Function at 0x180037140
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x490]
sub rsp, 0x590
mov rax, qword [0x18009a1f0]
xor rax, rsp
mov qword [rbp + 0x480], rax
mov r14, r8
mov r15d, edx
mov dword [rsp + 0x40], edx
mov rsi, rcx
movdqa xmm0, xmmword [0x180092480]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
movdqa xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
movdqa xmmword [rbp + 0x270], xmm0
mov byte [rbp + 0x260], 0
xor ebx, ebx
mov qword [rbp + 0x20], rbx
mov word [rbp + 0x28], bx
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], bl
mov qword [rbp - 0x10], rbx
mov word [rbp - 8], bx
movdqu xmmword [rbp + 0xa], xmm0
mov byte [rbp - 6], bl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rbx
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], rbx
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
lea ecx, [rbx + 0x30]
call fcn.180082684
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x78], rbx
xorps xmm2, xmm2
movsd qword [rbp + 0x80], xmm2
mov qword [rbp + 0x88], rbx
mov r12d, 1
mov dword [rbp + 0x90], r12d
mov qword [rbp + 0x98], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb0], xmm1
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], 0xffffffffffffffff
mov dword [rbp + 0xe0], ebx
xor eax, eax
movups xmmword [rbp + 0xe8], xmm0
movups xmmword [rbp + 0xf8], xmm0
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [0x180092480]
movdqa xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], al
mov word [rbp + 0x150], bx
mov dword [rbp + 0x154], ebx
mov qword [rbp + 0x158], rbx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x160], xmm0
movsd qword [rbp + 0x170], xmm2
mov byte [rbp + 0x178], al
mov qword [rbp + 0x17c], rbx
lea eax, [r15 + 0x14]
lea rcx, [0x180000000]
lea r10d, [rbx + 0x74]
lea r9d, [rbx + 0x6f]
cmp r15d, eax
jae 0x1800375c8
lea ebx, [r15 - 0xb8]
lea edi, [r12 + 0x13]
lea edx, [rdi + 0x5f]
lea r9d, [r12 + 0x6f]
lea r8d, [r12 + 0x6d]
lea r10d, [r12 + 0x60]
lea r11d, [r12 + 0x66]
lea r13d, [r12 + 0x6c]
lea r12d, [rdi + 0x61]
mov r15d, 0x656d
cmp ebx, 0x2b
ja case.default.0x180037389
movzx eax, byte [rcx + rbx + 0x37f08]
mov ecx, dword [rcx + rax*4 + 0x37eb8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov word [rbp + 0x326], r9w
mov word [rbp + 0x327], dx
jmp case.0x180037389.19
mov word [rbp + 0x343], r12w
jmp case.0x180037389.19
mov word [rbp + 0x35a], r15w
jmp case.0x180037389.19
mov dword [rbp + 0x35c], 0x695f64
mov word [rbp + 0x35f], r8w
jmp case.0x180037389.19
mov word [rbp + 0x336], r10w
mov word [rbp + 0x337], dx
mov dword [rbp + 0x338], 0x706f4374
jmp case.0x180037389.19
cmp dword [r14], 0
je 0x180037409
mov eax, dword [0x4002101c]
or eax, dword [rsi]
mov dword [0x4002101c], eax
jmp case.0x180037389.19
mov ecx, dword [0x4002101c]
mov eax, dword [rsi]
not eax
and ecx, eax
mov dword [0x4002101c], ecx
jmp case.0x180037389.19
mov eax, 0x62
mov word [rbp + 0x344], ax
mov eax, 0x44
mov word [rbp + 0x345], ax
mov dword [rbp + 0x346], 0x617461
jmp case.0x180037389.19
mov eax, 0x74
mov word [rbp + 0x360], ax
mov dword [rbp + 0x361], 0x726128
jmp case.0x180037389.19
mov eax, 0x4d
mov word [rbp + 0x330], ax
mov eax, 0x6c75
mov word [rbp + 0x331], ax
jmp case.0x180037389.19
mov rcx, rsi
call qword [0x18009a420]
mov edx, 0x73
lea r8d, [rdx - 5]
lea r9d, [rdx - 3]
lea r10d, [rdx - 0x12]
lea r11d, [rdx - 0xc]
jmp case.0x180037389.19
mov eax, 0x2e
mov word [rbp + 0x328], ax
mov eax, 0x6f63
mov word [rbp + 0x329], ax
jmp case.0x180037389.19
mov dword [rbp + 0x355], 0x5f7369
mov eax, 0x6d69
mov word [rbp + 0x358], ax
jmp case.0x180037389.19
mov word [rbp + 0x351], r9w
mov word [rbp + 0x352], r8w
mov eax, 0x5f64
mov word [rbp + 0x353], ax
jmp case.0x180037389.19
mov eax, 0x74
mov word [rbp + 0x333], ax
mov eax, 0x6369
mov word [rbp + 0x334], ax
jmp case.0x180037389.19
mov word [rbp + 0x33f], r10w
mov word [rbp + 0x340], r11w
mov eax, 0x5365
mov word [rbp + 0x341], ax
jmp case.0x180037389.19
mov word [rbp + 0x320], r13w
mov eax, 0x7365
mov word [rbp + 0x321], ax
mov dword [rbp + 0x323], 0x706173
jmp case.0x180037389.19
mov eax, 0x79
mov word [rbp + 0x33c], ax
mov eax, 0x49
mov word [rbp + 0x33d], ax
mov word [rbp + 0x33e], r13w
jmp case.0x180037389.19
mov word [rbp + 0x364], r11w
mov eax, 0x29
mov word [rbp + 0x365], ax
jmp case.0x180037389.19
mov word [rbp + 0x32b], r13w
mov eax, 0x6f
mov word [rbp + 0x350], ax
lea rcx, [0x180000000]
inc ebx
sub rdi, 1
jne 0x180037367
mov r15d, dword [rsp + 0x40]
lea r12d, [rdi + 1]
lea r10d, [rdi + 0x74]
lea r9d, [rdi + 0x6f]
lea edi, [r15 + 0xe07]
mov dword [rsp + 0x40], edi
mov ebx, dword [rsp + 0x44]
cmp r15d, edi
jae 0x180037b54
mov eax, 0x1bb
mov edx, 0x56
lea ecx, [rdx - 8]
mov r13, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
mov r14, qword [rsp + 0x48]
lea r8, [0x180026850]
cmp r15d, 0x811
ja 0x180037970
je 0x1800378f5
cmp r15d, 0x40f
ja 0x1800377bf
je 0x1800377a6
cmp r15d, 0xb8
je 0x18003779a
cmp r15d, 0x163
je 0x1800376c3
cmp r15d, 0x20e
je 0x1800376b9
cmp r15d, 0x2b9
je 0x18003766e
cmp r15d, 0x364
jne 0x180037c4f
mov word [rbp + 0x230], ax
jmp 0x180037c4f
mov byte [rsp + 0x31], 1
lea rax, [rbp + 0x320]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180037681
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x1d0]
call fcn.180052d30
mov r8, r12
lea rdx, [0x18008ef70]
lea rcx, [rbp + 0x1f0]
call fcn.180052d30
jmp 0x180037c42
mov byte [rsp + 0x32], 1
jmp 0x180037c4f
mov word [rbp + 0x34a], dx
lea rdx, [0x18009a0e8]
mov ecx, r9d
call fcn.18006e100
test al, al
jne 0x180037787
xor edx, edx
mov edi, edx
cmp edi, 5
ja case.default.0x180037702
mov eax, edi
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0x37f34]
add rcx, r8
jmp rcx
mov dword [rsp + 0x50], edx
jmp case.default.0x180037702
lea r9, [rsp + 0x50]
xor r8d, r8d
mov edx, dword [rsp + 0x54]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xor edx, edx
jmp case.default.0x180037702
mov ecx, edx
movzx eax, byte [rsp + 0x30]
cmp qword [rbp - 0x50], 0
cmovne ecx, eax
mov byte [rsp + 0x30], cl
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
cmp byte [rsp + 0x30], 0
je 0x18003775d
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
xor edx, edx
jmp case.default.0x180037702
mov byte [rsp + 0x30], 1
jmp case.default.0x180037702
mov qword [rbp - 0x40], rdx
mov dword [rsp + 0x54], edx
mov qword [rsp + 0x48], rdx
inc edi
lea eax, [rdi + 0x3f]
cmp eax, 0x45
jb 0x1800376e5
mov edi, dword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
jmp 0x180037c42
mov word [rbp + 0x349], cx
jmp 0x180037c4f
xor r8d, r8d
lea rdx, [rbp + 0x210]
mov ecx, 0xa0
call fcn.18003f020
jmp 0x180037c42
cmp r15d, 0x4ba
je 0x1800378d6
cmp r15d, 0x565
je 0x180037880
cmp r15d, 0x610
je 0x18003782d
cmp r15d, 0x6bb
jne 0x180037c4f
xor r8d, r8d
mov edx, 0x10f
lea rcx, [rsp + 0x60]
call fcn.180035b50
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rax
mov dword [rbp + 0x1c8], eax
jmp 0x180037c42
mov word [rsp + 0x38], ax
lea r9, [rbp + 0x20]
mov r8d, r10d
lea rdx, [rsp + 0x38]
lea rcx, [0x18009a148]
call fcn.18007b2e0
mov eax, 0x9c
mov word [rbp + 0x2a4], ax
mov eax, 0x1bb
mov word [rsp + 0x38], ax
lea r9, [rbp - 0x10]
mov r8d, 0x128
lea rdx, [rsp + 0x38]
lea rcx, [0x18009a168]
call fcn.18003a2e0
jmp 0x180037c42
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x280], xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
movups xmmword [rbp + 0x2f0], xmm0
movups xmmword [rbp + 0x300], xmm0
mov qword [rbp + 0x310], rax
mov dword [rbp + 0x318], eax
jmp 0x180037c4a
xor r13d, r13d
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x240]
lea ecx, [r13 + 0xe]
call fcn.180072c80
jmp 0x180037c42
lea rax, [rbp + 0x20]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x68]
cmp rax, qword [rsp + 0x70]
je 0x180037921
lea rcx, [rbp + 0x20]
mov qword [rax], rcx
mov rdx, qword [rsp + 0x68]
add rdx, 8
mov qword [rsp + 0x68], rdx
jmp 0x18003793a
lea r8, [rsp + 0x38]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.18001d5a0
mov rdx, qword [rsp + 0x68]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x38], rax
cmp rdx, qword [rsp + 0x70]
je 0x18003795c
lea rax, [rbp - 0x10]
mov qword [rdx], rax
add qword [rsp + 0x68], 8
jmp 0x180037c42
lea r8, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.18001d5a0
jmp 0x180037c42
cmp r15d, 0xb68
ja 0x180037b1a
je 0x180037adb
cmp r15d, 0x8bc
je 0x180037a94
cmp r15d, 0x967
je 0x180037a7c
cmp r15d, 0xa12
je 0x1800379c2
cmp r15d, 0xabd
jne 0x180037c4f
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180037c42
xor esi, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
lea r9, [rbp - 0x20]
lea r8, [0x180035de0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x48], rax
cmp rax, rsi
jne 0x180037a56
mov edi, 0xa0
mov ecx, edi
sub ecx, 0xa0
je 0x180037a45
sub ecx, 1
je 0x180037a14
sub ecx, 1
je 0x180037a0f
cmp ecx, 1
je 0x180037b54
jmp 0x180037a48
mov ebx, r12d
jmp 0x180037a48
mov qword [rsp + 0x38], rsi
lea rdx, [rsp + 0x38]
mov rcx, r14
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
xor r9d, r9d
lea r8, [rbp + 0x370]
mov edx, 0x104
lea rcx, str.starting_all...
call qword [sym.imp.KERNEL32.dll_GetFullPathNameA]
jmp 0x180037a48
mov r14, rsi
inc edi
cmp edi, 0xa4
jb 0x1800379f0
mov edi, dword [rsp + 0x40]
lea r9, [rbp + 0x280]
xor r8d, r8d
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x350]
call qword [sym.imp.GDI32.dll_CreateDCA]
mov rsi, rax
jmp 0x180037c42
lea rdx, [rbp + 0x190]
mov rcx, r13
call sub.IMM32.dll_ImmGetCompositionFontA
mov dword [rsp + 0x44], eax
jmp 0x180037c42
mov eax, dword [0x18009a190]
mov dword [rsp + 0x38], eax
lea r8, [rsp + 0x60]
mov edx, 0x32
lea rcx, [rsp + 0x38]
call fcn.18006c920
lea rax, [rsp + 0x60]
mov qword [rbp - 0x30], rax
mov eax, dword [0x18009a190]
mov dword [rbp - 0x28], eax
mov eax, dword [0x18009a194]
mov dword [rbp - 0x24], eax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
jmp 0x180037c42
mov qword [rsp + 0x38], r8
xor r8d, r8d
lea rdx, [rsp + 0x38]
mov ecx, 0xfc
call fcn.18003b850
xor ecx, ecx
movzx eax, byte [rsp + 0x31]
cmp dword [rsp + 0x44], ecx
cmovne ecx, eax
mov byte [rsp + 0x31], cl
xor ecx, ecx
movzx eax, byte [rsp + 0x32]
test rsi, rsi
cmovne ecx, eax
mov byte [rsp + 0x32], cl
jmp 0x180037c42
cmp r15d, 0xc13
je 0x180037c27
cmp r15d, 0xcbe
je 0x180037bf1
cmp r15d, 0xd69
je 0x180037bed
cmp r15d, 0xe14
jne 0x180037c4f
mov r12d, ebx
mov ebx, r12d
lea rcx, [rbp + 0xd8]
call fcn.18001f620
mov rdi, qword [rbp + 0xc0]
test rdi, rdi
je 0x180037c82
mov rsi, qword [rbp + 0xc8]
cmp rdi, rsi
je 0x180037b98
nop dword [rax]
mov rcx, rdi
call fcn.18004dbf0
add rdi, 0x20
cmp rdi, rsi
jne 0x180037b80
mov rdi, qword [rbp + 0xc0]
mov rdx, qword [rbp + 0xd0]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x180037bcb
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180037cc0
mov rcx, rdi
call fcn.1800826c0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
xor r14d, r14d
mov qword [rbp + 0xd0], r14
jmp 0x180037c85
xor ebx, ebx
jmp 0x180037c4f
mov edx, 0xde
lea rcx, [rbp + 0x60]
call fcn.180025460
cmp byte [rsp + 0x31], 0
je 0x180037c15
lea rdx, [rbp + 0x190]
mov rcx, r13
call sub.IMM32.dll_ImmSetCompositionFontA
cmp byte [rsp + 0x32], 0
je 0x180037c42
mov rcx, rsi
call qword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x180037c42
mov r9d, 0xa0
lea r8, [rbp + 0x60]
lea rdx, [rsp + 0x60]
lea rcx, [0x18009a0e0]
call fcn.18006fb40
mov edx, 0x56
lea ecx, [rdx - 8]
mov eax, 0x1bb
add r15d, 0xab
cmp r15d, edi
jae 0x180037b54
mov r10d, 0x74
lea r9d, [r10 - 5]
jmp 0x1800375fc
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x180037b51
xor r14d, r14d
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x180037cde
mov rdx, qword [rbp + 0xb8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180037cc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180037cc7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800826c0
mov qword [rbp + 0xa8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
lea rcx, [rbp + 0x68]
call fcn.18001f550
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x180037d76
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x180037d16
nop
mov rcx, rdi
call fcn.18001ee60
add rdi, 0x28
cmp rdi, rsi
jne 0x180037d00
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180037d61
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180037db5
mov rcx, rdi
call fcn.1800826c0
mov qword [rsp + 0x78], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180037dcf
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180037dbc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180037dbc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800826c0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x12]
cmp rdx, 0x10
jb 0x180037e0d
inc rdx
mov rcx, qword [rbp - 6]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180037e08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180037e08
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800826c0
movdqa xmm0, xmmword [0x180092480]
movdqu xmmword [rbp + 0xa], xmm0
mov byte [rbp - 6], 0
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x180037e5c
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180037e57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180037e57
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800826c0
movdqa xmm0, xmmword [0x180092480]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
lea rcx, [rbp + 0x240]
call fcn.18001f1c0
nop
lea rcx, [rbp + 0x1d0]
call fcn.18001f270
mov eax, ebx
mov rcx, qword [rbp + 0x480]
xor rcx, rsp
call fcn.180082e70
lea r11, [rsp + 0x590]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret