Function at 0x140098400
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.140157d40
sub rsp, rax
mov rax, qword [0x1401e7890]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov rbx, qword [rcx]
xor edx, edx
xor eax, eax
mov qword [rcx + 0x10], rdx
xor r15b, r15b
mov qword [rcx + 8], rdx
mov r12, rcx
mov qword [rcx + 0x18], rdx
mov byte [rsp + 0x41], r15b
mov rcx, rbx
mov r15d, 1
mov byte [rsp + 0x40], 0
mov dword [rsp + 0x44], r15d
mov r13d, edx
mov word [rbp + 0xf60], ax
mov r14d, edx
mov byte [rbp + 0xf62], al
mov dword [rsp + 0x48], edx
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x54], edx
mov dword [rsp + 0x4c], edx
call fcn.140096d60
test eax, eax
je 0x140099178
nop
mov rcx, rbx
call fcn.140090050
mov rcx, rbx
mov esi, eax
call fcn.140090050
shl esi, 0x10
mov rcx, rbx
add esi, eax
call fcn.140090050
mov rcx, rbx
mov edi, eax
call fcn.140090050
shl edi, 0x10
lea ecx, [rdi + rax]
cmp ecx, 0x49484452
ja 0x140098847
je 0x1400985cc
cmp ecx, 0x43674249
je 0x1400985bf
cmp ecx, 0x49444154
je 0x140098530
cmp ecx, 0x49454e44
jne 0x14009885b
test r15d, r15d
jne 0x14009915c
mov rdi, qword [r12 + 8]
test rdi, rdi
jne 0x140098b70
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.no_IDAT
jmp 0x14009916f
test r15d, r15d
jne 0x14009915c
cmp byte [rsp + 0x40], r15b
je 0x140098549
test r14d, r14d
je 0x140098fc4
mov eax, dword [rsp + 0x48]
lea edi, [rsi + rax]
cmp edi, eax
jl 0x140099178
cmp edi, r13d
jbe 0x14009859c
test r13d, r13d
jne 0x140098574
mov r13d, 0x1000
cmp esi, r13d
cmova r13d, esi
cmp edi, r13d
jbe 0x14009857c
add r13d, r13d
cmp edi, r13d
ja 0x140098574
mov rcx, qword [r12 + 8]
mov edx, r13d
call qword [0x140161d68]
test rax, rax
je 0x140098f66
mov qword [r12 + 8], rax
mov eax, dword [rsp + 0x48]
mov edx, eax
mov r8d, esi
add rdx, qword [r12 + 8]
mov rcx, rbx
call fcn.14008ff80
test eax, eax
je 0x140098fdc
mov dword [rsp + 0x48], edi
jmp 0x140098b5b
mov dword [rsp + 0x4c], 1
jmp 0x14009886e
test r15d, r15d
je 0x14009909c
mov dword [rsp + 0x44], 0
cmp esi, 0xd
jne 0x140099084
mov rcx, rbx
call fcn.140090050
mov rcx, rbx
mov edi, eax
call fcn.140090050
shl edi, 0x10
mov rcx, rbx
add eax, edi
mov dword [rbx], eax
call fcn.140090050
mov rcx, rbx
mov edi, eax
call fcn.140090050
shl edi, 0x10
lea ecx, [rax + rdi]
mov dword [rbx + 4], ecx
cmp ecx, 0x1000000
ja 0x14009881b
cmp dword [rbx], 0x1000000
ja 0x14009881b
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x140098651
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140098677
cmp dword [rbx + 0x30], 0
je 0x140098675
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140098677
xor cl, cl
mov rax, rbx
mov edx, 0x30
movzx eax, cl
mov dword [r12 + 0x20], eax
lea rdi, [rdx + rbx]
cmp eax, 0x10
ja 0x14009906c
mov ecx, 0x10116
bt ecx, eax
jae 0x14009906c
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x1400986c1
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400986e6
cmp dword [rdi], 0
je 0x1400986e4
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400986e6
xor cl, cl
movzx esi, cl
mov dword [rsp + 0x54], esi
cmp esi, 6
ja 0x140098ff4
cmp esi, 3
jne 0x14009870e
cmp dword [r12 + 0x20], 0x10
je 0x140098ff4
mov byte [rsp + 0x40], sil
jmp 0x140098718
test sil, 1
jne 0x140098ff4
cmp rax, qword [rbx + 0xc8]
jb 0x140098735
cmp dword [rdi], 0
je 0x14009874a
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x14009900c
cmp rax, qword [rbx + 0xc8]
jb 0x140098767
cmp dword [rdi], 0
je 0x14009877c
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x140099024
cmp rax, qword [rbx + 0xc8]
jae 0x140098794
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400987b9
cmp dword [rdi], 0
je 0x1400987b7
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400987b9
xor cl, cl
movzx r15d, cl
mov dword [rsp + 0x50], r15d
cmp r15d, 1
ja 0x140099054
mov ecx, dword [rbx]
test ecx, ecx
je 0x14009903c
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x14009903c
xor edx, edx
mov eax, 0x40000000
div ecx
cmp byte [rsp + 0x40], 0
jne 0x140098833
xor edx, edx
mov r8d, esi
shr r8d, 2
mov ecx, esi
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rbx + 8], r8d
cmp eax, r9d
jae 0x140098b56
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.too_large
jmp 0x14009916f
shr eax, 2
mov dword [rbx + 8], 1
cmp eax, r9d
jb 0x14009881b
jmp 0x140098b56
cmp ecx, 0x504c5445
je 0x1400989ff
cmp ecx, 0x74524e53
je 0x1400988cf
test r15d, r15d
jne 0x14009915c
bt ecx, 0x1d
jae 0x1400990b4
test esi, esi
je 0x140098b5b
jns 0x14009888b
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x140098b5b
cmp qword [rbx + 0x10], 0
je 0x1400988c0
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, esi
jge 0x1400988c0
mov rax, qword [rbx + 0xc8]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xc0], rax
call qword [rbx + Ordinal_26]
jmp 0x140098b5b
movsxd rax, esi
add qword [rbx + 0xc0], rax
jmp 0x140098b5b
test r15d, r15d
jne 0x14009915c
cmp qword [r12 + 8], 0
jne 0x140099132
cmp byte [rsp + 0x40], r15b
je 0x14009896e
test r14d, r14d
je 0x140099108
cmp esi, r14d
ja 0x1400990f3
xor edi, edi
mov byte [rsp + 0x40], 4
test esi, esi
je 0x140098b5b
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14009892f
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140098955
cmp dword [rbx + 0x30], 0
je 0x140098953
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140098955
xor dl, dl
lea eax, [rdi*4 + 3]
inc edi
mov byte [rbp + rax + 0xf70], dl
cmp edi, esi
jb 0x140098910
jmp 0x140098b5b
mov ecx, dword [rbx + 8]
test cl, 1
je 0x14009911d
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x1400990f3
xor esi, esi
mov byte [rsp + 0x41], 1
cmp dword [r12 + 0x20], 0x10
jne 0x1400989be
test ecx, ecx
jle 0x140098b5b
lea rdi, [rbp + 0xf64]
mov rcx, rbx
call fcn.140090050
inc esi
mov word [rdi], ax
lea rdi, [rdi + 2]
cmp esi, dword [rbx + 8]
jl 0x1400989a3
jmp 0x140098b5b
test ecx, ecx
jle 0x140098b5b
lea rdi, [rbp + 0xf60]
lea r15, [0x1401b5dc0]
mov rcx, rbx
call fcn.140090050
movsxd rcx, dword [r12 + 0x20]
lea rdi, [rdi + 1]
movzx eax, al
inc esi
movzx edx, byte [rcx + r15]
imul eax, edx
mov byte [rdi - 1], al
cmp esi, dword [rbx + 8]
jl 0x1400989d4
jmp 0x140098b56
test r15d, r15d
jne 0x14009915c
cmp esi, 0x300
ja 0x140099147
mov eax, 0xaaaaaaab
mul esi
mov r14d, edx
shr r14d, 1
mov dword [rsp + 0x58], r14d
lea eax, [r14 + r14*2]
cmp eax, esi
jne 0x140099147
test r14d, r14d
je 0x140098b56
lea rdi, [rbx + 0x30]
nop
mov rdx, qword [rbx + 0xc0]
mov rsi, rdi
cmp rdx, qword [rbx + 0xc8]
jae 0x140098a62
movzx ecx, byte [rdx]
inc rdx
mov qword [rbx + 0xc0], rdx
jmp 0x140098a88
cmp dword [rdi], 0
je 0x140098a86
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
lea rdx, [rax + 1]
mov qword [rbx + 0xc0], rdx
jmp 0x140098a88
xor cl, cl
lea r14d, [r15*4]
mov byte [rbp + r14 + 0xf70], cl
cmp rdx, qword [rbx + 0xc8]
jae 0x140098ab5
movzx r8d, byte [rdx]
lea rdi, [rbx + 0x30]
inc rdx
mov qword [rbx + 0xc0], rdx
jmp 0x140098add
cmp dword [rdi], 0
je 0x140098ada
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx r8d, byte [rax]
lea rdx, [rax + 1]
mov qword [rbx + 0xc0], rdx
jmp 0x140098add
xor r8b, r8b
lea eax, [r14 + 1]
mov byte [rbp + rax + 0xf70], r8b
cmp rdx, qword [rbx + 0xc8]
jae 0x140098b03
movzx r8d, byte [rdx]
lea rax, [rdx + 1]
mov qword [rbx + 0xc0], rax
jmp 0x140098b2d
cmp dword [rsi], 0
mov rdi, rsi
je 0x140098b2a
mov rcx, rbx
call fcn.14008ff00
mov rax, qword [rbx + 0xc0]
movzx r8d, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140098b2d
xor r8b, r8b
lea eax, [r14 + 2]
inc r15d
mov byte [rbp + rax + 0xf70], r8b
lea eax, [r14 + 3]
mov r14d, dword [rsp + 0x58]
mov byte [rbp + rax + 0xf70], 0xff
cmp r15d, r14d
jb 0x140098a40
mov r15d, dword [rsp + 0x44]
mov rcx, rbx
call fcn.140090050
mov rcx, rbx
call fcn.140090050
jmp 0x1400984a0
mov eax, dword [rbx]
imul eax, dword [r12 + 0x20]
add eax, 7
shr eax, 3
imul eax, dword [rbx + 8]
inc eax
imul eax, dword [rbx + 4]
movsxd rsi, eax
mov rcx, rsi
call qword [0x140161d70]
mov rcx, rax
test rax, rax
jne 0x140098ba6
mov qword [r12 + 0x10], rax
jmp 0x140099178
movsxd rax, dword [rsp + 0x48]
xor r13d, r13d
add rax, rdi
mov qword [rbp - 0x80], rcx
mov qword [rsp + 0x68], rax
mov edx, r13d
lea rax, [rsi + rcx]
mov qword [rsp + 0x78], rcx
mov esi, dword [rsp + 0x4c]
lea rcx, [rsp + 0x60]
test esi, esi
mov qword [rsp + 0x60], rdi
mov qword [rbp - 0x78], rax
sete dl
mov dword [rbp - 0x70], 1
call fcn.140096b90
test eax, eax
je 0x140098fb0
mov rax, qword [rbp - 0x80]
mov edi, dword [rsp + 0x78]
sub edi, dword [rbp - 0x80]
mov qword [r12 + 0x10], rax
test rax, rax
je 0x140099178
mov rcx, qword [r12 + 8]
call qword [0x140161d60]
movzx r14d, byte [rsp + 0x40]
mov qword [r12 + 8], r13
mov eax, dword [rbx + 8]
lea r9d, [rax + 1]
cmp r9d, 4
jne 0x140098c36
test r14b, r14b
je 0x140098cd2
movzx r15d, byte [rsp + 0x41]
test r15b, r15b
jne 0x140098c44
mov r9d, eax
mov eax, dword [rsp + 0x50]
mov r8d, edi
mov ecx, dword [rsp + 0x54]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov rcx, r12
mov dword [rbx + 0xc], r9d
mov eax, dword [r12 + 0x20]
mov rdx, qword [r12 + 0x10]
mov dword [rsp + 0x20], eax
call fcn.140098040
test eax, eax
je 0x140099178
test r15b, r15b
je 0x140098d80
mov rcx, qword [r12]
mov eax, dword [rcx + 4]
imul eax, dword [rcx]
cmp dword [r12 + 0x20], 0x10
mov rcx, qword [r12 + 0x18]
jne 0x140098d18
test eax, eax
je 0x140098d80
cmp dword [rbx + 0xc], 2
jne 0x140098cdd
movzx r8d, word [rbp + 0xf64]
mov edx, eax
cmp word [rcx], r8w
lea rcx, [rcx + 4]
mov eax, 0xffff
cmove ax, r13w
mov word [rcx - 2], ax
sub rdx, 1
jne 0x140098cb1
jmp 0x140098d80
movzx r15d, byte [rsp + 0x41]
jmp 0x140098c44
movzx edx, word [rbp + 0xf68]
movzx r8d, word [rbp + 0xf66]
movzx r9d, word [rbp + 0xf64]
cmp word [rcx], r9w
jne 0x140098d0c
cmp word [rcx + 2], r8w
jne 0x140098d0c
cmp word [rcx + 4], dx
jne 0x140098d0c
mov word [rcx + 6], r13w
add rcx, 8
sub rax, 1
jne 0x140098cf4
jmp 0x140098d80
test eax, eax
je 0x140098d80
cmp dword [rbx + 0xc], 2
jne 0x140098d4b
movzx r8d, byte [rbp + 0xf60]
mov edx, eax
nop dword [rax]
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r13d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x140098d30
jmp 0x140098d80
movzx edx, byte [rbp + 0xf62]
movzx r8d, byte [rbp + 0xf61]
movzx r9d, byte [rbp + 0xf60]
cmp byte [rcx], r9b
jne 0x140098d76
cmp byte [rcx + 1], r8b
jne 0x140098d76
cmp byte [rcx + 2], dl
jne 0x140098d76
mov byte [rcx + 3], r13b
add rcx, 4
sub rax, 1
jne 0x140098d62
test esi, esi
je 0x140098eba
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
mov eax, 0x24
cmp dword [rax + rdx], r13d
je 0x140098da9
mov eax, Ordinal_41
mov eax, dword [rax + rdx]
jmp 0x140098daf
mov eax, dword [0x1401ec574]
test eax, eax
je 0x140098eba
cmp dword [rbx + 0xc], 2
jle 0x140098eba
mov rax, qword [r12]
mov r10, qword [r12 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
cmp dword [rax + 0xc], 3
jne 0x140098dff
test ecx, ecx
je 0x140098eba
mov edx, ecx
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 3]
sub rdx, 1
jne 0x140098de0
jmp 0x140098eba
mov eax, Ordinal_46
cmp dword [rax + rdx], r13d
je 0x140098e14
mov eax, 0x20
mov eax, dword [rax + rdx]
jmp 0x140098e1a
mov eax, dword [0x1401ec570]
test ecx, ecx
je 0x140098eba
test eax, eax
je 0x140098e9e
mov esi, ecx
nop dword [rax + rax]
movzx eax, byte [r10 + 3]
movzx ecx, byte [r10]
movzx edi, byte [r10 + 2]
test al, al
je 0x140098e83
mov r8d, eax
mov r9d, eax
movzx eax, byte [r10 + 1]
xor edx, edx
imul eax, eax, 0xff
shr r8d, 1
add eax, r8d
div r9d
xor edx, edx
mov byte [r10 + 1], al
imul eax, ecx, 0xff
add eax, r8d
div r9d
xor edx, edx
mov r11d, eax
imul eax, edi, 0xff
add eax, r8d
div r9d
jmp 0x140098e8b
movzx r11d, cl
movzx eax, dil
mov byte [r10], al
mov byte [r10 + 2], r11b
add r10, 4
sub rsi, 1
jne 0x140098e30
jmp 0x140098eba
mov edx, ecx
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 4]
sub rdx, 1
jne 0x140098ea0
test r14b, r14b
je 0x140098f7e
mov dword [rbx + 0xc], 4
movzx eax, r14b
mov dword [rbx + 8], eax
mov rax, qword [r12]
mov rdi, qword [r12 + 0x18]
mov esi, dword [rax + 4]
imul esi, dword [rax]
test esi, esi
js 0x140098f66
lea eax, [rsi*4]
cmp esi, 0x1fffffff
jg 0x140098f66
movsxd rcx, eax
call qword [0x140161d70]
mov r14, rax
test rax, rax
je 0x140098f66
test esi, esi
je 0x140098f54
lea r8, [rax + 2]
mov r9d, esi
movzx edx, byte [rdi]
lea r8, [r8 + 4]
lea rdi, [rdi + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 4], al
movzx eax, byte [rbp + rdx*4 + 0xf73]
mov byte [r8 - 3], al
sub r9, 1
jne 0x140098f13
mov rcx, qword [r12 + 0x18]
call qword [0x140161d60]
mov qword [r12 + 0x18], r14
jmp 0x140098f86
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofmem
jmp 0x14009916f
test r15b, r15b
je 0x140098f86
inc dword [rbx + 8]
mov rcx, qword [r12 + 0x10]
call qword [0x140161d60]
mov rcx, rbx
mov qword [r12 + 0x10], r13
call fcn.140090050
mov rcx, rbx
call fcn.140090050
mov eax, 1
jmp 0x14009917a
mov rcx, qword [rbp - 0x80]
call qword [0x140161d60]
mov qword [r12 + 0x10], r13
jmp 0x140099178
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.no_PLTE
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofdata
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_ctype
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_comp_method
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_filter_method
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.0_pixel_image
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_interlace_method
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.1_2_4_8_16_bit_only
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_IHDR_len
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.multiple_IHDR
jmp 0x14009916f
mov eax, ecx
mov byte [0x1401e901b], cl
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, ecx
shr eax, 0x10
mov byte [0x1401e9019], al
mov eax, ecx
shr eax, 8
mov byte [0x1401e901a], al
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.XXXX_PNG_chunk_not_known
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_tRNS_len
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_before_PLTE
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_with_alpha
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_after_IDAT
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.invalid_PLTE
jmp 0x14009916f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.first_not_IHDR
mov edx, 0x30
mov qword [rdx + rcx], rax
xor eax, eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.140156eb0
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret