Function at 0x180071620
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push rbp
push rbx
push r14
lea rbp, [rsp - 0x420]
sub rsp, 0x520
mov rax, qword [0x1800ad010]
xor rax, rsp
mov qword [rbp + 0x3f0], rax
mov qword [rbp - 0x28], rdx
xor r14d, r14d
lea rdx, [rbp - 0x70]
mov dword [rsp + 0x20], r14d
mov qword [rbp - 0x20], r8
mov rbx, rcx
mov dword [rbp - 0x54], 0xff
call fcn.180070f90
test rax, rax
je 0x1800716ad
mov eax, dword [rbx + 4]
mov dword [rbp - 0x80], eax
cdq
mov r8d, eax
xor r8d, edx
sub r8d, edx
mov dword [rbx + 4], r8d
cmp r8d, 0x1000000
jbe 0x1800716b4
mov edx, dword [0x1800b13e4]
mov rax, qword gs:[0x58]
mov ecx, 0x18
mov rax, qword [rax + rdx*8]
lea rdx, str.too_large
mov qword [rcx + rax], rdx
xor eax, eax
jmp 0x180071e8d
mov r9d, dword [rbx]
cmp r9d, 0x1000000
ja 0x18007168a
mov eax, dword [rbp - 0x64]
mov r10d, dword [rbp - 0x58]
mov dword [rsp + 0x48], eax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x4c], eax
mov eax, dword [rbp - 0x5c]
mov qword [rsp + 0x510], r12
mov r12d, dword [rbp - 0x68]
mov dword [rsp + 0x58], eax
mov eax, dword [rbp - 0x54]
mov qword [rsp + 0x508], r13
mov r13d, dword [rbp - 0x70]
mov qword [rsp + 0x500], r15
movsxd r15, dword [rbp - 0x6c]
mov dword [rsp + 0x34], eax
mov eax, dword [rbp - 0x50]
mov dword [rsp + 0x24], eax
mov dword [rsp + 0x50], r10d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x2c], r13d
cmp r12d, 0xc
jne 0x180071746
cmp r13d, 0x18
jge 0x180071763
mov ecx, r15d
sub ecx, eax
mov eax, 0x55555556
sub ecx, 0x18
imul ecx
mov r14d, edx
shr r14d, 0x1f
add r14d, edx
jmp 0x180071759
cmp r13d, 0x10
jge 0x180071763
mov r14d, r15d
sub r14d, eax
sub r14d, r12d
sar r14d, 2
mov dword [rsp + 0x20], r14d
test r14d, r14d
jne 0x1800717a7
movsxd rcx, dword [rbx + 0xb8]
add rcx, qword [rbx + 0xc0]
sub rcx, rbx
sub rcx, 0x38
cmp r15, rcx
je 0x1800717a7
mov edx, dword [0x1800b13e4]
mov rax, qword gs:[0x58]
mov ecx, 0x18
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_offset
mov qword [rcx + rax], rdx
xor eax, eax
jmp 0x180071e75
cmp r13d, 0x18
jne 0x1800717bc
cmp r10d, 0xff000000
jne 0x1800717bc
lea eax, [r13 - 0x15]
jmp 0x1800717c7
xor eax, eax
test r10d, r10d
setne al
add eax, 3
mov dword [rbx + 8], eax
test r9d, r9d
js 0x18007276e
jne 0x1800717df
lea ecx, [r9*4]
jmp 0x180071801
mov eax, 0x7fffffff
cdq
idiv r9d
cmp eax, 4
jl 0x18007276e
lea ecx, [r9*4]
test ecx, ecx
js 0x18007276e
test r8d, r8d
js 0x18007276e
je 0x18007181d
mov eax, 0x7fffffff
cdq
idiv r8d
cmp ecx, eax
jg 0x18007276e
mov qword [rsp + 0x558], rsi
test r9d, r9d
je 0x18007183c
mov eax, 0x7fffffff
cdq
idiv r9d
cmp eax, 4
jl 0x180072744
lea ecx, [r9*4]
test r8d, r8d
je 0x18007185a
mov eax, 0x7fffffff
cdq
idiv r8d
cmp ecx, eax
jg 0x180072744
imul r8d, r9d
shl r8d, 2
movsxd rcx, r8d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x78], rax
mov rsi, rax
test rax, rax
je 0x180072744
mov qword [rsp + 0x518], rdi
cmp r13d, 0x10
jge 0x180071ed2
xor edi, edi
test r14d, r14d
je 0x180071ea8
cmp r14d, 0x100
jg 0x180071ea8
movsxd rax, r14d
test r14d, r14d
jle 0x1800719f7
mov esi, dword [rsp + 0x28]
lea r14, [rbx + 0x30]
xor r13d, r13d
mov r15, rax
nop
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x1800718df
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x180071908
cmp dword [rbx + 0x30], edi
lea r14, [rbx + 0x30]
je 0x180071906
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x180071908
xor cl, cl
mov r12, r14
mov byte [rbp + r13*4 - 0xe], cl
cmp rax, qword [rbx + 0xc8]
jae 0x180071928
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18007194d
cmp dword [r14], edi
je 0x18007194b
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18007194d
xor cl, cl
mov byte [rbp + r13*4 - 0xf], cl
mov rcx, qword [rbx + 0xc8]
cmp rax, rcx
jae 0x180071971
movzx edx, byte [rax]
lea r14, [rbx + 0x30]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18007199d
cmp dword [r14], edi
je 0x18007199b
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
mov rcx, qword [rbx + 0xc8]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18007199d
xor dl, dl
mov byte [rbp + r13*4 - 0x10], dl
cmp esi, 0xc
je 0x1800719cd
cmp rax, rcx
jae 0x1800719b8
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800719cd
cmp dword [r12], edi
je 0x1800719cd
mov rcx, rbx
call fcn.180067910
inc qword [rbx + 0xc0]
mov byte [rbp + r13*4 - 0xd], 0xff
inc r13
cmp r13, r15
jl 0x1800718c0
mov rsi, qword [rbp - 0x78]
mov r15d, dword [rsp + 0x38]
mov r14d, dword [rsp + 0x20]
mov r12d, dword [rsp + 0x28]
mov r13d, dword [rsp + 0x2c]
xor eax, eax
cmp r12d, 0xc
setne al
add eax, 3
imul eax, r14d
sub r15d, eax
sub r15d, dword [rsp + 0x24]
sub r15d, r12d
je 0x180071a67
test r15d, r15d
jns 0x180071a29
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x180071a67
cmp qword [rbx + 0x10], rdi
je 0x180071a5d
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, r15d
jge 0x180071a5d
mov rax, qword [rbx + 0xc8]
sub r15d, ecx
mov rcx, qword [rbx + 0x28]
mov edx, r15d
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
jmp 0x180071a67
movsxd rax, r15d
add qword [rbx + 0xc0], rax
cmp r13d, 1
jne 0x180071a7a
mov r8d, dword [rbx]
lea r12d, [r8 + 7]
shr r12d, 3
jmp 0x180071a9c
cmp r13d, 4
jne 0x180071a8c
mov r8d, dword [rbx]
lea r12d, [r8 + 1]
shr r12d, 1
jmp 0x180071a9c
cmp r13d, 8
jne 0x180071e37
mov r12d, dword [rbx]
mov r8d, r12d
mov eax, dword [rbx + 4]
neg r12d
and r12d, 3
mov edx, eax
mov dword [rsp + 0x24], r12d
cmp r13d, 1
jne 0x180071c5a
xor r13d, r13d
test eax, eax
jle 0x18007266a
mov rcx, qword [rbx + 0xc0]
mov r14d, 7
cmp rcx, qword [rbx + 0xc8]
jae 0x180071ae7
movzx edx, byte [rcx]
inc rcx
mov qword [rbx + 0xc0], rcx
jmp 0x180071b0e
cmp dword [rbx + 0x30], 0
je 0x180071b0c
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
lea rcx, [rax + 1]
mov qword [rbx + 0xc0], rcx
jmp 0x180071b0e
xor dl, dl
movzx r11d, dl
xor r15d, r15d
mov edx, dword [rbx]
mov r8, rcx
test edx, edx
jle 0x180071bff
mov r9, rcx
mov r10d, edx
nop dword [rax + rax]
mov eax, r11d
mov ecx, r14d
sar eax, cl
and eax, 1
lea rcx, [rax*4]
movzx eax, byte [rbp + rcx - 0x10]
mov byte [rdi + rsi], al
movzx eax, byte [rbp + rcx - 0xf]
mov byte [rdi + rsi + 1], al
movzx eax, byte [rbp + rcx - 0xe]
mov rcx, r9
mov byte [rdi + rsi + 2], al
lea eax, [r15 + 1]
mov byte [rdi + rsi + 3], 0xff
mov r15d, eax
add rdi, 4
cmp eax, edx
je 0x180071bff
sub r14d, 1
jns 0x180071bea
mov r14d, 7
cmp r9, qword [rbx + 0xc8]
jae 0x180071ba8
movzx r11d, byte [r9]
lea rcx, [r9 + 1]
mov qword [rbx + 0xc0], rcx
mov r8, rcx
movzx r11d, r11b
mov edx, r10d
jmp 0x180071bf0
cmp dword [rbx + 0x30], 0
je 0x180071bd7
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx r11d, byte [rax]
lea rcx, [rax + 1]
mov qword [rbx + 0xc0], rcx
mov r8, rcx
mov edx, dword [rbx]
movzx r11d, r11b
jmp 0x180071bf0
mov r8, qword [rbx + 0xc0]
xor r11b, r11b
movzx r11d, r11b
mov edx, r10d
jmp 0x180071bf0
mov rcx, r8
mov edx, r10d
mov r9, rcx
mov r10d, edx
cmp r15d, edx
jl 0x180071b30
test r12d, r12d
je 0x180071c44
cmp qword [rbx + 0x10], 0
je 0x180071c37
mov r8d, dword [rbx + 0xc8]
sub r8d, ecx
cmp r8d, r12d
jge 0x180071c37
mov rax, qword [rbx + 0xc8]
mov edx, r12d
mov rcx, qword [rbx + 0x28]
sub edx, r8d
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
jmp 0x180071c44
mov eax, r12d
add rax, rcx
mov qword [rbx + 0xc0], rax
mov eax, dword [rbx + 4]
inc r13d
mov edx, eax
cmp r13d, eax
jl 0x180071ac2
jmp 0x18007266a
xor r13d, r13d
test eax, eax
jle 0x18007266a
nop word [rax + rax]
xor r14d, r14d
mov eax, r8d
test r8d, r8d
jle 0x180071ddb
mov r12d, dword [rsp + 0x2c]
mov r10, qword [rbx + 0xc8]
mov r8d, eax
mov r9, qword [rbx + 0xc0]
cmp r9, r10
jae 0x180071caa
movzx ecx, byte [r9]
inc r9
mov qword [rbx + 0xc0], r9
jmp 0x180071cdb
cmp dword [rbx + 0x30], 0
je 0x180071cd9
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
mov r10, qword [rbx + 0xc8]
mov r8d, dword [rbx]
movzx ecx, byte [rax]
lea r9, [rax + 1]
mov qword [rbx + 0xc0], r9
jmp 0x180071cdb
xor cl, cl
mov edx, 0x30
xor r11d, r11d
mov rax, rbx
movzx eax, cl
lea r15, [rbx + rdx]
cmp r12d, 4
jne 0x180071cfd
mov r11d, eax
and r11d, 0xf
shr eax, 4
movsxd rcx, edi
lea rdx, [rax*4]
movzx eax, byte [rbp + rdx - 0x10]
inc edi
mov byte [rcx + rsi], al
movzx eax, byte [rbp + rdx - 0xf]
movsxd rcx, edi
inc edi
mov byte [rcx + rsi], al
movzx eax, byte [rbp + rdx - 0xe]
movsxd rcx, edi
inc edi
mov byte [rcx + rsi], al
movsxd rax, edi
inc edi
mov byte [rax + rsi], 0xff
lea eax, [r14 + 1]
cmp eax, r8d
je 0x180071dd6
cmp r12d, 8
jne 0x180071d8b
cmp r9, r10
jae 0x180071d5e
movzx ecx, byte [r9]
lea rax, [r9 + 1]
mov qword [rbx + 0xc0], rax
jmp 0x180071d87
cmp dword [r15], 0
je 0x180071d85
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
mov r8d, dword [rbx]
jmp 0x180071d87
xor cl, cl
movzx r11d, cl
movsxd rcx, edi
lea rdx, [r11*4]
movzx eax, byte [rbp + rdx - 0x10]
inc edi
add r14d, 2
mov r9d, r8d
mov byte [rcx + rsi], al
movzx eax, byte [rbp + rdx - 0xf]
movsxd rcx, edi
inc edi
mov byte [rcx + rsi], al
movzx eax, byte [rbp + rdx - 0xe]
movsxd rcx, edi
inc edi
mov byte [rcx + rsi], al
movsxd rax, edi
inc edi
mov byte [rax + rsi], 0xff
mov eax, r8d
cmp r14d, r8d
jl 0x180071c84
mov r12d, dword [rsp + 0x24]
test r12d, r12d
je 0x180071e21
cmp qword [rbx + 0x10], 0
je 0x180071e17
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, r12d
jge 0x180071e17
mov rax, qword [rbx + 0xc8]
mov edx, r12d
sub edx, ecx
mov qword [rbx + 0xc0], rax
mov rcx, qword [rbx + 0x28]
call qword [rbx + 0x18]
mov r8d, dword [rbx]
jmp 0x180071e21
mov eax, r12d
add qword [rbx + 0xc0], rax
mov eax, dword [rbx + 4]
inc r13d
mov edx, eax
cmp r13d, eax
jl 0x180071c70
jmp 0x18007266a
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [0x1800b13e4]
mov rax, qword gs:[0x58]
mov ecx, 0x18
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_bpp
mov qword [rcx + rax], rdx
xor eax, eax
mov rdi, qword [rsp + 0x518]
mov rsi, qword [rsp + 0x558]
mov r12, qword [rsp + 0x510]
mov r13, qword [rsp + 0x508]
mov r15, qword [rsp + 0x500]
mov rcx, qword [rbp + 0x3f0]
xor rcx, rsp
call fcn.180086270
add rsp, 0x520
pop r14
pop rbx
pop rbp
ret
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [0x1800b13e4]
mov rax, qword gs:[0x58]
mov ecx, 0x18
mov rax, qword [rax + rdx*8]
lea rdx, str.invalid
jmp 0x180071e5f
sub r15d, dword [rsp + 0x24]
xor edx, edx
mov dword [rsp + 0x54], edx
mov r11d, edx
mov dword [rsp + 0x38], edx
mov r9d, edx
mov dword [rsp + 0x28], edx
mov r13d, edx
mov dword [rsp + 0x30], edx
mov r14d, edx
mov dword [rsp + 0x5c], edx
mov edi, edx
sub r15d, r12d
je 0x180071f5b
test r15d, r15d
jns 0x180071f15
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x180071f5b
cmp qword [rbx + 0x10], rdx
je 0x180071f51
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, r15d
jge 0x180071f51
mov rax, qword [rbx + 0xc8]
sub r15d, ecx
mov rcx, qword [rbx + 0x28]
mov edx, r15d
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
mov r9d, edi
mov r11d, edi
xor edx, edx
jmp 0x180071f5b
movsxd rax, r15d
add qword [rbx + 0xc0], rax
mov ecx, dword [rsp + 0x2c]
cmp ecx, 0x18
jne 0x180071f6c
mov eax, dword [rbx]
lea r8d, [rax + rax*2]
jmp 0x180071f7c
cmp ecx, 0x10
jne 0x180071f79
mov r8d, dword [rbx]
add r8d, r8d
jmp 0x180071f7c
mov r8d, edx
neg r8d
and r8d, 3
mov dword [rsp + 0x20], r8d
cmp ecx, 0x18
jne 0x180071fa5
mov r12d, dword [rsp + 0x50]
mov r10d, 1
mov qword [rsp + 0x40], r10
mov r15d, edi
jmp 0x1800721c4
mov r15d, dword [rsp + 0x58]
mov r10, rdx
mov qword [rsp + 0x40], rdx
cmp ecx, 0x20
jne 0x180072009
mov qword [rsp + 0x40], rdx
cmp r15d, 0xff
jne 0x180072009
cmp dword [rsp + 0x4c], 0xff00
mov qword [rsp + 0x40], rdx
jne 0x180072009
cmp dword [rsp + 0x48], 0xff0000
mov qword [rsp + 0x40], rdx
jne 0x180072009
mov r12d, dword [rsp + 0x50]
mov qword [rsp + 0x40], rdx
cmp r12d, 0xff000000
jne 0x180072033
mov r10d, 2
mov r15d, edi
mov qword [rsp + 0x40], r10
jmp 0x1800721c4
mov r9d, dword [rsp + 0x48]
test r9d, r9d
je 0x180072717
mov edi, dword [rsp + 0x4c]
test edi, edi
je 0x180072717
test r15d, r15d
je 0x180072717
mov r12d, dword [rsp + 0x50]
jmp 0x18007203c
mov r9d, dword [rsp + 0x48]
mov edi, dword [rsp + 0x4c]
mov ecx, r9d
call fcn.180070f20
mov edx, r9d
mov ecx, r9d
shr edx, 1
and ecx, 0x55555555
and edx, 0x55555555
add edx, ecx
lea r11d, [rax - 7]
mov ecx, edx
mov dword [rsp + 0x54], r11d
and edx, 0x33333333
shr ecx, 2
and ecx, 0x33333333
add ecx, edx
mov edx, ecx
shr edx, 4
add edx, ecx
mov ecx, edi
and edx, 0xf0f0f0f
mov eax, edx
shr eax, 8
add edx, eax
mov eax, edx
shr eax, 0x10
add eax, edx
movzx r9d, al
call fcn.180070f20
sub eax, 7
mov edx, edi
shr edx, 1
mov ecx, edi
and edx, 0x55555555
mov dword [rsp + 0x38], eax
and ecx, 0x55555555
add edx, ecx
mov ecx, edx
and edx, 0x33333333
shr ecx, 2
and ecx, 0x33333333
add ecx, edx
mov edx, ecx
shr edx, 4
add edx, ecx
mov ecx, r15d
and edx, 0xf0f0f0f
mov eax, edx
shr eax, 8
add edx, eax
mov eax, edx
shr eax, 0x10
add eax, edx
movzx r13d, al
call fcn.180070f20
sub eax, 7
mov edx, r15d
shr edx, 1
mov ecx, r15d
and edx, 0x55555555
mov dword [rsp + 0x28], eax
and ecx, 0x55555555
add edx, ecx
mov ecx, edx
and edx, 0x33333333
shr ecx, 2
and ecx, 0x33333333
add ecx, edx
mov edx, ecx
shr edx, 4
add edx, ecx
mov ecx, r12d
and edx, 0xf0f0f0f
mov eax, edx
shr eax, 8
add edx, eax
mov eax, edx
shr eax, 0x10
add eax, edx
movzx r14d, al
call fcn.180070f20
lea r15d, [rax - 7]
mov edx, r12d
mov dword [rsp + 0x30], r15d
shr edx, 1
mov ecx, r12d
and edx, 0x55555555
and ecx, 0x55555555
add edx, ecx
mov ecx, edx
and edx, 0x33333333
shr ecx, 2
and ecx, 0x33333333
add ecx, edx
mov edx, ecx
shr edx, 4
add edx, ecx
and edx, 0xf0f0f0f
mov eax, edx
shr eax, 8
add edx, eax
mov eax, edx
shr eax, 0x10
add eax, edx
movzx edi, al
cmp r9d, 8
ja 0x180072717
cmp r13d, 8
ja 0x180072717
cmp r14d, 8
ja 0x180072717
cmp edi, 8
ja 0x180072717
mov r8d, dword [rsp + 0x20]
mov eax, dword [rbx + 4]
mov edx, eax
mov dword [rsp + 0x24], 0
test eax, eax
jle 0x18007266a
mov eax, r11d
neg eax
mov dword [rsp + 0x60], eax
mov eax, 8
mov ecx, eax
sub ecx, r9d
mov dword [rsp + 0x64], ecx
mov ecx, dword [rsp + 0x38]
neg ecx
mov dword [rsp + 0x68], ecx
mov ecx, eax
sub ecx, r13d
mov dword [rsp + 0x6c], ecx
mov ecx, dword [rsp + 0x28]
neg ecx
mov dword [rsp + 0x70], ecx
mov ecx, eax
sub ecx, r14d
mov dword [rsp + 0x74], ecx
mov ecx, r15d
neg ecx
sub eax, edi
mov dword [rsp + 0x78], ecx
mov dword [rsp + 0x7c], eax
mov eax, r9d
mov qword [rbp - 0x48], rax
mov eax, r14d
mov ecx, r13d
mov r13d, dword [rsp + 0x5c]
mov qword [rbp - 0x38], rax
mov eax, edi
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x40], rcx
nop word [rax + rax]
mov eax, dword [rbx]
movsxd rcx, r13d
test r10, r10
je 0x1800723d9
xor r15d, r15d
test eax, eax
jle 0x1800725fc
lea r14, [rcx + rsi]
lea rdi, [rbx + 0x30]
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x18007229f
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800722c9
cmp dword [rbx + 0x30], 0
lea rdi, [rbx + 0x30]
je 0x1800722c7
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800722c9
xor dl, dl
mov rcx, rax
mov r12, rdi
mov byte [r14 + 2], dl
cmp rax, qword [rbx + 0xc8]
jae 0x1800722ee
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
mov rcx, rax
jmp 0x180072316
cmp dword [rdi], 0
je 0x180072314
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
mov rcx, rax
jmp 0x180072316
xor dl, dl
mov byte [r14 + 1], dl
mov rdx, qword [rbx + 0xc8]
cmp rax, rdx
jae 0x18007233b
movzx r8d, byte [rax]
lea rcx, [rax + 1]
mov qword [rbx + 0xc0], rcx
lea rdi, [rbx + 0x30]
jmp 0x18007236a
cmp dword [rdi], 0
je 0x180072367
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
mov rdx, qword [rbx + 0xc8]
movzx r8d, byte [rax]
lea rcx, [rax + 1]
mov qword [rbx + 0xc0], rcx
jmp 0x18007236a
xor r8b, r8b
cmp qword [rsp + 0x40], 2
mov byte [r14], r8b
jne 0x1800723b3
cmp rcx, rdx
jae 0x18007238a
movzx edx, byte [rcx]
lea rax, [rcx + 1]
mov qword [rbx + 0xc0], rax
jmp 0x1800723b5
cmp dword [r12], 0
je 0x1800723af
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x1800723b5
xor dl, dl
jmp 0x1800723b5
mov dl, 0xff
movzx eax, dl
add r13d, 4
or dword [rsp + 0x34], eax
inc r15d
mov byte [r14 + 3], dl
add r14, 4
cmp r15d, dword [rbx]
jl 0x180072280
jmp 0x1800725f7
xor r14d, r14d
test eax, eax
jle 0x1800725fc
lea rdi, [rcx + rsi]
mov esi, dword [rsp + 0x2c]
nop dword [rax]
cmp esi, 0x10
jne 0x1800724bc
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x180072418
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18007243e
cmp dword [rbx + 0x30], 0
je 0x18007243c
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x18007243e
xor cl, cl
mov rdx, rbx
mov r8d, 0x30
movzx r15d, cl
cmp rax, qword [rbx + 0xc8]
jae 0x180072473
movzx ecx, byte [rax]
inc rax
movzx r9d, cl
shl r9d, 8
add r9d, r15d
mov qword [rbx + 0xc0], rax
mov r15d, dword [rsp + 0x30]
jmp 0x1800724c7
cmp dword [rdx + r8], 0
je 0x1800724a8
mov rcx, rbx
call fcn.180067910
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
movzx r9d, cl
shl r9d, 8
add r9d, r15d
mov qword [rbx + 0xc0], rax
mov r15d, dword [rsp + 0x30]
jmp 0x1800724c7
xor cl, cl
movzx r9d, cl
shl r9d, 8
add r9d, r15d
mov r15d, dword [rsp + 0x30]
jmp 0x1800724c7
mov rcx, rbx
call fcn.180067b20
mov r9d, eax
mov r11d, dword [rsp + 0x54]
lea r10, [0x180000000]
mov ecx, r11d
mov r8d, r9d
and r8d, dword [rsp + 0x48]
mov edx, r8d
shr edx, cl
mov ecx, dword [rsp + 0x60]
shl r8d, cl
mov ecx, dword [rsp + 0x64]
test r11d, r11d
mov r11, qword [rbp - 0x48]
cmovns r8d, edx
mov edx, r9d
and edx, dword [rsp + 0x4c]
shr r8d, cl
mov eax, edx
imul r8d, dword [r10 + r11*4 + 0x9e740]
mov ecx, dword [r10 + r11*4 + 0x9e798]
mov r11, qword [rbp - 0x40]
sar r8d, cl
mov byte [rdi], r8b
mov r8d, dword [rsp + 0x38]
mov ecx, r8d
shr eax, cl
mov ecx, dword [rsp + 0x68]
shl edx, cl
mov ecx, dword [rsp + 0x6c]
test r8d, r8d
mov r8d, dword [rsp + 0x28]
cmovns edx, eax
shr edx, cl
imul edx, dword [r10 + r11*4 + 0x9e740]
mov ecx, dword [r10 + r11*4 + 0x9e798]
mov r11, qword [rbp - 0x38]
sar edx, cl
mov ecx, r8d
mov byte [rdi + 1], dl
mov edx, r9d
and edx, dword [rsp + 0x58]
mov eax, edx
shr eax, cl
mov ecx, dword [rsp + 0x70]
shl edx, cl
mov ecx, dword [rsp + 0x74]
test r8d, r8d
cmovns edx, eax
shr edx, cl
imul edx, dword [r10 + r11*4 + 0x9e740]
mov ecx, dword [r10 + r11*4 + 0x9e798]
sar edx, cl
mov byte [rdi + 2], dl
test r12d, r12d
je 0x1800725d0
mov rdx, qword [rbp - 0x30]
and r9d, r12d
mov eax, r9d
mov ecx, r15d
shr eax, cl
mov ecx, dword [rsp + 0x78]
shl r9d, cl
mov ecx, dword [rsp + 0x7c]
test r15d, r15d
cmovns r9d, eax
shr r9d, cl
imul r9d, dword [r10 + rdx*4 + 0x9e740]
mov ecx, dword [r10 + rdx*4 + 0x9e798]
sar r9d, cl
jmp 0x1800725d6
mov r9d, 0xff
or dword [rsp + 0x34], r9d
add r13d, 4
mov byte [rdi + 3], r9b
inc r14d
add rdi, 4
cmp r14d, dword [rbx]
jl 0x1800723f0
mov rsi, qword [rbp - 0x78]
mov r8d, dword [rsp + 0x20]
test r8d, r8d
je 0x180072644
cmp qword [rbx + 0x10], 0
je 0x18007263a
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, r8d
jge 0x18007263a
mov rax, qword [rbx + 0xc8]
mov edx, r8d
sub edx, ecx
mov qword [rbx + 0xc0], rax
mov rcx, qword [rbx + 0x28]
call qword [rbx + 0x18]
mov r8d, dword [rsp + 0x20]
jmp 0x180072644
mov eax, r8d
add qword [rbx + 0xc0], rax
mov ecx, dword [rsp + 0x24]
mov eax, dword [rbx + 4]
inc ecx
mov r10, qword [rsp + 0x40]
mov edx, eax
mov r15d, dword [rsp + 0x30]
mov r12d, dword [rsp + 0x50]
mov dword [rsp + 0x24], ecx
cmp ecx, eax
jl 0x180072250
cmp dword [rsp + 0x34], 0
jne 0x18007268f
imul eax, dword [rbx]
lea eax, [rax*4 - 1]
movsxd rcx, eax
test eax, eax
js 0x18007268f
mov byte [rcx + rsi], 0xff
sub rcx, 4
jns 0x180072682
mov edx, dword [rbx + 4]
cmp dword [rbp - 0x80], 0
jle 0x1800726fe
xor r10d, r10d
test edx, 0xfffffffe
jle 0x1800726fe
mov ecx, dword [rbx]
sub edx, r10d
dec edx
mov r9d, ecx
imul edx, ecx
xor r8d, r8d
imul r9d, r10d
lea eax, [rcx*4]
shl edx, 2
mov r11d, edx
add rdx, rsi
shl r9d, 2
test eax, eax
jle 0x1800726ef
sub r9, r11
nop
movzx eax, byte [rdx]
inc r8d
movzx ecx, byte [rdx + r9]
mov byte [rdx + r9], al
mov byte [rdx], cl
lea rdx, [rdx + 1]
mov eax, dword [rbx]
shl eax, 2
cmp r8d, eax
jl 0x1800726d0
mov edx, dword [rbx + 4]
inc r10d
mov eax, edx
sar eax, 1
cmp r10d, eax
jl 0x1800726a0
mov eax, dword [rbx]
mov rcx, qword [rbp - 0x28]
mov dword [rcx], eax
mov eax, dword [rbx + 4]
mov rcx, qword [rbp - 0x20]
mov dword [rcx], eax
mov rax, rsi
jmp 0x180071e65
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [0x1800b13e4]
mov rax, qword gs:[0x58]
mov ecx, 0x18
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_masks
jmp 0x180071e5f
mov edx, dword [0x1800b13e4]
mov rax, qword gs:[0x58]
mov ecx, 0x18
mov rax, qword [rax + rdx*8]
lea rdx, str.outofmem
mov qword [rcx + rax], rdx
xor eax, eax
jmp 0x180071e6d
mov edx, dword [0x1800b13e4]
mov rax, qword gs:[0x58]
mov ecx, 0x18
mov rax, qword [rax + rdx*8]
lea rdx, str.too_large
mov qword [rcx + rax], rdx
xor eax, eax
jmp 0x180071e75