Function at 0x1400f34b0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1390]
mov eax, 0x1490
call fcn.140126870
sub rsp, rax
mov rax, qword [0x1403a0088]
xor rax, rsp
mov qword [rbp + 0x1380], rax
mov r15, rcx
mov byte [rsp + 0x40], 0
xor ecx, ecx
mov dword [rsp + 0x48], 1
xor r14b, r14b
mov dword [rsp + 0x4c], ecx
xor eax, eax
mov dword [rsp + 0x54], ecx
mov rbx, qword [r15]
mov r12d, ecx
mov r13d, ecx
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0x50], ecx
mov qword [r15 + 0x10], rcx
mov qword [r15 + 8], rcx
mov qword [r15 + 0x18], rcx
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x44], r14b
mov r14d, ecx
mov rcx, rbx
mov word [rsp + 0x45], ax
call fcn.1400f1d60
test eax, eax
je 0x1400f4093
mov qword [rsp + 0x14c8], rsi
mov qword [rsp + 0x14d0], rdi
mov rcx, rbx
call fcn.1400eb320
mov rcx, rbx
mov esi, eax
call fcn.1400eb320
shl esi, 0x10
mov rcx, rbx
add esi, eax
mov dword [rsp + 0x60], esi
call fcn.1400eb320
mov rcx, rbx
mov edi, eax
call fcn.1400eb320
shl edi, 0x10
lea edx, [rdi + rax]
mov dword [rsp + 0x64], edx
mov rcx, qword [rsp + 0x60]
shr rcx, 0x20
cmp ecx, 0x49484452
ja 0x1400f3983
je 0x1400f36ea
cmp ecx, 0x43674249
je 0x1400f3687
cmp ecx, 0x49444154
je 0x1400f35f4
cmp ecx, 0x49454e44
jne 0x1400f3997
cmp dword [rsp + 0x48], 0
jne 0x1400f4065
mov rsi, qword [r15 + 8]
test rsi, rsi
jne 0x1400f3c3e
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.no_IDAT
jmp 0x1400f4078
cmp dword [rsp + 0x48], 0
jne 0x1400f4065
cmp byte [rsp + 0x40], 0
je 0x1400f360f
test r12d, r12d
je 0x1400f3eb5
mov eax, dword [rsp + 0x4c]
lea edi, [rsi + rax]
cmp edi, eax
jl 0x1400f4081
cmp edi, r14d
jbe 0x1400f3665
test r14d, r14d
jne 0x1400f3635
mov r14d, 0x1000
cmp esi, r14d
cmova r14d, esi
cmp edi, r14d
jbe 0x1400f3648
nop word [rax + rax]
add r14d, r14d
cmp edi, r14d
ja 0x1400f3640
mov rcx, qword [r15 + 8]
mov edx, r14d
call fcn.140284ec0
test rax, rax
je 0x1400f3ecd
mov qword [r15 + 8], rax
mov eax, dword [rsp + 0x4c]
mov edx, eax
mov r8d, esi
add rdx, qword [r15 + 8]
mov rcx, rbx
call fcn.1400eb250
test eax, eax
je 0x1400f3ee5
mov dword [rsp + 0x4c], edi
jmp 0x1400f3c29
mov dword [rsp + 0x50], 1
test esi, esi
jns 0x1400f36a6
mov rax, qword [rbx + 0xc0]
mov qword [rbx + 0xb8], rax
jmp 0x1400f3c29
cmp qword [rbx + 0x10], 0
je 0x1400f36db
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xb8]
cmp ecx, esi
jge 0x1400f36db
mov rax, qword [rbx + 0xc0]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xb8], rax
call qword [rbx + Ordinal_26]
jmp 0x1400f3c29
movsxd rax, esi
add qword [rbx + 0xb8], rax
jmp 0x1400f3c29
cmp dword [rsp + 0x48], 0
je 0x1400f3fa5
mov dword [rsp + 0x48], 0
cmp esi, 0xd
jne 0x1400f3f8d
mov rcx, rbx
call fcn.1400eb320
mov rcx, rbx
mov edi, eax
call fcn.1400eb320
shl edi, 0x10
add eax, edi
mov dword [rbx], eax
cmp eax, 0x1000000
ja 0x1400f394f
mov rcx, rbx
call fcn.1400eb320
mov rcx, rbx
mov edi, eax
call fcn.1400eb320
shl edi, 0x10
lea ecx, [rax + rdi]
mov dword [rbx + 4], ecx
cmp ecx, 0x1000000
ja 0x1400f394f
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x1400f3770
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3796
cmp dword [rbx + 0x30], 0
je 0x1400f3794
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3796
xor cl, cl
movzx eax, cl
mov dword [r15 + 0x20], eax
cmp eax, 0x10
ja 0x1400f3f75
mov ecx, 0x10116
bt ecx, eax
jae 0x1400f3f75
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x1400f37d3
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f37f9
cmp dword [rbx + 0x30], 0
je 0x1400f37f7
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f37f9
xor cl, cl
movzx edi, cl
mov dword [rsp + 0x58], edi
cmp edi, 6
ja 0x1400f3efd
cmp edi, 3
jne 0x1400f3824
cmp dword [r15 + 0x20], 0x10
je 0x1400f3efd
movzx esi, dil
mov byte [rsp + 0x40], dil
jmp 0x1400f3833
test dil, 1
jne 0x1400f3efd
movzx esi, byte [rsp + 0x40]
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jb 0x1400f3858
cmp dword [rbx + 0x30], 0
je 0x1400f386d
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
test cl, cl
jne 0x1400f3f15
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jb 0x1400f3892
cmp dword [rbx + 0x30], 0
je 0x1400f38a7
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
test cl, cl
jne 0x1400f3f2d
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x1400f38c6
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f38ec
cmp dword [rbx + 0x30], 0
je 0x1400f38ea
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f38ec
xor cl, cl
movzx r13d, cl
mov dword [rsp + 0x54], r13d
cmp r13d, 1
ja 0x1400f3f5d
mov r10d, dword [rbx]
test r10d, r10d
je 0x1400f3f45
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x1400f3f45
xor edx, edx
test sil, sil
jne 0x1400f3967
mov r8d, edi
mov eax, edi
and eax, 2
shr r8d, 2
or eax, 1
and r8d, 1
add r8d, eax
mov eax, 0x40000000
div r10d
xor edx, edx
mov dword [rbx + 8], r8d
div r8d
cmp eax, r9d
jae 0x1400f3c29
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, [0x140353d38]
jmp 0x1400f4078
mov eax, 0x40000000
mov dword [rbx + 8], 1
div r10d
shr eax, 2
cmp eax, r9d
jb 0x1400f394f
jmp 0x1400f3c29
cmp ecx, 0x504c5445
je 0x1400f3aef
cmp ecx, 0x74524e53
je 0x1400f39bb
cmp dword [rsp + 0x48], 0
jne 0x1400f4065
bt edx, 0x1d
jae 0x1400f3fbd
mov edx, esi
mov rcx, rbx
call fcn.1400eb1f0
jmp 0x1400f3c29
cmp dword [rsp + 0x48], 0
jne 0x1400f4065
cmp qword [r15 + 8], 0
jne 0x1400f403b
cmp byte [rsp + 0x40], 0
je 0x1400f3a56
test r12d, r12d
je 0x1400f4011
cmp esi, r12d
ja 0x1400f3ffc
mov byte [rsp + 0x40], 4
test esi, esi
je 0x1400f3c29
lea rdi, [rbp + 0xf83]
nop
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x1400f3a1f
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3a45
cmp dword [rbx + 0x30], 0
je 0x1400f3a43
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3a45
xor cl, cl
mov byte [rdi], cl
add rdi, 4
sub rsi, 1
jne 0x1400f3a00
jmp 0x1400f3c29
mov ecx, dword [rbx + 8]
test cl, 1
je 0x1400f4026
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x1400f3ffc
xor esi, esi
mov byte [rsp + 0x41], 1
cmp dword [r15 + 0x20], 0x10
jne 0x1400f3aab
test ecx, ecx
jle 0x1400f3c29
lea rdi, [rbp + 0xf70]
nop word [rax + rax]
mov rcx, rbx
call fcn.1400eb320
inc esi
mov word [rdi], ax
lea rdi, [rdi + 2]
cmp esi, dword [rbx + 8]
jl 0x1400f3a90
jmp 0x1400f3c29
test ecx, ecx
jle 0x1400f3c29
lea rdi, [rsp + 0x44]
lea r13, [0x140339ef0]
nop
mov rcx, rbx
call fcn.1400eb320
movsxd rcx, dword [r15 + 0x20]
lea rdi, [rdi + 1]
movzx eax, al
inc esi
movzx edx, byte [rcx + r13]
imul eax, edx
mov byte [rdi - 1], al
cmp esi, dword [rbx + 8]
jl 0x1400f3ac0
mov r13d, dword [rsp + 0x54]
jmp 0x1400f3c29
cmp dword [rsp + 0x48], 0
jne 0x1400f4065
cmp esi, 0x300
ja 0x1400f4050
mov eax, 0xaaaaaaab
mul esi
mov r12d, edx
shr r12d, 1
lea eax, [r12 + r12*2]
cmp eax, esi
jne 0x1400f4050
test r12d, r12d
je 0x1400f3c29
lea rdi, [rbp + 0xf82]
mov esi, r12d
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x1400f3b5f
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3b85
cmp dword [rbx + 0x30], 0
je 0x1400f3b83
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3b85
xor cl, cl
mov rax, qword [rbx + 0xb8]
mov byte [rdi - 2], cl
cmp rax, qword [rbx + 0xc0]
jae 0x1400f3ba7
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3bcd
cmp dword [rbx + 0x30], 0
je 0x1400f3bcb
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3bcd
xor cl, cl
mov rax, qword [rbx + 0xb8]
mov byte [rdi - 1], cl
cmp rax, qword [rbx + 0xc0]
jae 0x1400f3bef
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3c15
cmp dword [rbx + 0x30], 0
je 0x1400f3c13
mov rcx, rbx
call fcn.1400eb180
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x1400f3c15
xor cl, cl
mov byte [rdi], cl
mov byte [rdi + 1], 0xff
add rdi, 4
sub rsi, 1
jne 0x1400f3b40
mov rcx, rbx
call fcn.1400eb320
mov rcx, rbx
call fcn.1400eb320
jmp 0x1400f3552
mov edi, dword [r15 + 0x20]
imul edi, dword [rbx]
add edi, 7
shr edi, 3
imul edi, dword [rbx + 8]
inc edi
imul edi, dword [rbx + 4]
movsxd r14, edi
mov rcx, r14
call fcn.14027bdf8
mov r12d, dword [rsp + 0x50]
mov rcx, rax
test rax, rax
jne 0x1400f3c71
xor esi, esi
jmp 0x1400f3cc7
movsxd rax, dword [rsp + 0x4c]
add rax, rsi
mov qword [rsp + 0x70], rsi
xor esi, esi
mov qword [rsp + 0x78], rax
lea rax, [r14 + rcx]
mov qword [rbp - 0x70], rcx
mov edx, esi
mov qword [rbp - 0x78], rcx
test r12d, r12d
mov qword [rbp - 0x68], rax
lea rcx, [rsp + 0x70]
mov dword [rbp - 0x60], 1
sete dl
call fcn.1400f1c10
test eax, eax
je 0x1400f3cbe
mov edi, dword [rbp - 0x78]
sub edi, dword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x1400f3cca
mov rcx, qword [rbp - 0x70]
call fcn.14027b988
mov rax, rsi
mov qword [r15 + 0x10], rax
test rax, rax
je 0x1400f4081
mov rcx, qword [r15 + 8]
call fcn.14027b988
mov qword [r15 + 8], rsi
mov eax, dword [rbx + 8]
movzx esi, byte [rsp + 0x40]
cmp eax, 3
jne 0x1400f3cf6
test sil, sil
je 0x1400f3d03
movzx r14d, byte [rsp + 0x41]
test r14b, r14b
je 0x1400f3d0b
jmp 0x1400f3d09
movzx r14d, byte [rsp + 0x41]
inc eax
mov dword [rbx + 0xc], eax
mov r8d, edi
mov eax, dword [rsp + 0x58]
mov rcx, r15
mov r9d, dword [rbx + 0xc]
mov rdx, qword [r15 + 0x10]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
mov eax, dword [r15 + 0x20]
mov dword [rsp + 0x20], eax
call fcn.1400f2f00
test eax, eax
je 0x1400f4081
test r14b, r14b
je 0x1400f3e3f
mov rax, qword [r15]
mov rcx, qword [r15 + 0x18]
mov edx, dword [rax + 4]
imul edx, dword [rax]
cmp dword [r15 + 0x20], 0x10
jne 0x1400f3dd8
cmp dword [rbx + 0xc], 2
jne 0x1400f3d93
xor edi, edi
test edx, edx
je 0x1400f3e41
movzx r8d, word [rbp + 0xf70]
cmp word [rcx], r8w
lea rcx, [rcx + 4]
mov eax, 0xffff
cmove ax, di
mov word [rcx - 2], ax
sub rdx, 1
jne 0x1400f3d73
jmp 0x1400f3e41
test edx, edx
je 0x1400f3e3f
mov r8, qword [rbp + 0xf72]
movzx r9d, word [rbp + 0xf70]
mov eax, edx
mov rdx, qword [rbp + 0xf74]
xor edi, edi
cmp word [rcx], r9w
jne 0x1400f3dcc
cmp word [rcx + 2], r8w
jne 0x1400f3dcc
cmp word [rcx + 4], dx
jne 0x1400f3dcc
mov word [rcx + 6], di
add rcx, 8
sub rax, 1
jne 0x1400f3db3
jmp 0x1400f3e41
cmp dword [rbx + 0xc], 2
jne 0x1400f3e0a
xor edi, edi
test edx, edx
je 0x1400f3e41
movzx r8d, byte [rsp + 0x44]
nop word [rax + rax]
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, edi
mov byte [rcx - 1], al
sub rdx, 1
jne 0x1400f3df0
jmp 0x1400f3e41
test edx, edx
je 0x1400f3e3f
movzx r8d, byte [rsp + 0x45]
movzx r9d, byte [rsp + 0x44]
mov eax, edx
movzx edx, byte [rsp + 0x46]
cmp byte [rcx], r9b
jne 0x1400f3e35
cmp byte [rcx + 1], r8b
jne 0x1400f3e35
cmp byte [rcx + 2], dl
jne 0x1400f3e35
mov byte [rcx + 3], 0
add rcx, 4
sub rax, 1
jne 0x1400f3e21
xor edi, edi
test r12d, r12d
je 0x1400f3e5d
cmp dword [0x140457d70], 0
je 0x1400f3e5d
cmp dword [rbx + 0xc], 2
jle 0x1400f3e5d
mov rcx, r15
call fcn.1400f33c0
test sil, sil
je 0x1400f3e8e
movzx eax, sil
lea rdx, [rbp + 0xf80]
mov r9d, 4
mov dword [rbx + 8], eax
mov rcx, r15
mov dword [rbx + 0xc], 4
call fcn.1400f3260
test eax, eax
jne 0x1400f3e96
jmp 0x1400f4081
test r14b, r14b
je 0x1400f3e96
inc dword [rbx + 8]
mov rcx, qword [r15 + 0x10]
call fcn.14027b988
mov rcx, rbx
mov qword [r15 + 0x10], rdi
call fcn.1400eb3d0
mov eax, 1
jmp 0x1400f4083
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.no_PLTE
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofmem
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofdata
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_ctype
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_comp_method
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_filter_method
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.0_pixel_image
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_interlace_method
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.1_2_4_8_16_bit_only
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_IHDR_len
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.multiple_IHDR
jmp 0x1400f4078
mov eax, edx
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, edx
shr eax, 0x10
mov byte [0x14044dbf1], al
movzx eax, byte [rsp + 0x64]
mov byte [0x14044dbf3], al
mov rax, qword gs:[0x58]
shr edx, 8
mov byte [0x14044dbf2], dl
mov rcx, qword [rax]
lea rax, str.XXXX_PNG_chunk_not_known
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_tRNS_len
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_before_PLTE
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_with_alpha
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.tRNS_after_IDAT
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.invalid_PLTE
jmp 0x1400f4078
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.first_not_IHDR
mov edx, reloc.WS2_32.dll_recv
mov qword [rdx + rcx], rax
xor eax, eax
mov rsi, qword [rsp + 0x14c8]
mov rdi, qword [rsp + 0x14d0]
mov rcx, qword [rbp + 0x1380]
xor rcx, rsp
call fcn.140125a70
mov rbx, qword [rsp + 0x14d8]
add rsp, 0x1490
pop r15
pop r14
pop r13
pop r12
pop rbp
ret