Function at 0x140109fc0
Capabilities:
Get system information on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x608]
sub rsp, 0x708
mov rax, qword [0x1402bf040]
xor rax, rsp
mov qword [rbp + 0x5d0], rax
mov esi, ecx
mov r15, rdx
mov ecx, dword [rdx + 0x10]
sub ecx, 0x947
je 0x14010a8c5
nop dword [rax]
sub ecx, 1
je 0x14010a056
cmp ecx, 1
jne 0x14010adb9
cmp dword [rdx + 0x20], 0x203
jne 0x14010adb9
mov ecx, dword ds:[rdx + 0x18]
cmp ecx, dword [rdx + 0x1c]
jae 0x14010adb9
call fcn.14010b820
mov rbx, rax
test rax, rax
je 0x14010adb9
mov rcx, qword [0x1402cd638]
mov rdx, rax
call sym.SystemInformer.exe_PhShowProcessRecordDialog
mov rcx, rbx
call sym.SystemInformer.exe_PhDereferenceProcessRecord
jmp 0x14010adb9
mov r9d, dword ds:[rdx + 0x18]
cmp r9d, dword [rdx + 0x1c]
jae 0x14010adb9
cmp esi, 0xffffffff
jne 0x14010a259
cmp dword [0x1402cd6a0], r9d
nop word [rax + rax]
je 0x14010a245
mov edx, dword [0x1402cf6ac]
lea rcx, str.___K:
mov eax, dword [0x1402cf6a4]
add edx, r9d
and rdx, rax
mov rax, qword [0x1402cf6b0]
movss xmm1, dword [rax + rdx*4]
mov edx, dword [0x1402cf76c]
mov eax, dword [0x1402cf764]
add edx, r9d
and rdx, rax
mov rax, qword [0x1402cf770]
cvtps2pd xmm2, xmm1
movss xmm0, dword [rax + rdx*4]
movzx eax, word [0x1402c72dc]
movaps xmm1, xmm2
cvtps2pd xmm3, xmm0
mov qword [rbp + 0x388], rcx
lea rcx, str.___U:
mov word [rbp + 0x354], ax
mov word [rbp + 0x394], ax
mov word [rbp + 0x3d4], ax
lea rax, [0x14026f724]
mov qword [rbp + 0x3c8], rcx
mov ecx, r9d
movsd xmm0, qword [0x1402907c0]
addsd xmm1, xmm3
mulsd xmm2, xmm0
mov dword [rbp + 0x350], 0x4b
mulsd xmm3, xmm0
mov dword [rbp + 0x370], 1
mov qword [rbp + 0x380], 0xc
mulsd xmm1, xmm0
mov dword [rbp + 0x390], 0x4b
movsd qword [rbp + 0x3a0], xmm2
movsd qword [rbp + 0x3e0], xmm3
mov dword [rbp + 0x3b0], 1
movsd qword [rbp + 0x360], xmm1
mov qword [rbp + 0x3c0], 0xc
mov dword [rbp + 0x3d0], 0x4b
mov dword [rbp + 0x3f0], 1
mov qword [rbp + 0x400], 4
mov qword [rbp + 0x408], rax
call fcn.14010b8a0
mov rcx, rax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov edx, dword ds:[r15 + 0x18]
xor r14d, r14d
xor ecx, ecx
movups xmm0, xmmword [rax]
mov eax, 0xa
mov dword [rbp + 0x410], 1
mov dword [rbp + 0x430], r14d
movaps xmmword [rbp + 0x420], xmm0
mov word [rbp + 0x440], ax
call sym.SystemInformer.exe_PhGetStatisticsTimeString
mov rcx, rax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov edx, 9
lea rcx, [rbp + 0x350]
mov r8d, 0xa0
movups xmm0, xmmword [rax]
mov dword [rbp + 0x450], 1
movaps xmmword [rbp + 0x460], xmm0
call sym.SystemInformer.exe_PhFormat
mov rcx, qword [0x1402cd698]
mov qword [0x1402cd698], rax
test rcx, rcx
je 0x14010a245
add rcx, 0xfffffffffffffff0
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010a245
nop
call fcn.140141ca0
mov rax, qword [0x1402cd698]
movups xmm0, xmmword [rax]
movups xmmword [r15 + 0x20], xmm0
jmp 0x14010adb9
mov rax, qword [0x1402cd510]
lea rdi, [rsi + rsi*2]
shl rdi, 4
mov rbx, rsi
mov qword [rsp + 0x30], rdi
cmp dword [rdi + rax + 0x28], r9d
je 0x14010a8ac
mov rdx, qword [0x1402cf990]
lea r8, [rsi + rsi*2]
mov qword [rsp + 0x700], r13
mov qword [rsp + 0x750], r12
mov ecx, dword [rdx + r8*8 + 0xc]
mov eax, dword [rdx + r8*8 + 4]
add ecx, r9d
and rcx, rax
mov rax, qword [rdx + r8*8 + 0x10]
mov rdx, qword [0x1402cf9f8]
movss xmm1, dword [rax + rcx*4]
mov ecx, dword [rdx + r8*8 + 0xc]
mov eax, dword [rdx + r8*8 + 4]
add ecx, r9d
and rcx, rax
mov rax, qword [rdx + r8*8 + 0x10]
cvtps2pd xmm2, xmm1
movss xmm0, dword [rax + rcx*4]
lea rcx, str.___K:
movzx eax, word [0x1402c72dc]
movaps xmm1, xmm2
cvtps2pd xmm3, xmm0
mov qword [rbp + 0x388], rcx
lea rcx, str.___U:
mov word [rbp + 0x354], ax
mov word [rbp + 0x394], ax
mov word [rbp + 0x3d4], ax
lea rax, [0x14026f724]
mov qword [rbp + 0x3c8], rcx
mov ecx, r9d
movsd xmm0, qword [0x1402907c0]
addsd xmm1, xmm3
mulsd xmm2, xmm0
mov dword [rbp + 0x350], 0x4b
mulsd xmm3, xmm0
mov dword [rbp + 0x370], 1
mov qword [rbp + 0x380], 0xc
mulsd xmm1, xmm0
mov dword [rbp + 0x390], 0x4b
movsd qword [rbp + 0x3a0], xmm2
movsd qword [rbp + 0x3e0], xmm3
mov dword [rbp + 0x3b0], 1
movsd qword [rbp + 0x360], xmm1
mov qword [rbp + 0x3c0], 0xc
mov dword [rbp + 0x3d0], 0x4b
mov dword [rbp + 0x3f0], 1
mov qword [rbp + 0x400], 4
mov qword [rbp + 0x408], rax
call fcn.14010b8a0
mov rcx, rax
call sym.SystemInformer.exe_PhAutoDereferenceObject
cmp byte [0x1402ca998], 0
mov r13d, 0x10
movups xmm0, xmmword [rax]
mov eax, 0xa
mov dword [rbp + 0x410], 1
mov qword [rbp + 0x440], rax
lea rax, str._nCPU
mov qword [rbp + 0x448], rax
movaps xmmword [rbp + 0x420], xmm0
mov dword [rbp + 0x430], 1
je 0x14010a490
lea rax, str.__Core
mov dword ds:[rbp + 0x450], 8
mov edx, esi
mov qword [rbp + 0x488], rax
xor ecx, ecx
mov dword [rbp + 0x460], esi
mov dword [rbp + 0x470], 1
mov qword [rbp + 0x480], 0xe
call fcn.14010c3a0
mov dword ds:[rbp + 0x4a0], eax
mov edx, esi
lea rax, str.__Socket
mov dword [rbp + 0x490], 8
mov ecx, 3
mov qword [rbp + 0x4c8], rax
mov dword [rbp + 0x4b0], 1
mov qword [rbp + 0x4c0], 0x12
call fcn.14010c3a0
mov dword [rbp + 0x4e0], eax
jmp 0x14010a5ac
movzx r10d, word [0x1402ca99c]
xor r14d, r14d
movzx r8d, r14w
movzx ebx, r14w
cmp r14w, r10w
jae 0x14010a539
mov r9, qword [0x1402ca9a0]
mov r11d, 0xffff
nop word [rax + rax]
test r9, r9
je 0x14010a4f9
movzx ecx, r14w
cmp bx, r11w
jne 0x14010a4ef
mov rax, r9
mov rdx, r10
nop word [rax + rax]
add cx, word [rax]
lea rax, [rax + 2]
sub rdx, 1
jne 0x14010a4e0
jmp 0x14010a500
movzx eax, bx
movzx ecx, word [r9 + rax*2]
jmp 0x14010a500
movzx ecx, word [0x1402ca99a]
movzx edx, r14w
cmp r14w, cx
jae 0x14010a530
nop word [rax + rax]
movzx eax, r8w
inc r8w
cmp eax, esi
je 0x14010a616
inc dx
cmp dx, cx
jb 0x14010a510
inc bx
cmp bx, r10w
jb 0x14010a4c0
lea rax, str.__Group
mov dword [rbp + 0x450], 8
mov qword [rbp + 0x488], rax
mov dword [rbp + 0x460], esi
mov dword [rbp + 0x470], 1
mov qword [rbp + 0x480], r13
mov dword [rbp + 0x490], 8
mov dword [rbp + 0x4a0], 0xffffffff
mov dword [rbp + 0x4e0], 0xffffffff
lea rax, str.__Node
mov qword [rbp + 0x4c8], rax
mov dword [rbp + 0x4b0], 1
mov rbx, rsi
mov qword [rbp + 0x4c0], 0xe
cmp dword [0x1402bff40], 0x64
mov r12, qword [rsp + 0x750]
mov dword [rbp + 0x4d0], 8
jb 0x14010a7d3
cmp word [0x1402ca99a], 0x40
jae 0x14010a7d3
test byte [0x1402c5688], 1
jne 0x14010a6fd
lock bts qword [0x1402c5688], 0x1f
setb al
test al, al
jne 0x14010a6e6
nop dword [rax + rax]
call fcn.14010c440
lea rcx, [0x1402c5688]
call sym.SystemInformer.exe_PhfSetEvent
jmp 0x14010a6fd
movzx r12d, dx
lea rax, str.__Group
mov qword [rbp + 0x488], rax
movzx edi, r14w
movzx eax, bx
mov dword [rbp + 0x4a0], eax
mov dword [rbp + 0x450], 8
mov dword [rbp + 0x460], r12d
mov dword [rbp + 0x470], 1
mov qword [rbp + 0x480], r13
mov dword [rbp + 0x490], 8
cmp bx, 0x14
jae 0x14010a6b2
cmp dx, 0x40
jae 0x14010a6b2
xor r9d, r9d
lea rdx, [rsp + 0x40]
mov r8d, 0x408
mov ecx, 0x37
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x14010a6b2
mov rdx, qword [rsp + 0x40]
nop
movzx eax, di
add rax, rax
cmp word [rsp + rax*8 + 0x50], bx
jne 0x14010a6a8
mov rax, qword [rsp + rax*8 + 0x48]
bt rax, r12
jb 0x14010a6c5
inc di
movzx eax, di
cmp eax, edx
jbe 0x14010a690
mov rdi, qword ds:[rsp + 0x30]
mov dword [rbp + 0x4e0], r14d
jmp 0x14010a586
lea rax, str.__Node
mov qword [rbp + 0x4c8], rax
movzx eax, di
mov rdi, qword [rsp + 0x30]
mov dword [rbp + 0x4e0], eax
jmp 0x14010a594
test byte [0x1402c5688], 1
jne 0x14010a6fd
xor edx, edx
lea rcx, [0x1402c5688]
call sym.SystemInformer.exe_PhfWaitForEvent
mov rax, qword [0x1402cd570]
test rax, rax
je 0x14010a7d3
cmp esi, dword [rax]
ja 0x14010a7d3
mov rax, qword ds:[rax + 8]
mov ecx, dword [rax + rbx*8]
cmp ecx, 0x20
je 0x14010a737
cmp ecx, 0x40
jne 0x14010a7d3
lea rax, [0x1402c5658]
jmp 0x14010a73e
lea rax, [0x1402c5668]
movups xmm0, xmmword [rax]
lea rcx, [0x14023e110]
mov dword [rbp + 0x4f0], 1
mov qword [rbp + 0x508], rcx
lea rax, [0x14023bc50]
mov ecx, esi
movaps xmmword [rbp + 0x520], xmm0
mov qword [rbp + 0x500], 4
mov dword [rbp + 0x510], 1
mov dword [rbp + 0x530], 1
mov qword [rbp + 0x540], 2
mov qword [rbp + 0x548], rax
call fcn.14010c6e0
nop
test al, al
je 0x14010a82e
lea rax, str.Parked_n
mov dword [rbp + 0x550], 1
mov qword [rbp + 0x568], rax
mov r13d, 0x11
mov qword [rbp + 0x560], 0xe
jmp 0x14010a82e
lea rax, [0x14023bc50]
mov dword ds:[rbp + 0x4f0], 1
mov ecx, esi
mov qword [rbp + 0x508], rax
mov qword [rbp + 0x500], 2
mov r13d, 0xe
call fcn.14010c6e0
test al, al
je 0x14010a82e
lea rax, str.Parked_n
mov qword [rbp + 0x520], r13
mov qword [rbp + 0x528], rax
mov r13d, 0xf
mov dword [rbp + 0x510], 1
mov edx, dword ds:[r15 + 0x18]
xor ecx, ecx
mov ebx, r13d
shl rbx, 5
call sym.SystemInformer.exe_PhGetStatisticsTimeString
mov rcx, rax
call sym.SystemInformer.exe_PhAutoDereferenceObject
lea edx, [r13 + 1]
xor r8d, r8d
lea rcx, [rbp + 0x350]
movups xmm0, xmmword [rax]
mov dword [rbp + rbx + 0x350], 1
movups xmmword [rbp + rbx + 0x360], xmm0
call sym.SystemInformer.exe_PhFormat
mov rcx, qword [0x1402cd510]
mov r13, qword [rsp + 0x700]
mov rdx, qword [rdi + rcx + 0x20]
mov qword [rdi + rcx + 0x20], rax
test rdx, rdx
je 0x14010a8ac
lea rcx, [rdx - 0x10]
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010a8ac
call fcn.140141ca0
mov rax, qword [0x1402cd510]
mov rcx, qword [rdi + rax + 0x20]
movups xmm0, xmmword [rcx]
movups xmmword [r15 + 0x20], xmm0
jmp 0x14010adb9
mov rdi, qword [rdx + 0x18]
mov eax, 0x13
cmp byte [0x1402cf5e4], 0
mov ecx, 0x1013
mov r8d, dword [0x1402cf540]
mov edx, dword [0x1402cf54c]
cmovne eax, ecx
mov dword [rdi + 8], eax
mov rcx, rdi
mov rax, qword [0x1402cd608]
movaps xmmword [rsp + 0x6f0], xmm6
movaps xmmword [rsp + 0x6e0], xmm7
mov r9, qword [rax + 0x78]
mov r9d, dword [r9 + 0x54]
call sym.SystemInformer.exe_PhSiSetColorsGraphDrawInfo
mov r8d, dword [0x1402cf6a8]
mov rdx, qword ds:[r15 + 0x18]
cmp esi, 0xffffffff
jne 0x14010aa59
lea rcx, [0x1402cd678]
call sym.SystemInformer.exe_PhGetDrawInfoGraphBuffers
cmp byte [0x1402cd68c], 0
nop dword [rax]
jne 0x14010ada9
mov r8d, dword [rdi + 0x14]
lea rcx, [0x1402cf6a0]
mov rdx, qword [0x1402cd678]
call sym.SystemInformer.exe_PhCopyCircularBuffer_FLOAT
mov r8d, dword [rdi + 0x14]
lea rcx, [0x1402cf760]
mov rdx, qword [0x1402cd680]
call sym.SystemInformer.exe_PhCopyCircularBuffer_FLOAT
cmp byte [0x1402cf604], 0
nop dword [rax + rax]
je 0x14010aa28
cmp byte [0x1402cf60c], 0
xorps xmm7, xmm7
xorps xmm6, xmm6
je 0x14010a9bd
mov eax, dword [rdi + 0x14]
cmp eax, 0x80
jbe 0x14010a9bd
mov rbx, qword [0x1402cd678]
mov r8d, eax
mov rdx, qword [0x1402cd680]
mov rcx, rbx
call sym.SystemInformer.exe_PhAddPlusMaxMemorySingles
movaps xmm6, xmm0
jmp 0x14010a9fb
mov ecx, dword [rdi + 0x14]
test ecx, ecx
je 0x14010aa30
mov rbx, qword [0x1402cd678]
mov edx, ecx
mov r8, qword [0x1402cd680]
mov rax, rbx
sub r8, rbx
nop
movss xmm0, dword [rax + r8]
addss xmm0, dword [rax]
add rax, 4
maxss xmm0, xmm6
movaps xmm6, xmm0
sub rdx, 1
jne 0x14010a9e0
ucomiss xmm6, xmm7
jp 0x14010aa04
je 0x14010aa30
mov r8d, dword [rdi + 0x14]
movaps xmm1, xmm6
mov rcx, rbx
call sym.SystemInformer.exe_PhDivideSinglesBySingle
mov r8d, dword [rdi + 0x14]
movaps xmm1, xmm6
mov rcx, qword [0x1402cd680]
call sym.SystemInformer.exe_PhDivideSinglesBySingle
jmp 0x14010aa30
movss xmm6, dword [0x14029078c]
mov edx, 0x50
lea rax, [sym.SystemInformer.exe_PhSiDoubleLabelYFunction]
mov ecx, 0x58
mov r8, rdi
mov qword [rdi + rdx], rax
movss dword [rcx + rdi], xmm6
mov byte [0x1402cd68c], 1
jmp 0x14010ada9
mov rcx, qword [0x1402cd510]
lea r14, [rsi + rsi*2]
shl r14, 4
add rcx, r14
call sym.SystemInformer.exe_PhGetDrawInfoGraphBuffers
mov rdx, qword [0x1402cd510]
cmp byte ds:[r14 + rdx + 0x14], 0
jne 0x14010abcb
mov rax, qword [0x1402cf990]
lea rbx, ds:[rsi + rsi*2]
mov r8d, dword [rdi + 0x14]
mov rdx, qword [r14 + rdx]
lea rcx, [rax + rbx*8]
call sym.SystemInformer.exe_PhCopyCircularBuffer_FLOAT
mov rax, qword [0x1402cf9f8]
mov rdx, qword [0x1402cd510]
mov r8d, dword [rdi + 0x14]
lea rcx, [rax + rbx*8]
mov rdx, qword [r14 + rdx + 8]
call sym.SystemInformer.exe_PhCopyCircularBuffer_FLOAT
cmp byte [0x1402cf604], 0
je 0x14010ab90
cmp byte [0x1402cf60c], 0
xorps xmm7, xmm7
xorps xmm6, xmm6
je 0x14010ab0a
mov eax, dword [rdi + 0x14]
cmp eax, 0x80
jbe 0x14010ab0a
mov rcx, qword [0x1402cd510]
mov r8d, eax
mov rdx, qword [r14 + rcx + 8]
mov rcx, qword [r14 + rcx]
call sym.SystemInformer.exe_PhAddPlusMaxMemorySingles
movaps xmm6, xmm0
jmp 0x14010ab4a
mov r8d, dword [rdi + 0x14]
test r8d, r8d
je 0x14010ab98
mov rax, qword [0x1402cd510]
mov rcx, qword [r14 + rax]
mov rdx, qword [r14 + rax + 8]
mov eax, r8d
sub rdx, rcx
nop dword [rax]
movss xmm0, dword [rcx + rdx]
addss xmm0, dword [rcx]
add rcx, 4
maxss xmm0, xmm6
movaps xmm6, xmm0
sub rax, 1
jne 0x14010ab30
ucomiss xmm6, xmm7
jp 0x14010ab51
je 0x14010ab98
mov rcx, qword [0x1402cd510]
lea rdx, [rsi + rsi*2]
mov r8d, dword [rdi + 0x14]
add rdx, rdx
movaps xmm1, xmm6
mov rcx, qword [rcx + rdx*8]
call sym.SystemInformer.exe_PhDivideSinglesBySingle
mov rcx, qword [0x1402cd510]
lea rdx, [rsi + rsi*2]
mov r8d, dword [rdi + 0x14]
add rdx, rdx
movaps xmm1, xmm6
mov rcx, qword [rcx + rdx*8 + 8]
call sym.SystemInformer.exe_PhDivideSinglesBySingle
jmp 0x14010ab98
movss xmm6, dword [0x14029078c]
mov ecx, 0x58
lea rax, [sym.SystemInformer.exe_PhSiDoubleLabelYFunction]
mov edx, 0x50
mov r9, rdi
mov r8, rdi
mov qword [rdi + rdx], rax
movss dword [rdi + rcx], xmm6
lea rcx, [rsi + rsi*2]
mov rax, qword [0x1402cd510]
add rcx, rcx
mov byte [rax + rcx*8 + 0x14], 1
cmp dword [0x1402cf5e8], 0
je 0x14010ada2
mov rdx, qword [0x1402cf990]
lea r8, [rsi + rsi*2]
mov eax, dword [rdx + r8*8 + 4]
mov ecx, dword [rdx + r8*8 + 0xc]
and rcx, rax
mov rax, qword [rdx + r8*8 + 0x10]
mov rdx, qword [0x1402cf9f8]
movss xmm1, dword [rax + rcx*4]
mov eax, dword [rdx + r8*8 + 4]
mov ecx, dword [rdx + r8*8 + 0xc]
and rcx, rax
mov rax, qword [rdx + r8*8 + 0x10]
cvtps2pd xmm2, xmm1
mov edx, 6
mov r8d, 0x40
movss xmm0, dword [rax + rcx*4]
lea rcx, str.___K:
movzx eax, word [0x1402c72dc]
movaps xmm1, xmm2
cvtps2pd xmm3, xmm0
mov qword [rbp + 0x388], rcx
lea rcx, str.___U:
mov word [rbp + 0x354], ax
mov word [rbp + 0x394], ax
mov word [rbp + 0x3d4], ax
lea rax, [0x14026f724]
mov qword [rbp + 0x3c8], rcx
lea rcx, [rbp + 0x350]
movsd xmm0, qword [0x1402907c0]
addsd xmm1, xmm3
mulsd xmm2, xmm0
mov dword [rbp + 0x350], 0x4b
mulsd xmm3, xmm0
mov dword [rbp + 0x370], 1
mov qword [rbp + 0x380], 0xc
mulsd xmm1, xmm0
mov dword [rbp + 0x390], 0x4b
movsd qword [rbp + 0x3a0], xmm2
movsd qword [rbp + 0x3e0], xmm3
mov dword [rbp + 0x3b0], 1
movsd qword [rbp + 0x360], xmm1
mov qword [rbp + 0x3c0], 0xc
mov dword [rbp + 0x3d0], 0x4b
mov dword [rbp + 0x3f0], 1
mov qword [rbp + 0x400], 4
mov qword [rbp + 0x408], rax
call sym.SystemInformer.exe_PhFormat
mov rcx, qword [0x1402cd510]
lea rdx, [rsi + rsi*2]
add rdx, rdx
mov r8, qword [rcx + rdx*8 + 0x18]
mov qword [rcx + rdx*8 + 0x18], rax
test r8, r8
je 0x14010ad45
lea rcx, [r8 - 0x10]
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010ad45
nop dword [rax + rax]
call fcn.140141ca0
mov rcx, qword [0x1402cd560]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x919
mov rcx, qword [rcx + rsi*8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, qword [0x1402cd510]
lea rcx, [0x1402c0290]
lea r10, [rsi + rsi*2]
mov dword [rsp + 0x28], 5
add r10, r10
mov qword [rsp + 0x20], rcx
lea r9, [0x1402c02a0]
mov rdx, rdi
mov rcx, rax
mov r8, qword [r8 + r10*8 + 0x18]
call sym.SystemInformer.exe_PhSetGraphText
nop
jmp 0x14010ada9
xor r14d, r14d
mov qword [rdi + 0x78], r14
movaps xmm6, xmmword [rsp + 0x6f0]
movaps xmm7, xmmword [rsp + 0x6e0]
mov rcx, qword [rbp + 0x5d0]
xor rcx, rsp
call fcn.1401e4160
add rsp, 0x708
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret