Function at 0x1801c0610
Capabilities:
Create process on windows
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
mov rax, qword [0x180280040]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov r14, rcx
mov qword [rsp + 0x68], rcx
xor r15d, r15d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rax
mov rcx, qword [rcx + 8]
call fcn.1801ce660
mov r8, rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r15
lea r9, [rax + 8]
mov rcx, qword [r9]
sub rcx, qword [rax]
movabs rbx, 0xe38e38e38e38e39
mov rax, rbx
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1801c01f0
nop
call fcn.180070720
movss xmm11, dword [0x18020ee50]
mulss xmm0, xmm11
movss dword [rbp - 0x60], xmm0
mov dword [rbp - 0x5c], 0x42000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x60]
lea rcx, str.scriptbuttons
call fcn.18006af40
lea esi, [r15 + 0x16]
xorps xmm9, xmm9
movss xmm10, dword [0x180210278]
test al, al
je 0x1801c0984
mov qword [rbp - 0x60], r15
lea rdx, [rbp - 0x60]
lea rcx, str.Open_in_external_editor
call fcn.1800a2500
test al, al
je 0x1801c0952
mov rdi, qword [r14 + 0x10]
sub rdi, 0xffffffffffffff80
lea rcx, str.APPDATA
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1801c0755
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.180002fc0
nop
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x38]
mov rax, rdx
sub rax, rcx
cmp rax, 0x16
jb 0x1801c07be
lea rax, [rcx + 0x16]
mov qword [rbp + 0x30], rax
lea rbx, [rbp + 0x20]
cmp rdx, 0xf
cmova rbx, qword [rbp + 0x20]
add rbx, rcx
mov r8, rsi
lea rdx, str.ASTARClientuserdata_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x16], 0
lea rax, [rbp + 0x20]
movabs rbx, 0xe38e38e38e38e39
jmp 0x1801c07dc
mov qword [rsp + 0x20], rsi
lea r9, str.ASTARClientuserdata_
movzx r8d, byte [rsp + 0x40]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.180005450
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x1801c081b
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.1800121c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1801c0895
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c0890
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801c0890
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801e41e4
movdqa xmm0, xmmword [0x180207610]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1801c08e6
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c08e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801c08e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801e41e4
lea r9, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova r9, qword [rbp - 0x60]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
lea r8, str.code
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1801c0952
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c094d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801c094d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801e41e4
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.18007bb70
mov qword [rbp - 0x60], 0
lea rdx, [rbp - 0x60]
lea rcx, str.Reload
call fcn.1800a2500
test al, al
je 0x1801c0984
mov rcx, qword [r14 + 8]
call fcn.1801ce820
call fcn.18006dd90
call fcn.1800706c0
movaps xmm6, xmm0
call fcn.18006f950
movss xmm7, dword [0x1802103f8]
mulss xmm0, xmm7
subss xmm6, xmm0
subss xmm6, dword [0x180210238]
call fcn.180070720
mulss xmm0, xmm11
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm6
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x60]
lea rcx, str.scriptbox
call fcn.18006af40
movabs rsi, 0xe38e38e38e38e39
test al, al
je 0x1801c0d83
mov r13, r15
mov rcx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x40]
sub rcx, r8
mov rax, rbx
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1801c0d83
mov rax, r15
mov qword [rbp - 0x60], rax
movabs rdi, 0xcccccccccccccccd
movzx ebx, byte [rsp + 0x40]
nop dword [rax + rax]
lea rdx, [r8 + rax]
cmp byte [rdx + 0x88], 0
jne 0x1801c0d31
cmp qword [rdx + 0x50], 0
je 0x1801c0a4c
add rdx, 0x40
lea rcx, [rbp]
call fcn.1801ae250
nop
movsxd rax, dword [r14 + 0x18]
cmp rax, r13
jne 0x1801c0a66
call fcn.1801c8f10
jmp 0x1801c0a6b
call fcn.1801c8fe0
call fcn.18006f950
movaps xmm6, xmm0
mulss xmm6, xmm7
call fcn.180070720
movss dword [rbp - 0x70], xmm0
movss dword [rbp - 0x6c], xmm6
lea r10, [rbp + 0x35]
mov r8, r13
nop dword [rax]
dec r10
mov rax, rdi
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8, rdx
test rdx, rdx
jne 0x1801c0a90
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x35]
mov rdx, r10
lea rcx, [rsp + 0x70]
call fcn.180002bf0
nop
mov r14, qword [rbp + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 6
jb 0x1801c1248
lea r12, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova r12, qword [rbp]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r15
lea r15, [r14 + 6]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rsp + 0x48]
cmp r15, rdi
jbe 0x1801c0b9d
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x1801c0b41
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1801c0b68
cmp rdi, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1801c0b87
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1801c124e
mov rcx, rax
call fcn.1801e41a8
test rax, rax
je 0x1801c0d6e
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1801c0b98
test rcx, rcx
je 0x1801c0b96
call fcn.1801e41a8
mov rsi, rax
jmp 0x1801c0b98
xor esi, esi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rdi
mov r8, r14
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str.scr]
mov dword [rsi + r14], eax
movzx eax, word [0x18022af24]
mov word [rsi + r14 + 4], ax
mov byte [rsi + r15], 0
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x48]
movzx edx, bl
lea rcx, [rbp - 0x28]
call fcn.18000c9c0
nop
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
lea rdx, [rbp - 0x70]
call fcn.1801adf90
movzx edi, al
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1801c0c3d
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c0c38
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801c0d67
call fcn.1801e41e4
xor r15d, r15d
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], r15b
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1801c0c8e
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c0c88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801c0d6e
call fcn.1801e41e4
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1801c0cca
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c0cc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801c0d75
call fcn.1801e41e4
mov r14, qword [rsp + 0x68]
test dil, dil
je 0x1801c0cd8
mov dword [r14 + 0x18], r13d
call fcn.1801c8ed0
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1801c0d15
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c0d10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801c0d7c
call fcn.1801e41e4
movabs rsi, 0xe38e38e38e38e39
movabs rdi, 0xcccccccccccccccd
mov rax, qword [rbp - 0x60]
mov r8, qword [rbp - 0x40]
inc r13
add rax, 0x90
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp - 0x38]
sub rcx, r8
mov rax, rsi
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
jae 0x1801c0d83
mov rax, qword [rbp - 0x60]
jmp 0x1801c0a30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006dd90
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.18007bb70
movsxd r8, dword [r14 + 0x18]
test r8d, r8d
js 0x1801c11f6
mov rcx, qword [rbp - 0x38]
mov r9, qword [rbp - 0x40]
sub rcx, r9
mov rax, rsi
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r8, rdx
jae 0x1801c11f6
lea rdi, [r8 + r8*8]
shl rdi, 4
add rdi, r9
call fcn.1800706c0
movaps xmm6, xmm0
call fcn.18006f950
mulss xmm0, xmm7
subss xmm6, xmm0
subss xmm6, dword [0x180210238]
call fcn.180070720
mulss xmm0, xmm11
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm6
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x60]
lea rcx, str.scriptdsp
call fcn.18006af40
test al, al
je 0x1801c11f0
mov rbx, qword [rdi + 0x50]
movss xmm0, dword [0x18020dd90]
call fcn.18007cc30
lea rax, [rdi + 0x40]
mov rdx, rdi
test rbx, rbx
cmovne rdx, rax
cmp qword [rdx + 0x18], 0xf
jbe 0x1801c0e4d
mov rdx, qword [rdx]
lea rcx, [0x18020ab14]
call fcn.1800b1450
movss xmm0, dword [0x18020b17c]
call fcn.18007cc30
call fcn.1800aedf0
call fcn.1800aedf0
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1801c0e7d
mov rdx, qword [rdi]
lea rcx, str.File:__s
call fcn.1800b1450
lea rsi, str.008000FFTrueRESETCOL
lea rbx, str.FF0000FFFalseRESETCOL
mov rdx, rbx
cmp byte [rdi + 0x8a], 0
cmovne rdx, rsi
lea rcx, str.Runs_on_startup:__s
call fcn.1800b1450
mov rdx, rbx
cmp byte [rdi + 0x8b], 0
cmovne rdx, rsi
lea rcx, str.Multithreaded:__s
call fcn.1800b1450
cmp byte [rdi + 0x89], 0
cmovne rbx, rsi
mov rdx, rbx
lea rcx, str.Priority:__s
call fcn.1800b1450
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x28], xmm0
movups xmmword [rbp - 0x18], xmm0
mov dword [rbp - 8], eax
lea rdx, [rdi + 0x80]
lea rcx, [rbp - 0x28]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
test eax, eax
je 0x1801c0f39
lea r9, [rbp - 0x28]
lea r8, [0x18022a6e8]
mov edx, 0x80
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
test rax, rax
je 0x1801c0f39
lea rdx, [rbp + 0x40]
lea rcx, str.Last_updated:__s
call fcn.1800b1450
call fcn.1800aedf0
call fcn.1800aedf0
lea rdx, [rdi + 0x60]
lea rcx, [rbp]
call fcn.18000c860
nop
mov qword [rbp - 0x60], 0
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9d, 0x4000
lea r8, [rbp - 0x60]
lea rdx, [rbp]
lea rcx, str.scriptdesc
call fcn.180066e40
call fcn.1800aedf0
call fcn.1800aedf0
mov dword [rbp - 0x70], 0x64
mov dword [rbp - 0x60], 1
lea r12, [r14 + 0x1c]
mov dword [rsp + 0x30], r15d
lea rax, [0x18020d488]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x60]
mov r8, r12
mov edx, 5
lea rcx, str.Mode
call fcn.1800a8940
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.18007bb70
mov qword [rbp - 0x60], 0
lea rdx, [rbp - 0x60]
lea rcx, str.Run_script
call fcn.1800a2500
test al, al
je 0x1801c11b2
call fcn.18004c680
mov rbx, qword [rax + 0x1d8]
lea rax, str.running_script
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], send
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x30], r15
mov r15d, dword [rbx + 0x40]
movzx r14d, byte [rbx + 0xd8]
cmp r15d, 2
jle 0x1801c1042
test r14b, r14b
je 0x1801c110c
lea rcx, [rbx + 8]
cmp qword [rbx + 0x20], 0xf
jbe 0x1801c1051
mov rcx, qword [rbx + 8]
mov qword [rbp - 0x60], rcx
mov rax, qword [rbx + 0x18]
mov qword [rbp - 0x58], rax
call sub.MSVCP140.dll__Xtime_get_ticks
movups xmm0, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x50], 2
mov qword [rbp + 0x58], rax
mov ecx, dword [0x1803d25a8]
mov rax, qword gs:[0x58]
mov rdx, qword [rax + rcx*8]
mov ecx, 0x18
mov eax, dword [rcx + rdx]
mov esi, reloc.WS2_32.dll_recv
add rsi, rdx
test al, 1
jne 0x1801c10ad
or eax, 1
mov dword [rcx + rdx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov eax, eax
mov qword [rsi], rax
mov rax, qword [rsi]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbp + 0x78], xmm0
movsd xmm1, qword [rbp + 0x30]
movsd qword [rbp + 0x88], xmm1
movups xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x90], xmm0
cmp r15d, 2
jg 0x1801c10f7
mov rax, qword [rbx]
lea rdx, [rbp + 0x40]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
test r14b, r14b
je 0x1801c110c
lea rcx, [rbx + 0x88]
lea rdx, [rbp + 0x40]
call fcn.18004d0e0
mov rbx, qword [rsp + 0x68]
mov rbx, qword [rbx + 8]
mov r8d, dword [r12]
lea r10, [rbp + 0x35]
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x1801c1120
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x35]
mov rdx, r10
lea rcx, [rsp + 0x70]
call fcn.180002bf0
nop
lea r8, [rsp + 0x70]
mov rdx, rdi
mov rcx, rbx
call fcn.1801cdb50
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1801c11b2
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c11ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801c11ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801e41e4
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1801c11f0
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801c11eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801c11eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801e41e4
call fcn.18006dd90
nop
lea rcx, [rbp - 0x40]
call fcn.1801c0550
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.1801e4790
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
movaps xmm11, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180010340
nop
call fcn.180010120
int3