Function at 0x140042060
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.14008f690
sub rsp, rax
mov rax, qword [0x1400ecf40]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov r15, rcx
mov byte [rsp + 0x40], 0
xor ecx, ecx
mov dword [rsp + 0x44], 1
xor eax, eax
mov dword [rsp + 0x48], ecx
xor r14b, r14b
mov dword [rsp + 0x4c], ecx
mov rbx, qword [r15]
mov r12d, ecx
mov r13d, ecx
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], ecx
mov qword [r15 + 0x10], rcx
mov qword [r15 + 8], rcx
mov qword [r15 + 0x18], rcx
mov byte [rsp + 0x41], r14b
mov r14d, ecx
mov rcx, rbx
mov word [rbp + 0xf60], ax
mov byte [rbp + 0xf62], al
call fcn.1400408f0
test eax, eax
je 0x140042d9d
nop
mov rcx, rbx
call fcn.140039300
mov rcx, rbx
mov esi, eax
call fcn.140039300
shl esi, 0x10
mov rcx, rbx
add esi, eax
mov dword [rsp + 0x58], esi
call fcn.140039300
mov rcx, rbx
mov edi, eax
call fcn.140039300
shl edi, 0x10
lea edx, [rdi + rax]
mov dword [rsp + 0x5c], edx
mov rax, qword [rsp + 0x58]
mov rcx, rax
shr rcx, 0x20
cmp ecx, 0x49484452
ja 0x1400424bc
je 0x140042244
cmp ecx, 0x43674249
je 0x140042237
cmp ecx, 0x49444154
je 0x1400421a5
cmp ecx, 0x49454e44
jne 0x1400424d0
cmp dword [rsp + 0x44], 0
jne 0x140042d81
mov rdi, qword [r15 + 8]
test rdi, rdi
jne 0x1400427d9
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.no_IDAT
jmp 0x140042d94
cmp dword [rsp + 0x44], 0
jne 0x140042d81
cmp byte [rsp + 0x40], 0
je 0x1400421c0
test r12d, r12d
je 0x140042bec
mov edi, dword [rsp + 0x48]
lea ecx, [rsi + rdi]
cmp ecx, edi
jl 0x140042d9d
cmp ecx, r14d
jbe 0x140042212
test r14d, r14d
jne 0x1400421e6
mov r14d, 0x1000
cmp esi, r14d
cmova r14d, eax
cmp ecx, r14d
jbe 0x1400421f8
nop dword [rax + rax]
add r14d, r14d
cmp ecx, r14d
ja 0x1400421f0
mov rcx, qword [r15 + 8]
mov edx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x140042b91
mov qword [r15 + 8], rax
mov rdx, rdi
mov r8d, esi
add rdx, qword [r15 + 8]
mov rcx, rbx
call fcn.140039230
test eax, eax
je 0x140042c04
add edi, esi
mov dword [rsp + 0x48], edi
jmp 0x1400427c4
mov dword [rsp + 0x50], 1
jmp 0x1400424e5
cmp dword [rsp + 0x44], 0
je 0x140042cc4
mov dword [rsp + 0x44], 0
cmp esi, 0xd
jne 0x140042cac
mov rcx, rbx
call fcn.140039300
mov rcx, rbx
mov edi, eax
call fcn.140039300
shl edi, 0x10
mov rcx, rbx
add eax, edi
mov dword [rbx], eax
call fcn.140039300
mov rcx, rbx
mov edi, eax
call fcn.140039300
shl edi, 0x10
add eax, edi
mov dword [rbx + 4], eax
cmp eax, 0x1000000
ja 0x140042490
cmp dword [rbx], 0x1000000
ja 0x140042490
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x1400422c9
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400422ef
cmp dword [rbx + 0x30], 0
je 0x1400422ed
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400422ef
xor cl, cl
movzx eax, cl
mov dword [r15 + 0x20], eax
cmp eax, 0x10
ja 0x140042c94
mov ecx, 0x10116
bt ecx, eax
jae 0x140042c94
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14004232c
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140042352
cmp dword [rbx + 0x30], 0
je 0x140042350
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140042352
xor cl, cl
movzx edi, cl
mov dword [rsp + 0x54], edi
cmp edi, 6
ja 0x140042c1c
cmp edi, 3
jne 0x14004237d
cmp dword [r15 + 0x20], 0x10
je 0x140042c1c
movzx esi, dil
mov byte [rsp + 0x40], dil
jmp 0x14004238c
test dil, 1
jne 0x140042c1c
movzx esi, byte [rsp + 0x40]
cmp rax, qword [rbx + 0xc8]
jb 0x1400423aa
cmp dword [rbx + 0x30], 0
je 0x1400423bf
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x140042c34
cmp rax, qword [rbx + 0xc8]
jb 0x1400423dd
cmp dword [rbx + 0x30], 0
je 0x1400423f2
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x140042c4c
cmp rax, qword [rbx + 0xc8]
jae 0x14004240a
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140042430
cmp dword [rbx + 0x30], 0
je 0x14004242e
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x140042430
xor cl, cl
movzx r13d, cl
mov dword [rsp + 0x4c], r13d
cmp r13d, 1
ja 0x140042c7c
mov ecx, dword [rbx]
test ecx, ecx
je 0x140042c64
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x140042c64
xor edx, edx
mov eax, 0x40000000
div ecx
test sil, sil
jne 0x1400424a8
xor edx, edx
mov r8d, edi
shr r8d, 2
mov ecx, edi
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rbx + 8], r8d
cmp eax, r9d
jae 0x1400427c4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.too_large
jmp 0x140042d94
shr eax, 2
mov dword [rbx + 8], 1
cmp eax, r9d
jb 0x140042490
jmp 0x1400427c4
cmp ecx, 0x504c5445
je 0x140042682
cmp ecx, 0x74524e53
je 0x140042546
cmp dword [rsp + 0x44], 0
jne 0x140042d81
bt edx, 0x1d
jae 0x140042cdc
test esi, esi
je 0x1400427c4
jns 0x140042502
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x1400427c4
cmp qword [rbx + 0x10], 0
je 0x140042537
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, esi
jge 0x140042537
mov rax, qword [rbx + 0xc8]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
jmp 0x1400427c4
movsxd rax, esi
add qword [rbx + 0xc0], rax
jmp 0x1400427c4
cmp dword [rsp + 0x44], 0
jne 0x140042d81
cmp qword [r15 + 8], 0
jne 0x140042d57
cmp byte [rsp + 0x40], 0
je 0x1400425ee
test r12d, r12d
je 0x140042d2d
cmp esi, r12d
ja 0x140042d18
xor edi, edi
mov byte [rsp + 0x40], 4
test esi, esi
je 0x1400427c4
nop dword [rax + rax]
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x1400425af
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400425d5
cmp dword [rbx + 0x30], 0
je 0x1400425d3
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400425d5
xor dl, dl
lea eax, [rdi*4 + 3]
inc edi
mov byte [rbp + rax + 0xf70], dl
cmp edi, esi
jb 0x140042590
jmp 0x1400427c4
mov ecx, dword [rbx + 8]
test cl, 1
je 0x140042d42
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x140042d18
xor esi, esi
mov byte [rsp + 0x41], 1
cmp dword [r15 + 0x20], 0x10
jne 0x14004263d
test ecx, ecx
jle 0x1400427c4
lea rdi, [rbp + 0xf64]
mov rcx, rbx
call fcn.140039300
inc esi
mov word [rdi], ax
lea rdi, [rdi + 2]
cmp esi, dword [rbx + 8]
jl 0x140042622
jmp 0x1400427c4
test ecx, ecx
jle 0x1400427c4
lea rdi, [rbp + 0xf60]
lea r13, [0x1400b3ef8]
mov rcx, rbx
call fcn.140039300
movsxd rcx, dword [r15 + 0x20]
lea rdi, [rdi + 1]
movzx eax, al
inc esi
movzx edx, byte [rcx + r13]
imul eax, edx
mov byte [rdi - 1], al
cmp esi, dword [rbx + 8]
jl 0x140042653
mov r13d, dword [rsp + 0x4c]
jmp 0x1400427c4
cmp dword [rsp + 0x44], 0
jne 0x140042d81
cmp esi, 0x300
ja 0x140042d6c
mov eax, 0xaaaaaaab
mul esi
mov r12d, edx
shr r12d, 1
lea eax, [r12 + r12*2]
cmp eax, esi
jne 0x140042d6c
xor esi, esi
test r12d, r12d
je 0x1400427c4
nop dword [rax]
mov rdx, qword [rbx + 0xc0]
cmp rdx, qword [rbx + 0xc8]
jae 0x1400426df
movzx ecx, byte [rdx]
inc rdx
mov qword [rbx + 0xc0], rdx
jmp 0x140042706
cmp dword [rbx + 0x30], 0
je 0x140042704
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
lea rdx, [rax + 1]
mov qword [rbx + 0xc0], rdx
jmp 0x140042706
xor cl, cl
lea edi, [rsi*4]
mov byte [rbp + rdi + 0xf70], cl
cmp rdx, qword [rbx + 0xc8]
jae 0x14004272d
movzx r8d, byte [rdx]
inc rdx
mov qword [rbx + 0xc0], rdx
jmp 0x140042756
cmp dword [rbx + 0x30], 0
je 0x140042753
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx r8d, byte [rax]
lea rdx, [rax + 1]
mov qword [rbx + 0xc0], rdx
jmp 0x140042756
xor r8b, r8b
lea eax, [rdi + 1]
mov byte [rbp + rax + 0xf70], r8b
cmp rdx, qword [rbx + 0xc8]
jae 0x14004277b
movzx r8d, byte [rdx]
lea rax, [rdx + 1]
mov qword [rbx + 0xc0], rax
jmp 0x1400427a3
cmp dword [rbx + 0x30], 0
je 0x1400427a0
mov rcx, rbx
call fcn.1400391b0
mov rax, qword [rbx + 0xc0]
movzx r8d, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1400427a3
xor r8b, r8b
lea eax, [rdi + 2]
inc esi
mov byte [rbp + rax + 0xf70], r8b
lea eax, [rdi + 3]
mov byte [rbp + rax + 0xf70], 0xff
cmp esi, r12d
jb 0x1400426c0
mov rcx, rbx
call fcn.140039300
mov rcx, rbx
call fcn.140039300
jmp 0x140042100
mov eax, dword [r15 + 0x20]
imul eax, dword [rbx]
add eax, 7
shr eax, 3
imul eax, dword [rbx + 8]
inc eax
imul eax, dword [rbx + 4]
movsxd rsi, eax
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
test rax, rax
jne 0x14004280d
mov qword [r15 + 0x10], rax
jmp 0x140042d9d
movsxd rax, dword [rsp + 0x48]
mov r12d, dword [rsp + 0x50]
add rax, rdi
mov qword [rsp + 0x68], rax
lea rax, [rsi + rcx]
xor esi, esi
mov qword [rbp - 0x80], rcx
mov edx, esi
mov qword [rsp + 0x78], rcx
test r12d, r12d
mov qword [rsp + 0x60], rdi
lea rcx, [rsp + 0x60]
mov qword [rbp - 0x78], rax
sete dl
mov dword [rbp - 0x70], 1
call fcn.140040670
test eax, eax
je 0x140042bd9
mov rax, qword [rbp - 0x80]
mov edi, dword [rsp + 0x78]
sub edi, dword [rbp - 0x80]
mov qword [r15 + 0x10], rax
test rax, rax
je 0x140042d9d
mov rcx, qword [r15 + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 8], rsi
mov eax, dword [rbx + 8]
movzx esi, byte [rsp + 0x40]
lea r9d, [rax + 1]
cmp r9d, 4
jne 0x140042899
test sil, sil
je 0x140042934
movzx r14d, byte [rsp + 0x41]
test r14b, r14b
jne 0x1400428a7
mov r9d, eax
mov eax, dword [rsp + 0x54]
mov r8d, edi
mov dword [rbx + 0xc], r9d
mov rcx, r15
mov rdx, qword [r15 + 0x10]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
mov eax, dword [r15 + 0x20]
mov dword [rsp + 0x20], eax
call fcn.140041c50
test eax, eax
je 0x140042d9d
test r14b, r14b
je 0x1400429f0
mov rcx, qword [r15]
mov eax, dword [rcx + 4]
imul eax, dword [rcx]
cmp dword [r15 + 0x20], 0x10
mov rcx, qword [r15 + 0x18]
jne 0x14004297d
test eax, eax
je 0x1400429f0
cmp dword [rbx + 0xc], 2
jne 0x14004293f
movzx r8d, word [rbp + 0xf64]
xor r13d, r13d
mov edx, eax
cmp word [rcx], r8w
lea rcx, [rcx + 4]
mov eax, 0xffff
cmove ax, r13w
mov word [rcx - 2], ax
sub rdx, 1
jne 0x140042913
jmp 0x1400429f3
movzx r14d, byte [rsp + 0x41]
jmp 0x1400428a7
movzx edx, word [rbp + 0xf68]
movzx r8d, word [rbp + 0xf66]
movzx r9d, word [rbp + 0xf64]
xor r13d, r13d
cmp word [rcx], r9w
jne 0x140042971
cmp word [rcx + 2], r8w
jne 0x140042971
cmp word [rcx + 4], dx
jne 0x140042971
mov word [rcx + 6], r13w
add rcx, 8
sub rax, 1
jne 0x140042956
jmp 0x1400429f3
test eax, eax
je 0x1400429f0
cmp dword [rbx + 0xc], 2
jne 0x1400429bb
movzx r8d, byte [rbp + 0xf60]
xor r13d, r13d
mov edx, eax
nop dword [rax]
nop dword [rax + rax]
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r13d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x1400429a0
jmp 0x1400429f3
movzx edx, byte [rbp + 0xf62]
movzx r8d, byte [rbp + 0xf61]
movzx r9d, byte [rbp + 0xf60]
cmp byte [rcx], r9b
jne 0x1400429e6
cmp byte [rcx + 1], r8b
jne 0x1400429e6
cmp byte [rcx + 2], dl
jne 0x1400429e6
mov byte [rcx + 3], 0
add rcx, 4
sub rax, 1
jne 0x1400429d2
xor r13d, r13d
test r12d, r12d
je 0x140042aea
cmp dword [0x140141e30], 0
je 0x140042aea
cmp dword [rbx + 0xc], 2
jle 0x140042aea
mov rax, qword [r15]
mov r10, qword [r15 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
test ecx, ecx
je 0x140042aea
cmp dword [rax + 0xc], 3
jne 0x140042a4f
mov edx, ecx
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 3]
sub rdx, 1
jne 0x140042a30
jmp 0x140042aea
cmp dword [0x140142ec8], 0
je 0x140042aca
mov edi, ecx
nop word [rax + rax]
movzx eax, byte [r10 + 3]
movzx r11d, byte [r10]
movzx ecx, byte [r10 + 2]
test al, al
je 0x140042ab4
mov r8d, eax
mov r9d, eax
movzx eax, byte [r10 + 1]
xor edx, edx
imul eax, eax, 0xff
shr r8d, 1
add eax, r8d
div r9d
xor edx, edx
mov byte [r10 + 1], al
imul eax, r11d, 0xff
add eax, r8d
div r9d
xor edx, edx
mov r11d, eax
imul eax, ecx, 0xff
add eax, r8d
div r9d
jmp 0x140042ab7
movzx eax, cl
mov byte [r10], al
mov byte [r10 + 2], r11b
add r10, 4
sub rdi, 1
jne 0x140042a60
jmp 0x140042aea
mov edx, ecx
nop dword [rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 4]
sub rdx, 1
jne 0x140042ad0
test sil, sil
je 0x140042ba9
movzx eax, sil
mov dword [rbx + 8], eax
mov dword [rbx + 0xc], 4
mov rax, qword [r15]
mov rdi, qword [r15 + 0x18]
mov esi, dword [rax + 4]
imul esi, dword [rax]
test esi, esi
js 0x140042b91
cmp esi, 0x1fffffff
jg 0x140042b91
lea eax, [rsi*4]
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
test rax, rax
je 0x140042b91
test esi, esi
je 0x140042b81
lea r8, [rax + 2]
mov r9d, esi
nop dword [rax]
movzx edx, byte [rdi]
lea r8, [r8 + 4]
lea rdi, [rdi + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 4], al
movzx eax, byte [rbp + rdx*4 + 0xf73]
mov byte [r8 - 3], al
sub r9, 1
jne 0x140042b40
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x18], r14
jmp 0x140042bb1
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofmem
jmp 0x140042d94
test r14b, r14b
je 0x140042bb1
inc dword [rbx + 8]
mov rcx, qword [r15 + 0x10]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
mov qword [r15 + 0x10], r13
call fcn.140039300
mov rcx, rbx
call fcn.140039300
mov eax, 1
jmp 0x140042d9f
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x10], rsi
jmp 0x140042d9d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.no_PLTE
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofdata
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_ctype
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_comp_method
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_filter_method
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.0_pixel_image
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_interlace_method
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.1_2_4_8_16_bit_only
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_IHDR_len
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.multiple_IHDR
jmp 0x140042d94
mov eax, edx
mov byte [0x140137d63], dl
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, edx
shr eax, 0x10
mov byte [0x140137d61], al
mov eax, edx
shr eax, 8
mov byte [0x140137d62], al
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.XXXX_PNG_chunk_not_known
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_tRNS_len
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_before_PLTE
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_with_alpha
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_after_IDAT
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.invalid_PLTE
jmp 0x140042d94
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.first_not_IHDR
mov edx, 0x18
mov qword [rdx + rcx], rax
xor eax, eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.14008d970
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret