Function at 0x10007b704
Capabilities:
Allocate or change rwx memory
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov rax, qword [0x1004946a0]
xor rax, rsp
mov qword [rsp + 0xa8], rax
mov r13d, 0x8000
lea r11, [0x100000000]
mov r15d, 0x269ec3
mov r14d, 0xfffffff
mov rbp, qword [rcx + 0x10]
mov eax, dword [0x1002f3aa4]
mov qword [rsp + 0x78], rdx
mov edx, dword [rbp + 1]
shr rdx, 3
mov qword [rsp + 0x90], rcx
and rdx, r14
lea rsi, [rax + rdx - 1]
xor edx, edx
mov rcx, rax
mov rax, rsi
div rcx
sub rsi, rdx
mov eax, dword [0x1002f3aa4]
mov r9d, dword [0x10005e244]
mov eax, dword [0x1002f3aa4]
mov eax, dword [0x10005e244]
test eax, eax
je 0x10007b828
mov edi, dword [0x10005e244]
xor r8d, r8d
xor eax, eax
add edi, 0xffffffff
add rdi, 1
mov r10, rdi
je 0x10007b7e1
mov rcx, qword [0x100495210]
imul rcx, rcx, 0x343fd
shl rax, 0x10
add rcx, r15
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
shr r10, 0x10
jne 0x10007b7b9
mov qword [0x100495210], rcx
xor edx, edx
div rdi
test r9, r9
je 0x10007b81d
mov ecx, 0xffffc428
mov eax, 0x3bd7
add r8, 1
lock cmpxchg dword [r11 + rdx*4 + 0x478cb0], ecx
je 0x10007baa1
mov ecx, dword [0x10005e244]
lea rax, [rdx + 1]
xor edx, edx
div rcx
cmp r8, r9
jb 0x10007b7eb
xor ebx, ebx
test rbx, rbx
jne 0x10007b949
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
xor edi, edi
mov rcx, qword [0x10047b438]
add rdi, 1
mov r9, rcx
xor eax, eax
test rcx, rcx
mov r8, rcx
je 0x10007b87a
mov rcx, qword [0x100495210]
imul rcx, rcx, 0x343fd
shl rax, 0x10
add rcx, r15
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
shr r9, 0x10
jne 0x10007b852
mov qword [0x100495210], rcx
mov r9d, 0x40
xor edx, edx
div r8
mov r8d, 0x3000
mov rcx, rdx
mov rdx, rsi
shl rcx, 0x10
add rcx, qword [0x100493ee0]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
je 0x10007b8e2
mov rcx, rax
lea r9, [0x1003c433c]
mov rdx, rax
mov r8d, esi
and qword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlInstallFunctionTableCallback]
test al, al
jne 0x10007b8f6
xor edx, edx
mov rcx, rbx
mov r8d, r13d
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp rdi, 0x11
jb 0x10007b833
xor ebx, ebx
cmp rbx, 0x10000
jb 0x10007b904
test bl, 3
je 0x10007b926
test rbx, rbx
je 0x10007b924
mov rcx, rbx
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlDeleteFunctionTable]
mov rcx, rbx
xor edx, edx
mov r8d, r13d
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ebx, ebx
mov ecx, r12d
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rbx, rbx
lea r11, [0x100000000]
je 0x10007b780
xor eax, eax
mov rcx, rsi
mov rdi, rbx
rep stosb byte [rdi], al
mov eax, 0x907132d9
mov edi, dword [0x1002f3aa4]
lea rsi, [0x100000000]
mov r12d, dword [rbp + 1]
mov al, r12b
shr r12, 3
and eax, 7
lea r13, [rax + rbp + 9]
mov ebp, r13d
mov qword [rsp + 0x98], r13
and r12, r14
mov qword [rsp + 0x88], r12
sub rdi, r12
xor eax, eax
sub ebp, esi
add rdi, 1
mov dword [rsp + 0x58], ebp
mov r8, rdi
je 0x10007b9c7
mov rcx, qword [0x100495210]
imul rcx, rcx, 0x343fd
shl rax, 0x10
add rcx, r15
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
shr r8, 0x10
jne 0x10007b99f
mov qword [0x100495210], rcx
xor edx, edx
div rdi
mov ecx, ebp
add rbx, rdx
mov qword [rsp + 0x70], rbx
mov r8, rbx
mov rdx, r12
mov eax, 0xb0deb73c
mov rdx, qword [r12 + r13]
lea rcx, [rsp + 0x80]
xor dil, dil
mov qword [rsp + 0x80], rdx
mov eax, 0x63a105a1
mov r9d, dword [rsp + 0x84]
mov r15d, 4
mov r10, qword [rsp + 0x80]
mov rax, qword [0x1003f4900]
mov rcx, rsi
and qword [rsp + 0x48], 0
and r10, r14
and r9, r14
add r10, rsi
sub rcx, rax
mov qword [rsp + 0x40], rcx
jne 0x10007babb
xor r11d, r11d
test r9, r9
je 0x10007bd7f
mov r8d, dword [rsp + 0x48]
mov esi, 0x966c4cad
mov edx, dword [rsp + 0x4c]
movzx ecx, byte [r11 + r10]
add r11, 1
sub ecx, 0x6993b353
add r8d, ecx
add ecx, edx
mov eax, ecx
imul eax, eax, 0x81ee
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rsi
mov qword [rsp + 0x38], rax
shr rax, 0x20
mov edx, dword [rsp + 0x38]
add edx, eax
add r8d, edx
cmp r11, r9
jb 0x10007ba54
mov dword [rsp + 0x4c], edx
mov dword [rsp + 0x48], r8d
jmp 0x10007bd7f
mov eax, dword [0x1002f3aa4]
mov rcx, rax
imul rcx, rdx
lea rbx, [rcx + r11 + 0x425000]
jmp 0x10007b81f
lea rax, [r10 + r9]
movsxd rcx, dword [0x10000003c]
mov r8d, dword [rcx + rsi + 0xb0]
add r8, rsi
mov ecx, dword [rcx + rsi + 0xb4]
mov qword [rsp + 0x50], rax
mov eax, r10d
sub eax, esi
mov esi, eax
mov r11d, eax
add rax, r9
and r11, 0xfffffffffffff000
mov r14, rax
and r14, 0xfffffffffffff000
sub rsi, r11
sub rax, r14
add rcx, r8
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x68], rax
jmp 0x10007bb1f
mov eax, dword [r8]
cmp rax, r11
jae 0x10007bb24
mov eax, dword [r8 + 4]
add r8, rax
cmp r8, rcx
jne 0x10007bb10
xor ebx, ebx
cmp r8, rcx
je 0x10007bb5e
mov eax, dword [r8]
cmp rax, r11
jne 0x10007bb5e
mov ecx, dword [r8 + 4]
sub rcx, 8
shr rcx, 1
je 0x10007bb59
mov ax, word [r8 + rbx*2 + 8]
and eax, 0xfff
cmp rax, rsi
jae 0x10007bb59
add rbx, 1
cmp rbx, rcx
jne 0x10007bb40
mov rcx, qword [rsp + 0x38]
mov r13, qword [rsp + 0x40]
mov edx, dword [rsp + 0x4c]
mov r9d, dword [rsp + 0x48]
mov edi, 0x966c4cad
cmp r8, rcx
je 0x10007bd08
mov eax, dword [r8]
cmp rax, r14
ja 0x10007bd08
mov r11d, dword [r8 + 4]
lea rax, [r11 - 8]
shr rax, 1
cmp rbx, rax
jne 0x10007bbb2
add r8, r11
cmp r8, rcx
je 0x10007bd08
mov eax, dword [r8]
cmp rax, r14
ja 0x10007bd08
xor ebx, ebx
jmp 0x10007bb86
mov eax, dword [r8]
cmp rax, r14
jne 0x10007bbd0
mov ax, word [r8 + rbx*2 + 8]
and eax, 0xfff
cmp rax, qword [rsp + 0x68]
jae 0x10007bd08
mov rax, rbx
add rbx, 1
test word [r8 + rax*2 + 8], 0xf000
je 0x10007bb71
movzx r11d, word [r8 + rax*2 + 8]
xor ebp, ebp
lea rax, [0x100000000]
mov esi, r11d
and esi, 0xfff
add esi, dword [r8]
add rsi, rax
mov rax, rsi
sub rax, r10
je 0x10007bc52
mov r12, rax
movzx ecx, byte [r10 + rbp]
add rbp, 1
sub ecx, 0x6993b353
add r9d, ecx
add ecx, edx
mov eax, ecx
imul eax, eax, 0x81ee
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rdi
mov qword [rsp + 0x60], rax
shr rax, 0x20
mov edx, dword [rsp + 0x60]
add edx, eax
add r9d, edx
cmp rbp, r12
jb 0x10007bc0a
mov dword [rsp + 0x4c], edx
mov dword [rsp + 0x48], r9d
shr r11d, 0xc
mov rax, qword [rsi]
mov qword [rsp + 0x60], rax
cmp r11d, 3
je 0x10007bc74
sub r11d, 0xa
neg r11d
sbb r10d, r10d
add r10d, 3
jmp 0x10007bc7a
mov r10d, 2
mov r11, r13
neg r11
sub r10d, 2
je 0x10007bca2
cmp r10d, 1
je 0x10007bc92
or r10, 0xffffffffffffffff
jmp 0x10007bcaa
mov r10d, 8
add rax, r11
mov qword [rsp + 0x60], rax
jmp 0x10007bcaa
add dword [rsp + 0x60], r11d
mov r10, r15
xor r11d, r11d
test r10, r10
je 0x10007bcfb
movzx ecx, byte [rsp + r11 + 0x60]
add r11, 1
sub ecx, 0x6993b353
add r9d, ecx
add ecx, edx
mov eax, ecx
imul eax, eax, 0x81ee
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rdi
mov qword [rsp + 0x40], rax
shr rax, 0x20
mov edx, dword [rsp + 0x40]
add edx, eax
add r9d, edx
cmp r11, r10
jb 0x10007bcb2
mov dword [rsp + 0x4c], edx
mov dword [rsp + 0x48], r9d
add r10, rsi
mov rcx, qword [rsp + 0x38]
jmp 0x10007bb71
mov rbx, qword [rsp + 0x50]
xor r8d, r8d
mov r13, qword [rsp + 0x98]
mov r12, qword [rsp + 0x88]
sub rbx, r10
mov ebp, dword [rsp + 0x58]
mov dil, r8b
je 0x10007bd7a
mov r11d, 0x966c4cad
movzx ecx, byte [r10 + r8]
add r8, 1
sub ecx, 0x6993b353
add r9d, ecx
add ecx, edx
mov eax, ecx
imul eax, eax, 0x81ee
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, r11
mov qword [rsp + 0x38], rax
shr rax, 0x20
mov edx, dword [rsp + 0x38]
add edx, eax
add r9d, edx
cmp r8, rbx
jb 0x10007bd32
mov dword [rsp + 0x4c], edx
mov dword [rsp + 0x48], r9d
mov rbx, qword [rsp + 0x70]
xor ecx, ecx
mov al, cl
add rcx, 1
and eax, 7
mov al, byte [rsp + rax + 0x48]
mov byte [rsp + rcx + 0x9f], al
cmp rcx, 8
jb 0x10007bd81
mov eax, 0xbcfd5883
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x38], r13
mov r11, rbx
mov r14b, r12b
mov qword [rsp + 0x40], rbx
mov r10, r13
and r14d, 7
je 0x10007c278
mov esi, ebp
xor r8d, r8d
mov dword [rsp + 0x68], r8d
not esi
xor ebx, ebx
mov dword [rsp + 0x50], ebx
xor r11d, r11d
test r14d, r14d
jle 0x10007be1d
lea r9d, [r8 + 0x38]
movzx edx, byte [r10]
cmp r11d, r15d
jge 0x10007bdf6
lea ecx, [r9 - 0x20]
shl edx, cl
or ebx, edx
jmp 0x10007bdfe
mov ecx, r9d
shl edx, cl
or r8d, edx
add r11d, 1
add r10, 1
sub r9d, 8
cmp r11d, r14d
jl 0x10007bde3
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x68], r8d
mov qword [rsp + 0x38], r10
mov ecx, ebp
mov r8d, eax
movzx r10d, word [rsp + 0xa4]
movzx ebx, ax
sub ecx, eax
movzx r11d, word [rsp + 0xa2]
movzx r9d, word [rsp + 0xa6]
sub ecx, r9d
xor esi, ecx
mov ebp, esi
sub ebp, r10d
xor ebp, eax
xor ebp, dword [rsp + 0x58]
mov ecx, ebp
ror ecx, 0xe
xor ecx, r11d
imul ecx, r9d
xor esi, ecx
mov ecx, esi
ror ecx, 4
sub ecx, ebx
imul ecx, r11d
xor ebp, ecx
sub r8d, ebp
mov edx, ebp
rol r8d, 0xd
mov ecx, r9d
rol edx, 0xd
imul ecx, r8d
add edx, ecx
mov r8d, r10d
xor esi, edx
mov ecx, esi
mov edx, r11d
xor edx, esi
shr ecx, 9
imul edx, r10d
xor edx, ecx
mov ecx, r11d
xor ebp, edx
mov edx, ebp
xor r8d, ebp
rol r8d, 1
ror edx, 0x10
imul ecx, r8d
add edx, ecx
mov ecx, ebx
mov r8d, r11d
xor esi, edx
xor r8d, esi
mov edx, esi
rol r8d, 5
rol edx, 3
imul ecx, r8d
sub ecx, edx
xor ebp, ecx
mov ecx, ebp
not ecx
ror ecx, 6
add ecx, r9d
imul ecx, r10d
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, eax
rol edx, 5
ror ecx, 2
imul r10d, edx
add ecx, r10d
xor ebp, ecx
mov ecx, ebp
sub ecx, ebx
rol ecx, 4
imul r11d, ecx
mov ecx, ebp
shr ecx, 9
xor r11d, ecx
xor esi, r11d
mov edx, esi
mov ecx, esi
sub edx, dword [rsp + 0xa4]
rol edx, 0xb
imul edx, ebx
mov ebx, dword [rsp + 0x68]
ror ecx, 8
xor esi, ebx
xor r9d, r9d
xor ecx, edx
xor ecx, dword [rsp + 0x50]
mov edx, esi
xor ebp, ecx
test r14d, r14d
mov ecx, ebp
jle 0x10007bf65
mov r8, qword [rsp + 0x40]
cmp r9d, r15d
jge 0x10007bf4a
rol ecx, 8
mov byte [r8], cl
add r8, 1
xor dil, cl
jmp 0x10007bf57
rol edx, 8
mov byte [r8], dl
add r8, 1
xor dil, dl
add r9d, 1
cmp r9d, r14d
jl 0x10007bf36
mov qword [rsp + 0x40], r8
lea ecx, [r14 - 4]
test ecx, ecx
jle 0x10007c260
sub r15d, ecx
shl r15d, 3
mov ecx, r15d
shr esi, cl
shl esi, cl
mov r10, qword [rsp + 0x38]
mov r14d, dword [rsp + 0x50]
mov r11, qword [rsp + 0x40]
mov r15, r12
shr r15, 3
je 0x10007c1a6
movzx r13d, ax
movzx ecx, word [rsp + 0xa6]
movzx edx, word [rsp + 0xa2]
mov dword [rsp + 0x50], ecx
movzx ecx, word [rsp + 0xa4]
mov dword [rsp + 0x40], edx
mov dword [rsp + 0x68], ecx
mov ecx, r13d
neg ecx
mov r12d, ecx
movzx r9d, byte [r10 + 1]
movzx r8d, byte [r10 + 4]
movzx ecx, byte [r10]
shl ecx, 8
shl r8d, 8
add r10, 8
or r9d, ecx
movzx ecx, byte [r10 - 6]
shl r9d, 8
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r10 - 5]
or r9d, ecx
movzx ecx, byte [r10 - 3]
or r8d, ecx
movzx ecx, byte [r10 - 2]
xor ebp, r9d
shl r8d, 8
or r8d, ecx
shl r8d, 8
movzx ecx, byte [r10 - 1]
or r8d, ecx
mov ecx, ebp
sub ecx, eax
sub ecx, dword [rsp + 0x50]
xor ecx, r8d
xor esi, ecx
mov ecx, esi
sub ecx, dword [rsp + 0x68]
xor ecx, eax
xor ebp, ecx
mov ecx, ebp
ror ecx, 0xe
xor ecx, edx
imul ecx, dword [rsp + 0x50]
xor esi, ecx
mov ecx, esi
ror ecx, 4
sub ecx, r13d
imul ecx, edx
xor ebp, ecx
mov edx, eax
sub edx, ebp
rol edx, 0xd
mov ecx, ebp
rol ecx, 0xd
imul edx, dword [rsp + 0x50]
add ecx, edx
movzx edx, word [rsp + 0xa2]
xor esi, ecx
xor edx, esi
movzx ecx, word [rsp + 0xa4]
imul edx, ecx
mov ecx, esi
shr ecx, 9
xor edx, ecx
xor ebp, edx
movzx edx, word [rsp + 0xa4]
xor edx, ebp
rol edx, 1
mov ecx, ebp
ror ecx, 0x10
imul edx, dword [rsp + 0x40]
add ecx, edx
movzx edx, word [rsp + 0xa2]
xor esi, ecx
mov ecx, esi
xor edx, esi
rol edx, 5
rol ecx, 3
imul edx, r13d
sub edx, ecx
xor ebp, edx
mov ecx, ebp
not ecx
ror ecx, 6
movzx edx, word [rsp + 0xa6]
add ecx, edx
movzx edx, word [rsp + 0xa4]
imul ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, eax
rol edx, 5
ror ecx, 2
imul edx, dword [rsp + 0x68]
add ecx, edx
xor ebp, ecx
lea edx, [rbp + r12]
rol edx, 4
movzx ecx, word [rsp + 0xa2]
imul edx, ecx
mov ecx, ebp
shr ecx, 9
xor edx, ecx
xor esi, edx
mov edx, esi
mov ecx, esi
xor esi, ebx
mov ebx, r8d
sub edx, dword [rsp + 0xa4]
mov byte [r11 + 7], sil
rol edx, 0xb
ror ecx, 8
imul edx, r13d
xor ecx, edx
movzx edx, word [rsp + 0xa2]
xor ecx, r14d
mov r14d, r9d
xor ebp, ecx
mov byte [r11 + 3], bpl
xor dil, bpl
ror ebp, 8
mov byte [r11 + 2], bpl
xor dil, sil
ror esi, 8
mov byte [r11 + 6], sil
xor dil, bpl
ror ebp, 8
xor dil, sil
ror esi, 8
xor dil, bpl
mov byte [r11 + 1], bpl
ror ebp, 8
xor dil, sil
mov byte [r11 + 5], sil
ror esi, 8
mov byte [r11], bpl
mov byte [r11 + 4], sil
mov cl, sil
add r11, 8
xor cl, bpl
xor dil, cl
ror ebp, 8
ror esi, 8
sub r15, 1
jne 0x10007bfcb
mov r13, qword [rsp + 0x98]
mov r12, qword [rsp + 0x88]
cmp dil, byte [r13 + r12 + 8]
je 0x10007c29e
call fcn.1002d3e40
mov r11d, 0xffff
mov r10, rax
mov rax, 0xfffffffffffff000
lea rbp, [0x1003e8888]
mov rbx, qword [rsp + 0x90]
mov qword [rbx + 0x10], rbp
mov rcx, qword [0x100495210]
lea r8, [rbx + 0x18]
and r8, 0xfffffffffffffff8
and r10, rax
lea r9, [r8 + 0xfff]
and r9, rax
xor edi, edi
imul rcx, rcx, 0x343fd
shl rdi, 0x10
add rcx, 0x269ec3
mov rax, rcx
shr rax, 0x10
movzx edx, ax
or rdi, rdx
shr r11, 0x10
jne 0x10007c1f7
movabs rax, 0x8000800080008001
mov qword [0x100495210], rcx
mul rdi
shr rdx, 0xf
mov rax, qword [rsp + 0x78]
imul rdx, rdx, 0xffff
mov qword [rax + 0x98], r10
sub rdi, rdx
add rdi, 1
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x78], 0
jmp 0x10007c294
xor esi, esi
test ecx, ecx
jns 0x10007bf7f
neg ecx
shl ecx, 3
shr ebp, cl
shl ebp, cl
jmp 0x10007bf7f
xor esi, esi
mov ebx, ebp
mov r14d, ebp
xor ebp, ebp
not ebx
jmp 0x10007bf8e
mov rax, qword [rsp + 0x78]
mov qword [r8], rax
add r8, 8
cmp r8, r9
jb 0x10007c288
jmp 0x10007c3b4
mov rbx, r13
lea r14, [0x100000000]
mov rax, qword [0x1003f4900]
mov rbp, qword [rsp + 0x70]
mov rsi, r14
sub rbx, rbp
sub rsi, rax
jne 0x10007c2c8
test rbx, rbx
je 0x10007c3a1
lea r15, [0x100000000]
mov r11, rbp
xor edi, edi
sub r11, r13
mov rcx, qword [0x1000016e8]
sub r13d, r14d
add r12d, r13d
lea r8d, [rcx - 1]
test r8d, r8d
js 0x10007c31d
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r15 + rdx*4 + 0x16ec]
and r9d, 0xfffffff
cmp r13d, r9d
jae 0x10007c313
lea r8d, [rax - 1]
jmp 0x10007c318
jbe 0x10007c322
lea edi, [rax + 1]
cmp r8d, edi
jge 0x10007c2ed
movsxd r10, edi
jmp 0x10007c39a
movsxd r10, eax
jmp 0x10007c39a
mov edx, dword [r15 + r10*4 + 0x16ec]
mov eax, edx
and eax, 0xfffffff
cmp eax, r12d
jae 0x10007c3a1
mov r8, rdx
mov edi, edx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r14
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x10007c375
sub edi, 1
je 0x10007c370
cmp edi, 1
jne 0x10007c37b
mov r9, rsi
jmp 0x10007c37b
mov r9, rbx
jmp 0x10007c37b
mov r9, rsi
sub r9, rbx
sub edx, 2
je 0x10007c38b
cmp edx, 1
jne 0x10007c396
add qword [r8 + r11], r9
jmp 0x10007c38f
add dword [r8 + r11], r9d
mov rcx, qword [0x1000016e8]
add r10, 1
mov eax, ecx
cmp r10, rax
jb 0x10007c327
mov eax, dword [0x1002f3aa4]
mov eax, 0xedffa7c3
mov rbx, qword [rsp + 0x90]
mov qword [rbx + 0x10], rbp
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.1002d532c
mov rbx, qword [rsp + 0x100]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret