Function at 0x14005a180
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.140085180
sub rsp, rax
mov rax, qword [0x1400a8010]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov r15, rcx
mov qword [rsp + 0x58], rcx
xor ecx, ecx
mov byte [rsp + 0x40], 0
xor eax, eax
mov dword [rsp + 0x4c], ecx
xor r12b, r12b
mov dword [rsp + 0x44], ecx
mov rbx, qword [r15]
mov r14d, ecx
mov r13d, ecx
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], ecx
mov qword [r15 + 0x10], rcx
mov qword [r15 + 8], rcx
mov qword [r15 + 0x18], rcx
mov byte [rsp + 0x41], r12b
mov r12d, ecx
mov rcx, rbx
mov word [rbp + 0xf60], ax
mov byte [rbp + 0xf62], al
mov dword [rsp + 0x48], 1
call fcn.140058b30
test eax, eax
je 0x14005b215
mov rcx, rbx
call fcn.140050bb0
mov rcx, rbx
mov esi, eax
call fcn.140050bb0
shl esi, 0x10
mov rcx, rbx
add esi, eax
call fcn.140050bb0
mov rcx, rbx
mov edi, eax
call fcn.140050bb0
shl edi, 0x10
lea ecx, [rdi + rax]
cmp ecx, 0x49484452
ja 0x14005a746
je 0x14005a35c
cmp ecx, 0x43674249
je 0x14005a34f
cmp ecx, 0x49444154
je 0x14005a2b5
cmp ecx, 0x49454e44
jne 0x14005a75a
cmp dword [rsp + 0x48], 0
jne 0x14005b1f9
mov rdi, qword [r15 + 8]
test rdi, rdi
jne 0x14005abe3
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.no_IDAT
jmp 0x14005b20c
cmp dword [rsp + 0x48], 0
jne 0x14005b1f9
cmp byte [rsp + 0x40], 0
je 0x14005a2d0
test r14d, r14d
je 0x14005b04c
cmp esi, 0x40000000
ja 0x14005b07c
mov eax, dword [rsp + 0x4c]
lea edi, [rsi + rax]
cmp edi, eax
jl 0x14005b215
cmp edi, r12d
jbe 0x14005a32d
test r12d, r12d
jne 0x14005a307
mov r12d, 0x1000
cmp esi, r12d
cmova r12d, esi
cmp edi, r12d
jbe 0x14005a30f
add r12d, r12d
cmp edi, r12d
ja 0x14005a307
mov rcx, qword [r15 + 8]
mov edx, r12d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x14005aff1
mov qword [r15 + 8], rax
mov eax, dword [rsp + 0x4c]
mov edx, eax
mov r8d, esi
add rdx, qword [r15 + 8]
mov rcx, rbx
call fcn.140050ae0
test eax, eax
je 0x14005b064
mov dword [rsp + 0x4c], edi
jmp 0x14005abce
mov dword [rsp + 0x50], 1
jmp 0x14005a76f
cmp dword [rsp + 0x48], 0
je 0x14005b13c
xor r13d, r13d
mov dword [rsp + 0x48], r13d
cmp esi, 0xd
jne 0x14005b124
mov rcx, rbx
call fcn.140050bb0
mov rcx, rbx
mov edi, eax
call fcn.140050bb0
shl edi, 0x10
mov rcx, rbx
add eax, edi
mov dword [rbx], eax
call fcn.140050bb0
mov rcx, rbx
mov edi, eax
call fcn.140050bb0
shl edi, 0x10
lea ecx, [rax + rdi]
mov dword [rbx + 4], ecx
cmp ecx, 0x1000000
ja 0x14005a71a
cmp dword [rbx], 0x1000000
ja 0x14005a71a
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14005a3e3
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14005a454
cmp dword [rbx + 0x30], r13d
je 0x14005a452
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005a42c
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x14005a43c
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14005a454
xor cl, cl
movzx eax, cl
mov dword [r15 + 0x20], eax
cmp eax, 1
je 0x14005a477
cmp eax, 0x10
ja 0x14005b094
mov ecx, 0x10114
bt ecx, eax
jae 0x14005b094
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14005a496
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14005a507
cmp dword [rbx + 0x30], r13d
je 0x14005a505
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005a4df
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x14005a4ef
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14005a507
xor cl, cl
movzx esi, cl
mov dword [rsp + 0x54], esi
cmp esi, 6
ja 0x14005b0ac
cmp esi, 3
jne 0x14005a52e
cmp dword [r15 + 0x20], 0x10
je 0x14005b0ac
mov byte [rsp + 0x40], sil
jmp 0x14005a538
test sil, 1
jne 0x14005b0ac
cmp rax, qword [rbx + 0xc8]
jb 0x14005a5a1
cmp dword [rbx + 0x30], r13d
je 0x14005a5b6
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005a58a
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x14005a59a
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x14005b0c4
cmp rax, qword [rbx + 0xc8]
jb 0x14005a61f
cmp dword [rbx + 0x30], r13d
je 0x14005a634
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005a608
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x14005a618
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x14005b0dc
cmp rax, qword [rbx + 0xc8]
jae 0x14005a64c
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14005a6bd
cmp dword [rbx + 0x30], r13d
je 0x14005a6bb
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005a695
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r13d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r13b
jmp 0x14005a6a5
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14005a6bd
xor cl, cl
movzx r13d, cl
cmp r13d, 1
ja 0x14005b10c
mov ecx, dword [rbx]
test ecx, ecx
je 0x14005b0f4
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x14005b0f4
xor edx, edx
mov eax, 0x40000000
div ecx
cmp byte [rsp + 0x40], 0
jne 0x14005a732
xor edx, edx
mov r8d, esi
shr r8d, 2
mov ecx, esi
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rbx + 8], r8d
cmp eax, r9d
jae 0x14005abce
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.too_large
jmp 0x14005b20c
shr eax, 2
mov dword [rbx + 8], 1
cmp eax, r9d
jb 0x14005a71a
jmp 0x14005abce
cmp ecx, 0x504c5445
je 0x14005a96f
cmp ecx, 0x74524e53
je 0x14005a7d0
cmp dword [rsp + 0x48], 0
jne 0x14005b1f9
bt ecx, 0x1d
jae 0x14005b154
test esi, esi
je 0x14005abce
jns 0x14005a78c
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x14005abce
cmp qword [rbx + 0x10], 0
je 0x14005a7c1
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, esi
jge 0x14005a7c1
mov rax, qword [rbx + 0xc8]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
jmp 0x14005abce
movsxd rax, esi
add qword [rbx + 0xc0], rax
jmp 0x14005abce
cmp dword [rsp + 0x48], 0
jne 0x14005b1f9
cmp qword [r15 + 8], 0
jne 0x14005b1cf
cmp byte [rsp + 0x40], 0
je 0x14005a8d4
mov edi, dword [rsp + 0x44]
test edi, edi
je 0x14005b1a5
cmp esi, edi
ja 0x14005b190
xor r14d, r14d
mov byte [rsp + 0x40], 4
test esi, esi
je 0x14005abcb
nop word [rax + rax]
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14005a83f
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14005a8af
cmp dword [rbx + 0x30], 0
je 0x14005a8ad
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005a887
mov dword [rbx + 0x30], eax
lea rax, [rbx + 0x39]
mov qword [rbx + 0xc8], rax
mov byte [rdi], 0
jmp 0x14005a897
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14005a8af
xor dl, dl
lea eax, [r14*4 + 3]
inc r14d
mov byte [rbp + rax + 0xf70], dl
cmp r14d, esi
jb 0x14005a820
mov r14d, dword [rsp + 0x44]
jmp 0x14005abce
mov ecx, dword [rbx + 8]
test cl, 1
je 0x14005b1ba
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x14005b190
xor esi, esi
mov byte [rsp + 0x41], 1
cmp dword [r15 + 0x20], 0x10
jne 0x14005a923
test ecx, ecx
jle 0x14005abce
lea rdi, [rbp + 0xf64]
mov rcx, rbx
call fcn.140050bb0
inc esi
mov word [rdi], ax
lea rdi, [rdi + 2]
cmp esi, dword [rbx + 8]
jl 0x14005a908
jmp 0x14005abce
test ecx, ecx
jle 0x14005abce
lea rdi, [rbp + 0xf60]
lea r14, [0x140090a40]
nop dword [rax]
mov rcx, rbx
call fcn.140050bb0
movsxd rcx, dword [r15 + 0x20]
lea rdi, [rdi + 1]
movzx eax, al
inc esi
movzx edx, byte [rcx + r14]
imul eax, edx
mov byte [rdi - 1], al
cmp esi, dword [rbx + 8]
jl 0x14005a940
mov r14d, dword [rsp + 0x44]
jmp 0x14005abce
cmp dword [rsp + 0x48], 0
jne 0x14005b1f9
cmp esi, 0x300
ja 0x14005b1e4
mov eax, 0xaaaaaaab
mul esi
mov edi, edx
shr edi, 1
mov dword [rsp + 0x44], edi
lea eax, [rdi + rdi*2]
cmp eax, esi
jne 0x14005b1e4
xor r14d, r14d
test edi, edi
je 0x14005abcb
mov r8, qword [rbx + 0xc0]
xor r15d, r15d
nop word [rax + rax]
mov rdx, qword [rbx + 0xc8]
cmp r8, rdx
jae 0x14005a9d5
movzx ecx, byte [r8]
inc r8
jmp 0x14005aa47
cmp dword [rbx + 0x30], r15d
je 0x14005aa71
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005aa29
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r15d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r15b
mov rdx, qword [rbx + 0xc8]
jmp 0x14005aa39
cdqe
lea rdx, [rbx + 0x38]
add rdx, rax
mov qword [rbx + 0xc8], rdx
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xc0], r8
lea esi, [r14*4]
mov byte [rbp + rsi + 0xf70], cl
mov r9d, esi
cmp r8, rdx
jae 0x14005aa84
movzx r9d, byte [r8]
inc r8
jmp 0x14005aaf7
lea esi, [r14*4]
mov byte [rbp + rsi + 0xf70], r15b
mov r9d, esi
cmp dword [rbx + 0x30], r15d
je 0x14005ab1e
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005aad8
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r15d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r15b
mov rdx, qword [rbx + 0xc8]
jmp 0x14005aae8
cdqe
lea rdx, [rbx + 0x38]
add rdx, rax
mov qword [rbx + 0xc8], rdx
mov rax, qword [rbx + 0xc0]
movzx r9d, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xc0], r8
lea eax, [rsi + 1]
mov byte [rbp + rax + 0xf70], r9b
cmp r8, rdx
jae 0x14005ab2a
movzx edx, byte [r8]
inc r8
mov qword [rbx + 0xc0], r8
jmp 0x14005ab9c
lea eax, [r9 + 1]
mov byte [rbp + rax + 0xf70], r15b
cmp dword [rbx + 0x30], r15d
je 0x14005ab9a
mov r8d, dword [rbx + 0x34]
lea rdi, [rbx + 0x38]
mov rcx, qword [rbx + 0x28]
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xd0]
add dword [rbx + 0xb8], ecx
mov qword [rbx + 0xc0], rdi
test eax, eax
jne 0x14005ab73
lea rax, [rbx + 0x39]
mov dword [rbx + 0x30], r15d
mov qword [rbx + 0xc8], rax
mov byte [rdi], r15b
jmp 0x14005ab83
cdqe
lea rcx, [rbx + 0x38]
add rcx, rax
mov qword [rbx + 0xc8], rcx
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xc0], r8
jmp 0x14005ab9c
xor dl, dl
lea eax, [rsi + 2]
inc r14d
mov byte [rbp + rax + 0xf70], dl
lea eax, [rsi + 3]
mov byte [rbp + rax + 0xf70], 0xff
cmp r14d, dword [rsp + 0x44]
jb 0x14005a9c0
mov r15, qword [rsp + 0x58]
mov r14d, dword [rsp + 0x44]
jmp 0x14005abce
mov r14d, edi
mov rcx, rbx
call fcn.140050bb0
mov rcx, rbx
call fcn.140050bb0
jmp 0x14005a224
mov eax, dword [rbx]
imul eax, dword [r15 + 0x20]
add eax, 7
shr eax, 3
imul eax, dword [rbx + 8]
inc eax
imul eax, dword [rbx + 4]
movsxd rsi, eax
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
test rax, rax
jne 0x14005ac17
mov qword [r15 + 0x10], rax
jmp 0x14005b215
movsxd rax, dword [rsp + 0x4c]
xor r14d, r14d
add rax, rdi
mov qword [rbp - 0x80], rcx
mov qword [rsp + 0x68], rax
mov edx, r14d
lea rax, [rsi + rcx]
mov qword [rsp + 0x78], rcx
mov esi, dword [rsp + 0x50]
lea rcx, [rsp + 0x60]
test esi, esi
mov qword [rsp + 0x60], rdi
mov qword [rbp - 0x78], rax
sete dl
mov dword [rbp - 0x70], 1
call fcn.1400588a0
test eax, eax
je 0x14005b039
mov rax, qword [rbp - 0x80]
mov edi, dword [rsp + 0x78]
sub edi, dword [rbp - 0x80]
mov qword [r15 + 0x10], rax
test rax, rax
je 0x14005b215
mov rcx, qword [r15 + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 8], r14
mov eax, dword [rbx + 8]
movzx r14d, byte [rsp + 0x40]
lea r9d, [rax + 1]
cmp r9d, 4
jne 0x14005aca4
test r14b, r14b
je 0x14005ad41
movzx r12d, byte [rsp + 0x41]
test r12b, r12b
jne 0x14005acb2
mov r9d, eax
mov eax, dword [rsp + 0x54]
mov r8d, edi
mov dword [rbx + 0xc], r9d
mov rcx, r15
mov rdx, qword [r15 + 0x10]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
mov eax, dword [r15 + 0x20]
mov dword [rsp + 0x20], eax
call fcn.140059dc0
test eax, eax
je 0x14005b215
test r12b, r12b
je 0x14005ae00
mov rcx, qword [r15]
mov eax, dword [rcx + 4]
imul eax, dword [rcx]
cmp dword [r15 + 0x20], 0x10
mov rcx, qword [r15 + 0x18]
jne 0x14005ad8a
test eax, eax
je 0x14005ae00
cmp dword [rbx + 0xc], 2
jne 0x14005ad4c
movzx r8d, word [rbp + 0xf64]
xor r13d, r13d
mov edx, eax
nop
cmp word [rcx], r8w
lea rcx, [rcx + 4]
mov eax, 0xffff
cmove ax, r13w
mov word [rcx - 2], ax
sub rdx, 1
jne 0x14005ad20
jmp 0x14005ae03
movzx r12d, byte [rsp + 0x41]
jmp 0x14005acb2
movzx edx, word [rbp + 0xf68]
movzx r8d, word [rbp + 0xf66]
movzx r9d, word [rbp + 0xf64]
xor r13d, r13d
cmp word [rcx], r9w
jne 0x14005ad7e
cmp word [rcx + 2], r8w
jne 0x14005ad7e
cmp word [rcx + 4], dx
jne 0x14005ad7e
mov word [rcx + 6], r13w
add rcx, 8
sub rax, 1
jne 0x14005ad63
jmp 0x14005ae03
test eax, eax
je 0x14005ae00
cmp dword [rbx + 0xc], 2
jne 0x14005adcb
movzx r8d, byte [rbp + 0xf60]
xor r13d, r13d
mov edx, eax
nop dword [rax]
nop word [rax + rax]
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r13d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x14005adb0
jmp 0x14005ae03
movzx edx, byte [rbp + 0xf62]
movzx r8d, byte [rbp + 0xf61]
movzx r9d, byte [rbp + 0xf60]
cmp byte [rcx], r9b
jne 0x14005adf6
cmp byte [rcx + 1], r8b
jne 0x14005adf6
cmp byte [rcx + 2], dl
jne 0x14005adf6
mov byte [rcx + 3], 0
add rcx, 4
sub rax, 1
jne 0x14005ade2
xor r13d, r13d
test esi, esi
je 0x14005af4a
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
mov eax, 0x1c
cmp dword [rax + rdx], 0
je 0x14005ae2c
mov eax, 0x20
mov eax, dword [rax + rdx]
jmp 0x14005ae32
mov eax, dword [0x14015aee4]
test eax, eax
je 0x14005af4a
cmp dword [rbx + 0xc], 2
jle 0x14005af4a
mov rax, qword [r15]
mov r10, qword [r15 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
cmp dword [rax + 0xc], 3
jne 0x14005ae8f
test ecx, ecx
je 0x14005af4a
mov edx, ecx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 3]
sub rdx, 1
jne 0x14005ae70
jmp 0x14005af4a
mov eax, 0x24
cmp dword [rax + rdx], 0
je 0x14005aea4
mov eax, 0x18
mov eax, dword [rax + rdx]
jmp 0x14005aeaa
mov eax, dword [0x14015add4]
test ecx, ecx
je 0x14005af4a
test eax, eax
je 0x14005af2e
mov esi, ecx
nop dword [rax + rax]
movzx eax, byte [r10 + 3]
movzx ecx, byte [r10]
movzx edi, byte [r10 + 2]
test al, al
je 0x14005af13
mov r8d, eax
mov r9d, eax
movzx eax, byte [r10 + 1]
xor edx, edx
imul eax, eax, 0xff
shr r8d, 1
add eax, r8d
div r9d
xor edx, edx
mov byte [r10 + 1], al
imul eax, ecx, 0xff
add eax, r8d
div r9d
xor edx, edx
mov r11d, eax
imul eax, edi, 0xff
add eax, r8d
div r9d
jmp 0x14005af1b
movzx r11d, cl
movzx eax, dil
mov byte [r10], al
mov byte [r10 + 2], r11b
add r10, 4
sub rsi, 1
jne 0x14005aec0
jmp 0x14005af4a
mov edx, ecx
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 4]
sub rdx, 1
jne 0x14005af30
test r14b, r14b
je 0x14005b009
mov dword [rbx + 0xc], 4
movzx eax, r14b
mov dword [rbx + 8], eax
mov rax, qword [r15]
mov rdi, qword [r15 + 0x18]
mov esi, dword [rax + 4]
imul esi, dword [rax]
test esi, esi
js 0x14005aff1
cmp esi, 0x1fffffff
jg 0x14005aff1
lea eax, [rsi*4]
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
test rax, rax
je 0x14005aff1
test esi, esi
je 0x14005afe1
lea r8, [rax + 2]
mov r9d, esi
nop dword [rax]
movzx edx, byte [rdi]
lea r8, [r8 + 4]
lea rdi, [rdi + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 4], al
movzx eax, byte [rbp + rdx*4 + 0xf73]
mov byte [r8 - 3], al
sub r9, 1
jne 0x14005afa0
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x18], r14
jmp 0x14005b011
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofmem
jmp 0x14005b20c
test r12b, r12b
je 0x14005b011
inc dword [rbx + 8]
mov rcx, qword [r15 + 0x10]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
mov qword [r15 + 0x10], r13
call fcn.140050bb0
mov rcx, rbx
call fcn.140050bb0
mov eax, 1
jmp 0x14005b217
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x10], r14
jmp 0x14005b215
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.no_PLTE
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofdata
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.IDAT_size_limit
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.1_2_4_8_16_bit_only
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_ctype
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_comp_method
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_filter_method
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.0_pixel_image
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_interlace_method
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_IHDR_len
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.multiple_IHDR
jmp 0x14005b20c
mov eax, ecx
mov byte [0x1400a804b], cl
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, ecx
shr eax, 0x10
mov byte [0x1400a8049], al
mov eax, ecx
shr eax, 8
mov byte [0x1400a804a], al
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.XXXX_PNG_chunk_not_known
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_tRNS_len
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_before_PLTE
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_with_alpha
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_after_IDAT
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.invalid_PLTE
jmp 0x14005b20c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.first_not_IHDR
mov edx, 0x28
mov qword [rdx + rcx], rax
xor eax, eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.140083df0
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret