Function at 0x1400ae108
Capabilities:
Get graphical window text

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x1348]
mov eax, 0x1440
call fcn.14011a0f0
sub rsp, rax
mov rax, qword [0x140183c48]
xor rax, rsp
mov qword [rbp + 0x1330], rax
mov rsi, rcx
mov ecx, dword [rcx + 0x68]
cmp ecx, 0x46
jg 0x1400ae6e7
je 0x1400ae6dd
cmp ecx, 0x22
jg 0x1400ae426
je 0x1400ae3ee
cmp ecx, 0x11
jg 0x1400ae2f0
je 0x1400ae2e6
cmp ecx, 8
jg 0x1400ae231
je 0x1400ae22a
test ecx, ecx
je 0x1400ae217
sub ecx, 1
je 0x1400ae201
sub ecx, 1
je 0x1400ae1f5
sub ecx, 1
je 0x1400ae1dc
sub ecx, 1
je 0x1400ae1d5
sub ecx, 1
je 0x1400ae1ce
sub ecx, 1
je 0x1400ae1c7
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x1ff
call fcn.1400a685c
xor ecx, ecx
mov rdx, rax
call fcn.1400ef290
jmp 0x1400aef34
mov ecx, 0x607
jmp 0x1400ae1e1
mov ecx, 0x1fa
jmp 0x1400ae1e1
mov ecx, 0x1f8
jmp 0x1400ae1e1
mov ecx, 0x1f9
mov rbx, qword [rsi + 8]
call fcn.1400a685c
mov rcx, qword [rsi]
mov r8, rbx
mov rdx, rax
jmp 0x1400ae20d
xor ecx, ecx
call fcn.1400eea18
jmp 0x1400aef34
mov r8, qword [rsi]
lea rdx, [0x140153318]
xor ecx, ecx
call fcn.1400ef290
jmp 0x1400aef34
mov r8, qword [rsi]
lea rdx, [0x140153318]
lea rcx, [0x140153320]
jmp 0x1400ae20d
mov ecx, 0x1f5
jmp 0x1400ae1e1
sub ecx, 9
je 0x1400ae2dc
sub ecx, 1
je 0x1400ae2c4
sub ecx, 1
je 0x1400ae2bd
sub ecx, 1
je 0x1400ae2b3
sub ecx, 1
je 0x1400ae2a9
sub ecx, 1
je 0x1400ae29f
sub ecx, 1
je 0x1400ae28d
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x20a
mov rdi, qword [rsi + 8]
mov rbx, qword [rsi + 0x10]
call fcn.1400a685c
mov r9, rbx
mov r8, rdi
mov rdx, rax
mov rcx, qword [rsi]
call fcn.1400ef290
jmp 0x1400aef34
mov ecx, 0x203
call fcn.1400a685c
mov rcx, qword [rsi]
jmp 0x1400ae1ba
mov ecx, 0x202
jmp 0x1400ae1e1
mov ecx, 0x200
jmp 0x1400ae1e1
mov ecx, 0x206
jmp 0x1400ae1e1
mov ecx, 0x207
jmp 0x1400ae2c9
mov ecx, 0x208
mov rbx, qword [rsi]
call fcn.1400a685c
mov r8, rbx
mov rdx, rax
jmp 0x1400ae20b
mov ecx, 0x1f6
jmp 0x1400ae1e1
mov ecx, 0x4bf
jmp 0x1400ae1e1
cmp ecx, 0x1a
jg 0x1400ae381
je 0x1400ae377
sub ecx, 0x12
je 0x1400ae36d
sub ecx, 1
je 0x1400ae363
sub ecx, 1
je 0x1400ae359
sub ecx, 1
je 0x1400ae34f
sub ecx, 1
je 0x1400ae345
sub ecx, 1
je 0x1400ae33b
sub ecx, 1
je 0x1400ae331
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x2ae
jmp 0x1400ae292
mov ecx, 0x659
jmp 0x1400ae1b3
mov ecx, 0x656
jmp 0x1400ae1b3
mov ecx, 0x655
jmp 0x1400ae2c9
mov ecx, 0x654
jmp 0x1400ae1e1
mov ecx, 0x1f7
jmp 0x1400ae1e1
mov ecx, 0x641
jmp 0x1400ae292
mov ecx, 0x640
jmp 0x1400ae26a
mov ecx, 0x2ac
jmp 0x1400ae292
sub ecx, 0x1b
je 0x1400ae3e4
sub ecx, 1
je 0x1400ae3da
sub ecx, 1
je 0x1400ae3d0
sub ecx, 1
je 0x1400ae3c6
sub ecx, 1
je 0x1400ae3bc
sub ecx, 1
je 0x1400ae3b2
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x342
jmp 0x1400ae1e1
mov ecx, 0x610
jmp 0x1400ae292
mov ecx, 0x471
jmp 0x1400ae1e1
mov ecx, 0x470
jmp 0x1400ae292
mov ecx, 0x46f
jmp 0x1400ae292
mov ecx, 0x2ab
jmp 0x1400ae1e1
mov ecx, 0x2ad
jmp 0x1400ae292
mov rbx, qword [rsi + 8]
mov ecx, 0x605
call fcn.1400a685c
mov r9, rbx
lea rcx, [rsp + 0x30]
mov r8, rax
mov edx, 0x100
call fcn.140004dcc
mov r9, qword [rsi + 0x10]
lea r8, [rsp + 0x30]
lea rdx, str._s:__s
jmp 0x1400ae280
cmp ecx, 0x34
jg 0x1400ae5df
je 0x1400ae5c3
cmp ecx, 0x2b
jg 0x1400ae512
je 0x1400ae508
sub ecx, 0x23
je 0x1400ae4fe
sub ecx, 1
je 0x1400ae4f4
sub ecx, 1
je 0x1400ae4ea
sub ecx, 1
je 0x1400ae4e0
sub ecx, 1
je 0x1400ae4ba
sub ecx, 1
je 0x1400ae4b0
sub ecx, 1
je 0x1400ae48e
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x664
call fcn.1400a685c
mov rcx, rax
jmp 0x1400ae1f7
mov ebx, dword [rsi + 0x44]
mov ecx, 0x663
mov edi, dword [rsi + 0x40]
call fcn.1400a685c
mov r8d, ebx
mov edx, edi
mov rcx, rax
call fcn.1400eea18
jmp 0x1400aef34
mov ecx, 0x4dd
jmp 0x1400ae292
mov ebx, dword [rsi + 0x44]
mov ecx, 0x4d8
mov edi, dword [rsi + 0x40]
call fcn.1400a685c
mov rcx, qword [rsi]
mov r9d, ebx
mov r8d, edi
mov rdx, rax
call fcn.1400ef290
jmp 0x1400aef34
mov ecx, 0x2f7
jmp 0x1400ae292
mov ecx, 0x2f5
jmp 0x1400ae292
mov ecx, 0x604
jmp 0x1400ae292
mov ecx, 0x4ae
jmp 0x1400ae26a
mov ecx, 0x2cb
jmp 0x1400ae1e1
sub ecx, 0x2c
je 0x1400ae5b9
sub ecx, 1
je 0x1400ae5af
sub ecx, 1
je 0x1400ae5a5
sub ecx, 1
je 0x1400ae59b
sub ecx, 1
je 0x1400ae591
sub ecx, 1
je 0x1400ae571
sub ecx, 1
je 0x1400ae550
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x4aa
jmp 0x1400ae481
mov ecx, 0x4a7
mov rdi, qword [rsi]
mov rbx, qword [rsi + 8]
call fcn.1400a685c
mov r9, rbx
mov r8, rdi
mov rdx, rax
xor ecx, ecx
jmp 0x1400ae283
mov ebx, dword [rsi + 0x40]
mov ecx, 0x564
call fcn.1400a685c
mov rcx, qword [rsi]
mov rdx, rax
mov r8d, ebx
call fcn.1400ef290
jmp 0x1400aef34
mov ecx, 0x2f6
jmp 0x1400ae292
mov ecx, 0x4a6
jmp 0x1400ae292
mov ecx, 0x2c8
jmp 0x1400ae292
mov ecx, 0x2c7
jmp 0x1400ae292
mov ecx, 0x2c6
jmp 0x1400ae292
mov ecx, 0x4a9
mov ebx, dword [rsi + 0x40]
call fcn.1400a685c
mov edx, ebx
mov rcx, rax
call fcn.1400eea18
jmp 0x1400aef34
cmp ecx, 0x3d
jg 0x1400ae670
je 0x1400ae666
sub ecx, 0x35
je 0x1400ae65c
sub ecx, 1
je 0x1400ae652
sub ecx, 1
je 0x1400ae648
sub ecx, 1
je 0x1400ae63e
sub ecx, 1
je 0x1400ae634
sub ecx, 1
je 0x1400ae62a
sub ecx, 1
je 0x1400ae620
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x345
jmp 0x1400ae292
mov ecx, 0x3fc
jmp 0x1400ae1e1
mov ecx, 0x2b1
jmp 0x1400ae292
mov ecx, 0x1fc
jmp 0x1400ae292
mov ecx, 0x2aa
jmp 0x1400ae292
mov ecx, 0x46a
jmp 0x1400ae1b3
mov ecx, 0x4ab
jmp 0x1400ae481
mov ecx, 0x4ac
jmp 0x1400ae481
mov ecx, 0x3da
jmp 0x1400ae1e1
sub ecx, 0x3e
je 0x1400ae6d3
sub ecx, 2
je 0x1400ae6c9
sub ecx, 1
je 0x1400ae6bf
sub ecx, 1
je 0x1400ae6b5
sub ecx, 1
je 0x1400ae6ab
sub ecx, 1
je 0x1400ae6a1
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x2af
jmp 0x1400ae292
mov ecx, 0x346
jmp 0x1400ae292
mov ecx, 0x347
jmp 0x1400ae292
mov ecx, 0x340
jmp 0x1400ae292
mov ecx, 0x275
jmp 0x1400ae292
mov ecx, 0x273
jmp 0x1400ae292
mov ecx, 0x3d9
jmp 0x1400ae1e1
mov ecx, 0x45b
jmp 0x1400ae1e1
cmp ecx, 0x71
jg 0x1400ae9fa
je 0x1400ae9f0
cmp ecx, 0x5f
jg 0x1400ae882
je 0x1400ae86c
cmp ecx, 0x4f
jg 0x1400ae799
je 0x1400ae78f
sub ecx, 0x47
je 0x1400ae785
sub ecx, 1
je 0x1400ae77b
sub ecx, 1
je 0x1400ae771
sub ecx, 1
je 0x1400ae767
sub ecx, 1
je 0x1400ae75a
sub ecx, 1
je 0x1400ae750
sub ecx, 1
je 0x1400ae746
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x4de
jmp 0x1400ae2c9
mov ecx, 0x5bf
jmp 0x1400ae292
mov ecx, 0x5be
jmp 0x1400ae292
mov rbx, qword [rsi]
mov ecx, 0x3b6
jmp 0x1400ae1e5
mov ecx, 0x5fa
jmp 0x1400ae292
mov ecx, 0x4ba
jmp 0x1400ae2c9
mov ecx, 0x637
jmp 0x1400ae26a
mov ecx, 0x636
jmp 0x1400ae1e1
mov ecx, 0x3e3
jmp 0x1400ae1e1
sub ecx, 0x50
je 0x1400ae862
sub ecx, 1
je 0x1400ae858
sub ecx, 1
je 0x1400ae84e
sub ecx, 1
je 0x1400ae844
sub ecx, 1
je 0x1400ae83a
sub ecx, 1
je 0x1400ae817
sub ecx, 1
je 0x1400ae7df
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x4a1
jmp 0x1400ae2c9
mov rbx, qword [rsi + 0x10]
mov ecx, 0x34c
mov rdi, qword [rsi + 8]
mov rsi, qword [rsi]
call fcn.1400a685c
mov r9, rsi
mov qword [rsp + 0x28], rbx
mov r8, rax
mov qword [rsp + 0x20], rdi
lea rdx, str._s:__s_s_s
xor ecx, ecx
call fcn.1400ef290
jmp 0x1400aef34
mov ebx, dword [rsi + 0x40]
mov ecx, 0x629
mov rdi, qword [rsi]
call fcn.1400a685c
mov r8d, ebx
mov rdx, rdi
mov rcx, rax
call fcn.1400eea18
jmp 0x1400aef34
mov ecx, 0x3e8
jmp 0x1400ae1e1
mov ecx, 0x3e7
jmp 0x1400ae1e1
mov ecx, 0x3e4
jmp 0x1400ae1e1
mov ecx, 0x3e6
jmp 0x1400ae1e1
mov ecx, 0x3e5
jmp 0x1400ae1e1
mov ecx, 0x6a9
call fcn.1400a685c
lea rcx, [0x140153320]
jmp 0x1400ae1ba
cmp ecx, 0x69
jg 0x1400ae948
je 0x1400ae941
sub ecx, 0x60
je 0x1400ae937
sub ecx, 1
je 0x1400ae923
sub ecx, 1
je 0x1400ae919
sub ecx, 1
je 0x1400ae90f
sub ecx, 1
je 0x1400ae905
sub ecx, 2
je 0x1400ae8f1
sub ecx, 1
je 0x1400ae8dc
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x269
call fcn.1400a685c
mov rcx, rax
call fcn.1400ea608
jmp 0x1400aef34
mov ecx, 0x267
mov rbx, qword [rsi]
call fcn.1400a685c
mov rdx, rbx
mov rcx, rax
jmp 0x1400ae8fb
mov rdx, qword [rsi]
lea rcx, [0x140153350]
call fcn.1400ea608
jmp 0x1400aef34
mov ecx, 0x6d1
jmp 0x1400ae555
mov ecx, 0x6cc
jmp 0x1400ae5c8
mov ecx, 0x6bd
jmp 0x1400ae871
mov ebx, dword [rsi + 0x40]
mov ecx, 0x6b4
call fcn.1400a685c
xor ecx, ecx
jmp 0x1400ae581
mov ecx, 0x6b3
jmp 0x1400ae2c9
mov ecx, 0x26a
jmp 0x1400ae8ca
sub ecx, 0x6a
je 0x1400ae9e6
sub ecx, 1
je 0x1400ae9dc
sub ecx, 1
je 0x1400ae9d2
sub ecx, 1
je 0x1400ae9b0
sub ecx, 1
je 0x1400ae9a6
sub ecx, 1
je 0x1400ae97e
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x26d
jmp 0x1400ae983
mov ecx, 0x60e
mov ebx, dword [rsi + 0x48]
mov edi, dword [rsi + 0x44]
mov esi, dword [rsi + 0x40]
call fcn.1400a685c
mov r9d, ebx
mov r8d, edi
mov edx, esi
mov rcx, rax
call fcn.1400ea608
jmp 0x1400aef34
mov ecx, 0x64a
jmp 0x1400ae8ca
mov ebx, dword [rsi + 0x44]
mov ecx, 0x60f
mov edi, dword [rsi + 0x40]
call fcn.1400a685c
mov r8d, ebx
mov edx, edi
mov rcx, rax
call fcn.1400ea608
jmp 0x1400aef34
mov ecx, 0x610
jmp 0x1400ae8ca
mov ecx, 0x26c
jmp 0x1400ae8ca
mov ecx, 0x26b
jmp 0x1400ae8ca
mov ecx, 0x26e
jmp 0x1400ae8ca
mov eax, 0x86
cmp ecx, eax
jg 0x1400aec75
je 0x1400aec48
cmp ecx, 0x7a
jg 0x1400aeafd
je 0x1400aeaf3
sub ecx, 0x72
je 0x1400aeae9
sub ecx, 1
je 0x1400aeab8
sub ecx, 1
je 0x1400aeaae
sub ecx, 1
je 0x1400aeaa4
sub ecx, 1
je 0x1400aea9a
sub ecx, 1
je 0x1400aea76
sub ecx, 1
je 0x1400aea6c
cmp ecx, 1
jne 0x1400aef34
mov ecx, 0x4a9
mov ebx, dword [rsi + 0x40]
call fcn.1400a685c
mov edx, ebx
mov rcx, rax
call fcn.1400ea608
jmp 0x1400aef34
mov ecx, 0x5c0
jmp 0x1400ae8ca
mov rbx, qword [rsi + 8]
mov ecx, 0x4ae
mov rdi, qword [rsi]
call fcn.1400a685c
mov r8, rbx
mov rdx, rdi
mov rcx, rax
call fcn.1400ea608
jmp 0x1400aef34
mov ecx, 0x4ad
jmp 0x1400ae8e1
mov ecx, 0x1fc
jmp 0x1400ae8ca
mov ecx, 0x456
jmp 0x1400ae292
mov rbx, qword [rsi]
mov ecx, 0x268
call fcn.1400a685c
mov r9, rbx
lea rcx, [rsp + 0x30]
mov r8, rax
mov edx, 0x880
call fcn.140004dcc
lea rcx, [rsp + 0x30]
call int.1400ed770
jmp 0x1400aef2f
mov ecx, 0x26f
jmp 0x1400ae8ca
mov ecx, 0x4a8
jmp 0x1400aea55
sub ecx, 0x7b
je 0x1400aec3e
sub ecx, 1
je 0x1400aec34
sub ecx, 1
je 0x1400aec2a
sub ecx, 1
je 0x1400aec13
sub ecx, 1
je 0x1400aec09
sub ecx, 3
je 0x1400aebd8
sub ecx, 1
je 0x1400aeb9c
cmp ecx, 1
jne 0x1400aef34
call fcn.140006000
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x1400aeb70
mov ecx, 0x607
call fcn.1400a685c
mov r9, rbx
lea rcx, [rsp + 0x30]
mov r8, rax
mov edx, 0xa00
call fcn.140004dcc
jmp 0x1400aeb8d
mov ecx, 0x606
call fcn.1400a685c
mov rdx, rax
lea rcx, [rsp + 0x30]
mov r8d, 0xa00
call fcn.1400ac908
mov ecx, 0x66
call fcn.1400a685c
xor r9d, r9d
jmp 0x1400aebce
mov rbx, qword [rsi]
mov ecx, 0x1f6
call fcn.1400a685c
mov r9, rbx
lea rcx, [rsp + 0x30]
mov r8, rax
mov edx, 0xa00
call fcn.140004dcc
mov ecx, 0x66
call fcn.1400a685c
mov r9d, 0x30
mov r8, rax
lea rdx, [rsp + 0x30]
jmp 0x1400aebf8
mov ecx, 0x349
call fcn.1400a685c
mov ecx, 0x348
mov rbx, rax
call fcn.1400a685c
xor r9d, r9d
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x14018b7e8]
call fcn.1400e9e04
jmp 0x1400aef34
mov ecx, 0x50e
jmp 0x1400ae292
mov ecx, 0x4bb
call fcn.1400a685c
mov rcx, rax
call fcn.1400eecf0
jmp 0x1400aef34
mov ecx, 0x1f9
jmp 0x1400ae8e1
mov ecx, 0x4ac
jmp 0x1400ae8ca
mov ecx, 0x209
jmp 0x1400ae8e1
cmp qword [0x14018b7e8], 0
je 0x1400aec63
mov edx, 0x200
lea rcx, [0x1401d6d60]
call fcn.1400ed3dc
mov ecx, 0x62c
call fcn.1400a685c
mov rcx, rax
jmp 0x1400aeadf
mov eax, 0x8f
cmp ecx, eax
jg 0x1400aedf9
je 0x1400aedbf
sub ecx, 0x87
je 0x1400aeda5
sub ecx, 1
je 0x1400aed9b
sub ecx, 1
je 0x1400aed77
sub ecx, 1
je 0x1400aed84
sub ecx, 1
je 0x1400aed6d
sub ecx, 1
je 0x1400aed32
sub ecx, 1
je 0x1400aed09
cmp ecx, 1
jne 0x1400aef34
cmp qword [0x14018b7e8], 0
je 0x1400aef34
mov edx, 0x200
lea rcx, [0x1401d6d60]
call fcn.1400ed3dc
mov rcx, qword [0x14018b7e8]
lea rdx, [0x1401d7160]
mov r8d, 0x200
call qword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x1400aef34
mov ebx, dword [rsi + 0x40]
mov ecx, 0x341
call fcn.1400a685c
mov r9d, ebx
lea rcx, [rsp + 0x30]
mov r8, rax
mov edx, 0x200
call fcn.140004dcc
lea rcx, [rsp + 0x30]
jmp 0x1400aed91
mov ebx, dword [rsi + 0x40]
mov ecx, 0x37a
call fcn.1400a685c
mov r9d, ebx
lea rcx, [rsp + 0x30]
mov r8, rax
mov edx, 0xc8
call fcn.140004dcc
lea rcx, [rsp + 0x30]
call int.1400ed770
call fcn.1400eddd0
call fcn.1400ad420
jmp 0x1400aef34
cmp dword [rsi + 0x40], 0
je 0x1400aef34
mov rcx, qword [rsi]
call fcn.1400ed5c4
jmp 0x1400aef2f
mov ecx, 0x33f
call fcn.1400a685c
mov rcx, rax
call int.1400ed770
jmp 0x1400aef34
mov ecx, 0x33e
jmp 0x1400aec68
cmp qword [0x14018b7e8], 0
je 0x1400aef34
lea rcx, [0x1401d6d60]
jmp 0x1400aeadf
cmp qword [0x14018b7e8], 0
je 0x1400aef34
mov ebx, dword [rsi + 0x40]
mov ecx, 0x51e
call fcn.1400a685c
mov r9d, ebx
lea rcx, [rsp + 0x30]
mov r8, rax
mov edx, 0x200
call fcn.140004dcc
lea rcx, [rsp + 0x30]
jmp 0x1400aeadf
sub ecx, 0x90
je 0x1400aef0d
sub ecx, 1
je 0x1400aeee4
sub ecx, 1
je 0x1400aef23
sub ecx, 1
je 0x1400aecea
sub ecx, 1
je 0x1400aeeab
sub ecx, 1
je 0x1400aee5d
cmp ecx, 1
jne 0x1400aef34
cmp qword [0x14018b7e8], 0
je 0x1400aef34
lea rcx, [0x1401d6d60]
call int.1400ed770
lea rcx, [0x1401d7560]
jmp 0x1400aed7a
cmp qword [0x14018b7e8], 0
je 0x1400aef34
mov edx, 0x200
lea rcx, [0x1401d6d60]
call fcn.1400ed3dc
mov ecx, 0x611
call fcn.1400a685c
mov rcx, rax
call int.1400ed770
mov edx, 0x200
lea rcx, [0x1401d7560]
call fcn.1400ed3c4
lea rcx, [0x140140f10]
jmp 0x1400aed7a
lea rcx, [0x1401d7160]
call fcn.1400ed758
call fcn.1400eddd0
cmp dword [rsi + 0x40], 0
je 0x1400aef34
mov ecx, 0x3a7
call fcn.1400a685c
mov ecx, 0x3a8
mov rbx, rax
call fcn.1400a685c
mov r9d, 0x40
jmp 0x1400aebf2
mov rcx, qword [0x14018b7e8]
lea rdx, [0x1401d7160]
mov r8d, 0x200
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, 0x218
call fcn.1400a685c
mov rcx, rax
jmp 0x1400aef2a
cmp qword [0x14018b7e8], 0
je 0x1400aef34
lea rcx, [0x1401d6d60]
call int.1400ed770
lea rcx, [0x1401d7160]
call fcn.1400ed758
call fcn.1400eddd0
mov rcx, qword [rbp + 0x1330]
xor rcx, rsp
call fcn.14011a150
lea r11, [rsp + 0x1440]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret