Function at 0x1400b0ab0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov rax, qword [0x1401abc78]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov r15, rcx
mov qword [rbp - 0x58], rcx
mov ecx, 0x10
call fcn.1400de930
mov r14, rax
mov qword [rbp - 0x60], rax
lea rdx, [r15 + 0x48]
mov rcx, rax
call qword [0x1400ee5b8]
lea rax, vtable.QFile.0
mov qword [r14], rax
mov qword [rbp - 0x28], r14
test byte [r15 + 0x98], 1
je 0x1400b177c
mov rax, qword [0x140161760]
mov edx, 1
mov rcx, r14
call rax
test al, al
je 0x1400b177c
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x78]
test rax, rax
je 0x1400b177c
xor eax, eax
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], eax
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x78]
mov rax, qword [r14]
mov rbx, qword [rax + 0x80]
mov rcx, r14
call qword [rax + 0x78]
lea rdx, [rax - 0xc]
mov rcx, r14
call rbx
mov r8d, 0xc
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [0x1400ee650]
mov ecx, dword [rsp + 0x60]
mov edx, ecx
and edx, 0xff0000
mov eax, ecx
shr eax, 0x10
or edx, eax
shr edx, 8
mov eax, ecx
and eax, 0xff00
shl ecx, 0x10
or eax, ecx
shl eax, 8
or edx, eax
xor r12d, r12d
cmp edx, 0x4e455235
jne 0x1400b0c5b
mov rdx, qword [rsp + 0x64]
mov rbx, rdx
movabs rax, 0xff000000000000
and rbx, rax
mov rax, rdx
shr rax, 0x10
or rbx, rax
shr rbx, 0x10
mov rax, rdx
movabs rcx, 0xff0000000000
and rax, rcx
or rbx, rax
shr rbx, 0x10
mov rax, rdx
movabs rcx, 0xff00000000
and rax, rcx
or rbx, rax
shr rbx, 8
shl rdx, 0x10
mov ecx, dword [rsp + 0x64]
mov eax, ecx
and eax, 0xff00
or rdx, rax
shl rdx, 0x10
mov eax, ecx
and eax, 0xff0000
or rdx, rax
shl rdx, 0x10
mov eax, ecx
mov ecx, 0xff000000
and rax, rcx
or rdx, rax
shl rdx, 8
or rbx, rdx
lea r13d, [r12 + 1]
jmp 0x1400b0cc4
mov ecx, dword [rsp + 0x64]
mov edx, ecx
and edx, 0xff0000
mov eax, ecx
shr eax, 0x10
or edx, eax
shr edx, 8
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shl eax, 8
or edx, eax
cmp edx, 0x4e45524f
jne 0x1400b173b
mov rbx, qword [rsp + 0x68]
and ebx, 0xff0000
mov ecx, dword [rsp + 0x68]
mov eax, ecx
shr rax, 0x10
or rbx, rax
shr rbx, 8
mov eax, ecx
and eax, 0xff00
shl eax, 8
or rbx, rax
shl ecx, 0x18
movsxd rax, ecx
or rbx, rax
mov r13d, r12d
mov dword [rsp + 0x48], r13d
lea edi, [r13*4 + 8]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x78]
sub rax, rdi
cmp rbx, rax
jge 0x1400b16fa
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x78]
sub rax, rbx
cmp rax, 0x100000
jg 0x1400b16fa
mov rax, qword [r14]
mov rdx, rbx
mov rcx, r14
call qword [rax + pe_nt_image_headers64]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x78]
sub rax, rdi
sub rax, rbx
mov r8, rax
lea rdx, [rbp - 0x40]
mov rcx, r14
call qword [0x1400ee648]
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
lea rcx, [rsp + 0x30]
call fcn.140029d60
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
test rsi, rsi
jle 0x1400b0d71
lea r8, [rsi*4]
lea rcx, [rbx + 4]
mov rdx, rbx
call fcn.1400dfc4a
inc rsi
mov qword [rsp + 0x40], rsi
mov dword [rbx], 0x43554558
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x1400b0e90
mov eax, dword [rax]
mov rdi, qword [rsp + 0x30]
cmp eax, 1
jg 0x1400b0dfd
lea r8, [rdi + 0x17]
and r8, 0xfffffffffffffff8
mov rdx, qword [rsp + 0x38]
mov rcx, rdx
sub rcx, r8
sar rcx, 2
mov rax, qword [rdi + 8]
mov rbx, qword [rsp + 0x40]
sub rax, rbx
cmp rax, rcx
je 0x1400b0dd0
mov dword [rdx + rbx*4], 0x43554553
inc rbx
jmp 0x1400b0ee0
test rbx, rbx
jne 0x1400b0dfd
mov rax, rdx
sub rax, r8
sar rax, 2
test rax, rax
je 0x1400b0dfd
lea rax, [rdx - 4]
mov dword [rax], 0x43554553
mov qword [rsp + 0x38], rax
mov ebx, 1
jmp 0x1400b0ee0
mov eax, dword [rdi]
cmp eax, 1
jg 0x1400b0e90
mov rdi, qword [rsp + 0x30]
lea r9, [rdi + 0x17]
and r9, 0xfffffffffffffff8
mov rdx, qword [rsp + 0x38]
mov rcx, rdx
sub rcx, r9
sar rcx, 2
mov r10, qword [rdi + 8]
mov rax, r10
sub rax, rcx
mov rbx, qword [rsp + 0x40]
sub rax, rbx
cmp rax, 1
jge 0x1400b0eb2
mov r8, rdx
sub r8, r9
sar r8, 2
cmp r8, 1
jl 0x1400b0e90
lea rcx, [r10 + r10]
lea rax, [rbx + rbx*2]
cmp rax, rcx
jge 0x1400b0e90
lea rax, [r8*4]
mov r12, rdx
sub r12, rax
test rbx, rbx
je 0x1400b0e86
cmp rdx, r12
je 0x1400b0e86
test r12, r12
je 0x1400b0e86
lea r8, [rbx*4]
mov rcx, r12
call fcn.1400dfc4a
mov rdx, r12
mov qword [rsp + 0x38], rdx
jmp 0x1400b0eb2
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
lea rcx, [rsp + 0x30]
call fcn.140029d60
mov rbx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
lea r12, [rdx + rsi*4]
cmp rsi, rbx
jge 0x1400b0ed2
mov r8, rbx
sub r8, rsi
shl r8, 2
lea rcx, [r12 + 4]
mov rdx, r12
call fcn.1400dfc4a
inc rbx
mov dword [r12], 0x43554553
xor r12d, r12d
mov qword [rsp + 0x40], rbx
test rdi, rdi
je 0x1400b1001
mov eax, dword [rdi]
mov r10, qword [rsp + 0x30]
cmp eax, 1
jg 0x1400b0f68
lea r9, [r10 + 0x17]
and r9, 0xfffffffffffffff8
mov r8, qword [rsp + 0x38]
mov rcx, r8
sub rcx, r9
sar rcx, 2
mov rax, qword [r10 + 8]
mov rdx, qword [rsp + 0x40]
sub rax, rdx
cmp rax, rcx
je 0x1400b0f37
mov dword [r8 + rdx*4], 0x44414f58
inc rdx
mov qword [rsp + 0x40], rdx
jmp 0x1400b104b
test rdx, rdx
jne 0x1400b0f68
mov rax, r8
sub rax, r9
sar rax, 2
test rax, rax
je 0x1400b0f68
lea rax, [r8 - 4]
mov dword [rax], 0x44414f58
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 1
jmp 0x1400b104b
mov eax, dword [r10]
cmp eax, 1
jg 0x1400b1001
mov rax, qword [rsp + 0x30]
lea r9, [rax + 0x17]
and r9, 0xfffffffffffffff8
mov rdx, qword [rsp + 0x38]
mov rcx, rdx
sub rcx, r9
sar rcx, 2
mov r10, qword [rax + 8]
mov rax, r10
mov rdi, qword [rsp + 0x40]
sub rax, rdi
sub rax, rcx
cmp rax, 1
jge 0x1400b101e
mov r8, rdx
sub r8, r9
sar r8, 2
cmp r8, 1
jl 0x1400b1001
lea rcx, [rdi + rdi*2]
lea rax, [r10 + r10]
cmp rcx, rax
jge 0x1400b1001
lea rax, [r8*4]
mov rsi, rdx
sub rsi, rax
test rdi, rdi
je 0x1400b0ff7
cmp rdx, rsi
je 0x1400b0ff7
test rdx, rdx
je 0x1400b0ff7
test rsi, rsi
je 0x1400b0ff7
lea r8, [rdi*4]
mov rcx, rsi
call fcn.1400dfc4a
mov rdx, rsi
mov qword [rsp + 0x38], rdx
jmp 0x1400b101e
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
lea rcx, [rsp + 0x30]
call fcn.140029d60
mov rdi, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
lea rsi, [rdx + rbx*4]
cmp rbx, rdi
jge 0x1400b103d
mov r8, rdi
sub r8, rbx
shl r8, 2
lea rcx, [rsi + 4]
mov rdx, rsi
call fcn.1400dfc4a
inc rdi
mov qword [rsp + 0x40], rdi
mov dword [rsi], 0x44414f58
mov dword [rsp + 0x70], 0x44414f49
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140027560
mov dword [rsp + 0x78], 0x43445458
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x30]
call fcn.140027560
mov dword [rbp - 0x80], 0x45544e46
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x30]
call fcn.140027560
mov dword [rbp - 0x78], 0x45544e32
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x30]
call fcn.140027560
mov dword [rbp - 0x70], 0x53494e46
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x30]
call fcn.140027560
mov dword [rbp - 0x68], 0x4d545950
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140027560
mov dword [rsp + 0x50], 0x454e4421
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140027560
lea rax, [fcn.140009d80]
mov qword [rsp + 0x20], rax
lea r9, [0x1400b0810]
mov edx, 0x18
lea r8d, [rdx - 0xe]
lea rcx, [rbp + 0x90]
call fcn.1400ded30
nop
lea rcx, [rbp - 0x40]
call qword [0x1400ee8d0]
mov rdi, rax
mov qword [rsp + 0x58], rax
mov esi, r12d
lea rcx, [rbp - 0x40]
call qword [0x1400ee8a0]
mov r12, 0xffffffffffffffff
test rax, rax
jle 0x1400b12a2
xor ebx, ebx
mov r13, qword [rsp + 0x38]
mov r14, r12
mov r15, qword [rsp + 0x40]
nop dword [rax + rax]
lea r12, [rbx + rdi]
mov ecx, dword [r12]
bswap ecx
test r15, r15
jle 0x1400b1183
lea rax, [r15*4]
add rax, r13
mov rbx, r13
cmp r13, rax
je 0x1400b1183
cmp dword [rbx], ecx
je 0x1400b12c0
add rbx, 4
cmp rbx, rax
jne 0x1400b1172
mov rbx, r14
cmp ebx, 0xffffffff
jne 0x1400b1212
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x30]
call qword [0x1400ed300]
lea rdx, [rbp - 0x48]
mov rcx, rax
call qword [0x1400ee928]
nop
lea rdx, str.Unknown_chunck_in_nrg.
mov rcx, rax
call qword [0x1400eebd8]
mov rdi, rax
lea r8d, [rbx + 5]
mov rdx, r12
lea rcx, [rbp - 8]
call qword [0x1400ee0a0]
nop
xor r8d, r8d
lea rdx, [rbp - 0x20]
mov rcx, rax
call qword [0x1400edd58]
nop
mov rdx, rax
mov rcx, rdi
call qword [0x1400eebc8]
nop
lea rcx, [rbp - 0x20]
call qword [0x1400eec98]
nop
lea rcx, [rbp - 8]
call qword [0x1400eec98]
nop
lea rcx, [rbp - 0x48]
call qword [0x1400eebe0]
mov ecx, dword [r12 + 4]
mov edi, ecx
and edi, 0xff0000
mov eax, ecx
shr eax, 0x10
or edi, eax
shr edi, 8
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shl eax, 8
or edi, eax
cmp ebx, 0xffffffff
je 0x1400b1269
movsxd rax, ebx
lea rcx, [rax + rax*2]
lea rdx, [rbp + 0x90]
lea rcx, [rdx + rcx*8]
lea eax, [rsi + 8]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x4c], edi
lea rdx, [rbp - 0x50]
call fcn.1400b0640
cmp ebx, 9
je 0x1400b1289
add edi, 8
add esi, edi
movsxd rbx, esi
lea rcx, [rbp - 0x40]
call qword [0x1400ee8a0]
cmp rbx, rax
mov rdi, qword [rsp + 0x58]
jl 0x1400b1150
mov r14, qword [rbp - 0x60]
mov r15, qword [rbp - 0x58]
mov r12, 0xffffffffffffffff
mov r13d, dword [rsp + 0x48]
mov rdi, qword [rsp + 0x58]
test r13d, r13d
jne 0x1400b12d5
mov rax, qword [rbp + 0xe8]
test rax, rax
je 0x1400b12cc
cmp rax, qword [rbp + 0xb8]
jne 0x1400b12cc
mov cl, 1
jmp 0x1400b130c
sub rbx, r13
sar rbx, 2
jmp 0x1400b1186
mov rax, qword [rbp + 0x118]
jmp 0x1400b1301
cmp r13d, 1
jne 0x1400b1666
mov rax, qword [rbp + 0xd0]
test rax, rax
je 0x1400b12fa
cmp rax, qword [rbp + 0xa0]
jne 0x1400b12fa
movzx ecx, r13b
jmp 0x1400b130c
mov rax, qword [rbp + 0x130]
test rax, rax
je 0x1400b1666
xor cl, cl
test eax, eax
je 0x1400b1666
cmp eax, 1
jle 0x1400b1353
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x50]
call qword [0x1400ed300]
lea rdx, [rbp - 0x58]
mov rcx, rax
call qword [0x1400ee928]
nop
lea rdx, str.Multi_session_is_not_supported.
mov rcx, rax
call qword [0x1400eebd8]
nop
lea rcx, [rbp - 0x58]
jmp 0x1400b169b
test cl, cl
je 0x1400b1511
test r13d, r13d
jne 0x1400b146c
xor edx, edx
lea rcx, [rbp + 0xd8]
call fcn.140078430
movsxd r11, dword [rax]
add r11, rdi
mov ecx, dword [r11 + 0x20]
mov r8d, ecx
and r8d, 0xff0000
mov eax, ecx
shr eax, 0x10
or r8d, eax
shr r8d, 8
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shl eax, 8
or r8d, eax
mov dword [r15 + 0x14], r8d
mov eax, dword [r11 + 0x2c]
mov edx, eax
mov r10d, eax
shl r10d, 0x10
and eax, 0xff00
or r10d, eax
shl r10d, 8
mov eax, edx
and eax, 0xff0000
shr rdx, 0x10
or rax, rdx
shr rax, 8
or r10, rax
mov qword [r15 + 0x18], r10
mov eax, dword [r11 + 0x30]
mov edx, eax
movsxd r9, r8d
mov ecx, eax
shl ecx, 0x10
and eax, 0xff00
or eax, ecx
shl eax, 8
mov ecx, edx
and ecx, 0xff0000
shr rdx, 0x10
or rcx, rdx
shr rcx, 8
or rax, rcx
sub rax, r10
cqo
idiv r9
mov qword [r15 + 0x20], rax
mov eax, dword [r11 + 0x28]
mov r8d, eax
mov edx, eax
shl edx, 0x10
and eax, 0xff00
or edx, eax
shl edx, 8
mov ecx, r8d
and ecx, 0xff0000
shr r8, 0x10
or rcx, r8
shr rcx, 8
or rdx, rcx
sub r10, rdx
mov rax, r10
cqo
idiv r9
mov dword [r15 + 0x28], eax
movzx ecx, byte [r11 + 0x24]
call fcn.1400b0a80
mov dword [r15 + 0x10], eax
mov r8d, eax
test eax, eax
setne bl
jmp 0x1400b16a3
cmp r13d, 1
jne 0x1400b1502
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.140078430
movsxd rsi, dword [rax]
add rsi, rdi
mov ecx, dword [rsi + 0x20]
mov ebx, ecx
and ebx, 0xff0000
mov eax, ecx
shr eax, 0x10
or ebx, eax
shr ebx, 8
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shl eax, 8
or ebx, eax
mov dword [r15 + 0x14], ebx
mov rcx, qword [rsi + 0x30]
call fcn.1400b0780
mov rdi, rax
mov qword [r15 + 0x18], rax
movsxd rbx, ebx
mov rcx, qword [rsi + 0x38]
call fcn.1400b0780
sub rax, rdi
xor edx, edx
div rbx
mov qword [r15 + 0x20], rax
mov rcx, qword [rsi + 0x28]
call fcn.1400b0780
sub rdi, rax
xor edx, edx
mov rax, rdi
div rbx
mov dword [r15 + 0x28], eax
movzx ecx, byte [rsi + 0x24]
call fcn.1400b0a80
mov dword [r15 + 0x10], eax
mov r8d, dword [r15 + 0x10]
test r8d, r8d
setne bl
jmp 0x1400b16a3
test r13d, r13d
jne 0x1400b15be
xor edx, edx
lea rcx, [rbp + 0x108]
call fcn.140078430
movsxd r9, dword [rax]
mov eax, dword [r9 + rdi]
mov r8d, eax
mov edx, eax
shl edx, 0x10
and eax, 0xff00
or edx, eax
shl edx, 8
mov eax, r8d
and eax, 0xff0000
shr r8, 0x10
or rax, r8
shr rax, 8
or rdx, rax
mov qword [r15 + 0x18], rdx
mov edx, dword [r9 + rdi + 8]
mov ecx, edx
and ecx, 0xff0000
mov eax, edx
shr eax, 0x10
or ecx, eax
shr ecx, 8
mov eax, edx
shl eax, 0x10
and edx, 0xff00
or eax, edx
shl eax, 8
or ecx, eax
call fcn.1400b0a80
mov dword [r15 + 0x10], eax
mov eax, dword [r9 + rdi + 4]
mov edx, eax
mov r9d, eax
shl r9d, 0x10
and eax, 0xff00
or r9d, eax
shl r9d, 8
mov eax, edx
and eax, 0xff0000
shr rdx, 0x10
or rax, rdx
shr rax, 8
or r9, rax
jmp 0x1400b1625
cmp r13d, 1
jne 0x1400b1622
xor edx, edx
lea rcx, [rbp + 0x120]
call fcn.140078430
movsxd rbx, dword [rax]
mov rcx, qword [rbx + rdi]
call fcn.1400b0780
mov qword [r15 + 0x18], rax
mov edx, dword [rbx + rdi + 0x10]
mov ecx, edx
and ecx, 0xff0000
mov eax, edx
shr eax, 0x10
or ecx, eax
shr ecx, 8
mov eax, edx
shl eax, 0x10
and edx, 0xff00
or eax, edx
shl eax, 8
or ecx, eax
call fcn.1400b0a80
mov dword [r15 + 0x10], eax
mov rcx, qword [rbx + rdi + 8]
call fcn.1400b0780
mov r9, rax
jmp 0x1400b1625
xor r9d, r9d
mov r8d, dword [r15 + 0x10]
cmp r8d, 1
jne 0x1400b1639
mov dword [r15 + 0x14], 0x800
jmp 0x1400b1647
cmp r8d, 2
jne 0x1400b1647
mov dword [r15 + 0x14], 0x920
movsxd rax, dword [r15 + 0x14]
test eax, eax
je 0x1400b165e
mov rcx, rax
mov rax, r9
cqo
idiv rcx
mov qword [r15 + 0x20], rax
test r8d, r8d
setne bl
jmp 0x1400b16a3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call qword [0x1400ed300]
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [0x1400ee928]
nop
lea rdx, str.No_sessions_found_in_nrg.
mov rcx, rax
call qword [0x1400eebd8]
nop
lea rcx, [rbp - 0x60]
call qword [0x1400eebe0]
xor bl, bl
lea r9, [fcn.140009d80]
mov edx, 0x18
lea r8d, [rdx - 0xe]
lea rcx, [rbp + 0x90]
call fcn.1400deda0
nop
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x1400b16eb
lock xadd dword [rax], r12d
cmp r12d, 1
jne 0x1400b16eb
lea edx, [r12 + 3]
lea r8d, [r12 + 7]
mov rcx, qword [rsp + 0x30]
call qword [0x1400eecb8]
nop
lea rcx, [rbp - 0x40]
call qword [0x1400eec98]
jmp 0x1400b179e
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x10]
call qword [0x1400ed300]
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [0x1400ee928]
nop
lea rdx, str.Invalid_info_length_in_nrg_file.
mov rcx, rax
call qword [0x1400eebd8]
nop
lea rcx, [rsp + 0x48]
call qword [0x1400eebe0]
xor bl, bl
jmp 0x1400b179e
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x10]
call qword [0x1400ed300]
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [0x1400ee928]
nop
lea rdx, str.Not_a_valid_nrg_file.
mov rcx, rax
call qword [0x1400eebd8]
nop
lea rcx, [rsp + 0x48]
call qword [0x1400eebe0]
xor bl, bl
jmp 0x1400b179e
mov dword [r15 + 0x10], 1
mov dword [r15 + 0x14], 0x800
mov qword [r15 + 0x20], 1
mov dword [r15 + 0x28], 0x96
mov bl, 1
mov r8, qword [r14]
mov edx, 1
mov rcx, r14
call qword [r8 + 0x18]
movzx eax, bl
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.1400dea10
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret