Function at 0x1800483f0
Capabilities:
Acquire debug privileges

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x670]
sub rsp, 0x770
mov qword [rbp + 0x150], 0xfffffffffffffffe
mov qword [rsp + 0x7c0], rbx
mov rax, qword [0x1800ec278]
xor rax, rsp
mov qword [rbp + 0x660], rax
mov r12, rdx
mov r13, rcx
mov qword [rbp + 0x360], rcx
mov qword [rbp + 0x368], rdx
xor ebx, ebx
mov dword [rsp + 0x30], ebx
lea rcx, str.SeDebugPrivilege
call fcn.18004a3d0
test al, al
jne 0x1800487f6
lea rcx, [0x180000000]
lea rax, [rcx + 0xbace8]
mov qword [rbp + 0x50], rax
lea rax, [rcx + 0xbad98]
mov qword [rbp + 0x60], rax
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x20], rax
lea rax, [0x1800bad78]
mov qword [rbp + 0xe8], rax
lea rax, [0x1800bacc0]
mov qword [rbp + 0xe8], rax
mov dword [rsp + 0x30], 1
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800bac20]
mov qword [rbp + rcx + 0x50], rax
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x4c], edx
mov qword [rbp + 0x58], rbx
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x50]
add rcx, rax
lea rdx, [rbp + 0x68]
call fcn.1800163c0
nop
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800bac38]
mov qword [rbp + rcx + 0x60], rax
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x5c], edx
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800bacf8]
mov qword [rbp + rcx + 0x50], rax
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rbp + rcx + 0x4c], edx
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800bad80]
mov qword [rbp + rcx + 0x50], rax
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x4c], edx
lea rax, [rbp + 0x68]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x68]
call fcn.180016460
nop
lea rax, [0x1800bad00]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0xd0], rbx
mov dword [rbp + 0xd8], ebx
mov r9b, 0x4d
lea r8d, [rbx + 0x16]
lea rdx, str._bf_ae_tl_M_Zm
lea rcx, [rbp + 0x390]
call fcn.180041ef0
mov r15, rax
mov r9b, 0x79
lea r8d, [rbx + 1]
lea rdx, [0x1800ba7fc]
lea rcx, [rbp + 0x370]
call fcn.180041ef0
mov r14, rax
mov r9b, 0x42
lea r8d, [rbx + 1]
lea rdx, [0x1800ba800]
lea rcx, [rbp + 0x3b0]
call fcn.180041ef0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.180018200
mov rcx, rax
mov edx, ebx
call fcn.180013a30
mov rcx, rax
mov rdx, r14
call fcn.180018200
mov rcx, rax
mov rdx, r15
call fcn.180018200
mov rcx, rax
lea rdx, str._Last_Error:
call fcn.180018470
mov rcx, rax
mov edx, esi
call fcn.180013a30
nop
cmp qword [rbp + 0x3c8], 8
jb 0x18004864d
mov rcx, qword [rbp + 0x3b0]
call fcn.18007588c
mov qword [rbp + 0x3c8], 7
xor esi, esi
mov qword [rbp + 0x3c0], rsi
mov word [rbp + 0x3b0], si
cmp qword [rbp + 0x388], 8
jb 0x18004867e
mov rcx, qword [rbp + 0x370]
call fcn.18007588c
mov qword [rbp + 0x388], 7
mov qword [rbp + 0x380], rsi
mov word [rbp + 0x370], si
cmp qword [rbp + 0x3a8], 8
jb 0x1800486ad
mov rcx, qword [rbp + 0x390]
call fcn.18007588c
mov qword [rbp + 0x3a8], 7
mov qword [rbp + 0x3a0], rsi
mov word [rbp + 0x390], si
mov r9b, 0x89
mov r8d, 7
lea rdx, [0x1800bb968]
lea rcx, [rbp + 0x3b0]
call fcn.180041e20
mov rdi, rax
mov r9b, 0xb8
mov r8d, 5
lea rdx, [0x1800ba804]
lea rcx, [rbp + 0x370]
call fcn.180041e20
mov rbx, rax
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x50]
call fcn.1800146d0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003e1d0
nop
cmp qword [rbp + 0x3a8], 8
jb 0x18004873a
mov rcx, qword [rbp + 0x390]
call fcn.18007588c
mov qword [rbp + 0x3a8], 7
mov qword [rbp + 0x3a0], rsi
mov word [rbp + 0x390], si
cmp qword [rbp + 0x388], 0x10
jb 0x180048769
mov rcx, qword [rbp + 0x370]
call fcn.18007588c
mov qword [rbp + 0x388], 0xf
mov qword [rbp + 0x380], rsi
mov byte [rbp + 0x370], 0
cmp qword [rbp + 0x3c8], 0x10
jb 0x180048798
mov rcx, qword [rbp + 0x3b0]
call fcn.18007588c
mov qword [rbp + 0x3c8], 0xf
mov qword [rbp + 0x3c0], rsi
mov byte [rbp + 0x3b0], 0
lea rcx, [rbp + 0xe8]
call fcn.180014600
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x20], rax
lea rax, [0x1800bacc0]
mov qword [rbp + 0xe8], rax
lea rax, [0x1800bad78]
mov qword [rbp + 0xe8], rax
lea rcx, [rbp + 0xe8]
call fcn.1800749f4
jmp 0x180049259
cmp qword [r12 + 0x10], 0
jne 0x180048d9a
mov qword [rsp + 0x20], rbx
lea r8, [rsp + 0x20]
lea rdx, [fcn.1800483f0]
mov ecx, 6
call fcn.18006e1c0
test eax, eax
jne 0x180048aaa
lea rcx, [rbp + 0x260]
call fcn.180014530
nop
mov r9b, 0xf1
mov r8d, 0x17
lea rdx, [0x1800bc8e0]
lea rcx, [rbp + 0x3b0]
call fcn.180041ef0
mov r15, rax
mov r9b, 0x79
mov r8d, 1
lea rdx, [0x1800ba7fc]
lea rcx, [rbp + 0x370]
call fcn.180041ef0
mov r14, rax
mov r9b, 0x42
mov r8d, 1
lea rdx, [0x1800ba800]
lea rcx, [rbp + 0x390]
call fcn.180041ef0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
mov rdx, rdi
lea rcx, [rbp + 0x270]
call fcn.180018200
mov rcx, rax
mov edx, ebx
call fcn.180013a30
mov rcx, rax
mov rdx, r14
call fcn.180018200
mov rcx, rax
mov rdx, r15
call fcn.180018200
mov rcx, rax
lea rdx, str._Last_Error:
call fcn.180018470
mov rcx, rax
mov edx, esi
call fcn.180013a30
nop
cmp qword [rbp + 0x3a8], 8
jb 0x1800488fe
mov rcx, qword [rbp + 0x390]
call fcn.18007588c
mov qword [rbp + 0x3a8], 7
xor esi, esi
mov qword [rbp + 0x3a0], rsi
mov word [rbp + 0x390], si
cmp qword [rbp + 0x388], 8
jb 0x18004892f
mov rcx, qword [rbp + 0x370]
call fcn.18007588c
mov qword [rbp + 0x388], 7
mov qword [rbp + 0x380], rsi
mov word [rbp + 0x370], si
cmp qword [rbp + 0x3c8], 8
jb 0x18004895e
mov rcx, qword [rbp + 0x3b0]
call fcn.18007588c
mov qword [rbp + 0x3c8], 7
mov qword [rbp + 0x3c0], rsi
mov word [rbp + 0x3b0], si
mov r9b, 0x89
mov r8d, 7
lea rdx, [0x1800bb968]
lea rcx, [rbp + 0x3b0]
call fcn.180041e20
mov rdi, rax
mov r9b, 0xb8
mov r8d, 5
lea rdx, [0x1800ba804]
lea rcx, [rbp + 0x370]
call fcn.180041e20
mov rbx, rax
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x260]
call fcn.1800146d0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003e1d0
nop
cmp qword [rbp + 0x3a8], 8
jb 0x1800489ee
mov rcx, qword [rbp + 0x390]
call fcn.18007588c
mov qword [rbp + 0x3a8], 7
mov qword [rbp + 0x3a0], rsi
mov word [rbp + 0x390], si
cmp qword [rbp + 0x388], 0x10
jb 0x180048a1d
mov rcx, qword [rbp + 0x370]
call fcn.18007588c
mov qword [rbp + 0x388], 0xf
mov qword [rbp + 0x380], rsi
mov byte [rbp + 0x370], 0
cmp qword [rbp + 0x3c8], 0x10
jb 0x180048a4c
mov rcx, qword [rbp + 0x3b0]
call fcn.18007588c
mov qword [rbp + 0x3c8], 0xf
mov qword [rbp + 0x3c0], rsi
mov byte [rbp + 0x3b0], 0
lea rcx, [rbp + 0x2f8]
call fcn.180014600
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x28], rax
lea rax, [0x1800bacc0]
mov qword [rbp + 0x2f8], rax
lea rax, [0x1800bad78]
mov qword [rbp + 0x2f8], rax
lea rcx, [rbp + 0x2f8]
call fcn.1800749f4
jmp 0x180049259
mov r8d, 0x104
lea rdx, [rbp + 0x450]
mov rcx, qword [rsp + 0x20]
call fcn.18006dea0
test eax, eax
jne 0x180048d60
lea rcx, [rbp + 0x160]
call fcn.180014530
nop
mov r9b, 0x88
mov r8d, 0x17
lea rdx, [0x1800bc910]
lea rcx, [rbp + 0x3b0]
call fcn.180041ef0
mov r15, rax
mov r9b, 0x79
mov r8d, 1
lea rdx, [0x1800ba7fc]
lea rcx, [rbp + 0x370]
call fcn.180041ef0
mov r14, rax
mov r9b, 0x42
mov r8d, 1
lea rdx, [0x1800ba800]
lea rcx, [rbp + 0x390]
call fcn.180041ef0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
mov rdx, rdi
lea rcx, [rbp + 0x170]
call fcn.180018200
mov rcx, rax
mov edx, ebx
call fcn.180013a30
mov rcx, rax
mov rdx, r14
call fcn.180018200
mov rcx, rax
mov rdx, r15
call fcn.180018200
mov rcx, rax
lea rdx, str._Last_Error:
call fcn.180018470
mov rcx, rax
mov edx, esi
call fcn.180013a30
nop
cmp qword [rbp + 0x3a8], 8
jb 0x180048ba2
mov rcx, qword [rbp + 0x390]
call fcn.18007588c
mov qword [rbp + 0x3a8], 7
xor esi, esi
mov qword [rbp + 0x3a0], rsi
mov word [rbp + 0x390], si
cmp qword [rbp + 0x388], 8
jb 0x180048bd3
mov rcx, qword [rbp + 0x370]
call fcn.18007588c
mov qword [rbp + 0x388], 7
mov qword [rbp + 0x380], rsi
mov word [rbp + 0x370], si
cmp qword [rbp + 0x3c8], 8
jb 0x180048c02
mov rcx, qword [rbp + 0x3b0]
call fcn.18007588c
mov qword [rbp + 0x3c8], 7
mov qword [rbp + 0x3c0], rsi
mov word [rbp + 0x3b0], si
mov r9b, 0x89
mov r8d, 7
lea rdx, [0x1800bb968]
lea rcx, [rbp + 0x3b0]
call fcn.180041e20
mov rdi, rax
mov r9b, 0xb8
mov r8d, 5
lea rdx, [0x1800ba804]
lea rcx, [rbp + 0x370]
call fcn.180041e20
mov rbx, rax
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x160]
call fcn.1800146d0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003e1d0
nop
cmp qword [rbp + 0x3a8], 8
jb 0x180048c92
mov rcx, qword [rbp + 0x390]
call fcn.18007588c
mov qword [rbp + 0x3a8], 7
mov qword [rbp + 0x3a0], rsi
mov word [rbp + 0x390], si
cmp qword [rbp + 0x388], 0x10
jb 0x180048cc1
mov rcx, qword [rbp + 0x370]
call fcn.18007588c
mov qword [rbp + 0x388], 0xf
mov qword [rbp + 0x380], rsi
mov byte [rbp + 0x370], 0
cmp qword [rbp + 0x3c8], 0x10
jb 0x180048cf0
mov rcx, qword [rbp + 0x3b0]
call fcn.18007588c
mov qword [rbp + 0x3c8], 0xf
mov qword [rbp + 0x3c0], rsi
mov byte [rbp + 0x3b0], 0
lea rcx, [rbp + 0x1f8]
call fcn.180014600
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x28], rax
lea rax, [0x1800bacc0]
mov qword [rbp + 0x1f8], rax
lea rax, [0x1800bad78]
mov qword [rbp + 0x1f8], rax
lea rcx, [rbp + 0x1f8]
call fcn.1800749f4
nop
mov rcx, r13
call fcn.180005910
nop
mov rcx, r12
call fcn.180005910
jmp 0x18004929e
cmp word [rbp + 0x450], 0
jne 0x180048d6f
mov r8, rbx
jmp 0x180048d8b
lea rax, [rbp + 0x450]
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180048d80
lea rdx, [rbp + 0x450]
mov rcx, r12
call fcn.180016510
lea rcx, [0x180000000]
lea rax, [rcx + 0xbace8]
mov qword [rsp + 0x50], rax
lea rax, [rcx + 0xbad98]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea r15, [0x1800bad78]
mov qword [rbp - 0x18], r15
lea rax, [0x1800bacc0]
mov qword [rbp - 0x18], rax
mov dword [rsp + 0x30], 0x10
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800bac20]
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x4c], edx
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
lea rdx, [rsp + 0x68]
call fcn.1800163c0
nop
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800bac38]
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x5c], edx
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800bacf8]
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rsp + rcx + 0x4c], edx
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800bad80]
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x4c], edx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x68]
call fcn.180016460
nop
lea rax, [0x1800bad00]
mov qword [rsp + 0x68], rax
mov qword [rbp - 0x30], rbx
mov dword [rbp - 0x28], ebx
lea r8, [0x1800bc940]
mov rdx, r13
lea rcx, [rbp + 0x3d0]
call fcn.180049390
nop
mov r8, r12
mov rdx, rax
lea rcx, [rbp + 0x3b0]
call fcn.180041080
mov r14, rax
mov r9b, 0xf7
mov r8d, 1
lea rdx, [0x1800ba780]
lea rcx, [rbp + 0x370]
call fcn.180041ef0
mov rsi, rax
mov r9b, 0x6b
mov r8d, 1
lea rdx, [0x1800ba784]
lea rcx, [rbp + 0x390]
call fcn.180041ef0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.180018200
mov rcx, rax
mov edx, edi
call fcn.180013a30
mov rcx, rax
mov rdx, rsi
call fcn.180018200
mov rcx, rax
mov rdx, r14
call fcn.180018200
nop
cmp qword [rbp + 0x3a8], 8
jb 0x180048f80
mov rcx, qword [rbp + 0x390]
call fcn.18007588c
mov qword [rbp + 0x3a8], 7
xor esi, esi
mov qword [rbp + 0x3a0], rsi
mov word [rbp + 0x390], si
cmp qword [rbp + 0x388], 8
jb 0x180048fb1
mov rcx, qword [rbp + 0x370]
call fcn.18007588c
mov qword [rbp + 0x388], 7
mov qword [rbp + 0x380], rsi
mov word [rbp + 0x370], si
cmp qword [rbp + 0x3c8], 8
jb 0x180048fe0
mov rcx, qword [rbp + 0x3b0]
call fcn.18007588c
mov qword [rbp + 0x3c8], 7
mov qword [rbp + 0x3c0], rsi
mov word [rbp + 0x3b0], si
cmp qword [rbp + 0x3e8], 8
jb 0x18004900f
mov rcx, qword [rbp + 0x3d0]
call fcn.18007588c
mov qword [rbp + 0x3e8], 7
mov qword [rbp + 0x3e0], rsi
mov word [rbp + 0x3d0], si
mov r9b, 0x89
mov r8d, 7
lea rdx, [0x1800bb968]
lea rcx, [rbp + 0x370]
call fcn.180041e20
mov rdi, rax
mov r9b, 0x85
mov r8d, 5
lea rdx, [0x1800ba790]
lea rcx, [rbp + 0x390]
call fcn.180041e20
mov rbx, rax
lea rdx, [rbp + 0x3d0]
lea rcx, [rsp + 0x50]
call fcn.1800146d0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003e1d0
nop
cmp qword [rbp + 0x3e8], 8
jb 0x18004909d
mov rcx, qword [rbp + 0x3d0]
call fcn.18007588c
mov qword [rbp + 0x3e8], 7
mov qword [rbp + 0x3e0], rsi
mov word [rbp + 0x3d0], si
cmp qword [rbp + 0x3a8], 0x10
jb 0x1800490cc
mov rcx, qword [rbp + 0x390]
call fcn.18007588c
mov qword [rbp + 0x3a8], 0xf
mov qword [rbp + 0x3a0], rsi
mov byte [rbp + 0x390], 0
cmp qword [rbp + 0x388], 0x10
jb 0x1800490fb
mov rcx, qword [rbp + 0x370]
call fcn.18007588c
mov qword [rbp + 0x388], 0xf
mov qword [rbp + 0x380], rsi
mov byte [rbp + 0x370], 0
lea rcx, [rbp - 0x18]
call fcn.180014600
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [0x1800bacc0]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x18], r15
lea rcx, [rbp - 0x18]
call fcn.1800749f4
mov r9b, 0x39
mov r8d, 0xa
lea rdx, str.Z2__B_tl
lea rcx, [rbp + 0x3f0]
call fcn.180041ef0
nop
mov r9b, 0x9e
mov r8d, 0xc
lea rdx, [0x1800bc960]
lea rcx, [rbp + 0x410]
call fcn.180041ef0
nop
mov r9b, 0x64
mov r8d, 0xb
lea rdx, [0x1800bc980]
lea rcx, [rbp + 0x430]
call fcn.180041ef0
nop
lea rdx, [rbp + 0x3f0]
lea rcx, [rsp + 0x38]
call fcn.18004ae40
nop
mov rdi, rsi
mov rcx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x38]
sub rcx, r9
movabs r14, 0x7aba01eae807aba1
mov rax, r14
imul rcx
sar rdx, 9
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18004921f
mov rbx, rsi
nop word [rax + rax]
mov r8, r12
mov rdx, r13
mov ecx, dword [r9 + rbx]
call fcn.180053470
inc rdi
lea rbx, [rbx + 0x42c]
mov rcx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x38]
sub rcx, r9
mov rax, r14
imul rcx
sar rdx, 9
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdi, rdx
jb 0x1800491e0
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18004923c
call fcn.18007588c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rsi
lea r9, [fcn.180005910]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rbp + 0x3f0]
call fcn.180077954
nop
cmp qword [r13 + 0x18], 8
jb 0x180049269
mov rcx, qword [r13]
call fcn.18007588c
mov qword [r13 + 0x18], 7
mov qword [r13 + 0x10], rsi
mov word [r13], si
cmp qword [r12 + 0x18], 8
jb 0x18004928b
mov rcx, qword [r12]
call fcn.18007588c
mov qword [r12 + 0x18], 7
mov qword [r12 + 0x10], rsi
mov word [r12], si
mov rcx, qword [rbp + 0x660]
xor rcx, rsp
call fcn.180074e80
mov rbx, qword [rsp + 0x7c0]
add rsp, 0x770
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret