Function at 0x140095aa0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0xb0
mov r11d, dword [rsp + 0x110]
xor r13d, r13d
cmp dword [rsp + 0x120], 0x10
mov r10d, r13d
mov r12d, r9d
mov dword [rsp + 0x38], r11d
sete r10b
mov esi, r8d
inc r10d
mov rdi, rdx
mov ebx, r10d
imul ebx, r9d
mov eax, ebx
imul eax, r11d
mov dword [rsp + 0x40], eax
mov rax, qword [rcx]
movsxd rbp, dword [rax + 8]
mov r14d, ebp
mov dword [rsp + 0x20], ebp
imul r14d, r10d
mov r10d, dword [rsp + 0x118]
mov dword [rsp + 0x24], r14d
test r11d, r11d
js 0x140095b72
test r10d, r10d
js 0x140095b72
je 0x140095b30
mov eax, 0x7fffffff
cdq
idiv r10d
cmp r11d, eax
jg 0x140095b72
mov ecx, r11d
imul ecx, r10d
test ecx, ecx
js 0x140095b72
test ebx, ebx
js 0x140095b72
je 0x140095b4d
mov eax, 0x7fffffff
cdq
idiv ebx
cmp ecx, eax
jg 0x140095b72
mov eax, ebx
imul eax, r11d
imul eax, r10d
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r11d, dword [rsp + 0x110]
mov r10d, dword [rsp + 0x118]
jmp 0x140095b75
mov rax, r13
mov rdx, qword [rsp + 0xf0]
mov qword [rdx + 0x18], rax
test rax, rax
jne 0x140095b9b
lea rax, str.Out_of_memory
mov qword [0x1402c1f10], rax
xor eax, eax
jmp 0x140096b42
mov ecx, dword [rsp + 0x120]
mov eax, ebp
imul eax, r11d
mov qword [rsp + 0xf8], r15
mov r9d, eax
mov dword [rsp + 0x28], eax
imul r9d, ecx
add r9d, 7
shr r9d, 3
mov dword [rsp + 0x50], r9d
lea eax, [r9 + 1]
imul eax, r10d
cmp esi, eax
jb 0x140096b2a
mov dword [rsp + 0x3c], r13d
mov r8d, r13d
lea rsi, [0x140000000]
test r10d, r10d
je 0x14009636f
movsxd r14, r14d
mov rsi, rbp
mov qword [rsp + 0x58], r14
mov r10, rbp
mov qword [rsp + 0x80], rbp
movsxd r15, ebx
nop dword [rax]
movzx ebp, byte [rdi]
mov ecx, r8d
mov ebx, dword [rsp + 0x40]
inc rdi
mov rdx, qword [rdx + 0x18]
imul ecx, ebx
add rdx, rcx
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0x30], rdx
cmp ebp, 4
ja 0x140096b2a
cmp dword [rsp + 0x120], 8
jge 0x140095c71
mov eax, r12d
mov dword [rsp + 0x24], 1
imul eax, r11d
mov r14d, 1
mov qword [rsp + 0x58], r14
mov dword [rsp + 0x38], r9d
sub eax, r9d
add rdx, rax
mov qword [rsp + 0x30], rdx
mov r9, rdx
sub r9, rbx
test r8d, r8d
mov qword [rsp + 0x48], r9
lea r8, [0x140000000]
jne 0x140095c91
movzx ebp, byte [rbp + r8 + 0x139334]
test r14, r14
jle 0x140095da8
mov r13, r9
mov r12, rdx
sub r13, rdi
mov rbx, rdi
sub r12, rdi
mov rsi, r14
nop dword [rax]
cmp ebp, 6
ja case.default.0x140095cc3
movsxd rax, ebp
mov eax, dword [r8 + rax*4 + 0x96b54]
add rax, r8
jmp rax
inc rbx
sub rsi, 1
jne 0x140095cb0
jmp 0x140095d99
movzx eax, byte [rbx]
mov byte [r12 + rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
je 0x140095d99
jmp case.0x140095cc3.0
movzx eax, byte [rbx]
mov byte [r12 + rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
je 0x140095d99
jmp case.0x140095cc3.1
movzx eax, byte [rbx + r13]
add al, byte [rbx]
mov byte [r12 + rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
je 0x140095d99
jmp case.0x140095cc3.2
movzx eax, byte [rbx + r13]
lea rbx, [rbx + 1]
shr al, 1
add al, byte [rbx - 1]
mov byte [r12 + rbx - 1], al
sub rsi, 1
je 0x140095d99
jmp case.0x140095cc3.3
movzx edx, byte [rbx + r13]
xor r8d, r8d
xor ecx, ecx
call fcn.14009bab0
add al, byte [rbx]
mov byte [r12 + rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne case.0x140095cc3.4
mov rdx, qword [rsp + 0x30]
mov r9, qword [rsp + 0x48]
mov r11d, dword [rsp + 0x110]
mov r10, qword [rsp + 0x80]
mov esi, dword [rsp + 0x20]
xor r13d, r13d
mov r12d, dword [rsp + 0x108]
mov eax, dword [rsp + 0x120]
cmp eax, 8
jne 0x140095e03
cmp esi, r12d
je 0x140095dbe
mov byte [r10 + rdx], 0xff
movsxd rax, r12d
mov rcx, r10
jmp 0x140095e28
movzx eax, byte [rbx]
mov byte [r12 + rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
je 0x140095d99
jmp case.0x140095cc3.5
movzx eax, byte [rbx]
mov byte [r12 + rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne case.0x140095cc3.6
jmp 0x140095d99
cmp eax, 0x10
jne 0x140095e21
cmp esi, r12d
je 0x140095e14
mov word [r14 + rdx], 0xffff
movsxd r10, dword [rsp + 0x24]
mov rax, r15
mov rcx, r10
jmp 0x140095e2d
mov eax, 1
mov ecx, eax
mov r10d, dword [rsp + 0x24]
add rdi, rcx
lea rbx, [rax + r9]
cmp dword [rsp + 0x120], 8
lea rcx, [rax + rdx]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x78], rbx
jl 0x1400963dd
cmp esi, r12d
je 0x1400963dd
cmp ebp, 6
ja case.default.0x140095e77
lea r9, [0x140000000]
movsxd rax, ebp
mov edx, dword [r9 + rax*4 + 0x96b70]
add rdx, r9
jmp rdx
lea eax, [r11 - 1]
cmp eax, 1
jb case.default.0x140095e77
movsxd r11, r10d
mov r10d, eax
nop dword [rax]
test r14, r14
jle 0x140095eb2
mov r9, rdi
mov rdx, rcx
sub r9, rcx
mov r8, r14
movzx eax, byte [r9 + rdx]
mov byte [rdx], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x140095ea1
mov byte [r14 + rcx], 0xff
add rdi, r11
add rcx, r15
sub r10, 1
jne 0x140095e90
jmp case.default.0x140095e77
lea eax, [r11 - 1]
cmp eax, 1
jb case.default.0x140095e77
movsxd rbx, r10d
mov r11d, eax
nop dword [rax + rax]
test r14, r14
jle 0x140095f15
mov r9, rcx
mov r10, rcx
sub r9, r15
mov rdx, rdi
sub r9, rdi
mov r8, r14
sub r10, rdi
nop word [rax + rax]
movzx eax, byte [r9 + rdx]
add al, byte [rdx]
mov byte [rdx + r10], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x140095f00
mov byte [r14 + rcx], 0xff
add rdi, rbx
add rcx, r15
sub r11, 1
jne 0x140095ee0
jmp case.default.0x140095e77
lea eax, [r11 - 1]
cmp eax, 1
jb case.default.0x140095e77
movsxd rbp, r10d
mov esi, eax
nop dword [rax]
mov r11, r13
test r10d, r10d
jle 0x140096014
cmp r10d, 0x40
jb 0x140096014
lea eax, [r10 - 1]
movsxd rdx, eax
lea rax, [rdx + rdi]
lea r8, [rdx + rcx]
cmp rcx, rax
ja 0x140095f73
cmp r8, rdi
jae 0x140096014
lea rax, [rdx + rbx]
cmp rcx, rax
ja 0x140095f85
cmp r8, rbx
jae 0x140096014
mov edx, r10d
and edx, 0x8000003f
jge 0x140095f97
dec edx
or edx, 0xffffffc0
inc edx
mov eax, r10d
mov r8, rbx
sub eax, edx
mov rdx, rdi
sub rdx, rcx
movsxd r9, eax
sub r8, rcx
lea rax, [rcx + 0x10]
nop
movdqu xmm0, xmmword [r8 + rax - 0x10]
add r11, 0x40
movdqu xmm1, xmmword [rdx + rax - 0x10]
movdqu xmm2, xmmword [r8 + rax]
lea rax, [rax + 0x40]
paddb xmm1, xmm0
movdqu xmm0, xmmword [rax + rdx - 0x40]
movdqu xmmword [rax - 0x50], xmm1
paddb xmm2, xmm0
movdqu xmm0, xmmword [rdx + rax - 0x30]
movdqu xmm1, xmmword [r8 + rax - 0x30]
movdqu xmmword [rax - 0x40], xmm2
paddb xmm1, xmm0
movdqu xmm0, xmmword [rdx + rax - 0x20]
movdqu xmm2, xmmword [r8 + rax - 0x20]
movdqu xmmword [rax - 0x30], xmm1
paddb xmm2, xmm0
movdqu xmmword [rax - 0x20], xmm2
cmp r11, r9
jl 0x140095fb0
cmp r11, r14
jge 0x14009604a
mov r9, rbx
lea rdx, [r11 + rdi]
mov r10, rcx
sub r9, rdi
sub r10, rdi
mov r8, r14
sub r8, r11
nop
movzx eax, byte [rdx + r9]
add al, byte [rdx]
mov byte [rdx + r10], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x140096030
mov r10d, dword [rsp + 0x24]
mov byte [r14 + rcx], 0xff
add rdi, rbp
add rcx, r15
add rbx, r15
sub rsi, 1
jne 0x140095f40
jmp case.default.0x140095e77
lea eax, [r11 - 1]
cmp eax, 1
jb case.default.0x140095e77
movsxd r12, r10d
mov ebp, eax
nop dword [rax]
test r14, r14
jle 0x1400960c1
mov r9, rcx
mov r11, rdi
sub r9, r15
sub r11, rbx
sub r9, rbx
mov rsi, rcx
sub rsi, rbx
mov r8, rbx
mov r10, r14
movzx edx, byte [r9 + r8]
movzx eax, byte [r8]
lea r8, [r8 + 1]
add edx, eax
shr edx, 1
add dl, byte [r11 + r8 - 1]
mov byte [rsi + r8 - 1], dl
sub r10, 1
jne 0x1400960a0
mov byte [r14 + rcx], 0xff
add rdi, r12
add rcx, r15
add rbx, r15
sub rbp, 1
jne 0x140096080
jmp case.default.0x140095e77
lea r9d, [r11 - 1]
cmp r9d, 1
jb case.default.0x140095e77
movsxd rax, r10d
lea rdx, [r14 + rcx]
mov qword [rsp + 0x30], rax
lea r11, [r15 + r14]
mov r8d, r9d
mov rax, r15
mov r9, qword [rsp + 0x30]
sub rax, rcx
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x98], r11
mov qword [rsp + 0x48], r8
nop dword [rax]
test r14, r14
jle 0x1400961e0
mov r10, rdx
mov r12, r14
mov rdx, rbx
sub r10, r11
sub rdx, rcx
lea rcx, [rax + rbx]
add rax, rdi
mov rbx, rdx
mov r14, rax
nop word [rax + rax]
movzx r11d, byte [r10]
movzx ebp, byte [r10 + rbx]
mov r8d, r11d
movzx r13d, byte [rcx + r10]
sub r8d, ebp
lea r9d, [r8 + r13]
mov eax, r9d
sub r9d, ebp
sub eax, r11d
cdq
mov esi, eax
mov eax, r8d
xor esi, edx
sub esi, edx
cdq
mov r8d, eax
mov eax, r9d
xor r8d, edx
sub r8d, edx
cdq
xor eax, edx
sub eax, edx
cmp esi, r8d
jg 0x140096196
cmp esi, eax
jle 0x1400961a0
cmp r8d, eax
mov r11d, ebp
cmovle r11d, r13d
movzx eax, byte [r14 + r10]
add al, r11b
mov byte [r15 + r10], al
inc r10
sub r12, 1
jne 0x140096150
mov rcx, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x78]
mov r14, qword [rsp + 0x58]
mov rax, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x30]
mov r11, qword [rsp + 0x98]
add rcx, r15
mov byte [rdx], 0xff
add rdx, r15
mov qword [rsp + 0x60], rcx
sub rax, r15
mov qword [rsp + 0x68], rdx
add rbx, r15
mov qword [rsp + 0x70], rax
add rdi, r9
mov qword [rsp + 0x78], rbx
sub r8, 1
mov qword [rsp + 0x48], r8
jne 0x140096120
jmp case.default.0x140095e77
lea eax, [r11 - 1]
cmp eax, 1
jb case.default.0x140095e77
movsxd rbx, r10d
mov r11d, eax
nop dword [rax]
test r14, r14
jle 0x140096269
mov r9, rcx
mov r10, rcx
sub r9, r15
mov rdx, rdi
sub r9, rdi
mov r8, r14
sub r10, rdi
nop word [rax + rax]
movzx eax, byte [rdx + r9]
lea rdx, [rdx + 1]
shr al, 1
add al, byte [rdx - 1]
mov byte [rdx + r10 - 1], al
sub r8, 1
jne 0x140096250
mov byte [r14 + rcx], 0xff
add rdi, rbx
add rcx, r15
sub r11, 1
jne 0x140096230
jmp case.default.0x140095e77
lea eax, [r11 - 1]
cmp eax, 1
jb case.default.0x140095e77
movsxd rbx, r10d
mov r11d, eax
nop dword [rax + rax]
test r14, r14
jle 0x1400962c5
mov r9, rcx
mov r10, rcx
sub r9, r15
mov rdx, rdi
sub r9, rdi
mov r8, r14
sub r10, rdi
nop word [rax + rax]
movzx eax, byte [rdx + r9]
add al, byte [rdx]
mov byte [rdx + r10], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x1400962b0
mov byte [r14 + rcx], 0xff
add rdi, rbx
add rcx, r15
sub r11, 1
jne 0x140096290
mov ecx, dword [rsp + 0x120]
mov rdx, qword [rsp + 0xf0]
cmp ecx, 0x10
jne 0x1400966ff
mov rcx, qword [rsp + 0xa0]
add rcx, qword [rdx + 0x18]
mov r11d, dword [rsp + 0x110]
test r11d, r11d
je 0x14009631f
mov eax, r11d
nop word [rax + rax]
mov byte [r14 + rcx + 1], 0xff
add rcx, r15
sub rax, 1
jne 0x140096310
mov ecx, dword [rsp + 0x120]
mov r8d, dword [rsp + 0x3c]
mov r13d, 0
mov r12d, dword [rsp + 0x108]
inc r8d
mov r9d, dword [rsp + 0x50]
mov r10, qword [rsp + 0x80]
mov esi, dword [rsp + 0x20]
mov dword [rsp + 0x3c], r8d
cmp r8d, dword [rsp + 0x118]
jb 0x140095c10
mov r10d, dword [rsp + 0x118]
lea rsi, [0x140000000]
cmp ecx, 8
jge 0x140096ae3
test r10d, r10d
je 0x140096b23
mov r14d, r12d
movsxd rax, ecx
mov r12d, dword [rsp + 0x128]
lea rsi, [rsi + 0x139590]
add rsi, rax
movsxd rbp, r11d
imul r14d, r11d
mov r15d, r9d
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rdx + 0x18]
mov eax, r13d
imul eax, dword [rsp + 0x40]
mov edi, eax
lea r8, [r9 + rax]
sub r9, r15
add r9, rdi
add r9, r14
test r12d, r12d
jne 0x14009670c
movzx r10d, byte [rsi]
jmp 0x14009670f
mov r13d, dword [rsp + 0x38]
dec r13d
imul r13d, r10d
mov dword [rsp + 0x30], r13d
cmp ebp, 6
ja case.default.0x14009640f
lea r8, [0x140000000]
movsxd rax, ebp
movsxd rsi, r13d
mov edx, dword [r8 + rax*4 + 0x96b8c]
add rdx, r8
jmp rdx
mov r8, rsi
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r11d, dword [rsp + 0x110]
mov rdx, qword [rsp + 0xf0]
movsxd rax, r13d
add rdi, rax
jmp 0x14009631f
test r13d, r13d
jle case.default.0x14009640f
sub rcx, rdi
mov rdx, rdi
mov r8, rcx
sub r8, r14
nop dword [rax]
movzx eax, byte [rdx + r8]
add al, byte [rdx]
mov byte [rdx + rcx], al
lea rdx, [rdx + 1]
sub rsi, 1
jne 0x140096450
mov r11d, dword [rsp + 0x110]
mov rdx, qword [rsp + 0xf0]
movsxd rax, r13d
add rdi, rax
jmp 0x14009631f
xor eax, eax
mov r8d, eax
test r13d, r13d
jle 0x140096553
cmp r13d, 0x40
jb 0x140096553
lea eax, [r13 - 1]
movsxd rdx, eax
lea rax, [rdi + rdx]
lea r9, [rcx + rdx]
cmp rcx, rax
ja 0x1400964b4
cmp r9, rdi
jae 0x140096553
lea rax, [rbx + rdx]
cmp rcx, rax
ja 0x1400964c6
cmp r9, rbx
jae 0x140096553
mov edx, r13d
and edx, 0x8000003f
jge 0x1400964d8
dec edx
or edx, 0xffffffc0
inc edx
mov eax, r13d
mov r9, rcx
sub eax, edx
mov rdx, rbx
sub rdx, rdi
movsxd r10, eax
sub r9, rdi
mov rax, rdi
nop
movdqu xmm0, xmmword [rax]
add r8, 0x40
movdqu xmm1, xmmword [rdx + rax]
movdqu xmm2, xmmword [rdx + rax + 0x10]
lea rax, [rax + 0x40]
paddb xmm1, xmm0
movdqu xmm0, xmmword [rax - 0x30]
movdqu xmmword [rax + r9 - 0x40], xmm1
paddb xmm2, xmm0
movdqu xmm0, xmmword [rax - 0x20]
movdqu xmm1, xmmword [rdx + rax - 0x20]
movdqu xmmword [r9 + rax - 0x30], xmm2
paddb xmm1, xmm0
movdqu xmm0, xmmword [rax - 0x10]
movdqu xmm2, xmmword [rdx + rax - 0x10]
movdqu xmmword [r9 + rax - 0x20], xmm1
paddb xmm2, xmm0
movdqu xmmword [r9 + rax - 0x10], xmm2
cmp r8, r10
jl 0x1400964f0
cmp r8, rsi
jge case.default.0x14009640f
sub rbx, rdi
lea rdx, [rdi + r8]
sub rcx, rdi
sub rsi, r8
nop dword [rax]
movzx eax, byte [rdx + rbx]
add al, byte [rdx]
mov byte [rdx + rcx], al
lea rdx, [rdx + 1]
sub rsi, 1
jne 0x140096570
mov r11d, dword [rsp + 0x110]
mov rdx, qword [rsp + 0xf0]
movsxd rax, r13d
add rdi, rax
jmp 0x14009631f
test r13d, r13d
jle case.default.0x14009640f
sub rcx, rbx
mov r9, rdi
mov r8, rcx
sub r8, r14
sub r9, rbx
nop word [rax + rax]
movzx edx, byte [r8 + rbx]
movzx eax, byte [rbx]
lea rbx, [rbx + 1]
add edx, eax
shr edx, 1
add dl, byte [r9 + rbx - 1]
mov byte [rcx + rbx - 1], dl
sub rsi, 1
jne 0x1400965c0
mov r11d, dword [rsp + 0x110]
mov rdx, qword [rsp + 0xf0]
movsxd rax, r13d
add rdi, rax
jmp 0x14009631f
test r13d, r13d
jle case.default.0x14009640f
sub rbx, rcx
mov rbp, rcx
mov r13, rdi
sub rbp, r14
sub r13, rcx
add r13, r14
lea r12, [r14 + rbx]
nop dword [rax]
movzx r8d, byte [rbx + rbp]
movzx edx, byte [r12 + rbp]
movzx ecx, byte [rbp]
call fcn.14009bab0
add al, byte [rbp + r13]
mov byte [r14 + rbp], al
lea rbp, [rbp + 1]
sub rsi, 1
jne 0x140096620
mov r13d, dword [rsp + 0x30]
mov r11d, dword [rsp + 0x110]
mov rdx, qword [rsp + 0xf0]
movsxd rax, r13d
add rdi, rax
jmp 0x14009631f
test r13d, r13d
jle case.default.0x14009640f
sub rcx, rdi
mov rdx, rdi
mov r8, rcx
sub r8, r14
nop word [rax + rax]
movzx eax, byte [rdx + r8]
lea rdx, [rdx + 1]
shr al, 1
add al, byte [rdx - 1]
mov byte [rdx + rcx - 1], al
sub rsi, 1
jne 0x140096680
mov r11d, dword [rsp + 0x110]
mov rdx, qword [rsp + 0xf0]
movsxd rax, r13d
add rdi, rax
jmp 0x14009631f
test r13d, r13d
jle case.default.0x14009640f
sub rcx, rdi
mov rdx, rdi
mov r8, rcx
sub r8, r14
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rdx + r8]
add al, byte [rdx]
mov byte [rdx + rcx], al
lea rdx, [rdx + 1]
sub rsi, 1
jne 0x1400966d0
mov r11d, dword [rsp + 0x110]
mov rdx, qword [rsp + 0xf0]
movsxd rax, r13d
add rdi, rax
jmp 0x14009631f
mov r11d, dword [rsp + 0x110]
jmp 0x140096326
mov r10b, 1
cmp ecx, 4
jne 0x140096786
mov ebx, dword [rsp + 0x28]
cmp ebx, 2
jl 0x140096765
mov r11d, ebx
shr r11, 1
mov eax, r11d
neg eax
lea ebx, [rbx + rax*2]
nop dword [rax + rax]
movzx eax, byte [r9]
shr al, 4
movzx edx, al
movzx ecx, r10b
imul edx, ecx
movzx ecx, r10b
mov byte [r8], dl
movzx eax, byte [r9]
inc r9
and al, 0xf
movzx edx, al
imul edx, ecx
mov byte [r8 + 1], dl
add r8, 2
sub r11, 1
jne 0x140096730
test ebx, ebx
jle 0x140096a30
movzx eax, byte [r9]
shr al, 4
movzx edx, al
movzx ecx, r10b
imul edx, ecx
mov byte [r8], dl
jmp 0x140096a30
cmp ecx, 2
jne 0x140096867
mov ebx, dword [rsp + 0x28]
cmp ebx, 4
jl 0x140096815
mov r11d, ebx
shr r11, 2
mov eax, r11d
neg eax
lea ebx, [rbx + rax*4]
nop word [rax + rax]
movzx eax, byte [r9]
shr al, 6
movzx edx, al
movzx ecx, r10b
imul edx, ecx
movzx eax, r10b
mov byte [r8], dl
movzx ecx, byte [r9]
shr cl, 4
and cl, 3
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 1], cl
movzx ecx, byte [r9]
shr cl, 2
and cl, 3
movzx ecx, cl
imul ecx, eax
mov byte [r8 + 2], cl
movzx eax, byte [r9]
inc r9
and al, 3
movzx ecx, r10b
movzx edx, al
imul edx, ecx
mov byte [r8 + 3], dl
add r8, 4
sub r11, 1
jne 0x1400967b0
test ebx, ebx
jle 0x140096830
movzx eax, byte [r9]
shr al, 6
movzx edx, al
movzx ecx, r10b
imul edx, ecx
mov byte [r8], dl
inc r8
cmp ebx, 1
jle 0x14009684f
movzx ecx, byte [r9]
shr cl, 4
and cl, 3
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp ebx, 2
jle 0x140096a30
movzx ecx, byte [r9]
shr cl, 2
and cl, 3
jmp 0x140096a23
cmp ecx, 1
jne 0x140096a30
mov r11d, dword [rsp + 0x28]
cmp r11d, 8
jl 0x140096958
mov ebx, r11d
shr rbx, 3
mov eax, ebx
neg eax
lea r11d, [r11 + rax*8]
nop
movzx eax, byte [r9]
shr al, 7
movzx edx, al
movzx ecx, r10b
imul edx, ecx
movzx eax, r10b
mov byte [r8], dl
movzx ecx, byte [r9]
shr cl, 6
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 1], cl
movzx ecx, byte [r9]
shr cl, 5
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 2], cl
movzx ecx, byte [r9]
shr cl, 4
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 3], cl
movzx ecx, byte [r9]
shr cl, 3
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 4], cl
movzx ecx, byte [r9]
shr cl, 2
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 5], cl
movzx ecx, byte [r9]
shr cl, 1
and cl, 1
movzx ecx, cl
imul ecx, eax
mov byte [r8 + 6], cl
movzx eax, byte [r9]
inc r9
and al, 1
movzx ecx, r10b
movzx edx, al
imul edx, ecx
mov byte [r8 + 7], dl
add r8, 8
sub rbx, 1
jne 0x140096890
test r11d, r11d
jle 0x140096974
movzx eax, byte [r9]
shr al, 7
movzx edx, al
movzx ecx, r10b
imul edx, ecx
mov byte [r8], dl
inc r8
cmp r11d, 1
jle 0x140096994
movzx ecx, byte [r9]
shr cl, 6
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 2
jle 0x1400969b4
movzx ecx, byte [r9]
shr cl, 5
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 3
jle 0x1400969d4
movzx ecx, byte [r9]
shr cl, 4
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 4
jle 0x1400969f4
movzx ecx, byte [r9]
shr cl, 3
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 5
jle 0x140096a14
movzx ecx, byte [r9]
shr cl, 2
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 6
jle 0x140096a30
movzx ecx, byte [r9]
shr cl, 1
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
mov r8d, dword [rsp + 0x20]
cmp r8d, dword [rsp + 0x108]
je 0x140096ab9
mov rcx, qword [rsp + 0xf0]
mov rdx, qword [rcx + 0x18]
lea rcx, [rbp - 1]
add rdx, rdi
cmp r8d, 1
jne 0x140096a74
test rcx, rcx
js 0x140096ab9
nop dword [rax]
mov byte [rdx + rcx*2 + 1], 0xff
movzx eax, byte [rcx + rdx]
mov byte [rdx + rcx*2], al
sub rcx, 1
jns 0x140096a60
jmp 0x140096ab9
test rcx, rcx
js 0x140096ab9
lea r8, [rcx*2 + 1]
add r8, rdx
lea rdx, [rdx + rcx*4]
add r8, rcx
add rdx, 2
nop
sub rcx, 1
mov byte [rdx + 1], 0xff
movzx eax, byte [r8 + 1]
lea r8, [r8 - 3]
mov byte [rdx], al
lea rdx, [rdx - 4]
movzx eax, byte [r8 + 3]
mov byte [rdx + 3], al
movzx eax, byte [r8 + 2]
mov byte [rdx + 2], al
jns 0x140096a90
mov r10d, dword [rsp + 0x118]
inc r13d
mov ecx, dword [rsp + 0x120]
mov rdx, qword [rsp + 0xf0]
cmp r13d, r10d
jb 0x1400963b0
mov eax, 1
jmp 0x140096b3a
cmp ecx, 0x10
jne 0x140096b23
mov r9, qword [rdx + 0x18]
imul r12d, r11d
mov r8, r9
imul r12d, r10d
test r12d, r12d
je 0x140096b23
mov r10d, r12d
nop
movzx edx, byte [r9]
lea r9, [r9 + 2]
movzx ecx, byte [r8 + 1]
lea r8, [r8 + 2]
shl dx, 8
or dx, cx
mov word [r8 - 2], dx
sub r10, 1
jne 0x140096b00
mov eax, 1
jmp 0x140096b3a
lea rax, str.Corrupt_PNG
mov qword [0x1402c1f10], rax
xor eax, eax
mov r15, qword [rsp + 0xf8]
add rsp, 0xb0
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret