Function at 0x18004d350
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0xa0
mov r15d, dword [rsp + 0x110]
xor ebp, ebp
cmp r15d, 0x10
mov qword [rsp + 0x60], rbp
mov r10d, ebp
mov r14d, r9d
mov r9d, dword [rsp + 0x108]
sete r10b
inc r10d
mov esi, r8d
mov r8, rcx
mov edi, r10d
mov ecx, dword [rsp + 0x100]
mov rbx, rdx
imul edi, r14d
mov dword [rsp + 0x30], ecx
mov rax, qword [r8]
mov r11d, edi
mov edx, dword [rax + 8]
mov r12d, edx
imul r11d, ecx
imul r12d, r10d
mov dword [rsp + 0x20], edx
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], r12d
test ecx, ecx
js 0x18004e542
test r9d, r9d
js 0x18004e542
je 0x18004d3f5
xor edx, edx
mov eax, 0x7fffffff
div r9d
cmp ecx, eax
jg 0x18004e542
imul ecx, r9d
test ecx, ecx
js 0x18004e542
test edi, edi
js 0x18004e542
je 0x18004d41b
mov eax, 0x7fffffff
cdq
idiv edi
cmp ecx, eax
jg 0x18004e542
mov eax, r9d
imul eax, r11d
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r10, qword [rsp + 0xe0]
mov qword [r10 + 0x18], rax
test rax, rax
je 0x18004e546
movsxd r11, dword [rsp + 0x20]
mov qword [rsp + 0xe8], r13
test r11d, r11d
js 0x18004e51e
mov ebp, dword [rsp + 0x100]
test ebp, ebp
je 0x18004d473
xor edx, edx
mov eax, 0x7fffffff
div ebp
cmp r11d, eax
jg 0x18004e51e
mov r13d, r11d
imul r13d, ebp
mov dword [rsp + 0x24], r13d
test r13d, r13d
js 0x18004e51e
test r15d, r15d
js 0x18004e51e
je 0x18004d4a6
xor edx, edx
mov eax, 0x7fffffff
div r15d
cmp r13d, eax
jg 0x18004e51e
mov eax, r13d
imul eax, r15d
cmp eax, 0x7ffffff8
jg 0x18004e51e
mov ecx, dword [rsp + 0x108]
mov edx, r13d
imul edx, r15d
add edx, 7
shr edx, 3
mov dword [rsp + 0x3c], edx
lea eax, [rdx + 1]
imul eax, ecx
cmp esi, eax
jae 0x18004d519
mov edx, dword [0x180299028]
mov rax, qword gs:[0x58]
mov ecx, 0x20
mov rax, qword [rax + rdx*8]
lea rdx, str.not_enough_pixels
mov qword [rcx + rax], rdx
xor eax, eax
mov r13, qword [rsp + 0xe8]
add rsp, 0xa0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
xor r9d, r9d
lea rsi, [0x180000000]
mov dword [rsp + 0x34], r9d
mov r8d, r9d
test ecx, ecx
je 0x18004e05c
mov eax, dword [rsp + 0x24]
movsxd r14, r12d
movsxd r13, edi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x68], r11
mov dword [rsp + 0x24], eax
nop dword [rax]
nop word [rax + rax]
mov rsi, qword [r10 + 0x18]
mov ecx, r8d
movzx r10d, byte [rbx]
inc rbx
mov edi, dword [rsp + 0x40]
imul ecx, edi
add rsi, rcx
mov qword [rsp + 0x88], rcx
cmp r10d, 4
ja 0x18004e024
cmp r15d, 8
jge 0x18004d5be
cmp edx, ebp
ja 0x18004e000
mov eax, dword [rsp + 0xf8]
mov r12d, 1
imul eax, ebp
mov r14d, r12d
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x30], edx
sub eax, edx
add rsi, rax
mov r15, rsi
lea rcx, [0x180000000]
sub r15, rdi
test r8d, r8d
jne 0x18004d5d9
movzx r10d, byte [r10 + rcx + 0x2918dc]
test r14, r14
jle 0x18004d704
mov rdi, r15
mov r11, rsi
sub rdi, rbx
mov rdx, rbx
sub r11, rbx
mov r9, r14
mov r8, rdx
cmp r10d, 6
ja case.default.0x18004d60a
movsxd rax, r10d
mov eax, dword [rcx + rax*4 + 0x4e570]
add rax, rcx
jmp rax
inc rdx
sub r9, 1
je 0x18004d6fc
lea rcx, [0x180000000]
jmp 0x18004d5f4
movzx eax, byte [rdx]
inc rdx
mov byte [r11 + r8], al
sub r9, 1
je 0x18004d6fc
mov r8, rdx
jmp case.0x18004d60a.0
movzx eax, byte [rdx]
inc rdx
mov byte [r11 + r8], al
sub r9, 1
je 0x18004d6fc
mov r8, rdx
jmp case.0x18004d60a.1
movzx eax, byte [rdi + r8]
add al, byte [rdx]
inc rdx
mov byte [r11 + r8], al
sub r9, 1
je 0x18004d6fc
mov r8, rdx
jmp case.0x18004d60a.2
movzx eax, byte [rdi + r8]
shr al, 1
add al, byte [rdx]
inc rdx
mov byte [r11 + r8], al
sub r9, 1
je 0x18004d6fc
mov r8, rdx
jmp case.0x18004d60a.3
xor ebp, ebp
nop dword [rax]
movzx eax, byte [rdi + r8]
mov ecx, ebp
test al, al
cmovne ecx, eax
add cl, byte [rdx]
inc rdx
mov byte [r11 + r8], cl
sub r9, 1
je 0x18004d6f5
mov r8, rdx
jmp 0x18004d6a0
movzx eax, byte [rdx]
inc rdx
mov byte [r11 + r8], al
sub r9, 1
je 0x18004d6fc
mov r8, rdx
jmp case.0x18004d60a.5
movzx eax, byte [rdx]
inc rdx
mov byte [r11 + r8], al
sub r9, 1
je 0x18004d6fc
mov r8, rdx
jmp case.0x18004d60a.6
mov ebp, dword [rsp + 0x100]
mov r11d, dword [rsp + 0x20]
xor r9d, r9d
mov ecx, dword [rsp + 0x110]
cmp ecx, 8
jne 0x18004d744
movsxd rax, dword [rsp + 0xf8]
cmp r11d, eax
je 0x18004d726
movsxd rcx, r11d
mov byte [rcx + rsi], 0xff
jmp 0x18004d72b
mov rcx, qword [rsp + 0x68]
add rbx, rcx
lea r11, [rax + r15]
add rax, rsi
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x28], rax
mov r8, rbx
jmp 0x18004d798
cmp ecx, 0x10
jne 0x18004d777
cmp r11d, dword [rsp + 0xf8]
je 0x18004d75a
mov word [r14 + rsi], 0xffff
movsxd rax, r12d
lea r11, [r15 + r13]
add rbx, rax
mov qword [rsp + 0x48], r11
lea rax, [rsi + r13]
mov r8, rbx
mov qword [rsp + 0x28], rax
jmp 0x18004d798
inc rbx
lea r11, [r15 + 1]
mov qword [rsp + 0x48], r11
lea rax, [rsi + 1]
mov qword [rsp + 0x28], rax
mov r8, rbx
cmp ecx, 8
jl 0x18004dc94
mov edx, dword [rsp + 0x20]
cmp edx, dword [rsp + 0xf8]
je 0x18004dc94
cmp r10d, 6
ja case.default.0x18004d7cb
movsxd rcx, r10d
mov rbx, r8
lea r10, [0x180000000]
mov edx, dword [r10 + rcx*4 + 0x4e58c]
add rdx, r10
jmp rdx
lea ecx, [rbp - 1]
cmp ecx, 1
jb case.default.0x18004d7cb
movsxd r11, r12d
mov r10d, ecx
nop
test r14, r14
jle 0x18004d802
mov r9, rbx
mov rdx, rax
sub r9, rax
mov r8, r14
movzx ecx, byte [rdx + r9]
mov byte [rdx], cl
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18004d7f1
mov byte [r14 + rax], 0xff
add rbx, r11
add rax, r13
sub r10, 1
jne 0x18004d7e0
jmp case.default.0x18004d7cb
lea ecx, [rbp - 1]
cmp ecx, 1
jb case.default.0x18004d7cb
movsxd rdi, r12d
mov r11d, ecx
nop word [rax + rax]
test r14, r14
jle 0x18004d865
mov r8, rax
mov r10, rax
sub r8, r13
mov rdx, rbx
sub r8, rbx
mov r9, r14
sub r10, rbx
nop word [rax + rax]
movzx ecx, byte [rdx + r8]
add cl, byte [rdx]
mov byte [r10 + rdx], cl
lea rdx, [rdx + 1]
sub r9, 1
jne 0x18004d850
mov byte [r14 + rax], 0xff
add rbx, rdi
add rax, r13
sub r11, 1
jne 0x18004d830
jmp case.default.0x18004d7cb
lea ecx, [rbp - 1]
cmp ecx, 1
jb case.default.0x18004d7cb
movsxd rbp, r12d
mov esi, ecx
nop dword [rax]
mov r8, r9
test r12d, r12d
jle 0x18004d9d1
cmp r12d, 8
jb 0x18004d9d1
lea ecx, [r12 - 1]
movsxd rdx, ecx
lea rcx, [rdx + rbx]
lea r9, [rdx + rax]
cmp rax, rcx
ja 0x18004d8c4
cmp r9, rbx
jae 0x18004d9d1
lea rcx, [rdx + r11]
cmp rax, rcx
ja 0x18004d8d6
cmp r9, r11
jae 0x18004d9d1
cmp r12d, 0x40
jb 0x18004d97f
mov edx, r12d
and edx, 0x8000003f
jge 0x18004d8f2
dec edx
or edx, 0xffffffc0
inc edx
mov ecx, r12d
sub ecx, edx
mov rdx, r11
movsxd r10, ecx
sub rdx, rbx
lea rcx, [rbx + 0x10]
mov r9, rax
sub r9, rbx
nop word [rax + rax]
movdqu xmm0, xmmword [rcx - 0x10]
add r8, 0x40
movdqu xmm1, xmmword [rcx + rdx - 0x10]
movdqu xmm2, xmmword [rcx + rdx]
lea rcx, [rcx + 0x40]
paddb xmm1, xmm0
movdqu xmm0, xmmword [rcx - 0x40]
movdqu xmmword [r9 + rcx - 0x50], xmm1
paddb xmm2, xmm0
movdqu xmm0, xmmword [rcx - 0x30]
movdqu xmm1, xmmword [rcx + rdx - 0x30]
movdqu xmmword [r9 + rcx - 0x40], xmm2
paddb xmm1, xmm0
movdqu xmm0, xmmword [rcx - 0x20]
movdqu xmm2, xmmword [rcx + rdx - 0x20]
movdqu xmmword [r9 + rcx - 0x30], xmm1
paddb xmm2, xmm0
movdqu xmmword [r9 + rcx - 0x20], xmm2
cmp r8, r10
jl 0x18004d910
mov ecx, r12d
and cl, 0x3f
cmp cl, 8
jb 0x18004d9d1
mov edx, r12d
and edx, 0x80000007
jge 0x18004d991
dec edx
or edx, 0xfffffff8
inc edx
mov ecx, r12d
sub ecx, edx
mov rdx, r11
movsxd r10, ecx
sub rdx, rbx
lea rcx, [r8 + rbx]
mov r9, rax
sub r9, rbx
nop dword [rax]
movq xmm1, qword [rcx + rdx]
add r8, 8
movq xmm0, qword [rcx]
lea rcx, [rcx + 8]
paddb xmm1, xmm0
movq qword [r9 + rcx - 8], xmm1
cmp r8, r10
jl 0x18004d9b0
cmp r8, r14
jge 0x18004da04
mov r10, r11
lea rdx, [r8 + rbx]
mov rdi, rax
sub r10, rbx
sub rdi, rbx
mov r9, r14
sub r9, r8
nop dword [rax]
movzx ecx, byte [rdx + r10]
add cl, byte [rdx]
mov byte [rdi + rdx], cl
lea rdx, [rdx + 1]
sub r9, 1
jne 0x18004d9f0
mov byte [r14 + rax], 0xff
add rbx, rbp
add rax, r13
add r11, r13
mov r9d, 0
sub rsi, 1
jne 0x18004d890
jmp case.default.0x18004d7cb
lea ecx, [rbp - 1]
cmp ecx, 1
jb case.default.0x18004d7cb
movsxd r15, r12d
mov ebp, ecx
test r14, r14
jle 0x18004da81
mov r9, rax
mov rdi, rbx
sub r9, r13
sub rdi, r11
sub r9, r11
mov rsi, rax
sub rsi, r11
mov r8, r11
mov r10, r14
nop dword [rax + rax]
movzx edx, byte [r8 + r9]
movzx ecx, byte [r8]
lea r8, [r8 + 1]
add edx, ecx
shr edx, 1
add dl, byte [rdi + r8 - 1]
mov byte [rsi + r8 - 1], dl
sub r10, 1
jne 0x18004da60
mov byte [r14 + rax], 0xff
add rbx, r15
add rax, r13
add r11, r13
sub rbp, 1
jne 0x18004da38
jmp case.default.0x18004d7cb
lea ecx, [rbp - 1]
cmp ecx, 1
jb case.default.0x18004d7cb
movsxd rdx, r12d
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x58], rcx
test r14, r14
jle 0x18004db65
mov rcx, r11
mov r10, rax
sub rcx, rax
sub r10, r13
mov qword [rsp + 0x70], rcx
mov r12, r14
mov r14, qword [rsp + 0x70]
mov rcx, r13
sub rcx, rax
lea rax, [rcx + r11]
lea r11, [rbx + rcx]
nop word [rax + rax]
movzx r9d, byte [r10]
movzx ebp, byte [r10 + r14]
mov edx, r9d
movzx r15d, byte [rax + r10]
sub edx, ebp
mov esi, edx
lea r8d, [r15 + rdx]
mov ecx, r8d
sub ecx, r9d
mov edi, ecx
neg edi
cmovs edi, ecx
neg esi
cmovs esi, edx
sub r8d, ebp
mov ecx, r8d
neg ecx
cmovs ecx, r8d
cmp edi, esi
jg 0x18004db2f
cmp edi, ecx
jle 0x18004db38
cmp esi, ecx
mov r9d, ebp
cmovle r9d, r15d
add r9b, byte [r11 + r10]
mov byte [r10 + r13], r9b
inc r10
sub r12, 1
jne 0x18004daf0
mov rax, qword [rsp + 0x28]
mov r11, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x80]
add r11, r13
mov byte [r14 + rax], 0xff
add rax, r13
mov qword [rsp + 0x48], r11
add rbx, rdx
mov qword [rsp + 0x28], rax
sub rcx, 1
mov qword [rsp + 0x58], rcx
jne 0x18004dab6
jmp case.default.0x18004d7cb
lea ecx, [rbp - 1]
cmp ecx, 1
jb case.default.0x18004d7cb
movsxd rdi, r12d
mov r11d, ecx
test r14, r14
jle 0x18004dbd9
mov r8, rax
mov r10, rax
sub r8, r13
mov rdx, rbx
sub r8, rbx
mov r9, r14
sub r10, rbx
nop dword [rax]
movzx ecx, byte [rdx + r8]
lea rdx, [rdx + 1]
shr cl, 1
add cl, byte [rdx - 1]
mov byte [r10 + rdx - 1], cl
sub r9, 1
jne 0x18004dbc0
mov byte [r14 + rax], 0xff
add rbx, rdi
add rax, r13
sub r11, 1
jne 0x18004dba3
jmp case.default.0x18004d7cb
lea ecx, [rbp - 1]
cmp ecx, 1
jb case.default.0x18004d7cb
movsxd rdi, r12d
mov r11d, ecx
nop word [rax + rax]
test r14, r14
jle 0x18004dc35
mov r8, rax
mov r10, rax
sub r8, r13
mov rdx, rbx
sub r8, rbx
mov r9, r14
sub r10, rbx
nop word [rax + rax]
movzx ecx, byte [rdx + r8]
add cl, byte [rdx]
mov byte [r10 + rdx], cl
lea rdx, [rdx + 1]
sub r9, 1
jne 0x18004dc20
mov byte [r14 + rax], 0xff
add rbx, rdi
add rax, r13
sub r11, 1
jne 0x18004dc00
mov r15d, dword [rsp + 0x110]
mov r10, qword [rsp + 0xe0]
cmp r15d, 0x10
jne 0x18004dfca
mov rcx, qword [rsp + 0x88]
add rcx, qword [r10 + 0x18]
mov ebp, dword [rsp + 0x100]
test ebp, ebp
je 0x18004dfd1
mov eax, ebp
nop dword [rax]
mov byte [r14 + rcx + 1], 0xff
add rcx, r13
sub rax, 1
jne 0x18004dc80
jmp 0x18004dfd1
mov esi, dword [rsp + 0x30]
dec esi
imul esi, r12d
mov dword [rsp + 0x28], esi
cmp r10d, 6
ja case.default.0x18004dcc4
movsxd rcx, r10d
lea r10, [0x180000000]
movsxd r8, esi
mov edx, dword [r10 + rcx*4 + 0x4e5a8]
add rdx, r10
jmp rdx
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
jmp case.default.0x18004dcc4
test esi, esi
jle case.default.0x18004dcc4
mov r9, rax
mov rdx, rbx
sub r9, r14
sub r9, rbx
sub rax, rbx
nop dword [rax]
movzx ecx, byte [rdx + r9]
add cl, byte [rdx]
mov byte [rax + rdx], cl
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18004dcf0
jmp case.default.0x18004dcc4
test esi, esi
jle 0x18004de41
cmp esi, 8
jb 0x18004de41
lea ecx, [rsi - 1]
xor ebp, ebp
movsxd rdx, ecx
mov r9d, ebp
lea rcx, [rdx + rbx]
lea r10, [rdx + rax]
cmp rax, rcx
ja 0x18004dd3b
cmp r10, rbx
jae 0x18004de41
lea rcx, [rdx + r11]
cmp rax, rcx
ja 0x18004dd4d
cmp r10, r11
jae 0x18004de41
cmp esi, 0x40
jb 0x18004ddee
mov edx, esi
and edx, 0x8000003f
jge 0x18004dd67
dec edx
or edx, 0xffffffc0
inc edx
mov ecx, esi
sub ecx, edx
mov rdx, r11
movsxd rdi, ecx
sub rdx, rbx
lea rcx, [rbx + 0x10]
mov r10, rax
sub r10, rbx
nop
movdqu xmm0, xmmword [rcx - 0x10]
add r9, 0x40
movdqu xmm1, xmmword [rcx + rdx - 0x10]
movdqu xmm2, xmmword [rcx + rdx]
lea rcx, [rcx + 0x40]
paddb xmm1, xmm0
movdqu xmm0, xmmword [rcx - 0x40]
movdqu xmmword [r10 + rcx - 0x50], xmm1
paddb xmm2, xmm0
movdqu xmm0, xmmword [rcx - 0x30]
movdqu xmm1, xmmword [rcx + rdx - 0x30]
movdqu xmmword [r10 + rcx - 0x40], xmm2
paddb xmm1, xmm0
movdqu xmm0, xmmword [rcx - 0x20]
movdqu xmm2, xmmword [rcx + rdx - 0x20]
movdqu xmmword [r10 + rcx - 0x30], xmm1
paddb xmm2, xmm0
movdqu xmmword [r10 + rcx - 0x20], xmm2
cmp r9, rdi
jl 0x18004dd80
mov ecx, esi
and cl, 0x3f
cmp cl, 8
jb 0x18004de41
mov edx, esi
and edx, 0x80000007
jge 0x18004ddff
dec edx
or edx, 0xfffffff8
inc edx
mov ecx, esi
sub ecx, edx
mov rdx, r11
movsxd rdi, ecx
sub rdx, rbx
lea rcx, [r9 + rbx]
mov r10, rax
sub r10, rbx
nop word [rax + rax]
movq xmm1, qword [rcx + rdx]
add r9, 8
movq xmm0, qword [rcx]
lea rcx, [rcx + 8]
paddb xmm1, xmm0
movq qword [r10 + rcx - 8], xmm1
cmp r9, rdi
jl 0x18004de20
cmp r9, r8
jge case.default.0x18004dcc4
sub r11, rbx
lea rdx, [r9 + rbx]
sub rax, rbx
sub r8, r9
nop word [rax + rax]
movzx ecx, byte [rdx + r11]
add cl, byte [rdx]
mov byte [rax + rdx], cl
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18004de60
jmp case.default.0x18004dcc4
test esi, esi
jle case.default.0x18004dcc4
mov r9, rax
mov r10, rbx
sub r9, r14
sub r10, r11
sub r9, r11
sub rax, r11
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [r11 + r9]
movzx ecx, byte [r11]
lea r11, [r11 + 1]
add edx, ecx
shr edx, 1
add dl, byte [r10 + r11 - 1]
mov byte [rax + r11 - 1], dl
sub r8, 1
jne 0x18004dea0
jmp case.default.0x18004dcc4
test esi, esi
jle case.default.0x18004dcc4
mov r10, rax
mov r12, r11
sub r10, r14
sub r12, rax
mov rcx, r14
sub rcx, rax
lea r13, [rcx + r11]
lea r15, [rcx + rbx]
nop dword [rax + rax]
movzx r9d, byte [r10]
movzx esi, byte [r10 + r12]
mov ecx, r9d
movzx ebp, byte [r10 + r13]
sub ecx, esi
mov edi, ecx
lea edx, [rcx + rbp]
mov eax, edx
sub eax, r9d
mov r11d, eax
neg r11d
cmovs r11d, eax
neg edi
cmovs edi, ecx
sub edx, esi
mov eax, edx
neg eax
cmovs eax, edx
cmp r11d, edi
jg 0x18004df2f
cmp r11d, eax
jle 0x18004df38
cmp edi, eax
mov r9d, esi
cmovle r9d, ebp
add r9b, byte [r15 + r10]
mov byte [r14 + r10], r9b
inc r10
sub r8, 1
jne 0x18004def0
mov r13, qword [rsp + 0x90]
mov esi, dword [rsp + 0x28]
jmp case.default.0x18004dcc4
test esi, esi
jle case.default.0x18004dcc4
mov r9, rax
mov rdx, rbx
sub r9, r14
sub r9, rbx
sub rax, rbx
nop word [rax + rax]
movzx ecx, byte [rdx + r9]
lea rdx, [rdx + 1]
shr cl, 1
add cl, byte [rdx - 1]
mov byte [rax + rdx - 1], cl
sub r8, 1
jne 0x18004df70
jmp case.default.0x18004dcc4
test esi, esi
jle case.default.0x18004dcc4
mov r9, rax
mov rdx, rbx
sub r9, r14
sub r9, rbx
sub rax, rbx
nop dword [rax]
movzx ecx, byte [rdx + r9]
add cl, byte [rdx]
mov byte [rax + rdx], cl
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18004dfa0
mov r15d, dword [rsp + 0x110]
mov r10, qword [rsp + 0xe0]
movsxd rax, esi
add rbx, rax
mov ebp, dword [rsp + 0x100]
mov r8d, dword [rsp + 0x34]
xor r9d, r9d
mov ecx, dword [rsp + 0x108]
inc r8d
mov edx, dword [rsp + 0x3c]
mov r11d, dword [rsp + 0x20]
mov dword [rsp + 0x34], r8d
cmp r8d, ecx
jae 0x18004e048
mov r12d, dword [rsp + 0x38]
jmp 0x18004d560
mov edx, dword [0x180299028]
mov rax, qword gs:[0x58]
mov ecx, 0x20
mov rax, qword [rax + rdx*8]
lea rdx, str.invalid_width
jmp 0x18004d4f9
mov edx, dword [0x180299028]
mov rax, qword gs:[0x58]
mov ecx, 0x20
mov rax, qword [rax + rdx*8]
lea rdx, str.invalid_filter
jmp 0x18004d4f9
mov r13d, dword [rsp + 0x24]
lea rsi, [0x180000000]
mov r14d, dword [rsp + 0xf8]
movsxd rbx, dword [rsp + 0x110]
cmp ebx, 8
jge 0x18004e4d5
test ecx, ecx
je 0x18004e514
mov r12d, dword [rsp + 0x118]
lea rsi, [rsi + 0x205130]
add rsi, rbx
movsxd rbp, ebp
imul r14d, dword [rsp + 0x100]
mov r15d, edx
nop word [rax + rax]
mov rax, qword [r10 + 0x18]
mov edi, r9d
imul edi, dword [rsp + 0x40]
mov r9, r14
sub r9, r15
add r9, rax
add r9, rdi
lea r8, [rax + rdi]
test r12d, r12d
jne 0x18004e0c7
movzx r10d, byte [rsi]
jmp 0x18004e0ca
mov r10b, 1
mov ecx, r13d
cmp ebx, 4
jne 0x18004e160
mov dword [rsp + 0x24], ecx
mov ebx, ecx
cmp ecx, 2
jl 0x18004e135
mov r11d, ecx
mov dword [rsp + 0x24], ecx
shr r11, 1
mov eax, r11d
neg eax
lea ebx, [rcx + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9]
shr al, 4
movzx edx, al
movzx ecx, r10b
imul edx, ecx
movzx ecx, r10b
mov byte [r8], dl
movzx eax, byte [r9]
inc r9
and al, 0xf
movzx edx, al
imul edx, ecx
mov byte [r8 + 1], dl
add r8, 2
sub r11, 1
jne 0x18004e100
mov r13d, dword [rsp + 0x24]
mov r11d, dword [rsp + 0x20]
test ebx, ebx
jle 0x18004e425
movzx eax, byte [r9]
shr al, 4
movzx edx, al
movzx ecx, r10b
imul edx, ecx
mov byte [r8], dl
jmp 0x18004e425
cmp ebx, 2
jne 0x18004e251
mov dword [rsp + 0x24], ecx
mov rbx, rcx
cmp ecx, 4
jl 0x18004e1f5
mov r11, rcx
mov dword [rsp + 0x24], ecx
shr r11, 2
mov eax, r11d
neg eax
lea ebx, [rcx + rax*4]
nop dword [rax]
movzx eax, byte [r9]
shr al, 6
movzx edx, al
movzx ecx, r10b
imul edx, ecx
movzx eax, r10b
mov byte [r8], dl
movzx ecx, byte [r9]
shr cl, 4
and cl, 3
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 1], cl
movzx ecx, byte [r9]
shr cl, 2
and cl, 3
movzx ecx, cl
imul ecx, eax
mov byte [r8 + 2], cl
movzx eax, byte [r9]
inc r9
and al, 3
movzx ecx, r10b
movzx edx, al
imul edx, ecx
mov byte [r8 + 3], dl
add r8, 4
sub r11, 1
jne 0x18004e190
test ebx, ebx
jle 0x18004e210
movzx eax, byte [r9]
shr al, 6
movzx edx, al
movzx ecx, r10b
imul edx, ecx
mov byte [r8], dl
inc r8
cmp ebx, 1
jle 0x18004e22f
movzx ecx, byte [r9]
shr cl, 4
and cl, 3
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
mov r13d, dword [rsp + 0x24]
mov r11d, dword [rsp + 0x20]
cmp ebx, 2
jle 0x18004e425
movzx ecx, byte [r9]
shr cl, 2
and cl, 3
jmp 0x18004e418
mov r13d, ecx
cmp ebx, 1
jne 0x18004e425
mov r11, rcx
cmp ecx, 8
jl 0x18004e348
mov rbx, rcx
shr rbx, 3
mov eax, ebx
neg eax
lea r11d, [rcx + rax*8]
nop dword [rax + rax]
movzx eax, byte [r9]
shr al, 7
movzx edx, al
movzx ecx, r10b
imul edx, ecx
movzx eax, r10b
mov byte [r8], dl
movzx ecx, byte [r9]
shr cl, 6
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 1], cl
movzx ecx, byte [r9]
shr cl, 5
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 2], cl
movzx ecx, byte [r9]
shr cl, 4
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 3], cl
movzx ecx, byte [r9]
shr cl, 3
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 4], cl
movzx ecx, byte [r9]
shr cl, 2
and cl, 1
movzx ecx, cl
imul ecx, eax
movzx eax, r10b
mov byte [r8 + 5], cl
movzx ecx, byte [r9]
shr cl, 1
and cl, 1
movzx ecx, cl
imul ecx, eax
mov byte [r8 + 6], cl
movzx eax, byte [r9]
inc r9
and al, 1
movzx ecx, r10b
movzx edx, al
imul edx, ecx
mov byte [r8 + 7], dl
add r8, 8
sub rbx, 1
jne 0x18004e280
test r11d, r11d
jle 0x18004e364
movzx eax, byte [r9]
shr al, 7
movzx edx, al
movzx ecx, r10b
imul edx, ecx
mov byte [r8], dl
inc r8
cmp r11d, 1
jle 0x18004e384
movzx ecx, byte [r9]
shr cl, 6
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 2
jle 0x18004e3a4
movzx ecx, byte [r9]
shr cl, 5
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 3
jle 0x18004e3c4
movzx ecx, byte [r9]
shr cl, 4
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 4
jle 0x18004e3e4
movzx ecx, byte [r9]
shr cl, 3
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 5
jle 0x18004e404
movzx ecx, byte [r9]
shr cl, 2
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
inc r8
cmp r11d, 6
mov r11d, dword [rsp + 0x20]
jle 0x18004e425
movzx ecx, byte [r9]
shr cl, 1
and cl, 1
movzx eax, r10b
movzx ecx, cl
imul ecx, eax
mov byte [r8], cl
mov r10, qword [rsp + 0xe0]
cmp r11d, dword [rsp + 0xf8]
je 0x18004e4a9
mov rdx, qword [r10 + 0x18]
lea rcx, [rbp - 1]
add rdx, rdi
cmp r11d, 1
jne 0x18004e464
test rcx, rcx
js 0x18004e4a9
nop dword [rax]
mov byte [rdx + rcx*2 + 1], 0xff
movzx eax, byte [rcx + rdx]
mov byte [rdx + rcx*2], al
sub rcx, 1
jns 0x18004e450
jmp 0x18004e4a9
test rcx, rcx
js 0x18004e4a9
lea r8, [rcx*2 + 1]
add r8, rdx
lea rdx, [rdx + rcx*4]
add r8, rcx
add rdx, 2
nop
sub rcx, 1
mov byte [rdx + 1], 0xff
movzx eax, byte [r8 + 1]
lea r8, [r8 - 3]
mov byte [rdx], al
lea rdx, [rdx - 4]
movzx eax, byte [r8 + 3]
mov byte [rdx + 3], al
movzx eax, byte [r8 + 2]
mov byte [rdx + 2], al
jns 0x18004e480
mov r9, qword [rsp + 0x60]
mov ebx, dword [rsp + 0x110]
inc r9d
mov qword [rsp + 0x60], r9
cmp r9d, dword [rsp + 0x108]
jb 0x18004e0a0
mov eax, 1
jmp 0x18004d4ff
cmp ebx, 0x10
jne 0x18004e514
mov r9, qword [r10 + 0x18]
imul r14d, ebp
mov r8, r9
imul r14d, ecx
test r14d, r14d
je 0x18004e514
mov r10d, r14d
movzx edx, byte [r9]
lea r9, [r9 + 2]
movzx ecx, byte [r8 + 1]
lea r8, [r8 + 2]
shl dx, 8
or dx, cx
mov word [r8 - 2], dx
sub r10, 1
jne 0x18004e4f1
mov eax, 1
jmp 0x18004d4ff
mov edx, dword [0x180299028]
mov rax, qword gs:[0x58]
mov ecx, 0x20
mov rax, qword [rax + rdx*8]
lea rdx, str.too_large
jmp 0x18004d4f9
mov qword [r8 + 0x18], rbp
mov edx, dword [0x180299028]
mov rax, qword gs:[0x58]
mov ecx, 0x20
mov rax, qword [rax + rdx*8]
lea rdx, str.outofmem
mov qword [rcx + rax], rdx
xor eax, eax
jmp 0x18004d507