Function at 0x10006123c
Capabilities:
Allocate or change rwx memory
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
mov rax, qword [0x100404bb0]
xor rax, rsp
mov qword [rsp + 0xb8], rax
lea rax, [0x100000000]
lea r12, [rcx + 0x18]
lea r11, [0x100000000]
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x80], rcx
mov r14, qword [r12]
mov edx, dword [r14 + 1]
mov ecx, 0xfffffff
and rdx, rcx
mov ebp, dword [r14 + 5]
and rbp, rcx
mov qword [rsp + 0x88], r12
add rbp, rax
mov eax, dword [0x100015964]
mov qword [rsp + 0xa0], rbp
lea rsi, [rax + rdx - 1]
xor edx, edx
mov rcx, rax
mov rax, rsi
div rcx
mov eax, dword [0x100015964]
sub rsi, rdx
xor r15d, r15d
mov r10d, dword [0x10028bf00]
mov eax, dword [0x100015964]
mov eax, dword [0x10028bf00]
cmp eax, r15d
je 0x100061382
mov r8, r15
mov rax, r15
mov edi, dword [0x10028bf00]
dec edi
inc rdi
mov r9, rdi
cmp rdi, r15
je 0x10006133b
mov rcx, qword [0x1003fe198]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp r9, r15
jne 0x10006130c
mov qword [0x1003fe198], rcx
xor edx, edx
div rdi
cmp r10, r15
jbe 0x100061376
inc r8
mov eax, 0xef0b
mov ecx, 0xffff10f4
lock cmpxchg dword [r11 + rdx*4 + 0x4059e0], ecx
je 0x1000615f3
lea rax, [rdx + 1]
xor edx, edx
mov ecx, dword [0x10028bf00]
div rcx
cmp r8, r10
jb 0x100061345
mov rbx, r15
cmp rbx, r15
jne 0x1000614b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, r15
mov r13d, eax
mov rax, r15
mov rcx, qword [0x100405548]
mov r9, rcx
mov r8, rcx
inc rdi
cmp rcx, r15
je 0x1000613dc
mov rcx, qword [0x1003fe198]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp r9, r15
jne 0x1000613ad
mov qword [0x1003fe198], rcx
xor edx, edx
mov r9d, 0x40
div r8
mov rcx, rdx
mov rdx, rsi
mov r8d, 0x3000
shl rcx, 0x10
add rcx, qword [0x10041cd78]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
cmp rax, r15
je 0x100061449
mov qword [rsp + 0x28], r15
mov r8d, esi
mov qword [rsp + 0x20], r15
lea r9, [0x100363da0]
mov rcx, rax
or rcx, 3
mov rdx, rax
call qword [sym.imp.ntdll.dll_RtlInstallFunctionTableCallback]
movzx edx, al
cmp edx, r15d
jne 0x10006145e
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp rdi, 0x11
jb 0x10006138e
mov rbx, r15
cmp rbx, 0x10000
jb 0x10006146c
test bl, 3
je 0x100061492
cmp rbx, r15
je 0x10006148f
mov rcx, rbx
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlDeleteFunctionTable]
mov r8d, 0x8000
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rbx, r15
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp rbx, r15
lea r11, [0x100000000]
je 0x1000612d0
mov rdi, rbx
mov rcx, rsi
xor eax, eax
rep stosb byte [rdi], al
mov eax, 0x167cde96
mov esi, ebp
lea r13, [0x100000000]
add qword [r12], 9
mov r14d, dword [r14 + 1]
mov r8d, dword [0x100015964]
mov rax, r15
and r14d, 0xfffffff
mov qword [rsp + 0x90], r14
sub r8, r14
inc r8
mov rdi, r8
sub esi, r13d
cmp r8, r15
mov dword [rsp + 0x50], esi
je 0x100061530
mov rcx, qword [0x1003fe198]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr rdi, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp rdi, r15
jne 0x100061501
mov qword [0x1003fe198], rcx
xor edx, edx
div r8
mov ecx, esi
add rbx, rdx
mov rdx, r14
mov r8, rbx
mov qword [rsp + 0x78], rbx
mov eax, 0xef2cc15f
mov rdx, qword [r14 + rbp]
mov qword [rsp + 0x68], rdx
mov dil, r15b
lea rcx, [rsp + 0x68]
mov eax, 0x23a3d9c7
mov r10, qword [rsp + 0x68]
mov rcx, r13
mov eax, 0xfffffff
and r10, rax
mov r11, 0xfffffffffffff000
mov r9d, dword [rsp + 0x6c]
and r9, rax
mov rax, qword [0x10014dad0]
mov qword [rsp + 0x38], r15
add r10, r13
mov r15d, 4
sub rcx, rax
mov qword [rsp + 0x58], rcx
jne 0x10006160a
xor r8d, r8d
test r9, r9
je 0x1000618c2
mov edx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x3c]
movzx eax, byte [r8 + r10]
inc r8
sub eax, 0x69eb8044
add edx, eax
add eax, ecx
mov ecx, eax
imul ecx, ecx, 0x7680
rol ecx, 0xc
ror eax, 0xc
xor ecx, eax
imul ecx, ecx, 0x96147fbc
imul ecx, ecx, 0x96147fbc
add edx, ecx
cmp r8, r9
jb 0x1000615b2
mov dword [rsp + 0x3c], ecx
mov dword [rsp + 0x38], edx
jmp 0x1000618c2
mov ecx, dword [0x100015964]
imul rcx, rdx
lea rbx, [rcx + r11 + 0x3df000]
jmp 0x100061379
lea rax, [r10 + r9]
movsxd rcx, dword [0x10000003c]
mov r8d, dword [rcx + r13 + 0xb0]
mov qword [rsp + 0xa8], rax
mov eax, r10d
sub eax, r13d
add r8, r13
mov ebx, eax
and rbx, r11
mov r13d, dword [rcx + r13 + 0xb4]
mov ecx, eax
sub rax, rbx
mov qword [rsp + 0x48], rax
lea rax, [rcx + r9]
mov rcx, rax
and rcx, r11
mov qword [rsp + 0x30], rcx
sub rax, rcx
add r13, r8
mov qword [rsp + 0x98], r13
mov qword [rsp + 0x40], rax
jmp 0x100061678
mov eax, dword [r8]
cmp rax, rbx
jae 0x10006167d
mov eax, dword [r8 + 4]
add r8, rax
cmp r8, r13
jne 0x100061669
xor r11d, r11d
cmp r8, r13
je 0x1000616c1
mov eax, dword [r8]
cmp rax, rbx
jne 0x1000616c1
mov ecx, dword [r8 + 4]
sub rcx, 8
shr rcx, 1
je 0x1000616bc
mov r9, qword [rsp + 0x48]
lea rdx, [r8 + 8]
movzx eax, word [rdx]
and eax, 0xfff
cmp rax, r9
jae 0x1000616bc
inc r11
add rdx, 2
cmp r11, rcx
jne 0x1000616a3
mov rcx, qword [rsp + 0x30]
lea r14, [0x100000000]
mov r9d, dword [rsp + 0x38]
mov edx, dword [rsp + 0x3c]
mov r12, qword [rsp + 0x58]
cmp r8, r13
je 0x10006185b
mov eax, dword [r8]
cmp rax, rcx
ja 0x10006185b
mov ebx, dword [r8 + 4]
lea rax, [rbx - 8]
shr rax, 1
cmp r11, rax
jne 0x100061718
add r8, rbx
cmp r8, r13
je 0x10006185b
mov eax, dword [r8]
cmp rax, rcx
ja 0x10006185b
xor r11d, r11d
jmp 0x1000616eb
mov eax, dword [r8]
cmp rax, rcx
jne 0x100061736
movzx eax, word [r8 + r11*2 + 8]
and eax, 0xfff
cmp rax, qword [rsp + 0x40]
jae 0x10006185b
mov rax, r11
mov ebx, 0xf000
inc r11
test word [r8 + rax*2 + 8], bx
je 0x1000616d6
movzx ecx, word [r8 + rax*2 + 8]
xor r13d, r13d
mov ebx, ecx
and ebx, 0xfff
add ebx, dword [r8]
add rbx, r14
mov rax, rbx
sub rax, r10
je 0x1000617aa
mov rsi, rax
movzx eax, byte [r10 + r13]
inc r13
sub eax, 0x69eb8044
add r9d, eax
add eax, edx
mov edx, eax
imul edx, edx, 0x7680
rol edx, 0xc
ror eax, 0xc
xor edx, eax
imul edx, edx, 0x96147fbc
imul edx, edx, 0x96147fbc
add r9d, edx
cmp r13, rsi
jb 0x10006176b
mov dword [rsp + 0x3c], edx
mov dword [rsp + 0x38], r9d
mov rax, qword [rbx]
mov qword [rsp + 0x60], rax
shr ecx, 0xc
cmp ecx, 3
je 0x1000617c8
sub ecx, 0xa
neg ecx
sbb r10d, r10d
add r10d, 3
jmp 0x1000617ce
mov r10d, 2
mov r13, r12
neg r13
sub r10d, 2
je 0x1000617f5
cmp r10d, 1
je 0x1000617e6
or rcx, 0xffffffffffffffff
jmp 0x1000617fd
mov ecx, 8
add rax, r13
mov qword [rsp + 0x60], rax
jmp 0x1000617fd
add dword [rsp + 0x60], r13d
mov rcx, r15
xor r10d, r10d
test rcx, rcx
je 0x100061845
movzx eax, byte [rsp + r10 + 0x60]
inc r10
sub eax, 0x69eb8044
add r9d, eax
add eax, edx
mov edx, eax
imul edx, edx, 0x7680
rol edx, 0xc
ror eax, 0xc
xor edx, eax
imul edx, edx, 0x96147fbc
imul edx, edx, 0x96147fbc
add r9d, edx
cmp r10, rcx
jb 0x100061805
mov dword [rsp + 0x3c], edx
mov dword [rsp + 0x38], r9d
lea r10, [rcx + rbx]
mov rcx, qword [rsp + 0x30]
mov r13, qword [rsp + 0x98]
jmp 0x1000616d6
mov r8, qword [rsp + 0xa8]
mov esi, dword [rsp + 0x50]
mov r12, qword [rsp + 0x88]
mov r14, qword [rsp + 0x90]
xor ecx, ecx
sub r8, r10
je 0x1000618bd
movzx eax, byte [rcx + r10]
inc rcx
sub eax, 0x69eb8044
add r9d, eax
add eax, edx
mov edx, eax
imul edx, edx, 0x7680
rol edx, 0xc
ror eax, 0xc
xor edx, eax
imul edx, edx, 0x96147fbc
imul edx, edx, 0x96147fbc
add r9d, edx
cmp rcx, r8
jb 0x10006187e
mov dword [rsp + 0x3c], edx
mov dword [rsp + 0x38], r9d
mov rbx, qword [rsp + 0x78]
xor ecx, ecx
mov rax, rcx
inc rcx
and eax, 7
cmp rcx, 8
mov al, byte [rsp + rax + 0x38]
mov byte [rsp + rcx + 0xaf], al
jb 0x1000618c4
mov eax, 0x7946b75a
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x48], rbp
mov r11, rbx
mov r13, r14
mov qword [rsp + 0x30], rbx
mov r10, rbp
and r13d, 7
je 0x100061dbe
xor r8d, r8d
mov ebx, esi
not ebx
xor r11d, r11d
and dword [rsp + 0x58], r8d
test r13d, r13d
mov dword [rsp + 0x40], r8d
jle 0x10006195b
lea r9d, [r8 + 0x38]
cmp r11d, r15d
movzx edx, byte [r10]
jge 0x10006193a
lea ecx, [r9 - 0x20]
shl edx, cl
or dword [rsp + 0x58], edx
jmp 0x100061942
mov ecx, r9d
shl edx, cl
or r8d, edx
inc r11d
inc r10
sub r9d, 8
cmp r11d, r13d
jl 0x100061925
mov dword [rsp + 0x40], r8d
mov qword [rsp + 0x48], r10
mov edx, esi
movzx r8d, word [rsp + 0xb6]
movzx r11d, ax
mov ecx, esi
movzx r9d, word [rsp + 0xb2]
movzx r10d, word [rsp + 0xb4]
sub edx, r10d
shr ecx, 0xa
imul edx, r8d
sub edx, ecx
xor ebx, edx
mov esi, ebx
mov ecx, ebx
ror ecx, 7
xor esi, r11d
imul esi, r10d
sub esi, ecx
xor esi, dword [rsp + 0x50]
mov ecx, esi
sub ecx, dword [rsp + 0xb4]
sub ecx, r9d
xor ebx, ecx
mov edx, ebx
xor edx, r9d
mov ecx, ebx
rol edx, 2
ror ecx, 6
imul edx, r11d
xor ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, eax
xor edx, esi
rol edx, 6
shr ecx, 1
imul edx, r8d
sub edx, ecx
xor ebx, edx
mov edx, ebx
mov ecx, ebx
xor edx, r8d
rol edx, 1
ror ecx, 6
imul edx, r10d
sub edx, ecx
xor esi, edx
mov ecx, esi
not ecx
ror ecx, 2
add ecx, r9d
imul ecx, r11d
xor ebx, ecx
mov ecx, ebx
mov edx, ebx
sub edx, dword [rsp + 0xb4]
rol edx, 3
ror ecx, 0xd
imul edx, r11d
add ecx, edx
xor esi, ecx
mov edx, esi
ror edx, 0xc
mov ecx, esi
xor ecx, r11d
imul ecx, r8d
add edx, ecx
mov r8d, dword [rsp + 0xb4]
xor ebx, edx
mov ecx, ebx
mov edx, ebx
xor edx, r11d
shr ecx, 3
rol edx, 6
imul edx, r10d
add edx, ecx
xor esi, edx
mov ecx, esi
lea edx, [r8 + rsi]
ror edx, 0xe
rol ecx, 0xe
imul edx, r9d
add ecx, edx
xor r9d, r9d
xor ebx, ecx
mov ecx, ebx
xor ebx, dword [rsp + 0x40]
sub ecx, r11d
xor ecx, r8d
xor ecx, dword [rsp + 0x58]
mov r8d, ebx
xor esi, ecx
mov edx, esi
test r13d, r13d
jle 0x100061aa6
mov rcx, qword [rsp + 0x30]
cmp r9d, r15d
jge 0x100061a8c
rol edx, 8
mov byte [rcx], dl
inc rcx
xor dil, dl
jmp 0x100061a99
rol r8d, 8
mov byte [rcx], r8b
inc rcx
xor dil, r8b
inc r9d
cmp r9d, r13d
jl 0x100061a7a
mov qword [rsp + 0x30], rcx
lea ecx, [r13 - 4]
test ecx, ecx
jle 0x100061da6
sub r15d, ecx
shl r15d, 3
mov ecx, r15d
shr ebx, cl
shl ebx, cl
mov r13d, dword [rsp + 0x40]
mov r11, qword [rsp + 0x30]
mov r10, qword [rsp + 0x48]
mov r15, r14
shr r15, 3
test r15, r15
je 0x100061cee
mov ebp, dword [rsp + 0xb4]
movzx ecx, word [rsp + 0xb6]
mov r12d, dword [rsp + 0x58]
mov dword [rsp + 0x48], ecx
movzx ecx, bp
mov dword [rsp + 0x40], ecx
movzx ecx, word [rsp + 0xb2]
mov dword [rsp + 0x30], ecx
movzx ecx, ax
mov r14d, ecx
movzx ecx, byte [r10]
movzx r9d, byte [r10 + 1]
shl ecx, 8
movzx r8d, byte [r10 + 4]
shl r8d, 8
add r10, 8
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r10 - 6]
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r10 - 5]
or r9d, ecx
movzx ecx, byte [r10 - 3]
or r8d, ecx
xor esi, r9d
shl r8d, 8
movzx ecx, byte [r10 - 2]
mov edx, esi
sub edx, dword [rsp + 0x40]
or r8d, ecx
shl r8d, 8
movzx ecx, byte [r10 - 1]
or r8d, ecx
movzx ecx, word [rsp + 0xb6]
imul edx, ecx
mov ecx, esi
shr ecx, 0xa
sub edx, ecx
xor edx, r8d
xor ebx, edx
mov edx, ebx
mov ecx, ebx
xor ecx, r14d
ror edx, 7
imul ecx, dword [rsp + 0x40]
sub ecx, edx
movzx edx, word [rsp + 0xb2]
xor esi, ecx
mov ecx, esi
sub ecx, ebp
sub ecx, edx
xor ebx, ecx
mov edx, ebx
movzx ecx, word [rsp + 0xb2]
xor edx, ecx
rol edx, 2
mov ecx, ebx
ror ecx, 6
imul edx, r14d
xor ecx, edx
mov edx, eax
xor esi, ecx
xor edx, esi
movzx ecx, word [rsp + 0xb6]
rol edx, 6
imul edx, ecx
mov ecx, esi
shr ecx, 1
sub edx, ecx
xor ebx, edx
mov edx, ebx
movzx ecx, word [rsp + 0xb6]
xor edx, ecx
rol edx, 1
mov ecx, ebx
ror ecx, 6
imul edx, dword [rsp + 0x40]
sub edx, ecx
xor esi, edx
movzx edx, word [rsp + 0xb2]
mov ecx, esi
not ecx
ror ecx, 2
add ecx, edx
imul ecx, r14d
xor ebx, ecx
mov ecx, ebx
mov edx, ebx
sub edx, ebp
rol edx, 3
ror ecx, 0xd
imul edx, r14d
add ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
xor ecx, r14d
ror edx, 0xc
imul ecx, dword [rsp + 0x48]
add edx, ecx
xor ebx, edx
mov ecx, ebx
mov edx, ebx
shr ecx, 3
xor edx, r14d
rol edx, 6
imul edx, dword [rsp + 0x40]
add edx, ecx
xor esi, edx
lea edx, [rbp + rsi]
ror edx, 0xe
mov ecx, esi
rol ecx, 0xe
imul edx, dword [rsp + 0x30]
add ecx, edx
xor ebx, ecx
mov ecx, ebx
xor ebx, r13d
mov byte [r11 + 7], bl
sub ecx, r14d
xor ecx, ebp
mov r13d, r8d
xor ecx, r12d
mov r12d, r9d
xor esi, ecx
mov byte [r11 + 3], sil
xor dil, sil
ror esi, 8
xor dil, bl
ror ebx, 8
mov byte [r11 + 2], sil
xor dil, sil
mov byte [r11 + 6], bl
ror esi, 8
mov byte [r11 + 1], sil
xor dil, bl
ror ebx, 8
mov byte [r11 + 5], bl
xor dil, sil
ror esi, 8
xor dil, bl
mov byte [r11], sil
ror ebx, 8
mov cl, bl
mov byte [r11 + 4], bl
add r11, 8
xor cl, sil
xor dil, cl
ror esi, 8
ror ebx, 8
sub r15, 1
jne 0x100061b10
mov r12, qword [rsp + 0x88]
mov rbp, qword [rsp + 0xa0]
mov r14, qword [rsp + 0x90]
mov al, byte [r14 + rbp + 8]
xor al, dil
je 0x100061de8
call fcn.10000228c
and r12, 0xfffffffffffffff8
mov r11, qword [rsp + 0x80]
lea r13, [0x10006d7ac]
mov qword [r11 + 0x10], r13
lea r8, [r12 + 0xfff]
mov r9d, 0xffff
mov r10, rax
mov rax, 0xfffffffffffff000
mov rcx, qword [0x1003fe198]
and r10, rax
and r8, rax
xor edi, edi
imul rcx, rcx, 0x343fd
shl rdi, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rax, rcx
shr rax, 0x10
movzx edx, ax
or rdi, rdx
test r9, r9
jne 0x100061d3f
movabs rax, 0x8000800080008001
mov qword [0x1003fe198], rcx
mul rdi
shr rdx, 0xf
imul rdx, rdx, 0xffff
mov rax, qword [rsp + 0x70]
sub rdi, rdx
mov qword [rax + 0x98], r10
inc rdi
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x70], r9
jmp 0x100061dde
xor ebx, ebx
test ecx, ecx
jns 0x100061ac0
neg ecx
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x100061ac0
mov r13d, esi
mov dword [rsp + 0x58], esi
xor ebx, ebx
xor esi, esi
not r13d
jmp 0x100061acf
mov rax, qword [rsp + 0x70]
mov qword [r12], rax
add r12, 8
cmp r12, r8
jb 0x100061dd1
jmp 0x100061efe
mov rbx, rbp
lea r15, [0x100000000]
mov rax, qword [0x10014dad0]
mov rsi, r15
mov r13, qword [rsp + 0x78]
sub rbx, r13
sub rsi, rax
jne 0x100061e12
test rbx, rbx
je 0x100061eeb
mov rcx, qword [0x100019a28]
xor edi, edi
mov r11, r13
sub r11, rbp
lea r8d, [rcx - 1]
sub ebp, r15d
lea r12d, [r14 + rbp]
lea r14, [0x100000000]
test r8d, r8d
js 0x100061e68
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r14 + rdx*4 + 0x19a2c]
and r9d, 0xfffffff
cmp ebp, r9d
jae 0x100061e5e
lea r8d, [rax - 1]
jmp 0x100061e63
jbe 0x100061e6d
lea edi, [rax + 1]
cmp r8d, edi
jge 0x100061e38
movsxd r10, edi
jmp 0x100061ee4
movsxd r10, eax
jmp 0x100061ee4
mov edx, dword [r14 + r10*4 + 0x19a2c]
mov eax, edx
and eax, 0xfffffff
cmp eax, r12d
jae 0x100061eeb
mov r8, rdx
mov edi, edx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r15
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x100061ec0
sub edi, 1
je 0x100061ebb
cmp edi, 1
jne 0x100061ec6
mov r9, rsi
jmp 0x100061ec6
mov r9, rbx
jmp 0x100061ec6
mov r9, rsi
sub r9, rbx
sub edx, 2
je 0x100061ed6
cmp edx, 1
jne 0x100061ee1
add qword [r8 + r11], r9
jmp 0x100061eda
add dword [r8 + r11], r9d
mov rcx, qword [0x100019a28]
inc r10
mov eax, ecx
cmp r10, rax
jb 0x100061e72
mov eax, dword [0x100015964]
mov eax, 0xe2b64398
mov r11, qword [rsp + 0x80]
mov qword [r11 + 0x10], r13
mov rcx, qword [rsp + 0xb8]
xor rcx, rsp
call fcn.1003005f0
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret