0x743607648add4587
mov dword [0x180138b98], edi
movsd qword [rbp - 0x60], xmm0
mov qword [0x180178a98], rax
mov dword [0x180138ba8], edi
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], ebx
mov qword [0x180178a98], r12
movss xmm14, dword [rax]
mov rax, qword [rbp - 0x80]
mov qword [0x180138c70], rax
mov dword [0x180138ba8], edi
mov dword [0x180138b98], 1
call fcn.180028960
movss xmm13, dword [0x1801041c0]
addss xmm14, dword [rax]
movabs rax, 0x3a6867b4845beda2
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], rax
cvtps2pd xmm6, xmm14
mulsd xmm6, qword [0x180104280]
divsd xmm6, qword [0x1801042a0]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
movaps xmm9, xmm0
movaps xmm0, xmm6
xorps xmm9, xmmword [0x1801045d0]
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm10, xmm0
call fcn.180028960
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x180104280]
divsd xmm0, qword [0x1801042a0]
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mov r12, qword [rsp + 0x178]
movaps xmm8, xmm0
movaps xmm1, xmm9
movaps xmm0, xmm10
mulsd xmm0, xmm10
movaps xmm2, xmm8
mulsd xmm1, xmm9
mulsd xmm2, xmm8
addsd xmm0, xmm1
xorps xmm1, xmm1
addsd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x18000f020
sqrtsd xmm0, xmm0
jmp 0x18000f025
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm1, xmm1
ucomisd xmm0, xmm1
jp 0x18000f030
je 0x18000f03f
divsd xmm9, xmm0
divsd xmm10, xmm0
divsd xmm8, xmm0
movss xmm2, dword [0x180104140]
movaps xmm7, xmm11
movss xmm12, dword [rbp - 0x60]
movaps xmm3, xmm2
mov edx, ebx
movss dword [rsp + 0x20], xmm2
movabs rcx, 0x1c99bb7b6e96d16f
shufps xmm7, xmm11, 0xaa
call fcn.18001ba00
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movabs r15, 0x91aef906bca88877
test ax, ax
jne 0x18000f0d6
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], 2
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c70], rax
mov dword [rbp - 0x80], 0x15
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r15
mov dword [0x180138b98], 2
call fcn.180028960
cmp dword [rax], edi
je 0x18000f0df
movss xmm13, dword [0x1801042a8]
mov ecx, 0x43
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18000f13b
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], 2
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c70], rax
mov dword [rbp - 0x80], 0x13
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r15
mov dword [0x180138b98], 2
call fcn.180028960
cmp dword [rax], edi
je 0x18000f14c
cvtps2pd xmm0, xmm13
subsd xmm0, qword [0x180104220]
cvtpd2ps xmm13, xmm0
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r15, qword [rsp + 0x140]
cvtps2pd xmm6, xmm13
test ax, ax
je 0x18000f1ad
xorps xmm0, xmm0
movaps xmm1, xmm6
cvtss2sd xmm0, xmm11
mulsd xmm1, xmm9
movaps xmm2, xmm6
mulsd xmm2, xmm10
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm7
cvtpd2ps xmm11, xmm1
addsd xmm2, xmm0
movaps xmm1, xmm6
cvtps2pd xmm0, xmm12
mulsd xmm1, xmm8
cvtpd2ps xmm7, xmm2
addsd xmm1, xmm0
cvtpd2ps xmm12, xmm1
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm13, xmmword [rsp + 0xc0]
test ax, ax
je 0x18000f208
xorps xmm1, xmm1
movaps xmm0, xmm6
mulsd xmm0, xmm9
xorps xmm2, xmm2
cvtss2sd xmm1, xmm11
cvtps2pd xmm3, xmm12
subsd xmm1, xmm0
movaps xmm0, xmm6
cvtss2sd xmm2, xmm7
mulsd xmm0, xmm10
mulsd xmm6, xmm8
cvtpd2ps xmm11, xmm1
subsd xmm2, xmm0
subsd xmm3, xmm6
cvtpd2ps xmm7, xmm2
cvtpd2ps xmm12, xmm3
mov dword [rsp + 0x30], 1
movaps xmm3, xmm12
mov dword [rsp + 0x28], 1
movaps xmm2, xmm7
movaps xmm1, xmm11
mov dword [rsp + 0x20], 1
mov ecx, ebx
call fcn.18001b920
mov qword [rbp - 0x80], rdi
mov dword [rbp - 0x80], ebx
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
movss dword [rbp - 0x80], xmm14
mov qword [0x180138c70], rax
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r14
mov dword [0x180138b98], 2
call fcn.180028960
mov ebx, dword [0x180178e08]
add ebx, 0xc
mov dword [0x180138b98], edi
mov dword [0x180178e08], ebx
mov dword [0x180138ba8], edi
mov qword [0x180178a98], rsi
call fcn.180028960
mov qword [rbp - 0x80], rdi
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
mov ecx, dword [rax]
mov dword [rbp - 0x80], ecx
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c70], rax
movss dword [rbp - 0x80], xmm0
mov rax, qword [rbp - 0x80]
mov qword [0x180138c78], rax
mov dword [0x180138ba8], edi
mov qword [0x180178a98], r14
mov dword [0x180138b98], 2
call fcn.180028960
movaps xmm14, xmmword [rsp + 0xb0]
movaps xmm12, xmmword [rsp + 0xd0]
movaps xmm11, xmmword [rsp + 0xe0]
movaps xmm10, xmmword [rsp + 0xf0]
movaps xmm9, xmmword [rsp + 0x100]
movaps xmm8, xmmword [rsp + 0x110]
movaps xmm7, xmmword [rsp + 0x120]
movaps xmm6, xmmword [rsp + 0x130]
mov r14, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x170]
jmp 0x18000f3d2
xor edi, edi
movabs rsi, 0xd80958fc74e988a6
mov dword [0x180138b98], edi
mov dword [0x180138ba8], edi
mov qword [0x180178a98], rsi
call fcn.180028960
mov qword [rbp - 0x80], rdi
mov ecx, dword [rax]
movabs rax, 0x97ff36a1d40ea00a
mov dword [rbp - 0x80], ecx
lea rcx, str.rcmcollect_paperleadinout_
mov qword [0x180178a98], rax
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x80], rdi
mov qword [0x180138c70], rax
mov qword [0x180138c78], rcx
lea rcx, str.meditiate_idle
mov dword [rbp - 0x80], 0x3f800000
mov rax, qword [rbp - 0x80]
mov qword [0x180138c88], rax
mov dword [0x180138ba8], edi
mov qword [0x180138c80], rcx
mov dword [0x180138b98], 4
call fcn.180028960
mov rcx, qword [rbp - 0x58]
xor rcx, rsp
call fcn.18006e870
add rsp, 0x150
pop rdi
pop rsi
pop rbp
ret