Function at 0x140033c30
Capabilities:
Delete file
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x1400d0080]
xor rax, rsp
mov qword [rbp + 0xa0], rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov dword [rsp + 0x40], 0x1584158b
mov dword [rsp + 0x44], 0x158615f7
mov dword [rsp + 0x48], 0x15bd1595
mov dword [rsp + 0x4c], 0x15b1
xor ebx, ebx
mov byte [rsp + 0x50], 1
mov ecx, ebx
mov r14d, 0x15d7
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 + rcx]
xor word [rsp + rcx*2 + 0x40], ax
inc rcx
cmp rcx, 7
jb 0x140033cc0
mov byte [rsp + 0x50], bl
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x140033d1d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, 0xffffffffffffffff
jmp 0x140034782
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x14090bc30], xmm0
movups xmmword [0x14090bc40], xmm0
movups xmmword [0x14090bc50], xmm0
movups xmmword [0x14090bc60], xmm0
movups xmmword [0x14090bc70], xmm0
movups xmmword [0x14090bc80], xmm0
mov dword [0x14090bc90], eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
add r8d, 0xa
movsxd rsi, r8d
test r8d, r8d
jle 0x140033dcf
mov rdi, rbx
lea r12, [0x140000000]
movabs r14, 0x4ec4ec4ec4ec4ec5
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, r14
mul rcx
shr rdx, 4
imul rax, rdx, 0x34
sub rcx, rax
movzx eax, byte [rcx + r12 + 0xc3cc0]
mov byte [rdi + r12 + 0x90bc30], al
inc rdi
cmp rdi, rsi
jl 0x140033d96
mov r14d, 0x15d7
lea rcx, [rbp + 0x80]
call fcn.140033970
nop
cmp qword [rbp + 0x90], 0
jne 0x140033e9c
mov dword [rsp + 0x70], 0x15f5158c
mov dword [rsp + 0x74], 0x15fa1584
mov dword [rsp + 0x78], 0x15bd1598
mov dword [rsp + 0x7c], 0x15f915b3
mov dword [rbp - 0x80], 0x15c015ab
mov dword [rbp - 0x7c], 0x158b1587
mov dword [rbp - 0x78], 0x1580158d
mov dword [rbp - 0x74], 0x15b215c5
mov dword [rbp - 0x70], 0x15a515a2
mov dword [rbp - 0x6c], 0x15ca15b9
mov dword [rbp - 0x68], 0x1583158d
mov dword [rbp - 0x64], 0x158a1581
mov dword [rbp - 0x60], 0x1582158a
mov word [rbp - 0x5c], bx
mov byte [rbp - 0x5a], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 + rbx]
xor word [rsp + rbx*2 + 0x70], ax
inc rbx
cmp rbx, 0x1a
jb 0x140033e60
mov byte [rbp - 0x5a], 0
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14003b430
lea rdx, [0x14003b610]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14003472f
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rcx, qword [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x70]
call fcn.1400aa586
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rdx, qword [rbp + 0x80]
lea rcx, [rsp + 0x70]
call fcn.14003a930
nop
mov r8d, 0x8708
lea rdx, [0x1400bb5b0]
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
lea rcx, [rsp + 0x78]
test al, al
je 0x140034060
call fcn.14003b190
test rax, rax
jne 0x140033f4b
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x70]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x78]
call fcn.14003a8c0
lea rcx, [rbp - 0x80]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov dword [rsp + 0x70], 0x15f5158c
mov dword [rsp + 0x74], 0x15fa1584
mov dword [rsp + 0x78], 0x15bd159d
mov dword [rsp + 0x7c], 0x15b215b4
mov dword [rbp - 0x80], 0x158415ba
mov dword [rbp - 0x7c], 0x159615c1
mov dword [rbp - 0x78], 0x15c4158c
mov dword [rbp - 0x74], 0x15941586
mov dword [rbp - 0x70], 0x15891582
mov dword [rbp - 0x6c], 0x158f159d
mov dword [rbp - 0x68], 0x159a15cb
mov dword [rbp - 0x64], 0x15821598
mov dword [rbp - 0x60], 0x15951581
mov dword [rbp - 0x5c], 0x15931583
mov dword [rbp - 0x58], 0x15981591
mov dword [rbp - 0x54], 0x15d61590
mov dword [rbp - 0x50], 0x158a1593
mov dword [rbp - 0x4c], 0x158c1590
mov dword [rbp - 0x48], 0x158e159e
mov dword [rbp - 0x44], 0x159815dd
mov dword [rbp - 0x40], 0x166c1596
mov dword [rbp - 0x3c], 0x1664
mov byte [rbp - 0x38], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 + rbx]
xor word [rsp + rbx*2 + 0x70], ax
inc rbx
cmp rbx, 0x2b
jb 0x140034040
mov byte [rbp - 0x38], 0
lea rdx, [rsp + 0x70]
jmp 0x140033e7b
call fcn.14003b190
test rax, rax
jne 0x140034089
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x70]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x78]
call fcn.14003a8c0
lea rcx, [rbp - 0x80]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x80]
call fcn.1400432e0
test al, al
jne 0x140034239
mov dword [rsp + 0x70], 0x15f5158c
mov dword [rsp + 0x74], 0x15fa1584
mov dword [rsp + 0x78], 0x15bd159d
mov dword [rsp + 0x7c], 0x15b215b4
mov dword [rbp - 0x80], 0x158415ba
mov dword [rbp - 0x7c], 0x159615c1
mov dword [rbp - 0x78], 0x15c4158c
mov dword [rbp - 0x74], 0x15831597
mov dword [rbp - 0x70], 0x15811580
mov dword [rbp - 0x6c], 0x159e159a
mov dword [rbp - 0x68], 0x159e158e
mov dword [rbp - 0x64], 0x158f15cd
mov dword [rbp - 0x60], 0x15941581
mov dword [rbp - 0x5c], 0x158115d1
mov dword [rbp - 0x58], 0x15951587
mov dword [rbp - 0x54], 0x15821587
mov dword [rbp - 0x50], 0x158b15d7
mov dword [rbp - 0x4c], 0x1588159c
mov dword [rbp - 0x48], 0x1595158d
mov dword [rbp - 0x44], 0x159b159e
mov dword [rbp - 0x40], 0x166615df
mov dword [rbp - 0x3c], 0x1670166e
mov dword [rbp - 0x38], 0x16701623
mov dword [rbp - 0x34], 0x1663166d
mov dword [rbp - 0x30], 0x167e1627
mov dword [rbp - 0x2c], 0x1666167c
mov dword [rbp - 0x28], 0x16691665
mov dword [rbp - 0x24], 0x166f167f
mov dword [rbp - 0x20], 0x167c166d
mov dword [rbp - 0x1c], 0x16321674
mov dword [rbp - 0x18], 0x16661677
mov dword [rbp - 0x14], 0x1660167c
mov dword [rbp - 0x10], 0x166a1672
mov word [rbp - 0xc], bx
mov byte [rbp - 0xa], 1
nop word [rax + rax]
lea eax, [r14 + rbx]
xor word [rsp + rbx*2 + 0x70], ax
inc rbx
cmp rbx, 0x42
jb 0x1400341e0
mov byte [rbp - 0xa], 0
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14003b430
lea rdx, [0x14003b610]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rcx, qword [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
jmp 0x14003472f
mov dword [rsp + 0x58], 0x1584158b
mov dword [rsp + 0x5c], 0x158615f7
mov dword [rsp + 0x60], 0x15bd1595
mov dword [rsp + 0x64], 0x15b1
mov byte [rsp + 0x68], 1
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 + rcx]
xor word [rsp + rcx*2 + 0x58], ax
inc rcx
cmp rcx, 7
jb 0x140034270
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140034660
mov dword [rsp + 0x40], 0xa9b6acb9
mov dword [rsp + 0x44], 0xb2b3aeb0
mov dword [rsp + 0x48], 0x879985f1
mov word [rsp + 0x4c], 0x100
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x29]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xc
jb 0x1400342f0
mov byte [rsp + 0x4d], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14003ae60
nop
lea rcx, [rsp + 0x70]
call fcn.1400443b0
mov qword [0x14090bc98], rax
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14003436c
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034360
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034360
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a9350
mov rax, qword [0x14090bc98]
test rax, rax
jne 0x140034410
mov dword [rsp + 0x70], 0x15f5158c
mov dword [rsp + 0x74], 0x15fa1584
mov dword [rsp + 0x78], 0x15bd159d
mov dword [rsp + 0x7c], 0x15b215b4
mov dword [rbp - 0x80], 0x158415ba
mov dword [rbp - 0x7c], 0x159615c1
mov dword [rbp - 0x78], 0x15c4158c
mov dword [rbp - 0x74], 0x15831582
mov dword [rbp - 0x70], 0x15c81593
mov dword [rbp - 0x6c], 0x159e1587
mov dword [rbp - 0x68], 0x159f1584
mov dword [rbp - 0x64], 0x159c1586
mov dword [rbp - 0x60], 0x159c1581
mov dword [rbp - 0x5c], 0x159715df
mov dword [rbp - 0x58], 0x1591158b
mov word [rbp - 0x54], bx
mov byte [rbp - 0x52], 1
nop word [rax + rax]
lea eax, [r14 + rbx]
xor word [rsp + rbx*2 + 0x70], ax
inc rbx
cmp rbx, 0x1e
jb 0x1400343f0
mov byte [rbp - 0x52], 0
lea rdx, [rsp + 0x70]
jmp 0x14003470b
mov rcx, rdi
call fcn.140037150
test al, al
jne 0x1400344d0
mov dword [rsp + 0x70], 0x15f5158c
mov dword [rsp + 0x74], 0x15fa1584
mov dword [rsp + 0x78], 0x15bd159d
mov dword [rsp + 0x7c], 0x15b215b4
mov dword [rbp - 0x80], 0x158415ba
mov dword [rbp - 0x7c], 0x159615c1
mov dword [rbp - 0x78], 0x15c4158c
mov dword [rbp - 0x74], 0x158a15a6
mov dword [rbp - 0x70], 0x15891582
mov dword [rbp - 0x6c], 0x15ba159b
mov dword [rbp - 0x68], 0x15a81582
mov dword [rbp - 0x64], 0x15ac15a9
mov dword [rbp - 0x60], 0x159115ac
mov dword [rbp - 0x5c], 0x159a1592
mov dword [rbp - 0x58], 0x15a01596
mov dword [rbp - 0x54], 0x15941594
mov dword [rbp - 0x50], 0x159d159b
mov word [rbp - 0x4c], bx
mov byte [rbp - 0x4a], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 + rbx]
xor word [rsp + rbx*2 + 0x70], ax
inc rbx
cmp rbx, 0x22
jb 0x1400344b0
mov byte [rbp - 0x4a], 0
lea rdx, [rsp + 0x70]
jmp 0x14003470b
mov rcx, rdi
call fcn.140037930
test al, al
jne 0x1400345a0
mov dword [rsp + 0x70], 0x15f5158c
mov dword [rsp + 0x74], 0x15fa1584
mov dword [rsp + 0x78], 0x15bd159d
mov dword [rsp + 0x7c], 0x15b215b4
mov dword [rbp - 0x80], 0x158415ba
mov dword [rbp - 0x7c], 0x159615c1
mov dword [rbp - 0x78], 0x15c4158c
mov dword [rbp - 0x74], 0x158a15a6
mov dword [rbp - 0x70], 0x15891582
mov dword [rbp - 0x6c], 0x15a1159b
mov dword [rbp - 0x68], 0x159e158e
mov dword [rbp - 0x64], 0x158b1583
mov dword [rbp - 0x60], 0x15b81583
mov dword [rbp - 0x5c], 0x15811590
mov dword [rbp - 0x58], 0x15b6159b
mov dword [rbp - 0x54], 0x15951580
mov dword [rbp - 0x50], 0x159d159c
mov dword [rbp - 0x4c], 0x15b6158d
mov dword [rbp - 0x48], 0x158f1592
mov dword [rbp - 0x44], 0x1589
mov byte [rbp - 0x40], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [r14 + rbx]
xor word [rsp + rbx*2 + 0x70], ax
inc rbx
cmp rbx, 0x27
jb 0x140034580
mov byte [rbp - 0x40], 0
lea rdx, [rsp + 0x70]
jmp 0x14003470b
mov rcx, rdi
call fcn.140036090
test al, al
jne 0x140034736
mov dword [rsp + 0x70], 0x15f9158c
mov dword [rsp + 0x74], 0x15fa1584
mov dword [rsp + 0x78], 0x15bd159d
mov dword [rsp + 0x7c], 0x15b215b4
mov dword [rbp - 0x80], 0x158415ba
mov dword [rbp - 0x7c], 0x159615c1
mov dword [rbp - 0x78], 0x15c4158c
mov dword [rbp - 0x74], 0x158a15a6
mov dword [rbp - 0x70], 0x15891582
mov dword [rbp - 0x6c], 0x15a7159b
mov dword [rbp - 0x68], 0x15b91586
mov dword [rbp - 0x64], 0x15821583
mov dword [rbp - 0x60], 0x15911580
mov dword [rbp - 0x5c], 0x15971595
mov dword [rbp - 0x58], 0x15b01597
mov dword [rbp - 0x54], 0x159f1587
mov dword [rbp - 0x50], 0x159d1581
mov dword [rbp - 0x4c], 0x1589158b
mov word [rbp - 0x48], bx
mov byte [rbp - 0x46], 1
nop word [rax + rax]
lea eax, [r14 + rbx]
xor word [rsp + rbx*2 + 0x70], ax
inc rbx
cmp rbx, 0x24
jb 0x140034640
mov byte [rbp - 0x46], 0
lea rdx, [rsp + 0x70]
jmp 0x14003470b
mov dword [rsp + 0x70], 0x15f5158c
mov dword [rsp + 0x74], 0x15fa1584
mov dword [rsp + 0x78], 0x15bd159d
mov dword [rsp + 0x7c], 0x15b215b4
mov dword [rbp - 0x80], 0x158415ba
mov dword [rbp - 0x7c], 0x159615c1
mov dword [rbp - 0x78], 0x15c4158c
mov dword [rbp - 0x74], 0x15891589
mov dword [rbp - 0x70], 0x158c1586
mov dword [rbp - 0x6c], 0x158e15c9
mov dword [rbp - 0x68], 0x15851599
mov dword [rbp - 0x64], 0x158b159b
mov dword [rbp - 0x60], 0x15d0159d
mov dword [rbp - 0x5c], 0x15831598
mov dword [rbp - 0x58], 0x15831585
mov dword [rbp - 0x54], 0x15c215c3
mov dword [rbp - 0x50], 0x15d61592
mov dword [rbp - 0x4c], 0x1583158a
mov dword [rbp - 0x48], 0x1588
mov byte [rbp - 0x44], 1
nop dword [rax]
lea eax, [r14 + rbx]
xor word [rsp + rbx*2 + 0x70], ax
inc rbx
cmp rbx, 0x25
jb 0x1400346f0
mov byte [rbp - 0x44], 0
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14003b430
lea rdx, [0x14003b610]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, rdi
call fcn.1400347c0
mov rdi, 0xffffffffffffffff
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x14003477f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003477a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003477a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a9350
mov rax, rdi
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1400a9330
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret