Function at 0x14000d1a0
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
xor ebx, ebx
mov dword [rbp - 0x30], 0xbcc5bcc9
mov word [rbp - 0x10], bx
mov ecx, ebx
mov dword [rbp - 0x2c], 0xbcb9bcc3
mov edi, 0x4380
mov dword [rbp - 0x28], 0xbcd4bca4
mov dword [rbp - 0x24], 0xbceebcf3
mov dword [rbp - 0x20], 0xbce2bceb
mov dword [rbp - 0x1c], 0xbcf8bcaa
mov dword [rbp - 0x18], 0xbcecbcf8
mov dword [rbp - 0x14], 0xbcfbbcfc
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x14000d210
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d2a5
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d260
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbce4bccd
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbcecbcef
mov dword [rbp - 0x28], 0xbcfcbcf6
mov dword [rbp - 0x24], 0xbcd1bca6
mov dword [rbp - 0x20], 0xbcecbce1
mov dword [rbp - 0x1c], 0xbceebcfd
mov dword [rbp - 0x18], 0xbcfe
mov byte [rbp - 0x14], 1
nop dword [rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0xd
jb 0x14000d2e0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x14], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d375
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d330
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbcf3bcd0
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbce0bced
mov dword [rbp - 0x28], 0xbcf6bce1
mov dword [rbp - 0x24], 0xbca7bcf5
mov dword [rbp - 0x20], 0xbce0bcc4
mov dword [rbp - 0x1c], 0xbcffbcf9
mov word [rbp - 0x18], bx
mov byte [rbp - 0x16], 1
nop word [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0xc
jb 0x14000d3b0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x16], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d445
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d400
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbcf2bccb
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbcf6bcc6
mov dword [rbp - 0x28], 0xbcf5bce9
mov dword [rbp - 0x24], 0xbcf5bce3
mov word [rbp - 0x20], bx
mov byte [rbp - 0x1e], 1
nop dword [rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 8
jb 0x14000d470
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1e], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d505
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d4c0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbce9bcc3
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbce2bce7
mov dword [rbp - 0x28], 0xbca5bcf0
mov dword [rbp - 0x24], 0xbce9bcc3
mov dword [rbp - 0x20], 0xbce0bcef
mov dword [rbp - 0x1c], 0xbceebce4
mov dword [rbp - 0x18], 0xbcbabcac
mov dword [rbp - 0x14], 0xbcbdbca0
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x14000d550
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d5e5
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d5a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbce9bcc3
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbce2bce7
mov dword [rbp - 0x28], 0xbca5bcf0
mov dword [rbp - 0x24], 0xbce9bcc3
mov dword [rbp - 0x20], 0xbce0bcef
mov dword [rbp - 0x1c], 0xbceebce4
mov dword [rbp - 0x18], 0xbcbabcac
mov dword [rbp - 0x14], 0xbcbcbca0
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x14000d630
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d6c5
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d680
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbce9bcc3
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbce2bce7
mov dword [rbp - 0x28], 0xbca5bcf0
mov dword [rbp - 0x24], 0xbce9bcc3
mov dword [rbp - 0x20], 0xbce0bcef
mov dword [rbp - 0x1c], 0xbceebce4
mov dword [rbp - 0x18], 0xbcbabcac
mov dword [rbp - 0x14], 0xbcbbbca0
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x14000d710
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d7a5
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d760
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbce9bcc3
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbce2bce7
mov dword [rbp - 0x28], 0xbca5bcf0
mov dword [rbp - 0x24], 0xbce9bcc3
mov dword [rbp - 0x20], 0xbce0bcef
mov dword [rbp - 0x1c], 0xbceebce4
mov dword [rbp - 0x18], 0xbcbabcac
mov dword [rbp - 0x14], 0xbcbabca0
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x14000d7f0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d885
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d840
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbce9bcc3
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbce2bce7
mov dword [rbp - 0x28], 0xbca5bcf0
mov dword [rbp - 0x24], 0xbce9bcc3
mov dword [rbp - 0x20], 0xbce0bcef
mov dword [rbp - 0x1c], 0xbceebce4
mov dword [rbp - 0x18], 0xbcbabcac
mov dword [rbp - 0x14], 0xbcb9bca0
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x14000d8d0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000d965
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000d920
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbce9bcc3
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbce2bce7
mov dword [rbp - 0x28], 0xbca5bcf0
mov dword [rbp - 0x24], 0xbce9bcc3
mov dword [rbp - 0x20], 0xbce0bcef
mov dword [rbp - 0x1c], 0xbceebce4
mov dword [rbp - 0x18], 0xbcbabcac
mov dword [rbp - 0x14], 0xbcb8bca0
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x14000d9b0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000da45
movdqa xmm0, xmmword [0x140092fa0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x14
jb 0x14000da00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], bl
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
mov dword [rbp - 0x30], 0xbce9bcc3
mov rcx, rbx
mov dword [rbp - 0x2c], 0xbce2bce7
mov dword [rbp - 0x28], 0xbca5bcf0
mov dword [rbp - 0x24], 0xbce9bcc3
mov dword [rbp - 0x20], 0xbce0bcef
mov dword [rbp - 0x1c], 0xbceebce4
mov dword [rbp - 0x18], 0xbcbabcac
mov dword [rbp - 0x14], 0xbcb7bca0
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, di
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x14000da90
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000db26
movdqa xmm0, xmmword [0x140092fa0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xb3b3f5f5
mov word [rbp - 0x1c], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rbx - 0x80]
xor byte [rbp + rbx - 0x30], al
inc rbx
cmp rbx, 0x14
jb 0x14000dae0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1b], 0
call fcn.14001ad30
lea rdx, [0x14001af00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400915c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000cdd0
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret