Function at 0x1400019d0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
sub rsp, 0x80
mov ecx, 0x31c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
test rax, rax
jne 0x140001a0b
lea rcx, str.Could_not_allocate_memory_for_gifHead_n
call fcn.140001580
lea ecx, [rbp + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x78], rbx
lea rdx, [rsp + 0x90]
xor eax, eax
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x68], rdi
mov rcx, rbp
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x58], r13
mov r13d, eax
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x48], r15
mov r15d, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [0x140006680], 1
call fcn.140002380
xor bl, bl
xor r8b, r8b
xor r9b, r9b
mov byte [rsp + 0xa8], r8b
xor r10b, r10b
mov byte [rsp + 0x20], r9b
xor dil, dil
mov byte [rsp + 0xa0], r10b
xor sil, sil
mov byte [rsp + 0x21], dil
xor r12b, r12b
mov byte [rsp + 0x22], bl
xor r14b, r14b
mov byte [rsp + 0x23], bl
nop dword [rax + rax]
mov rax, qword [rsp + 0x90]
movzx ecx, byte [rax]
inc rax
mov qword [rsp + 0x90], rax
cmp cl, 0x21
je 0x140001cb5
cmp cl, 0x2c
je 0x140001b0c
cmp cl, 0x3b
je 0x140001ffa
movzx ebx, cl
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, ebx
lea rdx, str.Unknown_Block_Separator_Character:__02x_n
mov rcx, rax
call fcn.1400015e0
movzx r8d, byte [rsp + 0xa8]
movzx r9d, byte [rsp + 0x20]
movzx r10d, byte [rsp + 0xa0]
movzx ebx, byte [rsp + 0x22]
jmp 0x140001aa0
lea eax, [r12 + 1]
test r14b, r14b
movzx edx, al
movzx eax, r12b
cmovne edx, eax
movzx r12d, dl
cmp dl, sil
jbe 0x140001bad
movzx edi, sil
mov rcx, r15
add sil, sil
inc sil
movzx ebx, sil
shl rbx, 3
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov r15, rax
test rax, rax
je 0x14000206a
mov rdx, rbx
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov r13, rax
test rax, rax
je 0x14000206a
cmp dil, sil
jae 0x140001ba8
movzx eax, dil
mov r8, r13
sub r8, r15
lea rcx, [r15 + rax*8]
movzx eax, sil
sub al, dil
movzx edx, al
xor r14d, r14d
nop dword [rax]
mov qword [r8 + rcx], r14
mov qword [rcx], r14
lea rcx, [rcx + 8]
sub rdx, 1
jne 0x140001b90
movzx edi, byte [rsp + 0x21]
jmp 0x140001bb0
movzx edi, byte [rsp + 0x21]
xor r14d, r14d
mov ecx, 0x330
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
movzx ebx, r12b
dec rbx
mov qword [r15 + rbx*8], rax
lea rbx, [r15 + rbx*8]
test rax, rax
je 0x14000206a
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.140002500
cmp eax, 0xffffffff
jne 0x140001c01
lea ecx, [rax + 3]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdx, rax
lea rcx, str.Error_reading_Image_Descriptor_information_n
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputs]
mov rcx, qword [rbx]
mov rdx, rbp
call fcn.140001100
mov rcx, qword [rbx]
mov qword [rcx + 0x320], rax
mov rcx, qword [rbx]
mov rcx, qword [rcx + 0x328]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbx]
cmp byte [rcx + 8], 0
jl 0x140001c90
cmp byte [rbp], 0
jge 0x140001c8a
cmp dword [rbp + 4], 0
mov r9d, r14d
jbe 0x140001c8a
nop
mov rcx, qword [rbx]
mov edx, r9d
inc r9d
lea r8, [rdx + rdx*2]
lea rax, [rdx*2]
add rax, rbp
movzx eax, byte [rdx + rax + 0xc]
lea rdx, [rdx + rdx*2]
mov byte [r8 + rcx + 0x14], al
mov rcx, qword [rbx]
movzx eax, byte [r8 + rbp + 0xd]
mov byte [rdx + rcx + 0x15], al
mov rcx, qword [rbx]
movzx eax, byte [r8 + rbp + 0xe]
mov byte [r8 + rcx + 0x16], al
cmp r9d, dword [rbp + 4]
jb 0x140001c40
mov rcx, qword [rbx]
mov eax, dword [rbp + 4]
mov dword [rcx + 0xc], eax
movzx ebx, byte [rsp + 0x22]
xor r14b, r14b
movzx r8d, byte [rsp + 0xa8]
movzx r9d, byte [rsp + 0x20]
movzx r10d, byte [rsp + 0xa0]
jmp 0x140001aa0
movzx ecx, byte [rax]
inc rax
mov edx, ecx
mov qword [rsp + 0x90], rax
sub ecx, 1
je 0x140001f48
sub ecx, 0xf8
je 0x140001e2f
sub ecx, 5
je 0x140001da2
cmp ecx, 1
je 0x140001d11
lea rcx, str.Unknown_Extension_Label:__02x_n
call fcn.140001580
movzx r8d, byte [rsp + 0xa8]
movzx r9d, byte [rsp + 0x20]
movzx r10d, byte [rsp + 0xa0]
jmp 0x140001aa0
inc r10b
mov byte [rsp + 0xa0], r10b
cmp r10b, r9b
jbe 0x140001d2c
add r9b, r9b
inc r9b
mov byte [rsp + 0x20], r9b
mov rcx, qword [rsp + 0x30]
movzx edx, r9b
shl rdx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14000206a
mov ecx, 0x20
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
movzx ecx, byte [rsp + 0xa0]
mov rdx, qword [rsp + 0x30]
mov qword [rdx + rcx*8 - 8], rax
test rax, rax
je 0x14000206a
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.140002160
test eax, eax
je 0x140001fdd
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Error_reading_Application_Extension_information_n
jmp 0x140001fd5
inc dil
mov byte [rsp + 0x21], dil
cmp dil, r8b
jbe 0x140001dbd
add r8b, r8b
inc r8b
mov byte [rsp + 0xa8], r8b
mov rcx, qword [rsp + 0x38]
movzx edx, r8b
shl rdx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14000206a
mov ecx, 0x18
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, qword [rsp + 0x38]
movzx ecx, dil
mov qword [rdx + rcx*8 - 8], rax
test rax, rax
je 0x14000206a
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.1400022f0
test eax, eax
je 0x140001fdd
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Error_reading_Comment_Extension_information_n
jmp 0x140001fd5
lea eax, [r12 + 1]
test r14b, r14b
movzx ecx, al
mov r14b, 1
movzx eax, r12b
cmovne ecx, eax
movzx r12d, cl
cmp cl, sil
jbe 0x140001ecb
movzx edi, sil
mov rcx, r13
add sil, sil
inc sil
movzx ebx, sil
shl rbx, 3
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov r13, rax
test rax, rax
je 0x14000206a
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov r15, rax
test rax, rax
je 0x14000206a
cmp dil, sil
jae 0x140001ec1
movzx ecx, sil
movzx eax, dil
sub cl, dil
mov r8, r13
sub r8, r15
movzx edx, cl
xor ecx, ecx
lea rax, [r15 + rax*8]
nop
mov qword [rax + r8], rcx
mov qword [rax], rcx
lea rax, [rax + 8]
sub rdx, 1
jne 0x140001eb0
movzx edi, byte [rsp + 0x21]
movzx ebx, byte [rsp + 0x22]
mov ecx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
movzx ecx, r12b
mov qword [r13 + rcx*8 - 8], rax
test rax, rax
je 0x14000206a
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.140002330
test eax, eax
je 0x140001f16
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Error_reading_Graphic_Control_Extension_information_n
call fcn.1400015e0
mov rax, qword [rsp + 0x90]
inc byte [rax]
mov rax, qword [rsp + 0x90]
cmp byte [rax], 0
je 0x140001fdd
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Error_reading_Graphic_Control_Extension_n
jmp 0x140001fd5
lea rcx, str.Plain_Text_Extension_n
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
movzx eax, byte [rsp + 0x23]
inc al
mov byte [rsp + 0x23], al
cmp al, bl
jbe 0x140001f6c
add bl, bl
inc bl
mov byte [rsp + 0x22], bl
mov rcx, qword [rsp + 0x28]
movzx edx, bl
shl rdx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14000206a
mov ecx, 0x20
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
movzx ecx, byte [rsp + 0x23]
mov rdx, qword [rsp + 0x28]
mov qword [rdx + rcx*8 - 8], rax
test rax, rax
je 0x14000206a
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.1400026e0
test eax, eax
je 0x140001fdd
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Error_reading_Plain_Text_Extension_information._n
mov rcx, rax
call fcn.1400015e0
movzx r8d, byte [rsp + 0xa8]
movzx r9d, byte [rsp + 0x20]
movzx r10d, byte [rsp + 0xa0]
jmp 0x140001aa0
mov rcx, qword [rsp + 0x98]
movzx eax, byte [rsp + 0x23]
mov r14, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
mov byte [rbp + 0xb], al
mov rax, qword [rsp + 0x28]
mov byte [rbp + 8], r12b
mov r12, qword [rsp + 0x60]
mov byte [rbp + 9], dil
mov rdi, qword [rsp + 0x68]
mov byte [rbp + 0xa], r10b
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0x30]
mov qword [rcx + 0x20], rax
mov rax, qword [rsp + 0x38]
mov qword [rcx + 0x28], rax
xor eax, eax
mov qword [rcx + 8], r15
mov r15, qword [rsp + 0x48]
mov qword [rcx + 0x10], r13
mov r13, qword [rsp + 0x58]
mov qword [rcx], rbp
add rsp, 0x80
pop rbp
ret
lea rcx, str.Out_of_memory_
call fcn.140001580
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3