Function at 0x18000ab20
Capabilities:
Capture webcam image
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xb0
mov rax, qword [0x1800bd6d8]
xor rax, rsp
mov qword [rbp + 7], rax
mov eax, dword [rbp + 0x7f]
mov r12, r9
mov rdi, qword [rbp + 0x77]
mov r14d, r8d
mov r13, qword [rbp + 0x6f]
mov rbx, rcx
mov r15d, 1
test eax, eax
je 0x18000b218
sub eax, r15d
je 0x18000ae87
cmp eax, 2
jne 0x18000ad7b
cmp r8d, 0x200
jne 0x18000acea
call qword [sym.imp.USER32.dll_GetMessagePos]
mov ecx, eax
xor esi, esi
cwde
mov r12d, esi
shr ecx, 0x10
mov dword [rbp - 0x59], eax
movsx eax, cx
mov dword [rbp - 0x55], eax
test byte [rbx + 0xf0], r15b
je 0x18000acc6
mov rcx, qword [rbp - 0x59]
mov r14, qword [rbx + 8]
call qword [sym.imp.USER32.dll_WindowFromPoint]
cmp rax, r14
jne 0x18000acd4
lea rdx, [rbp - 0x59]
mov rcx, r14
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x59]
xor r8d, r8d
mov edx, 0x445
call qword [sym.imp.USER32.dll_SendMessageA]
mov r14, rax
mov eax, dword [0x1800bc710]
cmp dword [rbp - 0x59], eax
jne 0x18000ac09
mov eax, dword [0x1800bc714]
cmp dword [rbp - 0x55], eax
je 0x18000acd4
test r14d, r14d
js 0x18000acd4
mov rcx, qword [rbx + 0x78]
call qword [sym.imp.USER32.dll_GetMenuItemCount]
cmp r14d, eax
jge 0x18000acd4
mov eax, dword [rbx + 0xf4]
cmp r14d, eax
je 0x18000acd4
cmp eax, 0xffffffff
je 0x18000acd4
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x49]
xorps xmm0, xmm0
movsxd r8, r14d
mov edx, 0x417
movups xmmword [rbp - 0x49], xmm0
movups xmmword [rbp - 0x39], xmm0
call qword [sym.imp.USER32.dll_SendMessageA]
test byte [rbp - 0x41], 4
je 0x18000acd4
or r14d, 0xffff0000
mov dword [rbx + 0xf8], r14d
movsxd rcx, dword [rbx + 0x18]
lea eax, [rcx - 1]
test eax, eax
jns 0x18000ac82
mov rbx, rsi
jmp 0x18000ac8b
mov rax, qword [rbx + 0x10]
mov rbx, qword [rax + rcx*8 - 8]
movzx r9d, word [rbp - 0x55]
xor r8d, r8d
movzx eax, word [rbp - 0x59]
mov edx, 0x202
shl r9d, 0x10
mov rcx, rbx
or r9, rax
call qword [sym.imp.USER32.dll_PostMessageA]
xor r9d, r9d
mov edx, 0x100
mov rcx, rbx
lea r8d, [r9 + 0x1b]
call qword [sym.imp.USER32.dll_PostMessageA]
mov r12d, r15d
jmp 0x18000acd4
mov rcx, qword [rbx + 8]
lea rdx, [rbp - 0x59]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rax, qword [rbp - 0x59]
test r12d, r12d
mov qword [0x1800bc710], rax
mov qword [rdi], rsi
jmp 0x18000b730
cmp r14d, 0x104
jne 0x18000add0
cmp r12, 0x12
jne 0x18000ad29
cmp byte [rcx + 0xf0], 0
jge 0x18000ad2f
movzx ecx, byte [rcx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 2
jne 0x18000ad2f
test cl, 8
je 0x18000ad2f
movzx edx, r15b
mov rcx, rbx
call fcn.18000e4c0
jmp 0x18000ad2f
cmp r12, 0x20
je 0x18000ada4
test byte [rbx + 0xf0], r15b
jne 0x18000adc7
mov rsi, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rsi
jne 0x18000adc7
and byte [rbx + 0xf1], 0xf7
xor r9d, r9d
mov edx, 0x448
mov rcx, rsi
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_PostMessageA]
mov rcx, rbx
call fcn.180007690
or byte [rbx + 0xf0], 0x40
xor esi, esi
mov qword [rdi], rsi
xor eax, eax
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.180013da0
mov rbx, qword [rsp + 0xf8]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx ecx, byte [rcx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 6
jne 0x18000adc7
or cl, 8
xor edx, edx
mov byte [rbx + 0xf1], cl
mov rcx, rbx
call fcn.18000e4c0
mov dword [rbx + 0x118], r12d
jmp 0x18000ad76
cmp r14d, 0x105
jne 0x18000adee
movzx eax, byte [rcx + 0xf1]
test al, 8
jne 0x18000ad76
or al, 8
mov byte [rcx + 0xf1], al
jmp 0x18000ad76
cmp r14d, 0x106
jne 0x18000ae29
test byte [rcx + 0xf0], r15b
jne 0x18000ad76
mov rax, qword [rcx + 8]
cmp qword [rcx + 0x30], rax
je 0x18000ad76
cmp r12, 0x20
je 0x18000ad76
xor esi, esi
mov eax, r15d
mov qword [rdi], rsi
jmp 0x18000ad7d
cmp r14d, 0x100
jne 0x18000ae56
lea rax, [rbp - 0x59]
mov dword [rbp - 0x59], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov edx, r14d
call fcn.180008e40
cmp dword [rbp - 0x59], 0
jmp 0x18000b72d
cmp r14d, 0x213
je 0x18000b1e0
cmp r14d, 0x102
jne 0x18000ad7b
xor esi, esi
mov qword [rdi], rsi
cmp r12, 0x1b
jne 0x18000ad7b
mov eax, r15d
jmp 0x18000ad7d
xor esi, esi
cmp r14d, 0x4e
jne 0x18000afdc
cmp dword [r13 + 0x10], 0xfffffd37
jne 0x18000af48
mov rax, qword [rcx + 8]
cmp qword [r13], rax
jne 0x18000af45
test byte [rcx + 0x98], 8
mov byte [rbp - 0x61], sil
jne 0x18000aedc
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
lea rdx, [rbp - 0x59]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, dword [rbp - 0x59]
setne byte [rbp - 0x61]
mov rcx, qword [rbx + 0xa0]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x18000aef3
cmp byte [rbp - 0x61], sil
je 0x18000aefd
test byte [r13 + 0x20], r15b
jne 0x18000b2a7
mov eax, dword [r13 + 0x20]
test al, 0x85
jne 0x18000af45
test al, 0x10
je 0x18000af26
mov r9, qword [rbx + 0x78]
xor r8d, r8d
mov rcx, qword [rbx + 0xa0]
mov edx, 0x11f
call qword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [r13 + 0x20]
test al, 0x20
je 0x18000af45
mov rcx, qword [rbx + 0xa0]
xor r9d, r9d
mov edx, 0x11f
mov r8d, 0xffff0000
call qword [sym.imp.USER32.dll_SendMessageA]
mov qword [rdi], rsi
cmp dword [r13 + 0x10], 0xfffffd3a
jne 0x18000b00c
mov rax, qword [rbx + 8]
cmp qword [r13], rax
je 0x18000af68
mov qword [rdi], r15
jmp 0x18000b00c
mov r14, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, r14
je 0x18000afa7
test byte [rbx + 0x98], 4
je 0x18000af9a
cmp qword [rbx + 0x120], rsi
jne 0x18000af9a
call qword [sym.imp.USER32.dll_GetFocus]
mov r14, qword [rbx + 8]
mov qword [rbx + 0x120], rax
mov rcx, r14
call qword [sym.imp.USER32.dll_SetFocus]
mov r14, qword [rbx + 8]
mov r8d, dword [r13 + 0x18]
xor r9d, r9d
mov edx, 0x419
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageA]
and byte [rbx + 0xf0], 0xcf
movzx r8d, r15b
mov edx, eax
mov rcx, rbx
call fcn.180005090
mov rax, r15
mov qword [rdi], rsi
jmp 0x18000ad7d
cmp r14d, 0x117
jne 0x18000b00c
lea rax, [rbp - 0x59]
mov dword [rbp - 0x59], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov edx, r14d
call fcn.180009220
mov qword [rdi], rax
cmp dword [rbp - 0x59], esi
jne 0x18000b736
call fcn.180006e60
cmp r14d, eax
je 0x18000b38b
cmp r14d, 0x112
jne 0x18000b0e9
mov eax, dword [rbx + 0x118]
mov r14d, esi
cmp eax, 0x12
je 0x18000b054
cmp eax, 0x79
jne 0x18000b047
lea ecx, [rax - 0x69]
call qword [sym.imp.USER32.dll_GetKeyState]
test al, al
jns 0x18000b054
cmp dword [rbx + 0x118], 0x20
jne 0x18000b0d7
cmp r12, 0xf100
jne 0x18000b0d7
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, qword [rbx + 8]
jne 0x18000b099
mov rcx, rbx
call fcn.180007690
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_PostMessageA]
and byte [rbx + 0xf0], 0xbf
test r14d, r14d
mov qword [rdi], rsi
jmp 0x18000b730
cmp dword [rbx + 0x118], 0x20
je 0x18000b0d7
test byte [rbx + 0xf0], 0x40
jne 0x18000b0d4
movzx ecx, byte [rbx + 0xf1]
movzx eax, cl
and al, 6
cmp al, 2
jne 0x18000b0cc
test cl, 8
je 0x18000b0cc
movzx edx, r15b
mov rcx, rbx
call fcn.18000e4c0
mov rcx, rbx
call fcn.18000ea60
mov r14d, r15d
and byte [rbx + 0xf0], 0xbf
mov qword [rdi], rsi
test r14d, r14d
jmp 0x18000b730
cmp r14d, 0x52e
je 0x18000b655
cmp r14d, 0x120
jne 0x18000b124
lea rax, [rbp - 0x59]
mov dword [rbp - 0x59], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov edx, pe_nt_image_headers64
mov rcx, rbx
call fcn.180009ab0
jmp 0x18000b72a
cmp r14d, 0x52f
je 0x18000b66d
cmp r14d, 0x52d
je 0x18000b69d
cmp r14d, 0x1a
jne 0x18000b170
cmp r12, 0x2a
je 0x18000b160
cmp r12, 0x100b
je 0x18000b160
cmp r12, 0x1023
jne 0x18000b1e0
mov rcx, rbx
call fcn.180007190
mov qword [rdi], r15
jmp 0x18000ad7b
cmp r14d, 0x2b
je 0x18000b6b2
cmp r14d, 0x2c
je 0x18000b70a
cmp r14d, 6
jne 0x18000b1e8
movzx eax, byte [rbx + 0xf0]
neg r12w
sbb cl, cl
and al, 0x7f
and cl, 0x80
or cl, al
mov byte [rbx + 0xf0], cl
jl 0x18000b1c7
movzx eax, byte [rbx + 0xf1]
and al, r14b
cmp al, r14b
jne 0x18000b1c7
xor edx, edx
mov rcx, rbx
call fcn.18000e4c0
mov qword [rdi], r15
jmp 0x18000ad7b
mov rcx, qword [rbx + 8]
mov r8d, r15d
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rdi], r15
jmp 0x18000ad7b
cmp r14d, 0x4e
jne 0x18000ad7b
cmp dword [r13 + 0x10], 0xfffffff4
jne 0x18000ad7b
lea r9, [rbp - 0x59]
mov dword [rbp - 0x59], r15d
mov r8, r13
mov edx, r12d
mov rcx, rbx
call fcn.18000a040
jmp 0x18000b72a
cmp r14d, r15d
jne 0x18000b23f
lea rax, [rbp - 0x59]
mov r9, r13
mov r8, r12
mov qword [rsp + 0x20], rax
mov edx, r15d
call fcn.180007fc0
mov qword [rdi], rax
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 2
jne 0x18000b267
lea rax, [rbp - 0x59]
mov r9, r13
mov r8, r12
mov qword [rsp + 0x20], rax
mov edx, r14d
call fcn.180008b30
mov qword [rdi], rax
mov rax, r15
jmp 0x18000ad7d
xor esi, esi
cmp r14d, 0x14
jne 0x18000b2ba
test byte [rcx + 0xf0], 2
jne 0x18000b2b2
test byte [rcx + 0x98], r15b
jne 0x18000b2b2
mov rcx, qword [rcx + 8]
lea rdx, [rbp - 0x59]
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
lea r8d, [rsi + 5]
mov rcx, r12
lea rdx, [rbp - 0x59]
call qword [sym.imp.USER32.dll_FillRect]
mov qword [rdi], r15
mov eax, r15d
jmp 0x18000ad7d
mov qword [rdi], rsi
jmp 0x18000b35e
cmp r14d, 0x116
jne 0x18000b2fa
mov rcx, qword [rcx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, qword [rbx + 0x78]
lea edx, [r14 + 9]
mov rcx, qword [rbx + 8]
movzx r8d, ax
or r8, 0x900000
call qword [sym.imp.USER32.dll_SendMessageA]
mov qword [rdi], r15
jmp 0x18000b35e
cmp r14d, 0x117
jne 0x18000b32e
lea rax, [rbp - 0x59]
mov dword [rbp - 0x59], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov edx, r14d
call fcn.180009220
mov qword [rdi], rax
cmp dword [rbp - 0x59], esi
je 0x18000b35e
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 0x11f
jne 0x18000b35e
lea rax, [rbp - 0x59]
mov dword [rbp - 0x59], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov edx, r14d
call fcn.180009e30
mov qword [rdi], rax
cmp dword [rbp - 0x59], esi
jne 0x18000b736
call fcn.180006d40
cmp r14d, eax
jne 0x18000b381
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.180005090
mov eax, r15d
mov qword [rdi], rsi
jmp 0x18000ad7d
call fcn.180006e60
cmp r14d, eax
jne 0x18000b3cc
test r12, r12
je 0x18000b39a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [r12], eax
mov rcx, qword [rbx + 8]
lea r14, [rbx + 8]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x18000b3be
test rbx, rbx
mov eax, r15d
cmove r14, rsi
mov qword [rdi], r14
jmp 0x18000ad7d
mov r14, rsi
mov qword [rdi], rsi
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 0x1a
jne 0x18000b3fd
cmp r12, 0x2a
je 0x18000b3ea
cmp r12, 0x100b
je 0x18000b3ea
cmp r12, 0x1023
jne 0x18000b3f2
mov rcx, rbx
call fcn.180007190
mov qword [rdi], rsi
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 0x120
je 0x18000b0ff
cmp r14d, 0x100
jne 0x18000b4e8
mov ecx, esi
mov dword [rbp - 0x59], ecx
cmp r12, 0x20
jne 0x18000b449
mov rcx, qword [rbx + 0xa0]
lea edx, [r14 + 4]
bts r13, 0x1d
mov r8, r12
mov r9, r13
call qword [sym.imp.USER32.dll_PostMessageA]
mov eax, r15d
mov qword [rdi], rsi
jmp 0x18000ad7d
lea rax, [r12 - 0x25]
test rax, 0xfffffffffffffffd
jne 0x18000b4de
movzx r14d, byte [rbx + 0xf1]
shr r14, 5
not r14
and r14d, 2
or r14, 0x25
test byte [rbx + 0xf0], r15b
jne 0x18000b4de
mov rcx, qword [rbx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
call qword [sym.imp.USER32.dll_SendMessageA]
mov rcx, rbx
mov edx, eax
cmp r12, r14
jne 0x18000b4a0
call fcn.180006f70
jmp 0x18000b4a5
call fcn.1800070a0
cmp eax, 0xfffffffe
jne 0x18000b4db
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x448
lea r8, [r9 - 1]
call qword [sym.imp.USER32.dll_SendMessageA]
mov rcx, rbx
call fcn.180004b00
mov ecx, dword [rbp - 0x59]
test al, al
mov qword [rdi], rsi
cmovne ecx, r15d
test ecx, ecx
jmp 0x18000b730
mov ecx, dword [rbp - 0x59]
mov qword [rdi], rsi
test ecx, ecx
jmp 0x18000b730
cmp r14d, 0x101
jne 0x18000b506
mov qword [rdi], rsi
cmp r12, 0x20
jne 0x18000ad7b
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 0x102
jne 0x18000b63c
mov r14d, r15d
cmp r12, 0x20
je 0x18000b0de
mov rcx, qword [rbx + 0xa0]
mov r14d, esi
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x18000b0de
mov r13, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, r13
jne 0x18000b0de
mov dword [rbp - 0x59], esi
cmp r12, 0xd
je 0x18000b585
movsx r8, r12b
lea r9, [rbp - 0x59]
mov edx, 0x44e
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jne 0x18000b585
cmp r12b, 0x2f
je 0x18000ad78
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
jmp 0x18000ad78
mov rcx, qword [rbx + 8]
lea rdx, [rbp - 0x29]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
movsxd r8, dword [rbp - 0x59]
lea r9, [rbp - 0x49]
mov rcx, qword [rbx + 8]
xorps xmm0, xmm0
mov edx, 0x41d
movups xmmword [rbp - 0x49], xmm0
call qword [sym.imp.USER32.dll_SendMessageA]
movsxd r8, dword [rbp - 0x59]
lea r9, [rbp - 0x19]
mov rcx, qword [rbx + 8]
xorps xmm0, xmm0
mov edx, 0x417
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
call qword [sym.imp.USER32.dll_SendMessageA]
movzx eax, byte [rbp - 0x11]
test al, 4
je 0x18000b629
test al, 8
jne 0x18000b629
mov eax, dword [rbp - 0x21]
cmp dword [rbp - 0x41], eax
jg 0x18000b629
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 0x28]
call qword [sym.imp.USER32.dll_PostMessageA]
cmp r12, 0xd
je 0x18000ad78
movsxd r8, dword [rbp - 0x59]
xor r9d, r9d
mov rcx, qword [rbx + 8]
mov edx, 0x448
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x18000ad78
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
mov eax, r15d
mov qword [rdi], rsi
jmp 0x18000ad7d
lea eax, [r14 - 0x104]
cmp eax, 2
jbe 0x18000ad78
cmp r14d, 0x52e
jne 0x18000b664
mov rax, qword [rbx + 0x78]
mov qword [rdi], rax
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 0x52f
jne 0x18000b694
lea rax, [rbp - 0x59]
mov r9, r13
mov r8, r12
mov qword [rsp + 0x20], rax
mov edx, 0x52f
mov rcx, rbx
call fcn.180007ca0
mov qword [rdi], rax
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 0x52d
jne 0x18000b6ac
mov rax, qword [rbx + 8]
mov qword [rdi], rax
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 0x2b
jne 0x18000b704
cmp dword [r13], r15d
jne 0x18000b1e0
mov rax, qword [r13 + 0x38]
test rax, rax
je 0x18000b1e0
cmp dword [rax], 0x1313
jne 0x18000b1e0
mov rdx, r13
mov rcx, rbx
test byte [rbx + 0xf1], r15b
je 0x18000b6f4
call fcn.1800063c0
mov eax, r15d
mov qword [rdi], r15
jmp 0x18000ad7d
call fcn.180005ed0
mov eax, r15d
mov qword [rdi], r15
jmp 0x18000ad7d
cmp r14d, 0x2c
jne 0x18000b73e
lea rax, [rbp - 0x59]
mov dword [rbp - 0x59], r15d
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov edx, 0x2c
mov rcx, rbx
call fcn.1800098a0
cmp dword [rbp - 0x59], esi
mov qword [rdi], rax
je 0x18000ad7b
mov eax, r15d
jmp 0x18000ad7d
cmp r14d, 0x37f
jne 0x18000ad7b
mov ecx, dword [r13 + 8]
lea eax, [rcx - 0x200]
cmp eax, 0xd
ja 0x18000b763
and byte [rbx + 0xf1], 0xef
jmp 0x18000b775
lea eax, [rcx - 0x100]
cmp eax, 9
ja 0x18000b775
or byte [rbx + 0xf1], 0x10
mov r10, qword [rbx]
lea rax, [rbp - 0x59]
mov r9, qword [r13 + 0x10]
mov rcx, rbx
mov r8d, dword [r13 + 8]
mov rdx, qword [r13]
mov dword [rsp + 0x30], 3
mov qword [rsp + 0x28], rax
mov rax, qword [r13 + 0x18]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x59], rsi
call qword [r10]
mov rax, qword [rbp - 0x59]
mov qword [rdi], rax
mov eax, r15d
jmp 0x18000ad7d