Function at 0x1800e2870
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1390]
mov eax, 0x1490
call fcn.18022b840
sub rsp, rax
mov rax, qword [0x18032a080]
xor rax, rsp
mov qword [rbp + 0x1380], rax
mov r13, rcx
mov dword [rsp + 0x60], r8d
xor ecx, ecx
mov dword [rsp + 0x4c], edx
xor eax, eax
mov dword [rsp + 0x50], ecx
xor r15b, r15b
mov dword [rsp + 0x58], ecx
mov rbx, qword [r13]
mov r14d, ecx
mov r12d, ecx
mov dword [rsp + 0x5c], ecx
mov dword [rsp + 0x54], ecx
mov qword [r13 + 0x10], rcx
mov qword [r13 + 8], rcx
mov qword [r13 + 0x18], rcx
mov byte [rsp + 0x41], r15b
mov r15d, ecx
mov rcx, rbx
mov byte [rsp + 0x40], 0
mov word [rsp + 0x44], ax
mov byte [rsp + 0x46], al
mov dword [rsp + 0x48], 1
call fcn.1800e1280
test eax, eax
je 0x1800e37a9
mov rcx, rbx
call fcn.1800d9bf0
mov rcx, rbx
mov esi, eax
call fcn.1800d9bf0
shl esi, 0x10
mov rcx, rbx
add esi, eax
mov dword [rsp + 0x68], esi
call fcn.1800d9bf0
mov rcx, rbx
mov edi, eax
call fcn.1800d9bf0
shl edi, 0x10
lea edx, [rdi + rax]
mov dword [rsp + 0x6c], edx
mov rcx, qword [rsp + 0x68]
shr rcx, 0x20
cmp ecx, 0x49484452
ja 0x1800e2d5b
je 0x1800e2ad1
cmp ecx, 0x43674249
je 0x1800e2a68
cmp ecx, 0x49444154
je 0x1800e29c9
cmp ecx, 0x49454e44
jne 0x1800e2d6f
cmp dword [rsp + 0x48], 0
jne 0x1800e3786
cmp dword [rsp + 0x4c], 0
jne 0x1800e372b
mov rsi, qword [r13 + 8]
test rsi, rsi
jne 0x1800e304d
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.no_IDAT
jmp 0x1800e37a0
cmp dword [rsp + 0x48], 0
jne 0x1800e3786
movzx eax, byte [rsp + 0x40]
test al, al
je 0x1800e29e6
test r15d, r15d
je 0x1800e353b
cmp dword [rsp + 0x4c], 2
je 0x1800e3598
mov eax, dword [rsp + 0x50]
lea edi, [rsi + rax]
cmp edi, eax
jl 0x1800e37a9
cmp edi, r14d
jbe 0x1800e2a46
test r14d, r14d
jne 0x1800e2a17
mov r14d, 0x1000
cmp esi, r14d
cmova r14d, esi
cmp edi, r14d
jbe 0x1800e2a28
nop dword [rax]
add r14d, r14d
cmp edi, r14d
ja 0x1800e2a20
mov rcx, qword [r13 + 8]
mov edx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800e355a
mov qword [r13 + 8], rax
mov eax, dword [rsp + 0x50]
mov edx, eax
mov r8d, esi
add rdx, qword [r13 + 8]
mov rcx, rbx
call fcn.1800d9b20
test eax, eax
je 0x1800e3579
mov dword [rsp + 0x50], edi
jmp 0x1800e3038
mov dword [rsp + 0x54], 1
test esi, esi
je 0x1800e3038
jns 0x1800e2a8d
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x1800e3038
cmp qword [rbx + 0x10], 0
je 0x1800e2ac2
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, esi
jge 0x1800e2ac2
mov rax, qword [rbx + 0xc8]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
jmp 0x1800e3038
movsxd rax, esi
add qword [rbx + 0xc0], rax
jmp 0x1800e3038
cmp dword [rsp + 0x48], 0
je 0x1800e3681
xor eax, eax
mov dword [rsp + 0x48], eax
cmp esi, 0xd
jne 0x1800e3662
mov rcx, rbx
call fcn.1800d9bf0
mov rcx, rbx
mov edi, eax
call fcn.1800d9bf0
shl edi, 0x10
mov rcx, rbx
add eax, edi
mov dword [rbx], eax
call fcn.1800d9bf0
mov rcx, rbx
mov edi, eax
call fcn.1800d9bf0
shl edi, 0x10
lea ecx, [rax + rdi]
mov dword [rbx + 4], ecx
cmp ecx, 0x1000000
ja 0x1800e2d3c
cmp dword [rbx], 0x1000000
ja 0x1800e2d3c
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x1800e2b56
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800e2b7c
cmp dword [rbx + 0x30], 0
je 0x1800e2b7a
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800e2b7c
xor cl, cl
movzx eax, cl
mov dword [r13 + 0x20], eax
cmp eax, 0x10
ja 0x1800e3643
mov ecx, 0x10116
bt ecx, eax
jae 0x1800e3643
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x1800e2bb9
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800e2bdf
cmp dword [rbx + 0x30], 0
je 0x1800e2bdd
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800e2bdf
xor cl, cl
movzx edi, cl
mov dword [rsp + 0x5c], edi
cmp edi, 6
ja 0x1800e35a8
cmp edi, 3
jne 0x1800e2c0a
cmp dword [r13 + 0x20], 0x10
je 0x1800e35a8
movzx esi, dil
mov byte [rsp + 0x40], dil
jmp 0x1800e2c19
test dil, 1
jne 0x1800e35a8
movzx esi, byte [rsp + 0x40]
cmp rax, qword [rbx + 0xc8]
jb 0x1800e2c37
cmp dword [rbx + 0x30], 0
je 0x1800e2c4c
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x1800e35c7
cmp rax, qword [rbx + 0xc8]
jb 0x1800e2c6a
cmp dword [rbx + 0x30], 0
je 0x1800e2c7f
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
test cl, cl
jne 0x1800e35e6
cmp rax, qword [rbx + 0xc8]
jae 0x1800e2c97
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800e2cbd
cmp dword [rbx + 0x30], 0
je 0x1800e2cbb
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800e2cbd
xor cl, cl
movzx r12d, cl
mov dword [rsp + 0x58], r12d
cmp r12d, 1
ja 0x1800e3624
mov ecx, dword [rbx]
test ecx, ecx
je 0x1800e3605
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x1800e3605
xor edx, edx
mov eax, 0x40000000
div ecx
test sil, sil
jne 0x1800e2d29
xor edx, edx
mov r8d, edi
shr r8d, 2
mov ecx, edi
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rbx + 8], r8d
cmp eax, r9d
jb 0x1800e2d3c
cmp dword [rsp + 0x4c], 2
je 0x1800e372b
jmp 0x1800e3038
shr eax, 2
mov dword [rbx + 8], 1
cmp eax, r9d
jae 0x1800e3038
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.too_large
jmp 0x1800e37a0
cmp ecx, 0x504c5445
je 0x1800e2ee2
cmp ecx, 0x74524e53
je 0x1800e2d93
cmp dword [rsp + 0x48], 0
jne 0x1800e3786
bt edx, 0x1d
jae 0x1800e36a0
mov edx, esi
mov rcx, rbx
call fcn.1800d9ac0
jmp 0x1800e3038
cmp dword [rsp + 0x48], 0
jne 0x1800e3786
cmp qword [r13 + 8], 0
jne 0x1800e374e
cmp byte [rsp + 0x40], 0
je 0x1800e2e4e
cmp dword [rsp + 0x4c], 2
je 0x1800e3724
test r15d, r15d
je 0x1800e3708
cmp esi, r15d
ja 0x1800e36e9
xor eax, eax
mov byte [rsp + 0x40], 4
mov edi, eax
test esi, esi
je 0x1800e3038
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x1800e2e0f
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800e2e35
cmp dword [rbx + 0x30], 0
je 0x1800e2e33
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800e2e35
xor dl, dl
lea eax, [rdi*4 + 3]
inc edi
mov byte [rbp + rax + 0xf80], dl
cmp edi, esi
jb 0x1800e2df0
jmp 0x1800e3038
mov ecx, dword [rbx + 8]
test cl, 1
je 0x1800e3732
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x1800e36e9
xor eax, eax
mov byte [rsp + 0x41], 1
cmp dword [r13 + 0x20], 0x10
mov esi, eax
jne 0x1800e2e9f
test ecx, ecx
jle 0x1800e3038
lea rdi, [rbp + 0xf70]
mov rcx, rbx
call fcn.1800d9bf0
inc esi
mov word [rdi], ax
lea rdi, [rdi + 2]
cmp esi, dword [rbx + 8]
jl 0x1800e2e84
jmp 0x1800e3038
test ecx, ecx
jle 0x1800e3038
lea rdi, [rsp + 0x44]
lea r12, [0x1802672f0]
mov rcx, rbx
call fcn.1800d9bf0
movsxd rcx, dword [r13 + 0x20]
lea rdi, [rdi + 1]
movzx eax, al
inc esi
movzx edx, byte [rcx + r12]
imul eax, edx
mov byte [rdi - 1], al
cmp esi, dword [rbx + 8]
jl 0x1800e2eb3
mov r12d, dword [rsp + 0x58]
jmp 0x1800e3038
cmp dword [rsp + 0x48], 0
jne 0x1800e3786
cmp esi, 0x300
ja 0x1800e376a
mov eax, 0xaaaaaaab
mul esi
mov r15d, edx
shr r15d, 1
lea eax, [r15 + r15*2]
cmp eax, esi
jne 0x1800e376a
xor eax, eax
mov esi, eax
test r15d, r15d
je 0x1800e3038
mov rdx, qword [rbx + 0xc0]
nop word [rax + rax]
mov r8, qword [rbx + 0xc8]
cmp rdx, r8
jae 0x1800e2f4b
movzx ecx, byte [rdx]
inc rdx
mov qword [rbx + 0xc0], rdx
jmp 0x1800e2f79
cmp dword [rbx + 0x30], 0
je 0x1800e2f77
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
mov r8, qword [rbx + 0xc8]
movzx ecx, byte [rax]
lea rdx, [rax + 1]
mov qword [rbx + 0xc0], rdx
jmp 0x1800e2f79
xor cl, cl
lea edi, [rsi*4]
mov byte [rbp + rdi + 0xf80], cl
cmp rdx, r8
jae 0x1800e2f9c
movzx r9d, byte [rdx]
inc rdx
mov qword [rbx + 0xc0], rdx
jmp 0x1800e2fcc
cmp dword [rbx + 0x30], 0
je 0x1800e2fc9
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
mov r8, qword [rbx + 0xc8]
movzx r9d, byte [rax]
lea rdx, [rax + 1]
mov qword [rbx + 0xc0], rdx
jmp 0x1800e2fcc
xor r9b, r9b
lea eax, [rdi + 1]
mov byte [rbp + rax + 0xf80], r9b
cmp rdx, r8
jae 0x1800e2fec
movzx r8d, byte [rdx]
inc rdx
mov qword [rbx + 0xc0], rdx
jmp 0x1800e3015
cmp dword [rbx + 0x30], 0
je 0x1800e3012
mov rcx, rbx
call fcn.1800d9a40
mov rax, qword [rbx + 0xc0]
movzx r8d, byte [rax]
lea rdx, [rax + 1]
mov qword [rbx + 0xc0], rdx
jmp 0x1800e3015
xor r8b, r8b
lea eax, [rdi + 2]
inc esi
mov byte [rbp + rax + 0xf80], r8b
lea eax, [rdi + 3]
mov ecx, eax
mov byte [rbp + rax + 0xf80], 0xff
cmp esi, r15d
jb 0x1800e2f30
mov rcx, rbx
call fcn.1800d9bf0
mov rcx, rbx
call fcn.1800d9bf0
jmp 0x1800e2915
mov edi, dword [rbx]
imul edi, dword [r13 + 0x20]
add edi, 7
shr edi, 3
imul edi, dword [rbx + 8]
inc edi
imul edi, dword [rbx + 4]
movsxd r14, edi
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
test rax, rax
jne 0x1800e3081
mov esi, dword [rsp + 0x54]
xor r14d, r14d
jmp 0x1800e30dd
movsxd rax, dword [rsp + 0x50]
add rax, rsi
mov qword [rsp + 0x70], rsi
mov esi, dword [rsp + 0x54]
mov qword [rsp + 0x78], rax
lea rax, [r14 + rcx]
xor r14d, r14d
mov qword [rbp - 0x70], rcx
mov edx, r14d
mov qword [rbp - 0x78], rcx
test esi, esi
mov qword [rbp - 0x68], rax
lea rcx, [rsp + 0x70]
mov dword [rbp - 0x60], 1
sete dl
call fcn.1800e0fd0
test eax, eax
je 0x1800e30d3
mov edi, dword [rbp - 0x78]
sub edi, dword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x1800e30e0
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, r14
mov qword [r13 + 0x10], rax
test rax, rax
je 0x1800e37a9
mov rcx, qword [r13 + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [rsp + 0x60]
mov qword [r13 + 8], r14
mov ecx, dword [rbx + 8]
movzx r14d, byte [rsp + 0x40]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x1800e311d
cmp edx, 3
je 0x1800e311d
test r14b, r14b
je 0x1800e31c1
movzx r15d, byte [rsp + 0x41]
test r15b, r15b
jne 0x1800e312a
mov eax, ecx
mov dword [rbx + 0xc], eax
mov r8d, edi
mov eax, dword [rsp + 0x5c]
mov rcx, r13
mov r9d, dword [rbx + 0xc]
mov rdx, qword [r13 + 0x10]
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], eax
mov eax, dword [r13 + 0x20]
mov dword [rsp + 0x20], eax
call fcn.1800e24a0
test eax, eax
je 0x1800e37a9
test r15b, r15b
je 0x1800e326e
mov rcx, qword [r13]
mov eax, dword [rcx + 4]
imul eax, dword [rcx]
cmp dword [r13 + 0x20], 0x10
mov rcx, qword [r13 + 0x18]
jne 0x1800e3207
test eax, eax
je 0x1800e326e
xor r10d, r10d
cmp dword [rbx + 0xc], 2
jne 0x1800e31cc
movzx r8d, word [rbp + 0xf70]
mov edx, eax
nop word [rax + rax]
cmp word [rcx], r8w
lea rcx, [rcx + 4]
mov eax, 0xffff
cmove ax, r10w
mov word [rcx - 2], ax
sub rdx, 1
jne 0x1800e31a0
jmp 0x1800e326e
movzx r15d, byte [rsp + 0x41]
jmp 0x1800e312a
movzx edx, word [rbp + 0xf74]
movzx r8d, word [rbp + 0xf72]
movzx r9d, word [rbp + 0xf70]
cmp word [rcx], r9w
jne 0x1800e31fb
cmp word [rcx + 2], r8w
jne 0x1800e31fb
cmp word [rcx + 4], dx
jne 0x1800e31fb
mov word [rcx + 6], r10w
add rcx, 8
sub rax, 1
jne 0x1800e31e3
jmp 0x1800e326e
test eax, eax
je 0x1800e326e
cmp dword [rbx + 0xc], 2
jne 0x1800e323b
movzx r8d, byte [rsp + 0x44]
xor r10d, r10d
mov edx, eax
nop dword [rax]
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r10d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x1800e3220
jmp 0x1800e326e
movzx edx, byte [rsp + 0x46]
movzx r8d, byte [rsp + 0x45]
movzx r9d, byte [rsp + 0x44]
nop dword [rax]
cmp byte [rcx], r9b
jne 0x1800e3264
cmp byte [rcx + 1], r8b
jne 0x1800e3264
cmp byte [rcx + 2], dl
jne 0x1800e3264
mov byte [rcx + 3], 0
add rcx, 4
sub rax, 1
jne 0x1800e3250
mov r12d, dword [0x1803325b0]
test esi, esi
je 0x1800e33ca
mov rax, qword gs:[0x58]
mov rdx, qword [rax + r12*8]
mov eax, 0x14
cmp dword [rax + rdx], 0
je 0x1800e329f
mov eax, 0x18
mov eax, dword [rax + rdx]
jmp 0x1800e32a5
mov eax, dword [0x180332880]
test eax, eax
je 0x1800e33ca
cmp dword [rbx + 0xc], 2
jle 0x1800e33ca
mov rax, qword [r13]
mov r10, qword [r13 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
cmp dword [rax + 0xc], 3
jne 0x1800e32ff
test ecx, ecx
je 0x1800e33ca
mov edx, ecx
nop word [rax + rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 3]
sub rdx, 1
jne 0x1800e32e0
jmp 0x1800e33ca
mov eax, 0x1c
cmp dword [rax + rdx], 0
je 0x1800e3314
mov eax, InitCommonControls
mov eax, dword [rax + rdx]
jmp 0x1800e331a
mov eax, dword [0x180332884]
test ecx, ecx
je 0x1800e33ca
test eax, eax
je 0x1800e33a6
mov esi, ecx
nop dword [rax]
movzx ecx, byte [r10 + 3]
movzx r11d, byte [r10]
movzx edi, byte [r10 + 2]
test cl, cl
je 0x1800e338f
xor edx, edx
movzx r9d, cl
movzx eax, cl
movzx ecx, dil
shr al, 1
movzx r8d, al
movzx eax, byte [r10 + 1]
imul eax, eax, 0xff
add eax, r8d
div r9d
xor edx, edx
mov byte [r10 + 1], al
movzx eax, r11b
imul eax, eax, 0xff
add eax, r8d
div r9d
xor edx, edx
mov r11d, eax
imul eax, ecx, 0xff
add eax, r8d
div r9d
jmp 0x1800e3393
movzx eax, dil
mov byte [r10], al
mov byte [r10 + 2], r11b
add r10, 4
sub rsi, 1
jne 0x1800e3330
jmp 0x1800e33ca
mov edx, ecx
nop dword [rax + rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 4]
sub rdx, 1
jne 0x1800e33b0
test r14b, r14b
je 0x1800e3511
mov eax, dword [rsp + 0x60]
movzx esi, r14b
mov dword [rbx + 8], esi
mov dword [rbx + 0xc], esi
cmp eax, 3
jl 0x1800e33eb
mov dword [rbx + 0xc], eax
mov esi, eax
mov rax, qword [r13]
mov rdi, qword [r13 + 0x18]
mov r14d, dword [rax + 4]
imul r14d, dword [rax]
test r14d, r14d
js 0x1800e34f8
test esi, esi
js 0x1800e34f8
je 0x1800e341f
mov eax, 0x7fffffff
cdq
idiv esi
cmp r14d, eax
jg 0x1800e34f8
mov eax, r14d
imul eax, esi
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
test rax, rax
je 0x1800e34f8
test r14d, r14d
je 0x1800e34e8
mov r9d, r14d
lea r8, [rax + 2]
cmp esi, 3
jne 0x1800e34a0
nop
movzx edx, byte [rdi]
lea r8, [r8 + 3]
mov eax, edx
lea rdi, [rdi + 1]
shl eax, 2
mov ecx, eax
movzx eax, byte [rbp + rax + 0xf80]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rcx + 0xf81]
movzx ecx, byte [rbp + rdx*4 + 0xf82]
mov byte [r8 - 3], cl
mov byte [r8 - 4], al
sub r9, 1
jne 0x1800e3450
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r13 + 0x18], r15
jmp 0x1800e3519
movzx edx, byte [rdi]
lea r8, [r8 + 4]
mov eax, edx
lea rdi, [rdi + 1]
shl eax, 2
mov ecx, eax
movzx eax, byte [rbp + rax + 0xf80]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rcx + 0xf81]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rcx + 0xf82]
movzx ecx, byte [rbp + rdx*4 + 0xf83]
mov byte [r8 - 3], cl
mov byte [r8 - 4], al
sub r9, 1
jne 0x1800e34a0
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r13 + 0x18], r15
jmp 0x1800e3519
mov rax, qword gs:[0x58]
lea rdx, str.outofmem
mov rax, qword [rax + r12*8]
jmp 0x1800e37a0
test r15b, r15b
je 0x1800e3519
inc dword [rbx + 8]
mov rcx, qword [r13 + 0x10]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
mov rcx, rbx
mov qword [r13 + 0x10], rax
call fcn.1800d9ca0
mov eax, 1
jmp 0x1800e37ab
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.no_PLTE
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.outofmem
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.outofdata
jmp 0x1800e37a0
movzx eax, al
mov dword [rbx + 8], eax
mov eax, 1
jmp 0x1800e37ab
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_ctype
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_comp_method
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_filter_method
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.0_pixel_image
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_interlace_method
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.1_2_4_8_16_bit_only
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_IHDR_len
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.multiple_IHDR
jmp 0x1800e37a0
mov eax, edx
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, edx
shr eax, 0x10
mov byte [0x18032a0c1], al
movzx eax, byte [rsp + 0x6c]
shr edx, 8
mov byte [0x18032a0c3], al
mov rax, qword gs:[0x58]
mov byte [0x18032a0c2], dl
mov edx, dword [0x1803325b0]
mov rax, qword [rax + rdx*8]
lea rdx, str.XXXX_PNG_chunk_not_known
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_tRNS_len
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_before_PLTE
jmp 0x1800e37a0
mov dword [rbx + 8], 4
mov eax, 1
jmp 0x1800e37ab
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_with_alpha
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_after_IDAT
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.invalid_PLTE
jmp 0x1800e37a0
mov edx, dword [0x1803325b0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.first_not_IHDR
mov ecx, 0x20
mov qword [rcx + rax], rdx
xor eax, eax
mov rcx, qword [rbp + 0x1380]
xor rcx, rsp
call fcn.18022a7d0
lea r11, [rsp + 0x1490]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret