Function at 0x14013f6bc
Capabilities:
Access peb ldr_data
Hash data using fnv
Parse pe header
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
lea rcx, [0x14015d220]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, qword [0x14017c718]
mov r13, rax
test rsi, rsi
jne 0x14013f846
mov rax, qword gs:[0x60]
xor ebx, ebx
mov edi, 0xf8f45725
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r8, r14
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x14013f761
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x14013f754
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x14013f745
cmp edx, ebx
jne 0x14013f827
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013f827
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013f827
mov r12d, dword [r10 + 0x20]
dec r11d
mov esi, 0x811c9dc5
lea rcx, [r12 + r11*4]
mov edx, dword [rcx + r9]
add rdx, r9
jmp 0x14013f7b5
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x14013f7aa
cmp esi, edi
je 0x14013f7c9
test r11d, r11d
jne 0x14013f795
jmp 0x14013f827
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov esi, dword [rdx + r8*4]
add rsi, r9
cmp rsi, r10
jbe 0x14013f83f
lea rcx, [rax + r10]
cmp rsi, rcx
jae 0x14013f83f
mov ebx, 0x811c9dc5
mov edi, ebx
jmp 0x14013f808
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rsi
mov al, byte [rsi]
cmp al, 0x2e
jne 0x14013f7fa
jmp 0x14013f81b
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rsi
mov al, byte [rsi]
test al, al
jne 0x14013f810
mov r8, qword [r14]
mov rax, qword [r8]
mov r8, rax
cmp rax, r14
je 0x14013f83d
cmp qword [rax + 0x30], 0
jne 0x14013f719
xor esi, esi
mov qword [0x14017c718], rsi
mov bl, byte [rbp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov word [rbp - 9], ax
movups xmmword [rbp - 0x19], xmm0
or r14, 0xffffffffffffffff
mov dword [rbp - 0x30], 0xd0a1c1a4
mov dword [rbp - 0x2c], 0xd5dab6de
mov dword [rbp - 0x28], 0xa4dfdbdf
mov dword [rbp - 0x24], 0xd5d1ded6
mov dword [rbp - 0x20], 0xe0d2ddb2
mov word [rbp - 0x1c], 0x9d9d
mov byte [rbp - 0x1a], 0x78
call fcn.140158170
mov rdi, qword [rax]
call fcn.140158178
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x29
jae 0x1401401f8
movzx r8d, byte [rbp + r9 - 0x30]
mov edx, r8d
cmp rdi, r9
ja 0x1401401ef
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x14013f8df
movabs rcx, 0xce3ea63ab0d0058d
mov al, dl
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
add bl, 0x25
jmp 0x14013fb6d
je 0x140140181
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14014011c
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401400f0
cmp r10, r9
ja 0x1401401e6
lea rax, [r10 + 0x10]
cmp rdi, rax
jae 0x14013f931
movabs rcx, 0xeb23a2d081107491
mov al, dl
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
add bl, 9
jmp 0x14013fb53
lea rax, [r10 + 1]
cmp rdi, rax
je 0x1401400b2
lea rax, [r10 + 3]
cmp rdi, rax
je 0x140140098
lea rax, [r10 + 6]
cmp rdi, rax
je 0x140140081
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14014006c
lea rax, [r10 + 5]
cmp rdi, rax
je 0x140140052
lea rax, [r10 + 9]
cmp rdi, rax
je 0x140140038
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x14013fdb6
lea rax, [r10 + 8]
cmp rdi, rax
je 0x14013fd9b
lea rax, [r10 + 0x400]
cmp rdi, rax
je 0x14013fd7e
lea rax, [r10 + 6]
cmp rdi, rax
je 0x14013fd61
lea rax, [r10 + 0xa]
cmp rdi, rax
je 0x14013fd46
lea rax, [r10 + 0x61]
cmp rdi, rax
je 0x14013fd29
lea rax, [r10 + 0x5a]
cmp rdi, rax
je 0x14013fd0c
lea rax, [r10 + 0x20]
cmp rdi, rax
je 0x14013fcf4
lea rax, [r10 + 0x41]
cmp rdi, rax
je 0x14013fcdc
lea rax, [r10 + 1]
cmp rdi, rax
je 0x14013fcce
lea rax, [r10 + 0x40]
cmp rdi, rax
je 0x14013f98c
lea rdi, [r10 + 0x400]
lea r10, [rdi + 0x80]
lea rax, [r10 + 0x7a]
cmp rdi, rax
jb 0x1401401cb
lea rax, [r10 + 0xa]
cmp rdi, rax
jb 0x1401401b0
lea rax, [r10 + 0x28]
cmp rdi, rax
jb 0x14013fb74
lea rax, [r10 + 0x5a]
cmp rdi, rax
jb 0x14013fb5a
lea rax, [r10 + 0x20]
cmp rdi, rax
jb 0x14013fb40
lea rax, [r10 + 0x42]
cmp rdi, rax
jb 0x14013fcb6
lea rax, [r10 + 1]
cmp rdi, rax
jb 0x14013fc9e
lea rax, [r10 + 0x40]
cmp rdi, rax
jb 0x14013fc86
lea rax, [r10 + 0x80]
cmp rdi, rax
jb 0x14013fc67
lea rax, [r10 + 3]
cmp rdi, rax
jb 0x14013f98c
lea rdi, [r10 + 0xa]
lea r10, [rdi + 6]
lea rax, [r10 + 0x28]
cmp rdi, rax
ja 0x14013fc4d
lea rax, [r10 + 0x5a]
cmp rdi, rax
ja 0x14013fc3f
lea rax, [r10 + 2]
cmp rdi, rax
ja 0x14013fc27
lea rax, [r10 + 0x42]
cmp rdi, rax
ja 0x14013fc0d
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x14013fbff
lea rax, [r10 + 4]
cmp rdi, rax
ja 0x14013fbe1
lea rax, [r10 + 0x80]
cmp rdi, rax
ja 0x14013fbc7
lea rax, [r10 + 0x400]
cmp rdi, rax
ja 0x14013fbad
lea rax, [r10 + 6]
cmp rdi, rax
ja 0x14013fb8e
lea rax, [r10 + 0x3e8]
cmp rdi, rax
ja 0x14013f98c
lea rdi, [r10 + 0x64]
lea r10, [rdi + 0x61]
jmp 0x14013f98c
lea ecx, [r9 - 0x71]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x17
add bl, cl
jmp 0x14013f97f
lea ecx, [r9 + 0x75]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x33
add bl, cl
jmp 0x14013f8ff
lea ecx, [r9 + 0x5b]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x7d
add bl, cl
jmp 0x14013f8ad
lea ecx, [r9 - 0x78]
mov al, r8b
and al, cl
mov ebx, 0x24
sub bl, al
mov r11b, r9b
add bl, bl
add bl, r8b
add bl, cl
jmp 0x1401400ca
lea ecx, [r9 + 0x6e]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 2
jmp 0x1401400e5
lea ecx, [r9 + 0x54]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x4c
jmp 0x1401400e8
mov ecx, gethostname
lea edx, [r9 + 0x3a]
mov al, r8b
mov r11b, r9b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x14013fff9
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x14013fd32
lea ecx, [r9 + 6]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x2a
jmp 0x14014010b
lea edx, [r9 - 0x14]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x74
jmp 0x140140031
lea edx, [r9 - 0x2e]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
jmp 0x14013fe9e
lea ecx, [r9 - 0x48]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 8
jmp 0x14014019c
lea ecx, [r9 - 9]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x3f
mov byte [rbp + r9 - 0x30], bl
jmp 0x1401401a8
lea edx, [r9 - 0x23]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0xb
jmp 0x14013fe38
lea edx, [r9 - 0x3d]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x55
jmp 0x14013fe09
lea edx, [r9 - 0x57]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x61
jmp 0x14013fdd9
lea edx, [r9 + 0x66]
mov ecx, reloc.WLDAP32.dll_Ordinal_27
jmp 0x14013fe78
lea edx, [r9 + 0x4c]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x14
jmp 0x140140065
lea edx, [r9 + 0x32]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x5e
jmp 0x140140031
lea edx, [r9 + 0x18]
mov ecx, Ordinal_45
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14014010b
lea edx, [r9 - 2]
mov ecx, 7
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401400ad
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x1c]
and al, dl
add al, al
sub bl, al
sub bl, 0x3c
jmp 0x14013fff9
lea edx, [r9 - 0x36]
mov ecx, 0x3d
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401400e8
lea edx, [r9 - 0x50]
mov ecx, Ordinal_27
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401400e5
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x6a]
and al, dl
add al, al
sub bl, al
sub bl, 0x1a
jmp 0x1401400c8
lea rax, [r10 + 0x400]
cmp rdi, rax
jae 0x14013fe66
lea edx, [r9 - 0x73]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x25
add bl, dl
lea rax, [r10 + rdi]
cmp rax, 0x7a
je 0x14014001e
lea rcx, [r10 + 3]
cmp rdi, rcx
jbe 0x14013feff
lea edx, [r9 - 0x67]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x2f
add bl, dl
cmp rdi, 0x28
jae 0x14013ffe0
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jbe 0x14013ff8d
lea edx, [r9 + 0x2a]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x26
add bl, dl
cmp r10, 2
jb 0x14013fc7c
mov ecx, Ordinal_33
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x2e]
and al, dl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x1401400ca
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14013fe8c
lea edx, [r9 + 0x22]
mov ecx, 9
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14014019c
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14013feb0
lea edx, [r9 + 0x3c]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x140140065
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14013fed4
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x5c]
and al, dl
add al, al
sub bl, al
sub bl, 0x7c
jmp 0x14013fff9
lea rax, [r10 + 8]
cmp rdi, rax
jne 0x14013fddb
mov ecx, Ordinal_50
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0xe]
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401400c8
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14013ff23
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x4d]
and al, dl
add al, al
sub bl, al
add bl, 0x1b
jmp 0x1401400c8
cmp rdi, rcx
jne 0x14013ff42
lea ecx, [r9 - 0x19]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x51
jmp 0x1401400e8
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14013ff66
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 1]
and al, dl
add al, al
sub bl, al
sub bl, 7
jmp 0x14013fff9
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x14013fe0b
lea ecx, [r9 - 0x7d]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x6b
jmp 0x14014019c
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14013ffa4
lea edx, [r9 + 0x44]
mov ecx, reloc.WS2_32.dll_select
jmp 0x14013fe78
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14013ffbb
lea edx, [r9 + 0x5e]
mov ecx, gethostname
jmp 0x14013fe9e
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x14013fe3a
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x3a]
and al, dl
add al, al
sub bl, al
sub bl, 0x6a
jmp 0x14013fff9
mov cl, byte [rbp + r9 - 0x30]
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x48]
and al, dl
sub cl, al
add cl, 4
lea ebx, [rcx + rcx]
add bl, dl
sub r11b, 0x2b
mov al, r11b
and al, r8b
add al, al
sub r11b, al
add r11b, 0x2d
add r11b, bl
add r11b, r8b
mov byte [rbp + r9 - 0x30], r11b
jmp 0x1401400ad
mov ecx, reloc.WLDAP32.dll_Ordinal_41
lea edx, [r9 + 0x62]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x140140137
lea ecx, [r9 + 0x7b]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x5d
jmp 0x14014019c
lea edx, [r9 + 0x61]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x59
add bl, dl
jmp 0x14014015b
lea edx, [r9 + 0x47]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0xf
jmp 0x140140031
lea ecx, [r9 + 0x2d]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x3b
jmp 0x14014010b
lea ecx, [r9 + 0x13]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x7b
add rdi, r10
jmp 0x14014010b
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x55]
and al, dl
add al, al
sub bl, al
add bl, 0x53
add bl, dl
sub r11b, 0x45
mov al, r11b
and al, r8b
add al, al
sub r11b, al
sub r11b, 0x1d
add r11b, r8b
mov byte [rbp + r9 - 0x30], r11b
inc r10
dec r9
jmp 0x1401401a8
movabs rax, 0x4033d810375031f5
add rax, r9
and dl, al
add dl, dl
sub r8b, dl
lea ebx, [rax + r8]
add bl, 0x4d
movzx eax, bl
mov rcx, r14
sub rcx, rax
add r9, rcx
jmp 0x1401401a8
movabs rcx, 0xa3b68b9ad5b026db
mov bl, r8b
add rcx, r9
and dl, cl
add dl, dl
sub bl, dl
add bl, 3
add bl, cl
lea ecx, [r9 - 0x11]
inc r10
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, 0x77
add cl, r8b
movzx eax, cl
mov byte [rbp + r9 - 0x30], al
add rax, r10
sub r9, rax
lea ecx, [r9 + 0x7c]
inc rdi
mov al, cl
and al, r8b
add al, al
sub cl, al
mov rax, r14
sub cl, 0x64
sub rax, rdi
add cl, r8b
mov byte [rbp + r9 - 0x30], cl
add r9, rax
jmp 0x14014019c
movabs rax, 0x6abbf2b0127010a7
add rax, r9
and dl, al
add dl, dl
sub r8b, dl
lea ebx, [rax + r8]
add bl, 0x6f
movzx eax, byte [rbp + r9 - 0x30]
add rax, r10
add r9, rax
inc r9
jmp 0x14013f89a
add r9b, 0x41
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
add bl, 0x39
jmp 0x14013f897
add r9b, 0x27
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x11
jmp 0x14013f887
lea rdx, [rbp + 0x143ba8c]
jmp 0x1401401fc
lea rdx, [rbp + 0xd3c019]
jmp 0x1401401fc
lea rdx, [rbp - 0x30]
mov rcx, r13
call rsi
mov rdx, qword [0x14017c710]
mov r12, rax
test rdx, rdx
jne 0x14014035d
mov rcx, qword gs:[0x60]
xor edi, edi
mov esi, 0x9bc5a608
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r14, qword [rcx]
mov r11, r14
movups xmm0, xmmword [r11 + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14014027a
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x14014026d
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14014025e
cmp edx, edi
jne 0x14014033e
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14014033e
mov ebx, dword [r10 + 0x18]
test ebx, ebx
je 0x14014033e
mov r15d, dword [r10 + 0x20]
dec ebx
lea rdx, [r15 + rbx*4]
mov r8d, dword [rdx + r9]
mov edx, 0x811c9dc5
add r8, r9
jmp 0x1401402cc
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401402c1
cmp edx, esi
je 0x1401402e0
test ebx, ebx
jne 0x1401402ad
jmp 0x14014033e
mov ecx, dword [r10 + 0x24]
mov edx, dword [r10 + 0x1c]
add rcx, r9
add rdx, r9
movzx r8d, word [rcx + rbx*2]
mov edx, dword [rdx + r8*4]
add rdx, r9
cmp rdx, r10
jbe 0x140140356
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x140140356
mov edi, 0x811c9dc5
mov esi, edi
jmp 0x14014031f
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140140311
jmp 0x140140332
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140140327
mov r11, qword [r14]
mov rax, qword [r11]
mov r11, rax
cmp rax, r14
je 0x140140354
cmp qword [rax + 0x30], 0
jne 0x140140232
xor edx, edx
mov qword [0x14017c710], rdx
call rdx
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
lea edx, [r9 + 0x11]
call r12
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret