Function at 0x14010dc30
Capabilities:
Access peb ldr_data
Encode data using xor
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x350
mov rax, qword [0x140188020]
xor rax, rsp
mov qword [rsp + 0x340], rax
mov rdi, r8
mov qword [rsp + 0x28], r8
mov qword [rsp + 0xb0], rdx
mov qword [rsp + 0x1b0], r8
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov rax, qword [0x140196880]
mov qword [rsp + 0xb8], rax
mov cl, 0x6d
mov byte [rsp + 0x30], cl
mov word [rsp + 0x60], 0x4731
xor eax, eax
mov byte [rsp + 0x62], al
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010dcb9
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010dcc8
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r12d
lea r9, [rsp + 0x34]
mov r10d, 8
nop dword [rax]
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x14010dce0
lea r9d, [r10 + 2]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x60]
call fcn.14011c9b0
mov qword [rsp + 0x58], rax
movsx ebx, byte [rsp + 0x30]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010dd5d
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010dd6c
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r12d
lea r9, [rsp + 0x34]
mov r10d, 8
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x14010dd81
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x34]
mov rdx, qword [rsp + 0x58]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14010ddec
mov r8, r12
jmp 0x14010ddfd
movzx eax, byte [rsp + 0x30]
xor byte [r8], al
xor byte [r8 + 1], al
mov byte [r8 + 2], 0
mov rdx, rdi
lea rcx, [rsp + 0x1b8]
call fcn.14001ed60
nop
lea r13, [rsp + 0x1b8]
cmp qword [rsp + 0x1d0], 0x10
cmovae r13, qword [rsp + 0x1b8]
lea rdx, str.FindFirstFileA
lea rcx, [rsp + 0x170]
call fcn.14010ef70
mov rcx, rax
call fcn.14001d920
mov r11, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r14, qword [rcx]
mov r15d, 0x5a4d
cmp qword [r14 + 0x60], 0
je 0x14010df3c
nop dword [rax]
mov rdi, qword [r14 + 0x30]
mov r14, qword [r14]
test rdi, rdi
je 0x14010df2e
cmp word [rdi], r15w
jne 0x14010df39
movsxd rax, dword [rdi + 0x3c]
cmp dword [rax + rdi], 0x4550
jne 0x14010df39
mov ecx, dword [rax + rdi + 0x88]
test ecx, ecx
je 0x14010df39
lea rax, [rdi + rcx]
mov r15d, dword [rax + 0x1c]
add r15, rdi
mov r10d, dword [rax + 0x20]
add r10, rdi
mov r12d, dword [rax + 0x24]
add r12, rdi
xor ebx, ebx
mov esi, dword [rax + 0x18]
test esi, esi
je 0x14010df28
nop dword [rax]
xor r8b, r8b
mov r9d, dword [r10]
add r9, rdi
cmp byte [r9], r8b
je 0x14010df1e
mov rcx, r9
mov rax, rcx
sub rax, r9
movzx edx, byte [rax + r11]
test dl, dl
je 0x14010df19
cmp byte [rcx], dl
jne 0x14010df1e
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14010dee1
movsxd rax, ebx
movzx ecx, word [r12 + rax*2]
mov eax, dword [r15 + rcx*4]
add rax, rdi
xor r12d, r12d
mov r15d, 0x5a4d
jmp 0x14010df3f
test r8b, r8b
jne 0x14010deff
inc ebx
add r10, 4
cmp ebx, esi
jb 0x14010ded0
mov r15d, 0x5a4d
cmp qword [r14 + 0x60], 0
jne 0x14010de70
xor r12d, r12d
mov rax, r12
lea rdx, [rsp + 0x200]
mov rcx, r13
call rax
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x14010df80
lea rcx, [rsp + 0x1b8]
call fcn.14001e820
nop
mov rcx, qword [rsp + 0x28]
call fcn.14001e820
xor al, al
jmp 0x14010e9a6
mov edi, dword [rsp + 0x20]
or edi, 1
mov cl, 0x74
mov byte [rsp + 0xc0], cl
mov word [rsp + 0xf0], 0x5a
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010dfb5
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010dfc4
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r12d
lea r9, [rsp + 0xc4]
mov r10d, 8
nop dword [rax]
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x14010dfe0
lea r9d, [r10 + 1]
lea r8, [rsp + 0xc4]
lea rdx, [rsp + 0xf0]
call fcn.14011c9b0
mov qword [rsp + 0xe8], rax
movsx ebx, byte [rsp + 0xc0]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010e069
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010e078
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r12d
lea r9, [rsp + 0xc4]
mov r10d, 8
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x14010e090
mov r9d, dword [0x140196874]
lea r8, [rsp + 0xc4]
mov rdx, qword [rsp + 0xe8]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14010e101
mov r8, r12
jmp 0x14010e111
movzx eax, byte [rsp + 0xc0]
xor byte [r8], al
mov byte [r8 + 1], 0
lea rax, [rsp + 0x22c]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14010e133
inc rax
test ecx, ecx
jne 0x14010e120
test edx, edx
je 0x14010e5a3
or edi, 2
mov cl, 0x7c
mov byte [rsp + 0x30], cl
mov word [rsp + 0x60], 0x5252
xor eax, eax
mov byte [rsp + 0x62], al
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010e16c
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010e17b
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r12d
lea r9, [rsp + 0x34]
mov r10d, 8
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x14010e190
lea r9d, [r10 + 2]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x60]
call fcn.14011c9b0
mov qword [rsp + 0x58], rax
movsx ebx, byte [rsp + 0x30]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010e20d
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010e21c
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r12d
lea r9, [rsp + 0x34]
mov r10d, 8
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x14010e231
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x34]
mov rdx, qword [rsp + 0x58]
call fcn.14011cb00
mov rdx, rax
test rax, rax
jne 0x14010e29c
mov rdx, r12
jmp 0x14010e2aa
movzx eax, byte [rsp + 0x30]
xor byte [rdx], al
xor byte [rdx + 1], al
mov byte [rdx + 2], 0
lea rax, [rsp + 0x22c]
sub rdx, rax
nop word [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x14010e2d4
inc rax
test ecx, ecx
jne 0x14010e2c0
test r8d, r8d
je 0x14010e5a3
and edi, 0xfffffffc
lea rdx, [0x14015ff58]
lea rcx, [rsp + 0x70]
call fcn.14010f0d0
mov rcx, rax
call fcn.14001d3a0
mov r8, rax
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0xc0]
call fcn.14001ed60
nop
lea rdx, [rsp + 0x22c]
mov rcx, rax
call fcn.14001e570
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1d8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1e8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 4
mov dword [rsp + 0x20], edi
lea rcx, [rsp + 0xc0]
call fcn.14001e820
test byte [rsp + 0x200], 0x10
je 0x14010e594
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0xf8], r12
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], 0xf
lea rax, [rsp + 0x22c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14010e3a2
lea rdx, [rsp + 0x22c]
lea rcx, [rsp + 0xf8]
call fcn.14001ea30
nop
mov al, 0x6f
mov byte [rsp + 0x120], al
movdqa xmm0, xmmword [0x140174730]
movdqu xmmword [rsp + 0x150], xmm0
movsx ebx, al
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010e3f7
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010e406
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r12d
lea r9, [rsp + 0x124]
mov r10d, 8
nop
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x14010e420
lea r9d, [r10 + 0xf]
lea r8, [rsp + 0x124]
lea rdx, [rsp + 0x150]
call fcn.14011c9b0
mov qword [rsp + 0x148], rax
movsx ebx, byte [rsp + 0x120]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010e4a9
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010e4b8
mov edx, 0x9d
call fcn.140128630
imul r10d, ebx, 0x5bd1e995
mov edx, r12d
lea r8, [rsp + 0x124]
mov r9d, 8
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x14010e4d0
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x124]
mov rdx, qword [rsp + 0x148]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14010e53d
mov r8, r12
jmp 0x14010e560
mov ecx, 0xf
movzx edx, byte [rsp + 0x120]
nop word [rax + rax]
xor byte [rax], dl
lea rax, [rax + 1]
sub rcx, 1
jne 0x14010e550
mov byte [r8 + 0xf], cl
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0x30]
call fcn.14001ed60
nop
lea r9, [rsp + 0xf8]
mov r8, rax
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
call fcn.14010c9a0
nop
lea rcx, [rsp + 0x1d8]
call fcn.14001e820
jmp 0x14010e5b6
mov ecx, edi
mov eax, edi
and edi, 0xfffffffd
and al, 2
cmove edi, ecx
and edi, 0xfffffffe
mov dword [rsp + 0x20], edi
mov cl, 0x70
mov byte [rsp + 0x70], cl
mov dword [rsp + 0xa0], 0x141e1936
mov dword [rsp + 0xa4], 0x408153e
mov dword [rsp + 0xa8], 0x151c1936
mov word [rsp + 0xac], 0x31
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010e602
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010e611
mov edx, 0x9d
call fcn.140128630
imul r10d, ebx, 0x5bd1e995
mov edx, r12d
lea r8, [rsp + 0x74]
mov r9d, 8
nop word [rax + rax]
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x14010e630
mov r9d, 0xd
lea r8, [rsp + 0x74]
lea rdx, [rsp + 0xa0]
call fcn.14011c9b0
mov qword [rsp + 0x98], rax
movsx ebx, byte [rsp + 0x70]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14010e6b1
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14010e6c0
mov edx, 0x9d
call fcn.140128630
imul r10d, ebx, 0x5bd1e995
mov edx, r12d
lea r8, [rsp + 0x74]
mov r9d, 8
nop word [rax + rax]
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x14010e6e0
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x74]
mov rdx, qword [rsp + 0x98]
call fcn.14011cb00
mov rsi, rax
test rax, rax
jne 0x14010e74a
mov rsi, r12
jmp 0x14010e763
mov ecx, 0xd
movzx edx, byte [rsp + 0x70]
xor byte [rax], dl
lea rax, [rax + 1]
sub rcx, 1
jne 0x14010e754
mov byte [rsi + 0xd], cl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x14010e851
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14010e83a
cmp word [r11], r15w
jne 0x14010e84c
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14010e84c
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14010e84c
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, r12d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14010e83a
nop
xor dl, dl
mov eax, dword [r9]
add rax, r11
cmp byte [rax], dl
je 0x14010e82e
mov r8, rsi
sub r8, rax
movzx ecx, byte [rax + r8]
test cl, cl
je 0x14010e82a
cmp byte [rax], cl
jne 0x14010e82e
mov dl, 1
inc rax
cmp byte [rax], 0
jne 0x14010e802
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x14010e854
test dl, dl
jne 0x14010e819
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14010e7f0
cmp qword [rdi + 0x60], 0
je 0x14010e851
mov r15d, 0x5a4d
jmp 0x14010e790
mov rax, r12
jmp 0x14010e85a
mov rax, r12
mov r15d, 0x5a4d
lea rdx, [rsp + 0x200]
mov rcx, r13
call rax
test eax, eax
jne 0x14010df80
lea rdx, [0x14015ff70]
lea rcx, [rsp + 0x120]
call fcn.140026800
mov rcx, rax
call fcn.14001c8f0
mov r10, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r14, qword [rcx]
cmp qword [r14 + 0x60], 0
je 0x14010e974
nop dword [rax]
mov rdi, qword [r14 + 0x30]
mov r14, qword [r14]
test rdi, rdi
je 0x14010e95f
cmp word [rdi], r15w
jne 0x14010e971
movsxd rax, dword [rdi + 0x3c]
cmp dword [rax + rdi], 0x4550
jne 0x14010e971
mov ecx, dword [rax + rdi + 0x88]
test ecx, ecx
je 0x14010e971
lea rax, [rdi + rcx]
mov r15d, dword [rax + 0x1c]
add r15, rdi
mov r11d, dword [rax + 0x20]
add r11, rdi
mov r12d, dword [rax + 0x24]
add r12, rdi
xor ebx, ebx
mov esi, dword [rax + 0x18]
test esi, esi
je 0x14010e95f
nop dword [rax]
xor r9b, r9b
mov r8d, dword [r11]
add r8, rdi
cmp byte [r8], r9b
je 0x14010e955
mov rcx, r8
mov rax, rcx
sub rax, r8
movzx edx, byte [rax + r10]
test dl, dl
je 0x14010e950
cmp byte [rcx], dl
jne 0x14010e955
mov r9b, 1
inc rcx
cmp byte [rcx], 0
jne 0x14010e921
movsxd rax, ebx
movzx ecx, word [r12 + rax*2]
mov r12d, dword [r15 + rcx*4]
add r12, rdi
jmp 0x14010e974
test r9b, r9b
jne 0x14010e93f
inc ebx
add r11, 4
cmp ebx, esi
jb 0x14010e910
cmp qword [r14 + 0x60], 0
je 0x14010e971
mov r15d, 0x5a4d
jmp 0x14010e8b0
xor r12d, r12d
mov rcx, r13
call r12
nop
lea rcx, [rsp + 0x1b8]
call fcn.14001e820
nop
mov rcx, qword [rsp + 0x28]
call fcn.14001e820
mov al, 1
jmp 0x14010e9a6
mov rcx, qword [rsp + 0x340]
xor rcx, rsp
call fcn.14012b8f0
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret