Function at 0x1400bf0f0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.140243620
sub rsp, rax
mov rax, qword [0x14036e3c8]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov rbx, qword [rcx]
mov edi, edx
mov dword [rsp + 0x4c], edx
xor r15b, r15b
xor edx, edx
mov byte [rsp + 0x41], r15b
mov qword [rcx + 0x10], rdx
mov r12, rcx
mov qword [rcx + 8], rdx
mov r14d, 1
mov qword [rcx + 0x18], rdx
mov r15d, edx
mov rcx, rbx
mov dword [rsp + 0x64], r8d
mov byte [rsp + 0x40], 0
mov r13d, edx
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x48], r14d
mov dword [rsp + 0x5c], edx
mov dword [rsp + 0x60], edx
mov dword [rsp + 0x54], edx
mov dword [rsp + 0x58], edx
call fcn.1400b8c00
test eax, eax
je 0x1400bfd00
cmp edi, r14d
je 0x1400bfcc7
mov rcx, rbx
call fcn.1400bad30
mov rcx, rbx
mov esi, eax
call fcn.1400bad30
shl esi, 0x10
mov rcx, rbx
add esi, eax
call fcn.1400bad30
mov rcx, rbx
mov edi, eax
call fcn.1400bad30
shl edi, 0x10
lea ecx, [rdi + rax]
cmp ecx, 0x49484452
ja 0x1400bf53a
je 0x1400bf2cf
cmp ecx, 0x43674249
je 0x1400bf2c2
cmp ecx, 0x49444154
je 0x1400bf227
cmp ecx, 0x49454e44
jne 0x1400bf54e
test r14d, r14d
jne 0x1400bfcf2
cmp dword [rsp + 0x4c], r14d
jne 0x1400bfcc7
mov rdi, qword [r12 + 8]
test rdi, rdi
jne 0x1400bf843
lea rax, str.no_IDAT
jmp 0x1400bfcf9
test r14d, r14d
jne 0x1400bfcf2
movzx eax, byte [rsp + 0x40]
test al, al
je 0x1400bf242
test r13d, r13d
je 0x1400bfbfc
cmp dword [rsp + 0x4c], 2
je 0x1400bfc14
mov eax, dword [rsp + 0x50]
lea edi, [rsi + rax]
cmp edi, eax
jl 0x1400bfd00
cmp edi, r15d
jbe 0x1400bf29f
test r15d, r15d
jne 0x1400bf278
mov r15d, 0x1000
cmp esi, r15d
cmova r15d, esi
cmp edi, r15d
jbe 0x1400bf280
add r15d, r15d
cmp edi, r15d
ja 0x1400bf278
mov rcx, qword [r12 + 8]
mov edx, r15d
call fcn.14025c13c
test rax, rax
je 0x1400bfb1c
mov qword [r12 + 8], rax
mov eax, dword [rsp + 0x50]
mov edx, eax
mov r8d, esi
add rdx, qword [r12 + 8]
mov rcx, rbx
call fcn.1400bafe0
test eax, eax
je 0x1400bfc08
mov dword [rsp + 0x50], edi
jmp 0x1400bf82e
mov dword [rsp + 0x58], 1
jmp 0x1400bf561
test r14d, r14d
je 0x1400bfc7e
mov dword [rsp + 0x48], 0
cmp esi, 0xd
jne 0x1400bfc75
mov rcx, rbx
call fcn.1400bad30
mov rcx, rbx
mov edi, eax
call fcn.1400bad30
shl edi, 0x10
add eax, edi
mov dword [rbx], eax
cmp eax, 0x1000000
ja 0x1400bfc69
mov rcx, rbx
call fcn.1400bad30
mov rcx, rbx
mov edi, eax
call fcn.1400bad30
shl edi, 0x10
lea ecx, [rax + rdi]
mov dword [rbx + 4], ecx
cmp ecx, 0x1000000
ja 0x1400bfc69
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x1400bf353
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400bf379
cmp dword [rbx + 0x30], 0
je 0x1400bf377
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400bf379
xor cl, cl
movzx ecx, cl
mov dword [rsp + 0x54], ecx
cmp ecx, 8
ja 0x1400bfc5d
mov edx, 0x116
bt edx, ecx
jae 0x1400bfc5d
cmp rax, qword [rbx + 0xc0]
jae 0x1400bf3af
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400bf3d5
cmp dword [rbx + 0x30], 0
je 0x1400bf3d3
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400bf3d5
xor cl, cl
movzx edi, cl
mov dword [rsp + 0x60], edi
cmp edi, 6
ja 0x1400bfc51
cmp edi, 3
jne 0x1400bf3f5
movzx esi, dil
mov byte [rsp + 0x40], dil
jmp 0x1400bf404
test dil, 1
jne 0x1400bfc51
movzx esi, byte [rsp + 0x40]
cmp rax, qword [rbx + 0xc0]
jb 0x1400bf422
cmp dword [rbx + 0x30], 0
je 0x1400bf437
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
test cl, cl
jne 0x1400bfc21
cmp rax, qword [rbx + 0xc0]
jb 0x1400bf455
cmp dword [rbx + 0x30], 0
je 0x1400bf46a
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
test cl, cl
jne 0x1400bfc2d
cmp rax, qword [rbx + 0xc0]
jae 0x1400bf482
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400bf4a8
cmp dword [rbx + 0x30], 0
je 0x1400bf4a6
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400bf4a8
xor cl, cl
movzx r14d, cl
mov dword [rsp + 0x5c], r14d
cmp r14d, 1
ja 0x1400bfc45
mov ecx, dword [rbx]
test ecx, ecx
je 0x1400bfc39
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x1400bfc39
xor edx, edx
mov eax, 0x40000000
div ecx
test sil, sil
jne 0x1400bf51d
xor edx, edx
mov r8d, edi
shr r8d, 2
mov ecx, edi
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rbx + 8], r8d
cmp eax, r9d
jb 0x1400bfc69
cmp dword [rsp + 0x4c], 2
je 0x1400bfcc7
mov r14d, dword [rsp + 0x48]
jmp 0x1400bf82e
shr eax, 2
mov dword [rbx + 8], 1
cmp eax, r9d
jb 0x1400bfc69
mov r14d, dword [rsp + 0x48]
jmp 0x1400bf82e
cmp ecx, 0x504c5445
je 0x1400bf6d2
cmp ecx, 0x74524e53
je 0x1400bf5bc
test r14d, r14d
jne 0x1400bfcf2
bt ecx, 0x1d
jae 0x1400bfc87
test esi, esi
jns 0x1400bf578
mov rax, qword [rbx + 0xc0]
mov qword [rbx + 0xb8], rax
jmp 0x1400bf82e
cmp qword [rbx + 0x10], 0
je 0x1400bf5ad
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xb8]
cmp ecx, esi
jge 0x1400bf5ad
mov rax, qword [rbx + 0xc0]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xb8], rax
call qword [rbx + Ordinal_26]
jmp 0x1400bf82e
movsxd rax, esi
add qword [rbx + 0xb8], rax
jmp 0x1400bf82e
test r14d, r14d
jne 0x1400bfcf2
cmp qword [r12 + 8], 0
jne 0x1400bfce0
cmp byte [rsp + 0x40], r14b
je 0x1400bf66e
cmp dword [rsp + 0x4c], 2
je 0x1400bfcc0
test r13d, r13d
je 0x1400bfcb7
cmp esi, r13d
ja 0x1400bfcce
xor edi, edi
mov byte [rsp + 0x40], 4
test esi, esi
je 0x1400bf82e
nop dword [rax + rax]
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x1400bf62f
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400bf655
cmp dword [rbx + 0x30], 0
je 0x1400bf653
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400bf655
xor dl, dl
lea eax, [rdi*4 + 3]
inc edi
mov byte [rbp + rax + 0xf70], dl
cmp edi, esi
jb 0x1400bf610
jmp 0x1400bf82e
mov ecx, dword [rbx + 8]
test cl, 1
je 0x1400bfcd7
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x1400bfcce
xor esi, esi
mov byte [rsp + 0x41], 1
test ecx, ecx
jle 0x1400bf82e
movsxd r14, dword [rsp + 0x54]
lea rcx, [0x140368d28]
add r14, rcx
lea rdi, [rsp + 0x44]
mov rcx, rbx
call fcn.1400bad30
movzx ecx, byte [r14]
lea rdi, [rdi + 1]
movzx edx, al
inc esi
imul edx, ecx
mov byte [rdi - 1], dl
cmp esi, dword [rbx + 8]
jl 0x1400bf6a8
mov r14d, dword [rsp + 0x48]
jmp 0x1400bf82e
test r14d, r14d
jne 0x1400bfcf2
cmp esi, 0x300
ja 0x1400bfce9
mov eax, 0xaaaaaaab
mul esi
mov r13d, edx
shr r13d, 1
lea eax, [r13*2]
add eax, r13d
cmp eax, esi
jne 0x1400bfce9
xor esi, esi
test r13d, r13d
je 0x1400bf82e
mov r8, qword [rbx + 0xb8]
nop dword [rax]
mov rdx, qword [rbx + 0xc0]
cmp r8, rdx
jae 0x1400bf735
movzx ecx, byte [r8]
inc r8
jmp 0x1400bf758
cmp dword [rbx + 0x30], 0
je 0x1400bf77e
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
mov rdx, qword [rbx + 0xc0]
movzx ecx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
lea edi, [rsi*4]
mov byte [rbp + rdi + 0xf70], cl
mov r9d, edi
cmp r8, rdx
jae 0x1400bf790
movzx r9d, byte [r8]
inc r8
jmp 0x1400bf7b4
lea edi, [rsi*4]
mov byte [rbp + rdi + 0xf70], 0
mov r9d, edi
cmp dword [rbx + 0x30], 0
je 0x1400bf7db
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
mov rdx, qword [rbx + 0xc0]
movzx r9d, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
lea eax, [rdi + 1]
mov byte [rbp + rax + 0xf70], r9b
cmp r8, rdx
jae 0x1400bf7e7
movzx edx, byte [r8]
inc r8
mov qword [rbx + 0xb8], r8
jmp 0x1400bf80e
lea eax, [r9 + 1]
mov byte [rbp + rax + 0xf70], 0
cmp dword [rbx + 0x30], 0
je 0x1400bf80c
mov rcx, rbx
call fcn.1400c2800
mov rax, qword [rbx + 0xb8]
movzx edx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
jmp 0x1400bf80e
xor dl, dl
lea eax, [rdi + 2]
inc esi
mov byte [rbp + rax + 0xf70], dl
lea eax, [rdi + 3]
mov byte [rbp + rax + 0xf70], 0xff
cmp esi, r13d
jb 0x1400bf720
mov rcx, rbx
call fcn.1400bad30
mov rcx, rbx
call fcn.1400bad30
jmp 0x1400bf198
mov r14d, dword [rsp + 0x54]
mov eax, r14d
imul eax, dword [rbx]
add eax, 7
shr eax, 3
imul eax, dword [rbx + 8]
inc eax
imul eax, dword [rbx + 4]
movsxd rsi, eax
mov rcx, rsi
call fcn.1402593c8
mov rcx, rax
test rax, rax
jne 0x1400bf87b
mov qword [r12 + 0x10], rax
jmp 0x1400bfd00
movsxd rax, dword [rsp + 0x50]
mov r13d, dword [rsp + 0x58]
add rax, rdi
mov qword [rsp + 0x78], rax
lea rax, [rsi + rcx]
xor esi, esi
mov qword [rbp - 0x70], rcx
mov edx, esi
mov qword [rbp - 0x78], rcx
test r13d, r13d
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x70]
mov qword [rbp - 0x68], rax
sete dl
mov dword [rbp - 0x60], 1
call fcn.1400bfed0
test eax, eax
je 0x1400bfbe9
mov rax, qword [rbp - 0x70]
mov edi, dword [rbp - 0x78]
sub edi, dword [rbp - 0x70]
mov qword [r12 + 0x10], rax
test rax, rax
je 0x1400bfd00
mov rcx, qword [r12 + 8]
call fcn.140255ce0
mov ecx, dword [rsp + 0x64]
mov qword [r12 + 8], rsi
mov eax, dword [rbx + 8]
movzx esi, byte [rsp + 0x40]
lea r9d, [rax + 1]
cmp ecx, r9d
jne 0x1400bf90f
cmp ecx, 3
je 0x1400bf90f
test sil, sil
je 0x1400bf99b
movzx r15d, byte [rsp + 0x41]
test r15b, r15b
jne 0x1400bf91d
mov r9d, eax
mov eax, dword [rsp + 0x5c]
mov r8d, edi
mov ecx, dword [rsp + 0x60]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov rcx, r12
mov dword [rbx + 0xc], r9d
mov rdx, qword [r12 + 0x10]
mov dword [rsp + 0x20], r14d
call fcn.1400b9610
test eax, eax
je 0x1400bfd00
test r15b, r15b
je 0x1400bf9de
mov rax, qword [r12]
mov rcx, qword [r12 + 0x18]
mov edx, dword [rax + 4]
imul edx, dword [rax]
test edx, edx
je 0x1400bf9de
cmp dword [rbx + 0xc], 2
jne 0x1400bf9a6
movzx r8d, byte [rsp + 0x44]
xor r15d, r15d
nop dword [rax]
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r15d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x1400bf980
jmp 0x1400bf9e1
movzx r15d, byte [rsp + 0x41]
jmp 0x1400bf91d
movzx r8d, byte [rsp + 0x45]
movzx r9d, byte [rsp + 0x44]
mov eax, edx
movzx edx, byte [rsp + 0x46]
nop dword [rax]
cmp byte [rcx], r9b
jne 0x1400bf9d4
cmp byte [rcx + 1], r8b
jne 0x1400bf9d4
cmp byte [rcx + 2], dl
jne 0x1400bf9d4
mov byte [rcx + 3], 0
add rcx, 4
sub rax, 1
jne 0x1400bf9c0
xor r15d, r15d
test r13d, r13d
je 0x1400bfada
cmp dword [0x1403731e8], 0
je 0x1400bfada
cmp dword [rbx + 0xc], 2
jle 0x1400bfada
mov rax, qword [r12]
mov r9, qword [r12 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
test ecx, ecx
je 0x1400bfada
cmp dword [rax + 0xc], 3
jne 0x1400bfa3f
mov edx, ecx
movzx ecx, byte [r9]
movzx eax, byte [r9 + 2]
mov byte [r9], al
mov byte [r9 + 2], cl
lea r9, [r9 + 3]
sub rdx, 1
jne 0x1400bfa20
jmp 0x1400bfada
cmp dword [0x1403731e4], 0
je 0x1400bfab0
mov edi, ecx
nop word [rax + rax]
movzx eax, byte [r9 + 3]
movzx ecx, byte [r9]
movzx r11d, byte [r9 + 2]
test al, al
je 0x1400bfa95
mov r8d, eax
xor edx, edx
movzx eax, byte [r9 + 1]
imul eax, eax, 0xff
div r8d
xor edx, edx
mov byte [r9 + 1], al
imul eax, ecx, 0xff
div r8d
xor edx, edx
mov r10d, eax
imul eax, r11d, 0xff
div r8d
jmp 0x1400bfa9d
movzx r10d, cl
movzx eax, r11b
mov byte [r9], al
mov byte [r9 + 2], r10b
add r9, 4
sub rdi, 1
jne 0x1400bfa50
jmp 0x1400bfada
mov edx, ecx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [r9]
movzx eax, byte [r9 + 2]
mov byte [r9], al
mov byte [r9 + 2], cl
lea r9, [r9 + 4]
sub rdx, 1
jne 0x1400bfac0
test sil, sil
je 0x1400bfbd0
mov eax, dword [rsp + 0x64]
movzx esi, sil
mov dword [rbx + 8], esi
mov dword [rbx + 0xc], esi
cmp eax, 3
jl 0x1400bfafb
mov dword [rbx + 0xc], eax
mov esi, eax
mov rax, qword [r12]
mov ecx, esi
mov rbx, qword [r12 + 0x18]
mov edi, dword [rax + 4]
imul edi, dword [rax]
imul ecx, edi
call fcn.1402593c8
mov r14, rax
test rax, rax
jne 0x1400bfb28
lea rax, str.outofmem
jmp 0x1400bfcf9
test edi, edi
je 0x1400bfbc1
mov r9d, edi
lea r8, [rax + 2]
cmp esi, 3
jne 0x1400bfb80
nop dword [rax]
movzx edx, byte [rbx]
lea r8, [r8 + 3]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 4], al
movzx eax, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 3], al
sub r9, 1
jne 0x1400bfb40
jmp 0x1400bfbc1
movzx edx, byte [rbx]
lea r8, [r8 + 4]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 4], al
movzx eax, byte [rbp + rdx*4 + 0xf73]
mov byte [r8 - 3], al
sub r9, 1
jne 0x1400bfb80
mov rcx, qword [r12 + 0x18]
call fcn.140255ce0
mov qword [r12 + 0x18], r14
mov rcx, qword [r12 + 0x10]
call fcn.140255ce0
mov eax, 1
mov qword [r12 + 0x10], r15
jmp 0x1400bfd02
mov rcx, qword [rbp - 0x70]
call fcn.140255ce0
mov qword [r12 + 0x10], rsi
jmp 0x1400bfd00
lea rax, str.no_PLTE
jmp 0x1400bfcf9
lea rax, str.outofdata
jmp 0x1400bfcf9
mov dword [rbx + 8], eax
mov eax, 1
jmp 0x1400bfd02
lea rax, str.bad_comp_method
jmp 0x1400bfcf9
lea rax, str.bad_filter_method
jmp 0x1400bfcf9
lea rax, str.0_pixel_image
jmp 0x1400bfcf9
lea rax, str.bad_interlace_method
jmp 0x1400bfcf9
lea rax, str.bad_ctype
jmp 0x1400bfcf9
lea rax, str.1_2_4_8_bit_only
jmp 0x1400bfcf9
lea rax, str.too_large
jmp 0x1400bfcf9
lea rax, str.bad_IHDR_len
jmp 0x1400bfcf9
lea rax, str.multiple_IHDR
jmp 0x1400bfcf9
mov eax, ecx
mov byte [0x140368d3b], cl
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, ecx
shr eax, 0x10
mov byte [0x140368d39], al
mov eax, ecx
shr eax, 8
mov byte [0x140368d3a], al
lea rax, str.XXXX_PNG_chunk_not_known
jmp 0x1400bfcf9
lea rax, str.tRNS_before_PLTE
jmp 0x1400bfcf9
mov dword [rbx + 8], 4
mov eax, 1
jmp 0x1400bfd02
lea rax, str.bad_tRNS_len
jmp 0x1400bfcf9
lea rax, str.tRNS_with_alpha
jmp 0x1400bfcf9
lea rax, str.tRNS_after_IDAT
jmp 0x1400bfcf9
lea rax, str.invalid_PLTE
jmp 0x1400bfcf9
lea rax, str.first_not_IHDR
mov qword [0x140373090], rax
xor eax, eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.1402435c0
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret