Function at 0x180022230
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x1f8]
sub rsp, 0x2f0
mov rax, qword [0x180356880]
xor rax, rsp
mov qword [rbp + 0x138], rax
cmp byte [0x1803f9d32], 0
jne 0x180023cd2
mov ecx, dword [0x1803fbd60]
mov rax, qword gs:[0x58]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rdi
mov qword [r11 - 0x10], r12
mov qword [r11 - 0x18], r13
movabs r13, 0x7fffffffffffffff
mov qword [r11 - 0x20], r14
mov r14, qword [rax + rcx*8]
mov qword [r11 - 0x28], r15
xor r15d, r15d
movaps xmmword [r11 - 0x38], xmm6
xorps xmm6, xmm6
movaps xmmword [r11 - 0x48], xmm7
movss xmm7, dword [0x180338ecc]
movaps xmmword [r11 - 0x58], xmm8
movss xmm8, dword [0x180338cac]
movaps xmmword [r11 - 0x68], xmm9
movsd xmm9, qword [0x180338dc8]
movaps xmmword [r11 - 0x78], xmm10
movsd xmm10, qword [0x180338d48]
movaps xmmword [r11 - 0x88], xmm11
movss xmm11, dword [0x180338e14]
movaps xmmword [r11 - 0x98], xmm12
movss xmm12, dword [0x180338d7c]
movaps xmmword [r11 - 0xa8], xmm13
movss xmm13, dword [0x180338d70]
movaps xmmword [r11 - 0xb8], xmm14
movss xmm14, dword [0x180338e8c]
mov qword [r11 + 0x10], rsi
mov r12d, 4
nop word [rax + rax]
mov eax, dword [reloc.WS2_32.dll_accept]
lea rcx, [rsp + 0x58]
add eax, 5
movsxd rbx, eax
call fcn.180001bc0
mov rcx, qword [rsp + 0x58]
mov qword [rbp - 0x40], rcx
test rbx, rbx
jle 0x180022374
imul rdx, rbx, 0xf4240
mov rax, r13
sub rax, rdx
cmp rcx, rax
jge 0x180022370
lea rax, [rdx + rcx]
mov qword [rbp - 0x40], rax
jmp 0x180022374
mov qword [rbp - 0x40], r13
lea rcx, [rbp - 0x40]
call fcn.180004af0
cmp byte [0x1803f9cd0], r15b
mov rbx, qword [0x1803fcf80]
je 0x1800223b0
test rbx, rbx
je 0x1800223b0
movd xmm1, dword [0x1803f9cd4]
lea rcx, [rbx + 0x280]
cvtdq2ps xmm1, xmm1
call fcn.180023cf0
mov rbx, qword [0x1803fcf80]
cmp byte [0x1803f9cc9], r15b
je 0x1800223dc
test rbx, rbx
je 0x1800223dc
movd xmm1, dword [0x1803f9ccc]
lea rcx, [rbx + 0x280]
cvtdq2ps xmm1, xmm1
call fcn.180023cf0
mov rbx, qword [0x1803fcf80]
cmp byte [0x1803f9cda], r15b
je 0x18002240f
test rbx, rbx
je 0x18002240f
mov rcx, qword [0x1803fc9e0]
add rcx, rbx
call fcn.18001f200
lea rcx, [rbx + 0x280]
movaps xmm1, xmm0
call fcn.180023cf0
mov rbx, qword [0x1803fcf80]
movzx r8d, byte [0x1803f9cd9]
mov edx, 0xdf
mov rcx, rbx
call fcn.1800215f0
cmp byte [0x1803f9ce5], r15b
je 0x1800224c1
mov rcx, qword [0x1803fcf80]
mov r10, qword [0x1803fcb08]
test rcx, rcx
jne 0x180022449
mov rcx, r15
jmp 0x18002248a
test r10, r10
je 0x180022483
cmp dword [0x1803fcb00], r15d
je 0x180022483
mov rdx, qword [0x1803fc9c0]
lea r8, [rbp + 0xb8]
add rdx, rcx
mov qword [rsp + 0x20], r15
mov rcx, r10
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rcx, qword [rbp + 0xb8]
mov dword [rbp + 0x48], 0x42c40000
test r10, r10
je 0x1800224c8
cmp dword [0x1803fcb00], r15d
je 0x1800224c8
mov rdx, qword [0x1803fc9e8]
lea r8, [rbp + 0x48]
add rdx, rcx
mov qword [rsp + 0x20], r15
mov rcx, r10
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
mov rbx, qword [0x1803fcf80]
movzx edi, byte [0x1803f9cdb]
test rbx, rbx
je 0x180022562
test r10, r10
je 0x180022516
cmp dword [0x1803fcb00], r15d
je 0x180022516
lea rdx, [rbx + 0x188]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x118]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rcx, qword [rbp + 0x118]
mov rax, rcx
bts rcx, 8
btr rax, 8
test dil, dil
cmove rcx, rax
mov qword [rbp - 0x40], rcx
test r10, r10
je 0x180022562
cmp dword [0x1803fcb00], r15d
je 0x180022562
lea rdx, [rbx + 0x188]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp - 0x40]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [0x1803f9cdc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180022581
cmp byte [0x1803f9cdb], r15b
sete byte [0x1803f9cdb]
mov rdx, qword [0x1803fcf80]
test rdx, rdx
je 0x1800225e1
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x1800225c1
cmp dword [0x1803fcb00], r15d
je 0x1800225c1
add rdx, qword [0x1803fc9c0]
lea r8, [rbp + 0x120]
mov r9d, 8
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x1800225e1
add rcx, qword [0x1803fc9f0]
movss xmm1, dword [0x1803f9ce0]
call fcn.180023cf0
movzx ecx, byte [0x1803f9ce4]
cmp byte [0x1803fc99b], cl
je 0x180022602
call fcn.180021780
movzx eax, byte [0x1803f9ce4]
mov byte [0x1803fc99b], al
mov eax, dword [r14 + r12]
cmp dword [0x1803fd004], eax
jle 0x18002263b
lea rcx, [0x1803fd004]
call fcn.18011bdd8
cmp dword [0x1803fd004], 0xffffffff
jne 0x18002263b
lea rcx, [0x1803fd028]
call fcn.180001bc0
lea rcx, [0x1803fd004]
call fcn.18011bd6c
lea rcx, [rsp + 0x60]
call fcn.180001bc0
mov rax, qword [rsp + 0x60]
xorps xmm0, xmm0
sub rax, qword [0x1803fd028]
cvtsi2sd xmm0, rax
divsd xmm0, xmm9
comisd xmm0, xmm10
jb 0x1800227e7
mov rdx, qword [0x1803fcf80]
mov r10, qword [0x1803fcb08]
test rdx, rdx
jne 0x180022681
mov rdx, r15
jmp 0x1800226bc
test r10, r10
je 0x1800226b5
cmp dword [0x1803fcb00], r15d
je 0x1800226b5
add rdx, 0x30
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x128]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rdx, qword [rbp + 0x128]
test r10, r10
je 0x18002279f
cmp dword [0x1803fcb00], r15d
je 0x1800226f1
add rdx, 0x10
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x78]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
test r10, r10
je 0x18002279f
cmp dword [0x1803fcb00], r15d
je 0x18002272d
mov rdx, qword [rbp + 0x78]
lea r8, [rbp + 0x80]
add rdx, 0x20
mov qword [rsp + 0x20], r15
mov r9d, 8
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
test r10, r10
je 0x18002279f
cmp dword [0x1803fcb00], r15d
je 0x180022768
mov rdx, qword [rbp + 0x80]
lea r8, [rbp + 0x88]
add rdx, 0x70
mov qword [rsp + 0x20], r15
mov r9d, 8
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
test r10, r10
je 0x18002279f
cmp dword [0x1803fcb00], r15d
je 0x18002279f
mov rdx, qword [rbp + 0x88]
lea r8, [rbp + 0x90]
mov r9d, 8
mov qword [rsp + 0x20], r15
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
cmp byte [0x1803f9ce6], r15b
je 0x1800227ad
movaps xmm0, xmm7
jmp 0x1800227b1
movaps xmm0, xmm8
movss dword [rbp + 0x50], xmm0
test r10, r10
je 0x1800227ee
cmp dword [0x1803fcb00], r15d
je 0x1800227ee
mov rdx, qword [rbp + 0x90]
lea r8, [rbp + 0x50]
add rdx, 0x2c
mov qword [rsp + 0x20], r15
mov r9d, 4
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
movzx ecx, byte [0x1803f9ce7]
cmp byte [0x1803fcbaf], cl
je 0x18002289b
test cl, cl
setne al
add al, 0xc8
mov byte [rbp - 0x70], al
test r10, r10
je 0x18002284d
cmp dword [0x1803fcb00], r15d
je 0x18002284d
mov rdx, qword [0x1803fcf80]
lea r8, [rbp - 0x70]
add rdx, qword [0x1803fc9d8]
mov r9d, 1
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ecx, byte [0x1803f9ce7]
mov r10, qword [0x1803fcb08]
test cl, cl
sete byte [rbp - 0x68]
test r10, r10
je 0x180022895
cmp dword [0x1803fcb00], r15d
je 0x180022895
mov rdx, qword [0x1803fcf80]
lea r8, [rbp - 0x68]
add rdx, qword [0x1803fc9f8]
mov r9d, 1
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ecx, byte [0x1803f9ce7]
mov r10, qword [0x1803fcb08]
mov byte [0x1803fcbaf], cl
movzx ecx, byte [0x1803f9ce8]
cmp byte [0x1803fcbae], cl
je 0x180022900
test cl, cl
mov eax, 0x20
cmovne eax, r15d
mov byte [rbp - 0x60], al
test r10, r10
je 0x1800228fa
cmp dword [0x1803fcb00], r15d
je 0x1800228fa
mov rdx, qword [0x1803fcf80]
lea r8, [rbp - 0x60]
add rdx, qword [0x1803fca40]
mov r9d, 1
mov rcx, r10
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ecx, byte [0x1803f9ce8]
mov r10, qword [0x1803fcb08]
mov byte [0x1803fcbae], cl
mov rdx, qword [0x1803fcf80]
test rdx, rdx
je 0x180022a57
test r10, r10
je 0x180022944
cmp dword [0x1803fcb00], r15d
je 0x180022944
add rdx, 0x20
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x98]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rbx, qword [rbp + 0x98]
test rbx, rbx
je 0x180022a57
mov eax, dword [r14 + r12]
cmp dword [0x1803fcfdc], eax
jle 0x180022988
lea rcx, [0x1803fcfdc]
call fcn.18011bdd8
cmp dword [0x1803fcfdc], 0xffffffff
jne 0x180022981
lea rcx, [0x1803fcfdc]
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fcff0], eax
jle 0x1800229f7
lea rcx, [0x1803fcff0]
call fcn.18011bdd8
cmp dword [0x1803fcff0], 0xffffffff
jne 0x1800229f0
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x1800229d7
cmp dword [0x1803fcb00], r15d
je 0x1800229d7
lea rdx, [rbx + 0x38]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x58]
lea rcx, [0x1803fcff0]
movss dword [0x1803fd048], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
cmp byte [0x1803f9ce9], r15b
je 0x180022a19
movss xmm0, dword [0x1803f9cec]
divss xmm0, xmm11
mulss xmm0, xmm12
subss xmm0, xmm13
jmp 0x180022a21
movss xmm0, dword [0x1803fd048]
movss dword [rbp - 0x38], xmm0
test r10, r10
je 0x180022a57
cmp dword [0x1803fcb00], r15d
je 0x180022a57
lea rdx, [rbx + 0x38]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
mov rcx, qword [0x1803fcf80]
test rcx, rcx
je 0x180022b08
test r10, r10
je 0x180022aa1
cmp dword [0x1803fcb00], r15d
je 0x180022aa1
mov rdx, qword [0x1803fc9c0]
lea r8, [rbp + 0xa0]
add rdx, rcx
mov qword [rsp + 0x20], r15
mov rcx, r10
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rdx, qword [rbp + 0xa0]
test rdx, rdx
je 0x180022b08
movzx ecx, byte [0x1803f9cf0]
movzx eax, byte [0x1803f9cf1]
test cl, cl
jne 0x180022ac3
test al, al
je 0x180022b08
neg cl
sbb ecx, ecx
and ecx, 0x4000
neg al
sbb eax, eax
and eax, 0x2000
or ecx, eax
mov dword [rbp - 0x48], ecx
test r10, r10
je 0x180022b08
cmp dword [0x1803fcb00], r15d
je 0x180022b08
add rdx, 0x218
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x48]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1803fcf80]
call fcn.1800216f0
mov rdx, qword [0x1803fcf80]
mov r10, qword [0x1803fcb08]
test al, al
je 0x1800232e4
test rdx, rdx
je 0x1800231d4
test r10, r10
je 0x180022b71
cmp dword [0x1803fcb00], r15d
je 0x180022b71
add rdx, qword [0x1803fc9c8]
lea r8, [rbp + 0xa8]
mov r9d, 8
mov qword [rsp + 0x20], r15
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1803fcf80]
mov r10, qword [0x1803fcb08]
mov rsi, qword [rbp + 0xa8]
test rsi, rsi
je 0x1800231cf
movzx ebx, byte [0x1803f9d04]
test r10, r10
je 0x180022bbf
cmp dword [0x1803fcb00], r15d
je 0x180022bbf
lea rdx, [rsi + 0x189]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xb0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
bts rcx, 8
btr rax, 8
test bl, bl
cmove rcx, rax
mov qword [rbp + 0xf8], rcx
test r10, r10
je 0x180022c4b
cmp dword [0x1803fcb00], r15d
je 0x180022c17
lea rdx, [rsi + 0x188]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xf8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
test r10, r10
je 0x180022c4b
cmp dword [0x1803fcb00], r15d
je 0x180022c4b
lea rdx, [rsi + 0x20]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xc0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rdi, qword [rbp + 0xc0]
test r10, r10
je 0x180022c89
cmp dword [0x1803fcb00], r15d
je 0x180022c89
mov rdx, qword [0x1803fc9b8]
lea r8, [rbp + 0x70]
add rdx, rsi
mov qword [rsp + 0x20], r15
mov r9d, 8
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rbx, qword [rbp + 0x70]
test rbx, rbx
je 0x180023103
mov eax, dword [r14 + r12]
cmp dword [0x1803fcfe8], eax
jle 0x180022cca
lea rcx, [0x1803fcfe8]
call fcn.18011bdd8
cmp dword [0x1803fcfe8], 0xffffffff
jne 0x180022cc3
lea rcx, [0x1803fcfe8]
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fcff4], eax
jle 0x180022d3d
lea rcx, [0x1803fcff4]
call fcn.18011bdd8
cmp dword [0x1803fcff4], 0xffffffff
jne 0x180022d36
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x180022d1d
cmp dword [0x1803fcb00], r15d
je 0x180022d1d
mov rdx, qword [rbp + 0x70]
lea r8, [rbp + 0x5c]
add rdx, 0x4c
mov qword [rsp + 0x20], r15
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x5c]
lea rcx, [0x1803fcff4]
movss dword [0x1803fd000], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fd024], eax
jle 0x180022daf
lea rcx, [0x1803fd024]
call fcn.18011bdd8
cmp dword [0x1803fd024], 0xffffffff
jne 0x180022da8
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x180022d8f
cmp dword [0x1803fcb00], r15d
je 0x180022d8f
lea rdx, [rbx + 0xf8]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x60]
lea rcx, [0x1803fd024]
movss dword [0x1803fcfd4], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fcfe0], eax
jle 0x180022e1e
lea rcx, [0x1803fcfe0]
call fcn.18011bdd8
cmp dword [0x1803fcfe0], 0xffffffff
jne 0x180022e17
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x180022dfe
cmp dword [0x1803fcb00], r15d
je 0x180022dfe
lea rdx, [rdi + 0x38]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x64]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x64]
lea rcx, [0x1803fcfe0]
movss dword [0x1803fd01c], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fd010], eax
jle 0x180022e90
lea rcx, [0x1803fd010]
call fcn.18011bdd8
cmp dword [0x1803fd010], 0xffffffff
jne 0x180022e89
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x180022e70
cmp dword [0x1803fcb00], r15d
je 0x180022e70
lea rdx, [rbx + 0x90]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x68]
lea rcx, [0x1803fd010]
movss dword [0x1803fd008], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fcffc], eax
jle 0x180022f02
lea rcx, [0x1803fcffc]
call fcn.18011bdd8
cmp dword [0x1803fcffc], 0xffffffff
jne 0x180022efb
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x180022ee2
cmp dword [0x1803fcb00], r15d
je 0x180022ee2
lea rdx, [rbx + 0x88]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x10]
lea rcx, [0x1803fcffc]
movss dword [0x1803fd00c], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
cmp byte [0x1803f9cfc], r15b
je 0x180022fba
mov ecx, dword [0x1803f9d00]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r10, qword [0x1803fcb08]
test ax, ax
jns 0x180022f4d
movaps xmm0, xmm14
mov byte [0x1803f9d05], 1
movss dword [0x1803f9d08], xmm0
mov byte [0x1803f9d14], 1
mov dword [0x1803f9d18], 0x41633333
jmp 0x180022f71
mov byte [0x1803f9d05], r15b
mov dword [0x1803f9d08], r15d
mov byte [0x1803f9d14], r15b
mov dword [0x1803f9d18], r15d
movss xmm0, dword [0x1803fd000]
movss dword [rbp - 0x30], xmm0
test r10, r10
je 0x180022fa7
cmp dword [0x1803fcb00], r15d
je 0x180022fa7
lea rdx, [rbx + 0x4c]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x30]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
cmp byte [0x1803f9d0c], r15b
je 0x180022fcd
movss xmm0, dword [0x1803f9d10]
jmp 0x180022fd5
cmp byte [0x1803f9d05], r15b
je 0x180022f69
movss xmm0, dword [0x1803f9d08]
jmp 0x180022f71
movss xmm0, dword [0x1803fd008]
movss dword [rbp - 0x28], xmm0
test r10, r10
je 0x18002300e
cmp dword [0x1803fcb00], r15d
je 0x18002300e
lea rdx, [rbx + 0x90]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x28]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
cmp byte [0x1803f9d14], r15b
je 0x180023021
movss xmm0, dword [0x1803f9d18]
jmp 0x180023029
movss xmm0, dword [0x1803fd00c]
movss dword [rbp - 0x20], xmm0
test r10, r10
je 0x180023062
cmp dword [0x1803fcb00], r15d
je 0x180023062
lea rdx, [rbx + 0x88]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x20]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
cmp byte [0x1803f9d1c], r15b
je 0x180023075
movss xmm0, dword [0x1803f9d20]
jmp 0x18002307d
movss xmm0, dword [0x1803fd01c]
movss dword [rbp - 0x18], xmm0
test r10, r10
je 0x1800230b3
cmp dword [0x1803fcb00], r15d
je 0x1800230b3
lea rdx, [rdi + 0x38]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x18]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
cmp byte [0x1803f9d24], r15b
je 0x1800230c2
mov dword [rbp - 0x10], r15d
jmp 0x1800230cf
movss xmm0, dword [0x1803fcfd4]
movss dword [rbp - 0x10], xmm0
test r10, r10
je 0x180023137
cmp dword [0x1803fcb00], r15d
je 0x180023103
lea rdx, [rbx + 0xf8]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x10]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
test r10, r10
je 0x180023137
cmp dword [0x1803fcb00], r15d
je 0x180023137
lea rdx, [rsi + 0x20]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xc8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rax, qword [rbp + 0xc8]
mov qword [0x1803fc9a8], rax
mov qword [0x1803fc9b0], rsi
test r10, r10
je 0x180023180
cmp dword [0x1803fcb00], r15d
je 0x180023180
lea rdx, [rsi + 0x30]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xd0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rax, qword [rbp + 0xd0]
mov qword [0x1803fc9a0], rax
test r10, r10
je 0x1800231c2
cmp dword [0x1803fcb00], r15d
je 0x1800231c2
lea rdx, [rsi + 0x90]
mov qword [rsp + 0x20], r15
mov r9d, recvfrom
lea r8, [rbp - 0x80]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
movsd xmm0, qword [rbp - 0x80]
mov eax, dword [rbp - 0x78]
jmp 0x1800233e9
test rdx, rdx
jne 0x1800231d9
mov rax, r15
jmp 0x18002321b
test r10, r10
je 0x180023214
cmp dword [0x1803fcb00], r15d
je 0x180023214
add rdx, 0x20
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xd8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1803fcf80]
mov r10, qword [0x1803fcb08]
mov rax, qword [rbp + 0xd8]
mov qword [0x1803fc9a8], rax
mov qword [0x1803fc9b0], rdx
test rdx, rdx
jne 0x180023233
mov rax, r15
jmp 0x180023275
test r10, r10
je 0x18002326e
cmp dword [0x1803fcb00], r15d
je 0x18002326e
add rdx, 0x30
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xe0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1803fcf80]
mov r10, qword [0x1803fcb08]
mov rax, qword [rbp + 0xe0]
mov qword [0x1803fc9a0], rax
test rdx, rdx
jne 0x1800232a0
movaps xmm0, xmm6
movss dword [rsp + 0x38], xmm6
mov eax, dword [rsp + 0x38]
unpcklps xmm0, xmm6
movsd qword [rsp + 0x30], xmm0
movq xmm0, xmm0
jmp 0x1800233e9
test r10, r10
je 0x1800232d5
cmp dword [0x1803fcb00], r15d
je 0x1800232d5
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, recvfrom
lea r8, [rsp + 0x30]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
movsd xmm0, qword [rsp + 0x30]
mov eax, dword [rsp + 0x38]
jmp 0x1800233e9
test rdx, rdx
jne 0x1800232ee
mov rax, r15
jmp 0x180023330
test r10, r10
je 0x180023329
cmp dword [0x1803fcb00], r15d
je 0x180023329
add rdx, 0x20
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xe8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1803fcf80]
mov r10, qword [0x1803fcb08]
mov rax, qword [rbp + 0xe8]
mov qword [0x1803fc9a8], rax
mov qword [0x1803fc9b0], rdx
test rdx, rdx
jne 0x180023348
mov rax, r15
jmp 0x18002338a
test r10, r10
je 0x180023383
cmp dword [0x1803fcb00], r15d
je 0x180023383
add rdx, 0x30
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xf0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1803fcf80]
mov r10, qword [0x1803fcb08]
mov rax, qword [rbp + 0xf0]
mov qword [0x1803fc9a0], rax
test rdx, rdx
jne 0x1800233aa
movaps xmm0, xmm6
movss dword [rsp + 0x44], xmm6
unpcklps xmm0, xmm6
movsd qword [rsp + 0x3c], xmm0
jmp 0x1800233df
test r10, r10
je 0x1800233df
cmp dword [0x1803fcb00], r15d
je 0x1800233df
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, recvfrom
lea r8, [rsp + 0x3c]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
movsd xmm0, qword [rsp + 0x3c]
mov eax, dword [rsp + 0x44]
mov rdx, qword [0x1803fceb8]
movsd qword [0x1803fcb78], xmm0
mov dword [0x1803fcb80], eax
test rdx, rdx
je 0x180023473
test r10, r10
je 0x18002343a
cmp dword [0x1803fcb00], r15d
je 0x18002343a
add rdx, 0x3c0
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x130]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rdx, qword [rbp + 0x130]
test rdx, rdx
je 0x180023473
test r10, r10
je 0x18002347d
cmp dword [0x1803fcb00], r15d
je 0x18002347d
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, recvfrom
lea r8, [rsp + 0x48]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x18002347d
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x50], r15d
movsd xmm0, qword [rsp + 0x48]
lea rcx, [rsp + 0x70]
mov eax, dword [rsp + 0x50]
movsd qword [rsp + 0x70], xmm0
mov dword [rsp + 0x78], eax
call fcn.180021950
mov rcx, qword [0x1803fcf80]
test rcx, rcx
je 0x180023bf0
mov r10, qword [0x1803fcb08]
test r10, r10
je 0x1800234ec
cmp dword [0x1803fcb00], r15d
je 0x1800234ec
mov rdx, qword [0x1803fca00]
lea r8, [rbp + 0x100]
add rdx, rcx
mov qword [rsp + 0x20], r15
mov rcx, r10
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rdx, qword [rbp + 0x100]
test rdx, rdx
je 0x180023bf0
test r10, r10
je 0x180023530
cmp dword [0x1803fcb00], r15d
je 0x180023530
add rdx, 0x20
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x108]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rdi, qword [rbp + 0x108]
test rdi, rdi
je 0x180023bf0
test r10, r10
je 0x180023585
cmp dword [0x1803fcb00], r15d
je 0x180023585
mov rax, qword [0x1803fcf80]
lea r8, [rbp + 0x110]
mov rdx, qword [0x1803fca00]
add rax, 0xfffffffffffffff8
add rdx, rax
mov qword [rsp + 0x20], r15
mov r9d, 8
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
mov rbx, qword [rbp + 0x110]
test r10, r10
je 0x1800235bd
cmp dword [0x1803fcb00], r15d
je 0x1800235bd
lea rdx, [rbx + 0x78]
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp - 0x58]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
movzx eax, byte [0x1803f9d28]
and al, 1
add al, al
or al, byte [rbp - 0x58]
mov byte [rbp - 0x50], al
test r10, r10
je 0x1800235ff
cmp dword [0x1803fcb00], r15d
je 0x1800235ff
lea rdx, [rbx + 0x78]
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp - 0x50]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fd074], eax
jle 0x18002366e
lea rcx, [0x1803fd074]
call fcn.18011bdd8
cmp dword [0x1803fd074], 0xffffffff
jne 0x180023667
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x18002364e
cmp dword [0x1803fcb00], r15d
je 0x18002364e
lea rdx, [rdi + 0x74]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x14]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x14]
lea rcx, [0x1803fd074]
movss dword [0x1803fd04c], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fcff8], eax
jle 0x1800236dc
lea rcx, [0x1803fcff8]
call fcn.18011bdd8
cmp dword [0x1803fcff8], 0xffffffff
jne 0x1800236d5
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x1800236c0
cmp dword [0x1803fcb00], r15d
je 0x1800236c0
lea rdx, [rdi + 0x2e4]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x40]
lea rcx, [0x1803fcff8]
mov dword [0x1803fd020], eax
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fcfec], eax
jle 0x18002374a
lea rcx, [0x1803fcfec]
call fcn.18011bdd8
cmp dword [0x1803fcfec], 0xffffffff
jne 0x180023743
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x18002372e
cmp dword [0x1803fcb00], r15d
je 0x18002372e
lea rdx, [rdi + 0x2e8]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x18]
lea rcx, [0x1803fcfec]
mov dword [0x1803fd018], eax
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fd050], eax
jle 0x1800237bc
lea rcx, [0x1803fd050]
call fcn.18011bdd8
cmp dword [0x1803fd050], 0xffffffff
jne 0x1800237b5
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x18002379c
cmp dword [0x1803fcb00], r15d
je 0x18002379c
lea rdx, [rdi + 0x8c]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x1c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x1c]
lea rcx, [0x1803fd050]
movss dword [0x1803fcfe4], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
mov eax, dword [r14 + r12]
cmp dword [0x1803fd070], eax
jle 0x18002382e
lea rcx, [0x1803fd070]
call fcn.18011bdd8
cmp dword [0x1803fd070], 0xffffffff
jne 0x180023827
mov rcx, qword [0x1803fcb08]
test rcx, rcx
je 0x18002380e
cmp dword [0x1803fcb00], r15d
je 0x18002380e
lea rdx, [rdi + 0x2f4]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x20]
lea rcx, [0x1803fd070]
movss dword [0x1803fd014], xmm0
call fcn.18011bd6c
mov r10, qword [0x1803fcb08]
movzx eax, byte [0x1803f9d2a]
cmp byte [0x1803fcbb4], al
je 0x180023892
test al, al
je 0x180023847
mov dword [rbp - 8], r15d
jmp 0x180023854
movss xmm0, dword [0x1803fd04c]
movss dword [rbp - 8], xmm0
test r10, r10
je 0x18002388c
cmp dword [0x1803fcb00], r15d
je 0x18002388c
lea rdx, [rdi + 0x74]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx eax, byte [0x1803f9d2a]
mov r10, qword [0x1803fcb08]
mov byte [0x1803fcbb4], al
movzx ecx, byte [0x1803f9d2b]
cmp byte [0x1803fcbad], cl
je 0x1800239e9
mov eax, dword [0x1803fd020]
test cl, cl
cmovne eax, r15d
mov dword [rbp + 0x28], eax
test r10, r10
je 0x1800238ef
cmp dword [0x1803fcb00], r15d
je 0x1800238ef
lea rdx, [rdi + 0x2e4]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x28]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ecx, byte [0x1803f9d2b]
mov r10, qword [0x1803fcb08]
mov eax, dword [0x1803fd018]
test cl, cl
cmovne eax, r15d
mov dword [rbp + 0x30], eax
test r10, r10
je 0x180023939
cmp dword [0x1803fcb00], r15d
je 0x180023939
lea rdx, [rdi + 0x2e8]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x30]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ecx, byte [0x1803f9d2b]
mov r10, qword [0x1803fcb08]
test cl, cl
je 0x180023946
mov dword [rbp], 0x3c23d70a
jmp 0x180023953
movss xmm0, dword [0x1803fd014]
movss dword [rbp], xmm0
test r10, r10
je 0x18002398e
cmp dword [0x1803fcb00], r15d
je 0x18002398e
lea rdx, [rdi + 0x2f4]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ecx, byte [0x1803f9d2b]
mov r10, qword [0x1803fcb08]
test cl, cl
je 0x18002399b
mov dword [rbp + 8], 0x43520000
jmp 0x1800239a8
movss xmm0, dword [0x1803fcfe4]
movss dword [rbp + 8], xmm0
test r10, r10
je 0x1800239e3
cmp dword [0x1803fcb00], r15d
je 0x1800239e3
lea rdx, [rdi + 0x8c]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ecx, byte [0x1803f9d2b]
mov r10, qword [0x1803fcb08]
mov byte [0x1803fcbad], cl
movzx eax, byte [0x1803f9d2c]
cmp byte [0x1803fcbb6], al
je 0x180023bf0
test al, al
je 0x180023b34
cmp byte [0x1803fc99a], r15b
jne 0x180023ab8
cmp byte [0x1803fcbb5], r15b
jne 0x180023ab8
test r10, r10
je 0x180023a52
cmp dword [0x1803fcb00], r15d
je 0x180023a52
lea rdx, [rdi + 0x130]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x38]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
movss xmm0, dword [rbp + 0x38]
ucomiss xmm0, xmm6
jp 0x180023a62
jne 0x180023a62
xor al, al
jmp 0x180023a64
mov al, 1
mov byte [0x1803fc99a], al
test r10, r10
je 0x180023a9e
cmp dword [0x1803fcb00], r15d
je 0x180023a9e
lea rdx, [rdi + 0x134]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x3c]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1803fcb08]
movss xmm0, dword [rbp + 0x3c]
ucomiss xmm0, xmm6
jp 0x180023ab1
mov byte [0x1803fcbb5], r15b
je 0x180023ab8
mov byte [0x1803fcbb5], 1
mov dword [rbp - 0x48], 0x41200000
test r10, r10
je 0x180023af3
cmp dword [0x1803fcb00], r15d
je 0x180023af3
lea rdx, [rdi + 0x130]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x48]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1803fcb08]
mov dword [rbp - 0x40], 0x41200000
test r10, r10
je 0x180023be3
cmp dword [0x1803fcb00], r15d
je 0x180023be3
lea rdx, [rdi + 0x134]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x40]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x180023be3
movzx eax, byte [0x1803fc99a]
test al, al
je 0x180023be3
movzx ecx, byte [0x1803fcbb5]
test cl, cl
je 0x180023be3
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x40], xmm0
test r10, r10
je 0x180023b99
cmp dword [0x1803fcb00], r15d
je 0x180023b99
lea rdx, [rdi + 0x130]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x40]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ecx, byte [0x1803fcbb5]
mov r10, qword [0x1803fcb08]
movzx eax, cl
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x48], xmm0
test r10, r10
je 0x180023bd5
cmp dword [0x1803fcb00], r15d
je 0x180023bd5
lea rdx, [rdi + 0x134]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp - 0x48]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1803fc99a], r15b
mov byte [0x1803fcbb5], r15b
movzx eax, byte [0x1803f9d2c]
mov byte [0x1803fcbb6], al
cmp byte [0x1803f9cd8], r15b
mov edx, 0x156
mov rcx, qword [0x1803fcf80]
sete r8b
call fcn.1800215f0
movzx r8d, byte [0x1803f9cd8]
mov edx, 0xfc
mov rcx, qword [0x1803fcf80]
call fcn.1800215f0
movzx r8d, byte [0x1803f9cd8]
mov edx, 0x8d
mov rcx, qword [0x1803fcf80]
call fcn.1800215f0
cmp byte [0x1803f9d32], r15b
je 0x180022330
movaps xmm14, xmmword [rsp + 0x240]
movaps xmm13, xmmword [rsp + 0x250]
movaps xmm12, xmmword [rsp + 0x260]
movaps xmm11, xmmword [rsp + 0x270]
movaps xmm10, xmmword [rsp + 0x280]
movaps xmm9, xmmword [rsp + 0x290]
movaps xmm8, xmmword [rsp + 0x2a0]
movaps xmm7, xmmword [rsp + 0x2b0]
movaps xmm6, xmmword [rsp + 0x2c0]
mov r15, qword [rsp + 0x2d0]
mov r14, qword [rsp + 0x2d8]
mov r13, qword [rsp + 0x2e0]
mov r12, qword [rsp + 0x2e8]
mov rdi, qword [rsp + 0x310]
mov rsi, qword [rsp + 0x308]
mov rbx, qword [rsp + 0x300]
mov rcx, qword [rbp + 0x138]
xor rcx, rsp
call fcn.18011b930
add rsp, 0x2f0
pop rbp
ret