Function at 0x14010a060
Capabilities:
Get system information on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x608]
sub rsp, 0x708
mov rax, qword [0x1402bf040]
xor rax, rsp
mov qword [rbp + 0x5d0], rax
mov esi, ecx
mov r15, rdx
mov ecx, dword [rdx + 0x10]
sub ecx, 0x947
je 0x14010a965
nop dword [rax]
sub ecx, 1
je 0x14010a0f6
cmp ecx, 1
jne 0x14010ae59
cmp dword [rdx + 0x20], 0x203
jne 0x14010ae59
mov ecx, dword ds:[rdx + 0x18]
cmp ecx, dword [rdx + 0x1c]
jae 0x14010ae59
call fcn.14010b8c0
mov rbx, rax
test rax, rax
je 0x14010ae59
mov rcx, qword [0x1402cd658]
mov rdx, rax
call sym.SystemInformer.exe_PhShowProcessRecordDialog
mov rcx, rbx
call sym.SystemInformer.exe_PhDereferenceProcessRecord
jmp 0x14010ae59
mov r9d, dword ds:[rdx + 0x18]
cmp r9d, dword [rdx + 0x1c]
jae 0x14010ae59
cmp esi, 0xffffffff
jne 0x14010a2f9
cmp dword [0x1402cd6c0], r9d
nop word [rax + rax]
je 0x14010a2e5
mov edx, dword [0x1402cf6cc]
lea rcx, str.___K:
mov eax, dword [0x1402cf6c4]
add edx, r9d
and rdx, rax
mov rax, qword [0x1402cf6d0]
movss xmm1, dword [rax + rdx*4]
mov edx, dword [0x1402cf78c]
mov eax, dword [0x1402cf784]
add edx, r9d
and rdx, rax
mov rax, qword [0x1402cf790]
cvtps2pd xmm2, xmm1
movss xmm0, dword [rax + rdx*4]
movzx eax, word [0x1402c72fc]
movaps xmm1, xmm2
cvtps2pd xmm3, xmm0
mov qword [rbp + 0x388], rcx
lea rcx, str.___U:
mov word [rbp + 0x354], ax
mov word [rbp + 0x394], ax
mov word [rbp + 0x3d4], ax
lea rax, [0x14026f724]
mov qword [rbp + 0x3c8], rcx
mov ecx, r9d
movsd xmm0, qword [0x140290810]
addsd xmm1, xmm3
mulsd xmm2, xmm0
mov dword [rbp + 0x350], 0x4b
mulsd xmm3, xmm0
mov dword [rbp + 0x370], 1
mov qword [rbp + 0x380], 0xc
mulsd xmm1, xmm0
mov dword [rbp + 0x390], 0x4b
movsd qword [rbp + 0x3a0], xmm2
movsd qword [rbp + 0x3e0], xmm3
mov dword [rbp + 0x3b0], 1
movsd qword [rbp + 0x360], xmm1
mov qword [rbp + 0x3c0], 0xc
mov dword [rbp + 0x3d0], 0x4b
mov dword [rbp + 0x3f0], 1
mov qword [rbp + 0x400], 4
mov qword [rbp + 0x408], rax
call fcn.14010b940
mov rcx, rax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov edx, dword ds:[r15 + 0x18]
xor r14d, r14d
xor ecx, ecx
movups xmm0, xmmword [rax]
mov eax, 0xa
mov dword [rbp + 0x410], 1
mov dword [rbp + 0x430], r14d
movaps xmmword [rbp + 0x420], xmm0
mov word [rbp + 0x440], ax
call sym.SystemInformer.exe_PhGetStatisticsTimeString
mov rcx, rax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov edx, 9
lea rcx, [rbp + 0x350]
mov r8d, 0xa0
movups xmm0, xmmword [rax]
mov dword [rbp + 0x450], 1
movaps xmmword [rbp + 0x460], xmm0
call sym.SystemInformer.exe_PhFormat
mov rcx, qword [0x1402cd6b8]
mov qword [0x1402cd6b8], rax
test rcx, rcx
je 0x14010a2e5
add rcx, 0xfffffffffffffff0
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010a2e5
nop
call fcn.140141ea0
mov rax, qword [0x1402cd6b8]
movups xmm0, xmmword [rax]
movups xmmword [r15 + 0x20], xmm0
jmp 0x14010ae59
mov rax, qword [0x1402cd530]
lea rdi, [rsi + rsi*2]
shl rdi, 4
mov rbx, rsi
mov qword [rsp + 0x30], rdi
cmp dword [rdi + rax + 0x28], r9d
je 0x14010a94c
mov rdx, qword [0x1402cf9b0]
lea r8, [rsi + rsi*2]
mov qword [rsp + 0x700], r13
mov qword [rsp + 0x750], r12
mov ecx, dword [rdx + r8*8 + 0xc]
mov eax, dword [rdx + r8*8 + 4]
add ecx, r9d
and rcx, rax
mov rax, qword [rdx + r8*8 + 0x10]
mov rdx, qword [0x1402cfa18]
movss xmm1, dword [rax + rcx*4]
mov ecx, dword [rdx + r8*8 + 0xc]
mov eax, dword [rdx + r8*8 + 4]
add ecx, r9d
and rcx, rax
mov rax, qword [rdx + r8*8 + 0x10]
cvtps2pd xmm2, xmm1
movss xmm0, dword [rax + rcx*4]
lea rcx, str.___K:
movzx eax, word [0x1402c72fc]
movaps xmm1, xmm2
cvtps2pd xmm3, xmm0
mov qword [rbp + 0x388], rcx
lea rcx, str.___U:
mov word [rbp + 0x354], ax
mov word [rbp + 0x394], ax
mov word [rbp + 0x3d4], ax
lea rax, [0x14026f724]
mov qword [rbp + 0x3c8], rcx
mov ecx, r9d
movsd xmm0, qword [0x140290810]
addsd xmm1, xmm3
mulsd xmm2, xmm0
mov dword [rbp + 0x350], 0x4b
mulsd xmm3, xmm0
mov dword [rbp + 0x370], 1
mov qword [rbp + 0x380], 0xc
mulsd xmm1, xmm0
mov dword [rbp + 0x390], 0x4b
movsd qword [rbp + 0x3a0], xmm2
movsd qword [rbp + 0x3e0], xmm3
mov dword [rbp + 0x3b0], 1
movsd qword [rbp + 0x360], xmm1
mov qword [rbp + 0x3c0], 0xc
mov dword [rbp + 0x3d0], 0x4b
mov dword [rbp + 0x3f0], 1
mov qword [rbp + 0x400], 4
mov qword [rbp + 0x408], rax
call fcn.14010b940
mov rcx, rax
call sym.SystemInformer.exe_PhAutoDereferenceObject
cmp byte [0x1402ca9b8], 0
mov r13d, 0x10
movups xmm0, xmmword [rax]
mov eax, 0xa
mov dword [rbp + 0x410], 1
mov qword [rbp + 0x440], rax
lea rax, str._nCPU
mov qword [rbp + 0x448], rax
movaps xmmword [rbp + 0x420], xmm0
mov dword [rbp + 0x430], 1
je 0x14010a530
lea rax, str.__Core
mov dword ds:[rbp + 0x450], 8
mov edx, esi
mov qword [rbp + 0x488], rax
xor ecx, ecx
mov dword [rbp + 0x460], esi
mov dword [rbp + 0x470], 1
mov qword [rbp + 0x480], 0xe
call fcn.14010c440
mov dword ds:[rbp + 0x4a0], eax
mov edx, esi
lea rax, str.__Socket
mov dword [rbp + 0x490], 8
mov ecx, 3
mov qword [rbp + 0x4c8], rax
mov dword [rbp + 0x4b0], 1
mov qword [rbp + 0x4c0], 0x12
call fcn.14010c440
mov dword [rbp + 0x4e0], eax
jmp 0x14010a64c
movzx r10d, word [0x1402ca9bc]
xor r14d, r14d
movzx r8d, r14w
movzx ebx, r14w
cmp r14w, r10w
jae 0x14010a5d9
mov r9, qword [0x1402ca9c0]
mov r11d, 0xffff
nop word [rax + rax]
test r9, r9
je 0x14010a599
movzx ecx, r14w
cmp bx, r11w
jne 0x14010a58f
mov rax, r9
mov rdx, r10
nop word [rax + rax]
add cx, word [rax]
lea rax, [rax + 2]
sub rdx, 1
jne 0x14010a580
jmp 0x14010a5a0
movzx eax, bx
movzx ecx, word [r9 + rax*2]
jmp 0x14010a5a0
movzx ecx, word [0x1402ca9ba]
movzx edx, r14w
cmp r14w, cx
jae 0x14010a5d0
nop word [rax + rax]
movzx eax, r8w
inc r8w
cmp eax, esi
je 0x14010a6b6
inc dx
cmp dx, cx
jb 0x14010a5b0
inc bx
cmp bx, r10w
jb 0x14010a560
lea rax, str.__Group
mov dword [rbp + 0x450], 8
mov qword [rbp + 0x488], rax
mov dword [rbp + 0x460], esi
mov dword [rbp + 0x470], 1
mov qword [rbp + 0x480], r13
mov dword [rbp + 0x490], 8
mov dword [rbp + 0x4a0], 0xffffffff
mov dword [rbp + 0x4e0], 0xffffffff
lea rax, str.__Node
mov qword [rbp + 0x4c8], rax
mov dword [rbp + 0x4b0], 1
mov rbx, rsi
mov qword [rbp + 0x4c0], 0xe
cmp dword [0x1402bff40], 0x64
mov r12, qword [rsp + 0x750]
mov dword [rbp + 0x4d0], 8
jb 0x14010a873
cmp word [0x1402ca9ba], 0x40
jae 0x14010a873
test byte [0x1402c56a8], 1
jne 0x14010a79d
lock bts qword [0x1402c56a8], 0x1f
setb al
test al, al
jne 0x14010a786
nop dword [rax + rax]
call fcn.14010c4e0
lea rcx, [0x1402c56a8]
call sym.SystemInformer.exe_PhfSetEvent
jmp 0x14010a79d
movzx r12d, dx
lea rax, str.__Group
mov qword [rbp + 0x488], rax
movzx edi, r14w
movzx eax, bx
mov dword [rbp + 0x4a0], eax
mov dword [rbp + 0x450], 8
mov dword [rbp + 0x460], r12d
mov dword [rbp + 0x470], 1
mov qword [rbp + 0x480], r13
mov dword [rbp + 0x490], 8
cmp bx, 0x14
jae 0x14010a752
cmp dx, 0x40
jae 0x14010a752
xor r9d, r9d
lea rdx, [rsp + 0x40]
mov r8d, 0x408
mov ecx, 0x37
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x14010a752
mov rdx, qword [rsp + 0x40]
nop
movzx eax, di
add rax, rax
cmp word [rsp + rax*8 + 0x50], bx
jne 0x14010a748
mov rax, qword [rsp + rax*8 + 0x48]
bt rax, r12
jb 0x14010a765
inc di
movzx eax, di
cmp eax, edx
jbe 0x14010a730
mov rdi, qword ds:[rsp + 0x30]
mov dword [rbp + 0x4e0], r14d
jmp 0x14010a626
lea rax, str.__Node
mov qword [rbp + 0x4c8], rax
movzx eax, di
mov rdi, qword [rsp + 0x30]
mov dword [rbp + 0x4e0], eax
jmp 0x14010a634
test byte [0x1402c56a8], 1
jne 0x14010a79d
xor edx, edx
lea rcx, [0x1402c56a8]
call sym.SystemInformer.exe_PhfWaitForEvent
mov rax, qword [0x1402cd590]
test rax, rax
je 0x14010a873
cmp esi, dword [rax]
ja 0x14010a873
mov rax, qword ds:[rax + 8]
mov ecx, dword [rax + rbx*8]
cmp ecx, 0x20
je 0x14010a7d7
cmp ecx, 0x40
jne 0x14010a873
lea rax, [0x1402c5678]
jmp 0x14010a7de
lea rax, [0x1402c5688]
movups xmm0, xmmword [rax]
lea rcx, [0x14023e110]
mov dword [rbp + 0x4f0], 1
mov qword [rbp + 0x508], rcx
lea rax, [0x14023bc50]
mov ecx, esi
movaps xmmword [rbp + 0x520], xmm0
mov qword [rbp + 0x500], 4
mov dword [rbp + 0x510], 1
mov dword [rbp + 0x530], 1
mov qword [rbp + 0x540], 2
mov qword [rbp + 0x548], rax
call fcn.14010c780
nop
test al, al
je 0x14010a8ce
lea rax, str.Parked_n
mov dword [rbp + 0x550], 1
mov qword [rbp + 0x568], rax
mov r13d, 0x11
mov qword [rbp + 0x560], 0xe
jmp 0x14010a8ce
lea rax, [0x14023bc50]
mov dword ds:[rbp + 0x4f0], 1
mov ecx, esi
mov qword [rbp + 0x508], rax
mov qword [rbp + 0x500], 2
mov r13d, 0xe
call fcn.14010c780
test al, al
je 0x14010a8ce
lea rax, str.Parked_n
mov qword [rbp + 0x520], r13
mov qword [rbp + 0x528], rax
mov r13d, 0xf
mov dword [rbp + 0x510], 1
mov edx, dword ds:[r15 + 0x18]
xor ecx, ecx
mov ebx, r13d
shl rbx, 5
call sym.SystemInformer.exe_PhGetStatisticsTimeString
mov rcx, rax
call sym.SystemInformer.exe_PhAutoDereferenceObject
lea edx, [r13 + 1]
xor r8d, r8d
lea rcx, [rbp + 0x350]
movups xmm0, xmmword [rax]
mov dword [rbp + rbx + 0x350], 1
movups xmmword [rbp + rbx + 0x360], xmm0
call sym.SystemInformer.exe_PhFormat
mov rcx, qword [0x1402cd530]
mov r13, qword [rsp + 0x700]
mov rdx, qword [rdi + rcx + 0x20]
mov qword [rdi + rcx + 0x20], rax
test rdx, rdx
je 0x14010a94c
lea rcx, [rdx - 0x10]
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010a94c
call fcn.140141ea0
mov rax, qword [0x1402cd530]
mov rcx, qword [rdi + rax + 0x20]
movups xmm0, xmmword [rcx]
movups xmmword [r15 + 0x20], xmm0
jmp 0x14010ae59
mov rdi, qword [rdx + 0x18]
mov eax, 0x13
cmp byte [0x1402cf604], 0
mov ecx, 0x1013
mov r8d, dword [0x1402cf560]
mov edx, dword [0x1402cf56c]
cmovne eax, ecx
mov dword [rdi + 8], eax
mov rcx, rdi
mov rax, qword [0x1402cd628]
movaps xmmword [rsp + 0x6f0], xmm6
movaps xmmword [rsp + 0x6e0], xmm7
mov r9, qword [rax + 0x78]
mov r9d, dword [r9 + 0x54]
call sym.SystemInformer.exe_PhSiSetColorsGraphDrawInfo
mov r8d, dword [0x1402cf6c8]
mov rdx, qword ds:[r15 + 0x18]
cmp esi, 0xffffffff
jne 0x14010aaf9
lea rcx, [0x1402cd698]
call sym.SystemInformer.exe_PhGetDrawInfoGraphBuffers
cmp byte [0x1402cd6ac], 0
nop dword [rax]
jne 0x14010ae49
mov r8d, dword [rdi + 0x14]
lea rcx, [0x1402cf6c0]
mov rdx, qword [0x1402cd698]
call sym.SystemInformer.exe_PhCopyCircularBuffer_FLOAT
mov r8d, dword [rdi + 0x14]
lea rcx, [0x1402cf780]
mov rdx, qword [0x1402cd6a0]
call sym.SystemInformer.exe_PhCopyCircularBuffer_FLOAT
cmp byte [0x1402cf624], 0
nop dword [rax + rax]
je 0x14010aac8
cmp byte [0x1402cf62c], 0
xorps xmm7, xmm7
xorps xmm6, xmm6
je 0x14010aa5d
mov eax, dword [rdi + 0x14]
cmp eax, 0x80
jbe 0x14010aa5d
mov rbx, qword [0x1402cd698]
mov r8d, eax
mov rdx, qword [0x1402cd6a0]
mov rcx, rbx
call sym.SystemInformer.exe_PhAddPlusMaxMemorySingles
movaps xmm6, xmm0
jmp 0x14010aa9b
mov ecx, dword [rdi + 0x14]
test ecx, ecx
je 0x14010aad0
mov rbx, qword [0x1402cd698]
mov edx, ecx
mov r8, qword [0x1402cd6a0]
mov rax, rbx
sub r8, rbx
nop
movss xmm0, dword [rax + r8]
addss xmm0, dword [rax]
add rax, 4
maxss xmm0, xmm6
movaps xmm6, xmm0
sub rdx, 1
jne 0x14010aa80
ucomiss xmm6, xmm7
jp 0x14010aaa4
je 0x14010aad0
mov r8d, dword [rdi + 0x14]
movaps xmm1, xmm6
mov rcx, rbx
call sym.SystemInformer.exe_PhDivideSinglesBySingle
mov r8d, dword [rdi + 0x14]
movaps xmm1, xmm6
mov rcx, qword [0x1402cd6a0]
call sym.SystemInformer.exe_PhDivideSinglesBySingle
jmp 0x14010aad0
movss xmm6, dword [0x1402907dc]
mov edx, 0x50
lea rax, [sym.SystemInformer.exe_PhSiDoubleLabelYFunction]
mov ecx, 0x58
mov r8, rdi
mov qword [rdi + rdx], rax
movss dword [rcx + rdi], xmm6
mov byte [0x1402cd6ac], 1
jmp 0x14010ae49
mov rcx, qword [0x1402cd530]
lea r14, [rsi + rsi*2]
shl r14, 4
add rcx, r14
call sym.SystemInformer.exe_PhGetDrawInfoGraphBuffers
mov rdx, qword [0x1402cd530]
cmp byte ds:[r14 + rdx + 0x14], 0
jne 0x14010ac6b
mov rax, qword [0x1402cf9b0]
lea rbx, ds:[rsi + rsi*2]
mov r8d, dword [rdi + 0x14]
mov rdx, qword [r14 + rdx]
lea rcx, [rax + rbx*8]
call sym.SystemInformer.exe_PhCopyCircularBuffer_FLOAT
mov rax, qword [0x1402cfa18]
mov rdx, qword [0x1402cd530]
mov r8d, dword [rdi + 0x14]
lea rcx, [rax + rbx*8]
mov rdx, qword [r14 + rdx + 8]
call sym.SystemInformer.exe_PhCopyCircularBuffer_FLOAT
cmp byte [0x1402cf624], 0
je 0x14010ac30
cmp byte [0x1402cf62c], 0
xorps xmm7, xmm7
xorps xmm6, xmm6
je 0x14010abaa
mov eax, dword [rdi + 0x14]
cmp eax, 0x80
jbe 0x14010abaa
mov rcx, qword [0x1402cd530]
mov r8d, eax
mov rdx, qword [r14 + rcx + 8]
mov rcx, qword [r14 + rcx]
call sym.SystemInformer.exe_PhAddPlusMaxMemorySingles
movaps xmm6, xmm0
jmp 0x14010abea
mov r8d, dword [rdi + 0x14]
test r8d, r8d
je 0x14010ac38
mov rax, qword [0x1402cd530]
mov rcx, qword [r14 + rax]
mov rdx, qword [r14 + rax + 8]
mov eax, r8d
sub rdx, rcx
nop dword [rax]
movss xmm0, dword [rcx + rdx]
addss xmm0, dword [rcx]
add rcx, 4
maxss xmm0, xmm6
movaps xmm6, xmm0
sub rax, 1
jne 0x14010abd0
ucomiss xmm6, xmm7
jp 0x14010abf1
je 0x14010ac38
mov rcx, qword [0x1402cd530]
lea rdx, [rsi + rsi*2]
mov r8d, dword [rdi + 0x14]
add rdx, rdx
movaps xmm1, xmm6
mov rcx, qword [rcx + rdx*8]
call sym.SystemInformer.exe_PhDivideSinglesBySingle
mov rcx, qword [0x1402cd530]
lea rdx, [rsi + rsi*2]
mov r8d, dword [rdi + 0x14]
add rdx, rdx
movaps xmm1, xmm6
mov rcx, qword [rcx + rdx*8 + 8]
call sym.SystemInformer.exe_PhDivideSinglesBySingle
jmp 0x14010ac38
movss xmm6, dword [0x1402907dc]
mov ecx, 0x58
lea rax, [sym.SystemInformer.exe_PhSiDoubleLabelYFunction]
mov edx, 0x50
mov r9, rdi
mov r8, rdi
mov qword [rdi + rdx], rax
movss dword [rdi + rcx], xmm6
lea rcx, [rsi + rsi*2]
mov rax, qword [0x1402cd530]
add rcx, rcx
mov byte [rax + rcx*8 + 0x14], 1
cmp dword [0x1402cf608], 0
je 0x14010ae42
mov rdx, qword [0x1402cf9b0]
lea r8, [rsi + rsi*2]
mov eax, dword [rdx + r8*8 + 4]
mov ecx, dword [rdx + r8*8 + 0xc]
and rcx, rax
mov rax, qword [rdx + r8*8 + 0x10]
mov rdx, qword [0x1402cfa18]
movss xmm1, dword [rax + rcx*4]
mov eax, dword [rdx + r8*8 + 4]
mov ecx, dword [rdx + r8*8 + 0xc]
and rcx, rax
mov rax, qword [rdx + r8*8 + 0x10]
cvtps2pd xmm2, xmm1
mov edx, 6
mov r8d, 0x40
movss xmm0, dword [rax + rcx*4]
lea rcx, str.___K:
movzx eax, word [0x1402c72fc]
movaps xmm1, xmm2
cvtps2pd xmm3, xmm0
mov qword [rbp + 0x388], rcx
lea rcx, str.___U:
mov word [rbp + 0x354], ax
mov word [rbp + 0x394], ax
mov word [rbp + 0x3d4], ax
lea rax, [0x14026f724]
mov qword [rbp + 0x3c8], rcx
lea rcx, [rbp + 0x350]
movsd xmm0, qword [0x140290810]
addsd xmm1, xmm3
mulsd xmm2, xmm0
mov dword [rbp + 0x350], 0x4b
mulsd xmm3, xmm0
mov dword [rbp + 0x370], 1
mov qword [rbp + 0x380], 0xc
mulsd xmm1, xmm0
mov dword [rbp + 0x390], 0x4b
movsd qword [rbp + 0x3a0], xmm2
movsd qword [rbp + 0x3e0], xmm3
mov dword [rbp + 0x3b0], 1
movsd qword [rbp + 0x360], xmm1
mov qword [rbp + 0x3c0], 0xc
mov dword [rbp + 0x3d0], 0x4b
mov dword [rbp + 0x3f0], 1
mov qword [rbp + 0x400], 4
mov qword [rbp + 0x408], rax
call sym.SystemInformer.exe_PhFormat
mov rcx, qword [0x1402cd530]
lea rdx, [rsi + rsi*2]
add rdx, rdx
mov r8, qword [rcx + rdx*8 + 0x18]
mov qword [rcx + rdx*8 + 0x18], rax
test r8, r8
je 0x14010ade5
lea rcx, [r8 - 0x10]
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010ade5
nop dword [rax + rax]
call fcn.140141ea0
mov rcx, qword [0x1402cd580]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x919
mov rcx, qword [rcx + rsi*8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, qword [0x1402cd530]
lea rcx, [0x1402c0290]
lea r10, [rsi + rsi*2]
mov dword [rsp + 0x28], 5
add r10, r10
mov qword [rsp + 0x20], rcx
lea r9, [0x1402c02a0]
mov rdx, rdi
mov rcx, rax
mov r8, qword [r8 + r10*8 + 0x18]
call sym.SystemInformer.exe_PhSetGraphText
nop
jmp 0x14010ae49
xor r14d, r14d
mov qword [rdi + 0x78], r14
movaps xmm6, xmmword [rsp + 0x6f0]
movaps xmm7, xmmword [rsp + 0x6e0]
mov rcx, qword [rbp + 0x5d0]
xor rcx, rsp
call fcn.1401e4a20
add rsp, 0x708
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret