Function at 0x18000bba0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x180097ee8]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rdi, rdx
mov qword [rbp - 0x59], rdx
mov eax, ecx
mov dword [rsp + 0x48], ecx
xor r13d, r13d
mov qword [rbp - 0x41], r13
mov qword [rbp - 0x39], 7
mov word [rbp - 0x51], r13w
mov edx, ecx
mov dword [rsp + 0x34], ecx
imul ecx, ecx, 0x11e
mov dword [rbp - 0x7d], ecx
movzx ebx, byte [rsp + 0x3c]
cmp edx, ecx
ja 0x18000c3ce
lea r10d, [r13 + 0x64]
lea r11d, [r13 + 0x2e]
movzx eax, word [rsp + 0x3c]
mov dword [rsp + 0x30], eax
mov qword [rbp - 0x61], rbx
lea r9, [0x180000000]
movabs r8, 0x7ffffffffffffffe
cmp edx, 0x1425
ja 0x18000c396
je 0x18000c350
cmp edx, 0x36
je 0x18000c1dc
cmp edx, 0xbf
je 0x18000c187
cmp edx, 0x5b2
je 0x18000be65
cmp edx, 0xb2e
je 0x18000bd8d
cmp edx, 0x10aa
jne 0x18000c778
mov rsi, qword [rbp - 0x41]
mov rcx, qword [rbp - 0x39]
cmp rsi, rcx
jae 0x18000bcae
lea rax, [rsi + 1]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x51]
cmp rcx, 8
cmovae rax, qword [rbp - 0x51]
mov dword [rax + rsi*2], 0x64
jmp 0x18000c774
mov rax, r8
sub rax, rsi
cmp rax, 1
jb 0x18000c7e2
lea r12, [rsi + 1]
mov r14, qword [rbp - 0x39]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x18000bcd7
mov rdi, r8
jmp 0x18000bcf8
mov rcx, r14
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r14, rax
jbe 0x18000bced
mov rdi, r8
jmp 0x18000bcf8
lea rax, [r14 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x51]
call fcn.180013350
mov r15, rax
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], rdi
add rsi, rsi
mov r8, rsi
mov rcx, rax
cmp r14, 8
jb 0x18000bd71
mov rdi, qword [rbp - 0x51]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x64
lea rdx, [r14*2 + 2]
cmp rdx, 0x1000
jb 0x18000bd60
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x18000c7a6
mov rdi, rcx
mov rcx, rdi
call fcn.180067650
mov qword [rbp - 0x51], r15
jmp 0x18000c764
lea rdx, [rbp - 0x51]
call sub.VCRUNTIME140.dll_memcpy
mov r10d, 0x64
mov dword [r15 + rsi], r10d
mov qword [rbp - 0x51], r15
jmp 0x18000c76a
mov rsi, qword [rbp - 0x41]
mov rcx, qword [rbp - 0x39]
cmp rsi, rcx
jae 0x18000bdbb
lea rax, [rsi + 1]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x51]
cmp rcx, 8
cmovae rax, qword [rbp - 0x51]
mov dword [rax + rsi*2], 0x2e
jmp 0x18000c774
mov rax, r8
sub rax, rsi
cmp rax, 1
jb 0x18000c7e2
lea r12, [rsi + 1]
mov r14, qword [rbp - 0x39]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x18000bde4
mov rdi, r8
jmp 0x18000be05
mov rcx, r14
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r14, rax
jbe 0x18000bdfa
mov rdi, r8
jmp 0x18000be05
lea rax, [r14 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x51]
call fcn.180013350
mov r15, rax
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], rdi
add rsi, rsi
mov r8, rsi
mov rcx, rax
cmp r14, 8
jb 0x18000be45
mov rdi, qword [rbp - 0x51]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x2e
jmp 0x18000bd33
lea rdx, [rbp - 0x51]
call sub.VCRUNTIME140.dll_memcpy
mov r11d, 0x2e
mov dword [r15 + rsi], r11d
mov qword [rbp - 0x51], r15
lea r10d, [r11 + 0x36]
jmp 0x18000c770
mov byte [rsp + 0x3c], 1
mov rdx, r13
mov qword [rbp + 0xf], rdx
cmp qword [0x180097e28], 0
jbe 0x18000c175
nop
mov edi, 0xa
mov dword [rsp + 0x30], edi
nop dword [rax]
cmp edi, 0xa
ja case.default.0x18000bea6
mov eax, edi
mov ecx, dword [r9 + rax*4 + 0xc7f0]
add rcx, r9
jmp rcx
mov word [rbp - 0x26], 0x656e
jmp case.default.0x18000bea6
lea rax, [0x180097e18]
cmp qword [0x180097e30], 0x10
cmovae rax, qword [0x180097e18]
movsx r13d, byte [rax + rdx]
mov rsi, qword [rbp - 0x41]
mov rcx, qword [rbp - 0x39]
cmp rsi, rcx
jae 0x18000bf04
lea rax, [rsi + 1]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x51]
cmp rcx, 8
cmovae rax, qword [rbp - 0x51]
mov word [rax + rsi*2], r13w
xor r13d, r13d
mov word [rax + rsi*2 + 2], r13w
jmp case.default.0x18000bea6
mov rax, r8
sub rax, rsi
cmp rax, 1
jb 0x18000c7e8
lea r12, [rsi + 1]
mov r15, qword [rbp - 0x39]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x18000bf2d
mov rdi, r8
jmp 0x18000bf4e
mov rcx, r15
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r15, rax
jbe 0x18000bf43
mov rdi, r8
jmp 0x18000bf4e
lea rax, [r15 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x51]
call fcn.180013350
mov r14, rax
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], rdi
add rsi, rsi
mov r8, rsi
mov rcx, rax
cmp r15, 8
jb 0x18000bfc6
mov rdi, qword [rbp - 0x51]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [r14 + rsi], r13w
xor r13d, r13d
mov word [r14 + rsi + 2], r13w
lea rdx, [r15*2 + 2]
cmp rdx, 0x1000
jb 0x18000bfbc
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x18000c798
mov rdi, rcx
mov rcx, rdi
call fcn.180067650
jmp 0x18000bfdd
lea rdx, [rbp - 0x51]
call sub.VCRUNTIME140.dll_memcpy
mov word [r14 + rsi], r13w
xor r13d, r13d
mov word [r14 + rsi + 2], r13w
mov qword [rbp - 0x51], r14
mov edi, dword [rsp + 0x30]
mov rdx, qword [rbp + 0xf]
movabs r8, 0x7ffffffffffffffe
lea r9, [0x180000000]
jmp case.default.0x18000bea6
mov byte [rbp - 0x26], 0
jmp case.default.0x18000bea6
mov dword [rbp - 0x24], 0x62615f77
jmp case.default.0x18000bea6
lea r9, [rbp - 0x71]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov dword [rsp + 0x40], eax
lea rcx, [rbp - 0x31]
call qword [sym.imp.WINMM.dll_mciGetDeviceIDA]
mov dword [rsp + 0x44], eax
jmp 0x18000bfe5
mov byte [rbp - 0x20], 0x73
jmp case.default.0x18000bea6
mov eax, dword [str.L4_ploadrdtnew_abs]
mov dword [rbp - 0x31], eax
movzx eax, byte [0x18008dd8c]
mov byte [rbp - 0x2d], al
mov byte [rbp - 0x2c], 0
mov r8d, 2
lea rdx, [0x18008ddc9]
lea rcx, [rbp - 0x2c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18000bfe5
mov byte [rsp + 0x38], 1
mov byte [rsp + 0x39], 1
mov qword [rbp - 0x71], r13
jmp case.default.0x18000bea6
mov byte [rbp - 0x1f], 0
jmp case.default.0x18000bea6
mov ecx, r13d
movzx eax, byte [rsp + 0x38]
cmp dword [rsp + 0x40], 0
cmove ecx, eax
mov byte [rsp + 0x38], cl
mov esi, r13d
movzx eax, byte [rsp + 0x39]
mov r14d, dword [rsp + 0x44]
test r14d, r14d
cmovne esi, eax
mov byte [rsp + 0x39], sil
cmp cl, 0
je 0x18000c125
mov edi, 0xa3
cmp edi, 0xa3
je 0x18000c0fe
cmp edi, 0x151
je 0x18000c0ee
cmp edi, 0x1ff
jne 0x18000c113
mov rcx, qword [rbp - 0x69]
test rcx, rcx
je 0x18000c113
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18000c113
mov rcx, qword [rbp - 0x71]
test rcx, rcx
je 0x18000c113
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18000c113
mov qword [rbp - 0x69], r13
lea r8, [rbp - 0x69]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov dword [rsp + 0x40], eax
add edi, 0xae
cmp edi, 0x2ad
jb 0x18000c0c6
mov edi, dword [rsp + 0x30]
test sil, sil
je 0x18000bfe5
xor edx, edx
mov ecx, r14d
call qword [sym.imp.WINMM.dll_mciGetYieldProc]
jmp 0x18000bfe5
mov dword [rbp - 0x2a], 0x66647264
dec edi
mov dword [rsp + 0x30], edi
lea eax, [rdi + 0x2c]
cmp eax, 0x2b
ja 0x18000be90
inc rdx
mov qword [rbp + 0xf], rdx
cmp rdx, qword [0x180097e28]
jb 0x18000be80
mov r10d, 0x64
lea r11d, [r10 - 0x36]
mov eax, 0x400
mov dword [rsp + 0x30], eax
mov edx, dword [rsp + 0x34]
jmp 0x18000c778
xor r9d, r9d
mov r8, rdi
mov edx, 0x122
xor ecx, ecx
call fcn.1800603d0
test eax, eax
je 0x18000c3ce
mov dword [rbp + 0xf], 3
lea rax, [rbp + 0xf]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb7
mov rcx, rdi
call fcn.1800504e0
mov edx, 0xffffffff
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x18000c764
mov rsi, qword [0x180097e08]
lea rdi, [0x180097df8]
cmp qword [0x180097e10], 8
cmovae rdi, qword [0x180097df8]
cmp rsi, 8
jae 0x18000c213
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x31], xmm0
mov r15d, 7
mov r13, qword [rbp - 0x31]
jmp 0x18000c252
mov r15, rsi
or r15, 7
cmp r15, r8
cmova r15, r8
lea rdx, [r15 + 1]
lea rcx, [rbp - 0x31]
call fcn.180013350
mov r13, rax
mov qword [rbp - 0x31], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs r8, 0x7ffffffffffffffe
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x21], rsi
lea r14, [rbp - 0x31]
cmp r15, 8
cmovae r14, r13
cmp rsi, 8
jae 0x18000c27a
movups xmm0, xmmword [r14]
mov qword [rbp + 7], 7
jmp 0x18000c2b4
mov rdi, rsi
or rdi, 7
cmp rdi, r8
cmova rdi, r8
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x11]
call fcn.180013350
mov qword [rbp - 0x11], rax
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 7], rdi
movups xmm0, xmmword [rbp - 0x11]
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp - 1], rsi
mov rcx, qword [rbp - 0x39]
cmp rcx, 8
jb 0x18000c2fc
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c2f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000c79f
call fcn.180067650
movups xmm0, xmmword [rbp + 0xf]
movups xmmword [rbp - 0x51], xmm0
movups xmm0, xmmword [rbp - 1]
movups xmmword [rbp - 0x41], xmm0
cmp r15, 8
jb 0x18000c764
lea rdx, [r15*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x18000c343
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000c7a6
mov rcx, r13
call fcn.180067650
jmp 0x18000c764
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov ecx, 0x85
call fcn.180030c40
mov dword [rbp + 0xf], r13d
lea rax, [rbp + 0xf]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb7
mov rcx, rdi
call fcn.1800504e0
jmp 0x18000c764
cmp edx, 0x1626
je 0x18000c756
cmp edx, 0x1ba2
je 0x18000c637
cmp edx, 0x211e
je 0x18000c442
cmp edx, 0x269a
je 0x18000c418
cmp edx, 0x2c16
jne 0x18000c778
mov rcx, qword [rbp - 0x39]
cmp rcx, 8
jb 0x18000c7b2
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c7ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000c7ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp - 0x51]
mov ecx, 0xc8
call fcn.18005f8f0
mov rbx, rax
mov qword [rbp - 0x61], rax
jmp 0x18000c764
mov rsi, qword [rbp - 0x41]
mov rcx, qword [rbp - 0x39]
cmp rsi, rcx
jae 0x18000c470
lea rax, [rsi + 1]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x51]
cmp rcx, 8
cmovae rax, qword [rbp - 0x51]
mov dword [rax + rsi*2], 0x74
jmp 0x18000c556
mov rax, r8
sub rax, rsi
cmp rax, 1
jb 0x18000c7e2
lea r12, [rsi + 1]
mov r14, qword [rbp - 0x39]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x18000c499
mov rdi, r8
jmp 0x18000c4ba
mov rcx, r14
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r14, rax
jbe 0x18000c4af
mov rdi, r8
jmp 0x18000c4ba
lea rax, [r14 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x51]
call fcn.180013350
mov r15, rax
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], rdi
add rsi, rsi
mov r8, rsi
mov rcx, rax
cmp r14, 8
jb 0x18000c52c
mov rdi, qword [rbp - 0x51]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x74
lea rdx, [r14*2 + 2]
cmp rdx, 0x1000
jb 0x18000c522
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x18000c7a6
mov rdi, rcx
mov rcx, rdi
call fcn.180067650
jmp 0x18000c53d
lea rdx, [rbp - 0x51]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x74
mov r11d, 0x2e
lea r10d, [r11 + 0x36]
lea r9, [0x180000000]
mov edx, dword [rsp + 0x34]
mov qword [rbp - 0x51], r15
cmp byte [rsp + 0x3c], 0
je 0x18000c774
mov edi, r13d
mov esi, 7
mov ebx, dword [rsp + 0x30]
nop dword [rax]
cmp edi, 6
ja case.default.0x18000c586
mov eax, edi
mov ecx, dword [r9 + rax*4 + 0xc81c]
add rcx, r9
jmp rcx
mov r8d, 3
lea rdx, [0x18008ddf6]
lea rcx, [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp + 0x1b], 0x72
mov r8d, 1
lea rdx, [0x18008de1b]
lea rcx, [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp case.default.0x18000c586
mov r8d, 1
lea rdx, [0x18008de43]
lea rcx, [rbp + 0x1d]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x1e], 0x68
jmp case.default.0x18000c586
mov dword [rbp + 0x13], 0x6369646f
mov word [rbp + 0x17], 0x20
jmp case.default.0x18000c586
mov dword [rbp + 0xf], 0x69726550
mov byte [rbp + 0x13], 0
jmp case.default.0x18000c586
movsx r8d, bx
mov rdx, qword [rbp - 0x79]
lea rcx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
jmp case.default.0x18000c586
mov rcx, qword [rbp - 0x79]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp case.default.0x18000c586
mov byte [rbp + 0x1f], 0
inc edi
sub rsi, 1
lea r9, [0x180000000]
jne 0x18000c570
mov rbx, qword [rbp - 0x61]
jmp 0x18000c764
mov rsi, qword [rbp - 0x41]
mov rcx, qword [rbp - 0x39]
cmp rsi, rcx
jae 0x18000c665
lea rax, [rsi + 1]
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x51]
cmp rcx, 8
cmovae rax, qword [rbp - 0x51]
mov dword [rax + rsi*2], 0x61
jmp 0x18000c744
mov rax, r8
sub rax, rsi
cmp rax, 1
jb 0x18000c7e2
lea r12, [rsi + 1]
mov r14, qword [rbp - 0x39]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x18000c68e
mov rdi, r8
jmp 0x18000c6af
mov rcx, r14
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r14, rax
jbe 0x18000c6a4
mov rdi, r8
jmp 0x18000c6af
lea rax, [r14 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x51]
call fcn.180013350
mov r15, rax
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], rdi
add rsi, rsi
mov r8, rsi
mov rcx, rax
cmp r14, 8
jb 0x18000c721
mov rdi, qword [rbp - 0x51]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x61
lea rdx, [r14*2 + 2]
cmp rdx, 0x1000
jb 0x18000c717
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x18000c7a6
mov rdi, rcx
mov rcx, rdi
call fcn.180067650
jmp 0x18000c732
lea rdx, [rbp - 0x51]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x61
mov r11d, 0x2e
lea r10d, [r11 + 0x36]
mov edx, dword [rsp + 0x34]
mov qword [rbp - 0x51], r15
mov eax, dword [rsp + 0x30]
cmp qword [rbp - 0x79], 0
jne 0x18000c778
mov byte [rsp + 0x3c], 0
jmp 0x18000c778
movsx rcx, ax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x79], rax
mov r10d, 0x64
mov r11d, 0x2e
mov edx, dword [rsp + 0x34]
mov eax, dword [rsp + 0x30]
imul ecx, dword [rsp + 0x48], 0x1a
add edx, ecx
mov dword [rsp + 0x34], edx
cmp edx, dword [rbp - 0x7d]
ja 0x18000c3ce
mov rdi, qword [rbp - 0x59]
xor r13d, r13d
jmp 0x18000bc24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180067650
movzx eax, bl
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.180067b60
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180012d20
nop
call fcn.180012d20
int3