Function at 0x18000b3f0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.180060d00
sub rsp, rax
mov rax, qword [0x180076010]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov r12, rcx
mov qword [rsp + 0x58], rcx
xor ecx, ecx
mov byte [rsp + 0x41], 0
xor eax, eax
mov dword [rsp + 0x4c], ecx
mov r15d, ecx
mov dword [rsp + 0x44], ecx
mov rbx, qword [r12]
mov r14d, ecx
mov r13d, ecx
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], ecx
mov qword [r12 + 0x10], rcx
mov qword [r12 + 8], rcx
mov qword [r12 + 0x18], rcx
mov rcx, rbx
mov byte [rsp + 0x40], 0
mov word [rbp + 0xf60], ax
mov byte [rbp + 0xf62], al
mov dword [rsp + 0x48], 1
call fcn.180009d70
test eax, eax
je 0x18000c516
mov rcx, rbx
call fcn.180001fc0
mov rcx, rbx
mov esi, eax
call fcn.180001fc0
shl esi, 0x10
mov rcx, rbx
add esi, eax
call fcn.180001fc0
mov rcx, rbx
mov edi, eax
call fcn.180001fc0
shl edi, 0x10
lea ecx, [rdi + rax]
cmp ecx, 0x49484452
ja 0x18000b9ce
je 0x18000b5cc
cmp ecx, 0x43674249
je 0x18000b5bf
cmp ecx, 0x49444154
je 0x18000b52e
cmp ecx, 0x49454e44
jne 0x18000b9e2
cmp dword [rsp + 0x48], 0
jne 0x18000c4f3
mov rdi, qword [r12 + 8]
test rdi, rdi
jne 0x18000be6f
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.no_IDAT
jmp 0x18000c50d
cmp dword [rsp + 0x48], 0
jne 0x18000c4f3
cmp byte [rsp + 0x41], 0
je 0x18000b549
test r14d, r14d
je 0x18000c2c9
mov eax, dword [rsp + 0x4c]
lea edi, [rsi + rax]
cmp edi, eax
jl 0x18000c516
cmp edi, r15d
jbe 0x18000b59c
test r15d, r15d
jne 0x18000b574
mov r15d, 0x1000
cmp esi, r15d
cmova r15d, esi
cmp edi, r15d
jbe 0x18000b57c
add r15d, r15d
cmp edi, r15d
ja 0x18000b574
mov rcx, qword [r12 + 8]
mov edx, r15d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18000c2e8
mov qword [r12 + 8], rax
mov eax, dword [rsp + 0x4c]
mov edx, eax
mov r8d, esi
add rdx, qword [r12 + 8]
mov rcx, rbx
call fcn.180001ef0
test eax, eax
je 0x18000c307
mov dword [rsp + 0x4c], edi
jmp 0x18000be5a
mov dword [rsp + 0x50], 1
jmp 0x18000b9f7
cmp dword [rsp + 0x48], 0
je 0x18000c3ff
xor r13d, r13d
mov dword [rsp + 0x48], r13d
cmp esi, 0xd
jne 0x18000c3e0
mov rcx, rbx
call fcn.180001fc0
mov rcx, rbx
mov edi, eax
call fcn.180001fc0
shl edi, 0x10
mov rcx, rbx
add eax, edi
mov dword [rbx], eax
call fcn.180001fc0
mov rcx, rbx
mov edi, eax
call fcn.180001fc0
shl edi, 0x10
lea ecx, [rax + rdi]
mov dword [rbx + 4], ecx
cmp ecx, 0x1000000
ja 0x18000b99b
cmp dword [rbx], 0x1000000
ja 0x18000b99b
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x18000b653
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18000b6c7
cmp dword [rbx + 0x30], r13d
je 0x18000b6c5
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000b69f
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x18000b6af
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18000b6c7
xor cl, cl
movzx eax, cl
mov dword [r12 + 0x20], eax
cmp eax, 1
je 0x18000b6eb
cmp eax, 0x10
ja 0x18000c326
mov ecx, 0x10114
bt ecx, eax
jae 0x18000c326
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x18000b70a
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18000b77e
cmp dword [rbx + 0x30], r13d
je 0x18000b77c
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000b756
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x18000b766
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18000b77e
xor cl, cl
movzx esi, cl
mov dword [rsp + 0x54], esi
cmp esi, 6
ja 0x18000c345
cmp esi, 3
jne 0x18000b7a6
cmp dword [r12 + 0x20], 0x10
je 0x18000c345
mov byte [rsp + 0x41], sil
jmp 0x18000b7b0
test sil, 1
jne 0x18000c345
cmp rax, qword [rbx + 0xc8]
jb 0x18000b81c
cmp dword [rbx + 0x30], r13d
je 0x18000b831
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000b805
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x18000b815
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x18000c364
cmp rax, qword [rbx + 0xc8]
jb 0x18000b89d
cmp dword [rbx + 0x30], r13d
je 0x18000b8b2
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000b886
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x18000b896
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x18000c383
cmp rax, qword [rbx + 0xc8]
jae 0x18000b8ca
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18000b93e
cmp dword [rbx + 0x30], r13d
je 0x18000b93c
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000b916
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x18000b926
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18000b93e
xor cl, cl
movzx r13d, cl
cmp r13d, 1
ja 0x18000c3c1
mov ecx, dword [rbx]
test ecx, ecx
je 0x18000c3a2
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x18000c3a2
xor edx, edx
mov eax, 0x40000000
div ecx
cmp byte [rsp + 0x41], 0
jne 0x18000b9ba
xor edx, edx
mov r8d, esi
shr r8d, 2
mov ecx, esi
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rbx + 8], r8d
cmp eax, r9d
jae 0x18000be5a
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.too_large
jmp 0x18000c50d
shr eax, 2
mov dword [rbx + 8], 1
cmp eax, r9d
jb 0x18000b99b
jmp 0x18000be5a
cmp ecx, 0x504c5445
je 0x18000bbf1
cmp ecx, 0x74524e53
je 0x18000ba58
cmp dword [rsp + 0x48], 0
jne 0x18000c4f3
bt ecx, 0x1d
jae 0x18000c41e
test esi, esi
je 0x18000be5a
jns 0x18000ba14
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x18000be5a
cmp qword [rbx + 0x10], 0
je 0x18000ba49
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, esi
jge 0x18000ba49
mov rax, qword [rbx + 0xc8]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
jmp 0x18000be5a
movsxd rax, esi
add qword [rbx + 0xc0], rax
jmp 0x18000be5a
cmp dword [rsp + 0x48], 0
jne 0x18000c4f3
cmp qword [r12 + 8], 0
jne 0x18000c4bb
cmp byte [rsp + 0x41], 0
je 0x18000bb57
mov edi, dword [rsp + 0x44]
test edi, edi
je 0x18000c483
cmp esi, edi
ja 0x18000c464
xor r14d, r14d
mov byte [rsp + 0x41], 4
test esi, esi
je 0x18000be57
nop
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x18000babf
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18000bb32
cmp dword [rbx + 0x30], 0
je 0x18000bb30
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000bb0a
mov dword [rbx + 0x30], eax
lea rax, [rbx + 0x39]
mov qword [rbx + 0xc8], rax
mov byte [rdi], 0
jmp 0x18000bb1a
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18000bb32
xor dl, dl
lea eax, [r14*4 + 3]
inc r14d
mov byte [rbp + rax + 0xf70], dl
cmp r14d, esi
jb 0x18000baa0
mov r14d, dword [rsp + 0x44]
jmp 0x18000be5a
mov ecx, dword [rbx + 8]
test cl, 1
je 0x18000c49f
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x18000c464
xor esi, esi
mov byte [rsp + 0x40], 1
cmp dword [r12 + 0x20], 0x10
jne 0x18000bbab
test ecx, ecx
jle 0x18000be5a
lea rdi, [rbp + 0xf64]
nop dword [rax]
mov rcx, rbx
call fcn.180001fc0
inc esi
mov word [rdi], ax
lea rdi, [rdi + 2]
cmp esi, dword [rbx + 8]
jl 0x18000bb90
jmp 0x18000be5a
test ecx, ecx
jle 0x18000be5a
lea rdi, [rbp + 0xf60]
lea r14, [0x180062cf0]
mov rcx, rbx
call fcn.180001fc0
movsxd rcx, dword [r12 + 0x20]
lea rdi, [rdi + 1]
movzx eax, al
inc esi
movzx edx, byte [rcx + r14]
imul eax, edx
mov byte [rdi - 1], al
cmp esi, dword [rbx + 8]
jl 0x18000bbc1
mov r14d, dword [rsp + 0x44]
jmp 0x18000be5a
cmp dword [rsp + 0x48], 0
jne 0x18000c4f3
cmp esi, 0x300
ja 0x18000c4d7
mov eax, 0xaaaaaaab
mul esi
mov edi, edx
shr edi, 1
mov dword [rsp + 0x44], edi
lea eax, [rdi + rdi*2]
cmp eax, esi
jne 0x18000c4d7
xor r14d, r14d
test edi, edi
je 0x18000be57
mov r8, qword [rbx + 0xc0]
xor r12d, r12d
nop word [rax + rax]
mov rdx, qword [rbx + 0xc8]
cmp r8, rdx
jae 0x18000bc55
movzx ecx, byte [r8]
inc r8
jmp 0x18000bcca
cmp dword [rbx + 0x30], r12d
je 0x18000bcf4
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000bcac
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r12d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r12b
mov rdx, qword [rbx + 0xc8]
jmp 0x18000bcbc
cdqe
lea rdx, [rbx + 0x38]
add rdx, rax
mov qword [rbx + 0xc8], rdx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xc0], r8
lea esi, [r14*4]
mov byte [rbp + rsi + 0xf70], cl
mov r9d, esi
cmp r8, rdx
jae 0x18000bd07
movzx r9d, byte [r8]
inc r8
jmp 0x18000bd7d
lea esi, [r14*4]
mov byte [rbp + rsi + 0xf70], r12b
mov r9d, esi
cmp dword [rbx + 0x30], r12d
je 0x18000bda7
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000bd5e
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r12d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r12b
mov rdx, qword [rbx + 0xc8]
jmp 0x18000bd6e
cdqe
lea rdx, [rbx + 0x38]
add rdx, rax
mov qword [rbx + 0xc8], rdx
mov rax, qword [rbx + 0xc0]
movzx r9d, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xc0], r8
lea eax, [rsi + 1]
mov byte [rbp + rax + 0xf70], r9b
cmp r8, rdx
jae 0x18000bdb3
movzx edx, byte [r8]
inc r8
mov qword [rbx + 0xc0], r8
jmp 0x18000be28
lea eax, [r9 + 1]
mov byte [rbp + rax + 0xf70], r12b
cmp dword [rbx + 0x30], r12d
je 0x18000be26
mov rax, qword [rbx + 0x10]
lea rdi, [rbx + 0x38]
mov r8d, dword [rbx + 0x34]
mov rdx, rdi
mov rcx, qword [rbx + 0x28]
call rax
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x18000bdff
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r12d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r12b
jmp 0x18000be0f
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xc0], r8
jmp 0x18000be28
xor dl, dl
lea eax, [rsi + 2]
inc r14d
mov byte [rbp + rax + 0xf70], dl
lea eax, [rsi + 3]
mov byte [rbp + rax + 0xf70], 0xff
cmp r14d, dword [rsp + 0x44]
jb 0x18000bc40
mov r12, qword [rsp + 0x58]
mov r14d, dword [rsp + 0x44]
jmp 0x18000be5a
mov r14d, edi
mov rcx, rbx
call fcn.180001fc0
mov rcx, rbx
call fcn.180001fc0
jmp 0x18000b495
mov eax, dword [rbx]
imul eax, dword [r12 + 0x20]
add eax, 7
shr eax, 3
imul eax, dword [rbx + 8]
inc eax
imul eax, dword [rbx + 4]
movsxd rsi, eax
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
test rax, rax
jne 0x18000bea5
mov qword [r12 + 0x10], rax
jmp 0x18000c516
movsxd rax, dword [rsp + 0x4c]
xor r15d, r15d
add rax, rdi
mov qword [rbp - 0x80], rcx
mov qword [rsp + 0x68], rax
mov edx, r15d
lea rax, [rsi + rcx]
mov qword [rsp + 0x78], rcx
mov esi, dword [rsp + 0x50]
lea rcx, [rsp + 0x60]
test esi, esi
mov qword [rsp + 0x60], rdi
mov qword [rbp - 0x78], rax
sete dl
mov dword [rbp - 0x70], 1
call fcn.180009ac0
test eax, eax
je 0x18000c2b5
mov rax, qword [rbp - 0x80]
mov edi, dword [rsp + 0x78]
sub edi, dword [rbp - 0x80]
mov qword [r12 + 0x10], rax
test rax, rax
je 0x18000c516
mov rcx, qword [r12 + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx r14d, byte [rsp + 0x41]
mov qword [r12 + 8], r15
mov eax, dword [rbx + 8]
lea r9d, [rax + 1]
cmp r9d, 4
jne 0x18000bf31
test r14b, r14b
je 0x18000bf3b
cmp byte [rsp + 0x40], r15b
jne 0x18000bf3b
mov r9d, eax
mov eax, dword [rsp + 0x54]
mov r8d, edi
mov dword [rbx + 0xc], r9d
mov rcx, r12
mov rdx, qword [r12 + 0x10]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
mov eax, dword [r12 + 0x20]
mov dword [rsp + 0x20], eax
call fcn.18000b020
test eax, eax
je 0x18000c516
movzx r10d, byte [rsp + 0x40]
test r10b, r10b
je 0x18000c070
mov rcx, qword [r12]
mov eax, dword [rcx + 4]
imul eax, dword [rcx]
cmp dword [r12 + 0x20], 0x10
mov rcx, qword [r12 + 0x18]
jne 0x18000c00c
test eax, eax
je 0x18000c070
cmp dword [rbx + 0xc], 2
jne 0x18000bfd1
movzx r8d, word [rbp + 0xf64]
mov edx, eax
nop dword [rax + rax]
cmp word [rcx], r8w
lea rcx, [rcx + 4]
mov eax, 0xffff
cmove ax, r15w
mov word [rcx - 2], ax
sub rdx, 1
jne 0x18000bfb0
jmp 0x18000c070
movzx edx, word [rbp + 0xf68]
movzx r8d, word [rbp + 0xf66]
movzx r9d, word [rbp + 0xf64]
cmp word [rcx], r9w
jne 0x18000c000
cmp word [rcx + 2], r8w
jne 0x18000c000
cmp word [rcx + 4], dx
jne 0x18000c000
mov word [rcx + 6], r15w
add rcx, 8
sub rax, 1
jne 0x18000bfe8
jmp 0x18000c070
test eax, eax
je 0x18000c070
cmp dword [rbx + 0xc], 2
jne 0x18000c03b
movzx r8d, byte [rbp + 0xf60]
mov edx, eax
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r15d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x18000c020
jmp 0x18000c070
movzx edx, byte [rbp + 0xf62]
movzx r8d, byte [rbp + 0xf61]
movzx r9d, byte [rbp + 0xf60]
cmp byte [rcx], r9b
jne 0x18000c066
cmp byte [rcx + 1], r8b
jne 0x18000c066
cmp byte [rcx + 2], dl
jne 0x18000c066
mov byte [rcx + 3], r15b
add rcx, 4
sub rax, 1
jne 0x18000c052
mov r15d, dword [0x180076fa8]
test esi, esi
je 0x18000c1c0
mov rax, qword gs:[0x58]
mov rdx, qword [rax + r15*8]
mov eax, 0x1c
cmp dword [rax + rdx], 0
je 0x18000c0a1
mov eax, 0x20
mov eax, dword [rax + rdx]
jmp 0x18000c0a7
mov eax, dword [0x180077050]
test eax, eax
je 0x18000c1c0
cmp dword [rbx + 0xc], 2
jle 0x18000c1c0
mov rax, qword [r12]
mov r10, qword [r12 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
cmp dword [rax + 0xc], 3
jne 0x18000c0ff
test ecx, ecx
je 0x18000c1ba
mov edx, ecx
nop dword [rax + rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 3]
sub rdx, 1
jne 0x18000c0e0
jmp 0x18000c1ba
mov eax, 0x24
cmp dword [rax + rdx], 0
je 0x18000c114
mov eax, 0x18
mov eax, dword [rax + rdx]
jmp 0x18000c11a
mov eax, dword [0x180077004]
test ecx, ecx
je 0x18000c1ba
test eax, eax
je 0x18000c19e
mov esi, ecx
nop dword [rax + rax]
movzx eax, byte [r10 + 3]
movzx ecx, byte [r10]
movzx edi, byte [r10 + 2]
test al, al
je 0x18000c183
mov r8d, eax
mov r9d, eax
movzx eax, byte [r10 + 1]
xor edx, edx
imul eax, eax, 0xff
shr r8d, 1
add eax, r8d
div r9d
xor edx, edx
mov byte [r10 + 1], al
imul eax, ecx, 0xff
add eax, r8d
div r9d
xor edx, edx
mov r11d, eax
imul eax, edi, 0xff
add eax, r8d
div r9d
jmp 0x18000c18b
movzx r11d, cl
movzx eax, dil
mov byte [r10], al
mov byte [r10 + 2], r11b
add r10, 4
sub rsi, 1
jne 0x18000c130
jmp 0x18000c1ba
mov edx, ecx
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 4]
sub rdx, 1
jne 0x18000c1a0
movzx r10d, byte [rsp + 0x40]
test r14b, r14b
je 0x18000c281
mov dword [rbx + 0xc], 4
movzx eax, r14b
mov dword [rbx + 8], eax
mov rax, qword [r12]
mov rdi, qword [r12 + 0x18]
mov esi, dword [rax + 4]
imul esi, dword [rax]
test esi, esi
js 0x18000c268
cmp esi, 0x1fffffff
jg 0x18000c268
lea eax, [rsi*4]
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
test rax, rax
je 0x18000c268
test esi, esi
je 0x18000c256
lea r8, [rax + 2]
mov r9d, esi
movzx edx, byte [rdi]
lea r8, [r8 + 4]
lea rdi, [rdi + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 4], al
movzx eax, byte [rbp + rdx*4 + 0xf73]
mov byte [r8 - 3], al
sub r9, 1
jne 0x18000c215
mov rcx, qword [r12 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r12 + 0x18], r14
jmp 0x18000c289
mov rax, qword gs:[0x58]
lea rdx, str.outofmem
mov rax, qword [rax + r15*8]
jmp 0x18000c50d
test r10b, r10b
je 0x18000c289
inc dword [rbx + 8]
mov rcx, qword [r12 + 0x10]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
mov rcx, rbx
mov qword [r12 + 0x10], rax
call fcn.180001fc0
mov rcx, rbx
call fcn.180001fc0
mov eax, 1
jmp 0x18000c518
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r12 + 0x10], r15
jmp 0x18000c516
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.no_PLTE
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.outofmem
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.outofdata
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.1_2_4_8_16_bit_only
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_ctype
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_comp_method
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_filter_method
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.0_pixel_image
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_interlace_method
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_IHDR_len
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.multiple_IHDR
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov eax, ecx
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, ecx
shr eax, 0x10
mov byte [0x180076039], al
mov eax, ecx
shr eax, 8
mov byte [0x18007603a], al
mov rax, qword gs:[0x58]
mov byte [0x18007603b], cl
mov rax, qword [rax + rdx*8]
lea rdx, str.XXXX_PNG_chunk_not_known
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_tRNS_len
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_before_PLTE
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_with_alpha
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_after_IDAT
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.invalid_PLTE
jmp 0x18000c50d
mov edx, dword [0x180076fa8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.first_not_IHDR
mov ecx, 0x28
mov qword [rcx + rax], rdx
xor eax, eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.18005f8f0
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret