Function at 0x140001000
Capabilities:
Terminate process

Disassembly:
push rbx
push rbp
push r14
sub rsp, 0x50
mov rax, qword [0x140007088]
xor rax, rsp
mov qword [rsp + 0x30], rax
movsxd rax, edx
mov r14, r8
mov rbx, r8
lea rcx, [rax + rax*2]
lea rbp, [r8 + rcx*8]
cmp r8, rbp
jae 0x140001313
mov qword [rsp + 0x70], rsi
lea eax, [rdx - 1]
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x48], r12
lea r12, [0x140005afc]
mov qword [rsp + 0x40], r15
movabs r15, 0x2aaaaaaaaaaaaaab
movsxd rsi, eax
nop dword [rax]
mov rcx, rbx
mov rax, r15
sub rcx, r14
imul rcx
mov rdi, rdx
mov edx, dword [rbx + 0x10]
sar rdi, 2
mov rax, rdi
shr rax, 0x3f
add rdi, rax
cmp edx, 0xfe
jne 0x14000110b
lea rcx, str.comment_n
call fcn.140003260
mov edx, dword [rbx]
mov rcx, qword [rbx + 8]
call fcn.140002e50
mov ecx, 0xa
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_putchar]
cmp rdi, rsi
je 0x1400012e6
mov rdi, 0xfffffffffffffff8
sub rdi, r14
cmp dword [rbx + 0x28], 0
jne 0x1400012e6
mov edx, dword [rbx + 0x18]
add rbx, 0x18
mov rcx, qword [rbx + 8]
call fcn.140002e50
mov ecx, 0xa
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_putchar]
lea rcx, [rdi + 8]
mov rax, r15
add rcx, rbx
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jne 0x1400010c1
jmp 0x1400012e6
cmp edx, 1
jne 0x14000119a
lea rcx, str.plaintext_n
call fcn.140003260
mov edx, dword [rbx]
mov rcx, qword [rbx + 8]
call fcn.140002e50
mov ecx, 0xa
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_putchar]
cmp rdi, rsi
je 0x1400012e6
mov rdi, 0xfffffffffffffff8
sub rdi, r14
nop dword [rax]
cmp dword [rbx + 0x28], 0
jne 0x1400012e6
mov edx, dword [rbx + 0x18]
add rbx, 0x18
mov rcx, qword [rbx + 8]
call fcn.140002e50
mov ecx, 0xa
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_putchar]
lea rcx, [rdi + 8]
mov rax, r15
add rcx, rbx
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jne 0x140001150
jmp 0x1400012e6
cmp edx, 0xf9
jne 0x140001218
lea rcx, str.graphics_control_n
call fcn.140003260
movsxd rcx, dword [rbx]
lea r8, [rsp + 0x20]
mov rdx, qword [rbx + 8]
call sub.gif_7.dll_DGifExtensionToGCB
test eax, eax
je 0x140001329
mov edx, dword [rsp + 0x20]
lea rcx, str._tdisposal_mode__d_n
call fcn.140003260
cmp byte [rsp + 0x24], 0
lea rdx, [0x140005b00]
lea rcx, str._tuser_input_flag__s_n
cmovne rdx, r12
call fcn.140003260
mov edx, dword [rsp + 0x28]
lea rcx, str._tdelay__d_n
call fcn.140003260
mov edx, dword [rsp + 0x2c]
lea rcx, str._ttransparent_index__d_n
call fcn.140003260
jmp 0x1400012e6
cmp rdi, rsi
je 0x14000127f
cmp edx, 0xff
jne 0x14000127f
cmp dword [rbx], 0xb
jl 0x14000127f
cmp dword [rbx + 0x18], 3
lea r8, [rbx + 0x18]
jl 0x14000127f
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
cmp rax, qword [str.NETSCAPE2.0]
jne 0x14000127f
movzx eax, word [rcx + 8]
cmp ax, word [0x140005870]
jne 0x14000127f
movzx eax, byte [rcx + 0xa]
cmp al, byte [0x140005872]
jne 0x14000127f
mov rax, qword [r8 + 8]
lea rcx, str.netscape_loop__u_n_n
mov rbx, r8
movzx edx, byte [rax + 2]
movzx eax, byte [rax + 1]
shl edx, 8
or edx, eax
call fcn.140003260
jmp 0x1400012f2
lea rcx, str.extension_0x_02x_n
call fcn.140003260
mov edx, dword [rbx]
mov rcx, qword [rbx + 8]
call fcn.140002e50
cmp rdi, rsi
je 0x1400012e6
mov rdi, 0xfffffffffffffff8
sub rdi, r14
cmp dword [rbx + 0x28], 0
jne 0x1400012e6
mov edx, dword [rbx + 0x18]
add rbx, 0x18
mov rcx, qword [rbx + 8]
call fcn.140002e50
mov ecx, 0xa
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_putchar]
lea rcx, [rdi + 8]
mov rax, r15
add rcx, rbx
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jne 0x1400012a5
lea rcx, str.end_n_n
call fcn.140003260
add rbx, 0x18
cmp rbx, rbp
jb 0x140001060
mov r12, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
mov r15, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1400036c0
add rsp, 0x50
pop r14
pop rbp
pop rbx
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r9, str.invalid_graphics_control_block
lea r8, str.gifbuild
lea rdx, str._n_s:__s_n
call fcn.140002f60
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3