Function at 0x14009cf80
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1390]
mov eax, 0x1490
call fcn.1400b33d0
sub rsp, rax
mov rax, qword [0x14013a700]
xor rax, rsp
mov qword [rbp + 0x1380], rax
mov r15, rcx
mov dword [rsp + 0x60], r8d
xor ecx, ecx
mov dword [rsp + 0x4c], edx
xor r12b, r12b
mov dword [rsp + 0x50], ecx
mov r14d, ecx
mov dword [rsp + 0x58], ecx
mov rbx, qword [r15]
mov r13d, ecx
mov dword [rsp + 0x5c], ecx
mov edi, edx
mov dword [rsp + 0x54], ecx
mov qword [r15 + 0x10], rcx
mov qword [r15 + 8], rcx
mov qword [r15 + 0x18], rcx
mov byte [rsp + 0x41], r12b
mov r12d, ecx
mov rcx, rbx
mov byte [rsp + 0x40], 0
mov dword [rsp + 0x44], 1
call fcn.140095190
test eax, eax
je 0x14009d469
cmp edi, 1
je 0x14009dc23
mov rcx, rbx
call fcn.140097a60
mov rcx, rbx
mov esi, eax
call fcn.140097a60
shl esi, 0x10
mov rcx, rbx
add esi, eax
mov dword [rsp + 0x68], esi
call fcn.140097a60
mov rcx, rbx
mov edi, eax
call fcn.140097a60
shl edi, 0x10
lea edx, [rdi + rax]
mov dword [rsp + 0x6c], edx
mov rcx, qword [rsp + 0x68]
shr rcx, 0x20
cmp ecx, 0x49484452
ja 0x14009d49b
je 0x14009d1f2
cmp ecx, 0x43674249
je 0x14009d18f
cmp ecx, 0x49444154
je 0x14009d0f4
cmp ecx, 0x49454e44
jne 0x14009d4af
cmp dword [rsp + 0x44], 0
jne 0x14009d45b
cmp dword [rsp + 0x4c], 0
jne 0x14009dc23
mov rsi, qword [r15 + 8]
test rsi, rsi
je 0x14009d45b
mov edi, dword [rbx]
imul edi, dword [r15 + 0x20]
add edi, 7
shr edi, 3
imul edi, dword [rbx + 8]
inc edi
imul edi, dword [rbx + 4]
movsxd r14, edi
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
test rax, rax
jne 0x14009d76d
mov esi, dword [rsp + 0x54]
xor r14d, r14d
jmp 0x14009d7c9
cmp dword [rsp + 0x44], 0
jne 0x14009d45b
movzx eax, byte [rsp + 0x40]
test al, al
je 0x14009d111
test r12d, r12d
je 0x14009d45b
cmp dword [rsp + 0x4c], 2
je 0x14009dbb2
mov eax, dword [rsp + 0x50]
lea edi, [rsi + rax]
cmp edi, eax
jl 0x14009d469
cmp edi, r14d
jbe 0x14009d16d
test r14d, r14d
jne 0x14009d142
mov r14d, 0x1000
cmp esi, r14d
cmova r14d, esi
cmp edi, r14d
jbe 0x14009d14f
add r14d, r14d
cmp edi, r14d
ja 0x14009d147
mov rcx, qword [r15 + 8]
mov edx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x14009db86
mov qword [r15 + 8], rax
mov eax, dword [rsp + 0x50]
mov edx, eax
mov r8d, esi
add rdx, qword [r15 + 8]
mov rcx, rbx
call fcn.140097cf0
test eax, eax
je 0x14009d45b
mov dword [rsp + 0x50], edi
jmp 0x14009d758
mov dword [rsp + 0x54], 1
test esi, esi
jns 0x14009d1ae
mov rax, qword [rbx + 0xc0]
mov qword [rbx + 0xb8], rax
jmp 0x14009d758
cmp qword [rbx + 0x10], 0
je 0x14009d1e3
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xb8]
cmp ecx, esi
jge 0x14009d1e3
mov rax, qword [rbx + 0xc0]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xb8], rax
call qword [rbx + 0x18]
jmp 0x14009d758
movsxd rax, esi
add qword [rbx + 0xb8], rax
jmp 0x14009d758
cmp dword [rsp + 0x44], 0
je 0x14009d45b
mov dword [rsp + 0x44], 0
cmp esi, 0xd
jne 0x14009d45b
mov rcx, rbx
call fcn.140097a60
mov rcx, rbx
mov edi, eax
call fcn.140097a60
shl edi, 0x10
add eax, edi
mov dword [rbx], eax
cmp eax, 0x1000000
ja 0x14009dbda
mov rcx, rbx
call fcn.140097a60
mov rcx, rbx
mov edi, eax
call fcn.140097a60
shl edi, 0x10
lea ecx, [rax + rdi]
mov dword [rbx + 4], ecx
cmp ecx, 0x1000000
ja 0x14009dbda
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x14009d278
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14009d29e
cmp dword [rbx + 0x30], 0
je 0x14009d29c
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14009d29e
xor cl, cl
movzx eax, cl
mov dword [r15 + 0x20], eax
cmp eax, 1
je 0x14009d2c1
cmp eax, 0x10
ja 0x14009dbc2
mov ecx, 0x10114
bt ecx, eax
jae 0x14009dbc2
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x14009d2e0
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14009d306
cmp dword [rbx + 0x30], 0
je 0x14009d304
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14009d306
xor cl, cl
movzx edi, cl
mov dword [rsp + 0x5c], edi
cmp edi, 6
ja 0x14009d45b
cmp edi, 3
jne 0x14009d331
cmp dword [r15 + 0x20], 0x10
je 0x14009d45b
movzx esi, dil
mov byte [rsp + 0x40], dil
jmp 0x14009d340
test dil, 1
jne 0x14009d45b
movzx esi, byte [rsp + 0x40]
cmp rax, qword [rbx + 0xc0]
jb 0x14009d35e
cmp dword [rbx + 0x30], 0
je 0x14009d373
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
test cl, cl
jne 0x14009d45b
cmp rax, qword [rbx + 0xc0]
jb 0x14009d391
cmp dword [rbx + 0x30], 0
je 0x14009d3a6
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
test cl, cl
jne 0x14009d45b
cmp rax, qword [rbx + 0xc0]
jae 0x14009d3be
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14009d3e4
cmp dword [rbx + 0x30], 0
je 0x14009d3e2
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14009d3e4
xor cl, cl
movzx r13d, cl
mov dword [rsp + 0x58], r13d
cmp r13d, 1
ja 0x14009d45b
mov ecx, dword [rbx]
test ecx, ecx
je 0x14009d45b
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x14009d45b
xor edx, edx
mov eax, 0x40000000
div ecx
test sil, sil
jne 0x14009d448
xor edx, edx
mov r8d, edi
shr r8d, 2
mov ecx, edi
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rbx + 8], r8d
cmp eax, r9d
jb 0x14009dbce
cmp dword [rsp + 0x4c], 2
je 0x14009dc23
jmp 0x14009d758
shr eax, 2
mov dword [rbx + 8], 1
cmp eax, r9d
jae 0x14009d758
lea rax, str.Corrupt_PNG
mov qword [0x1402c30e0], rax
xor eax, eax
mov rcx, qword [rbp + 0x1380]
xor rcx, rsp
call fcn.1400b2990
lea r11, [rsp + 0x1490]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp ecx, 0x504c5445
je 0x14009d610
cmp ecx, 0x74524e53
je 0x14009d4cf
cmp dword [rsp + 0x44], 0
jne 0x14009d45b
bt edx, 0x1d
jae 0x14009dbe6
mov edx, esi
mov rcx, rbx
call fcn.1400a1a50
jmp 0x14009d758
cmp dword [rsp + 0x44], 0
jne 0x14009d45b
cmp qword [r15 + 8], 0
jne 0x14009d45b
cmp byte [rsp + 0x40], 0
je 0x14009d57e
cmp dword [rsp + 0x4c], 2
je 0x14009dc1c
test r12d, r12d
je 0x14009d45b
cmp esi, r12d
ja 0x14009d45b
xor edi, edi
mov byte [rsp + 0x40], 4
test esi, esi
je 0x14009d758
nop dword [rax + rax]
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x14009d53f
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14009d565
cmp dword [rbx + 0x30], 0
je 0x14009d563
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14009d565
xor dl, dl
lea eax, [rdi*4 + 3]
inc edi
mov byte [rbp + rax + 0xf80], dl
cmp edi, esi
jb 0x14009d520
jmp 0x14009d758
mov ecx, dword [rbx + 8]
test cl, 1
je 0x14009d45b
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x14009d45b
xor esi, esi
mov byte [rsp + 0x41], 1
cmp dword [r15 + 0x20], 0x10
jne 0x14009d5cd
test ecx, ecx
jle 0x14009d758
lea rdi, [rbp + 0xf70]
mov rcx, rbx
call fcn.140097a60
inc esi
mov word [rdi], ax
lea rdi, [rdi + 2]
cmp esi, dword [rbx + 8]
jl 0x14009d5b2
jmp 0x14009d758
test ecx, ecx
jle 0x14009d758
lea rdi, [rsp + 0x48]
lea r13, [0x14013a590]
mov rcx, rbx
call fcn.140097a60
movsxd rcx, dword [r15 + 0x20]
lea rdi, [rdi + 1]
movzx eax, al
inc esi
movzx edx, byte [rcx + r13]
imul eax, edx
mov byte [rdi - 1], al
cmp esi, dword [rbx + 8]
jl 0x14009d5e1
mov r13d, dword [rsp + 0x58]
jmp 0x14009d758
cmp dword [rsp + 0x44], 0
jne 0x14009d45b
cmp esi, 0x300
ja 0x14009d45b
mov eax, 0xaaaaaaab
mul esi
mov r12d, edx
shr r12d, 1
lea eax, [r12 + r12*2]
cmp eax, esi
jne 0x14009d45b
xor esi, esi
test r12d, r12d
je 0x14009d758
mov r8, qword [rbx + 0xb8]
mov rdx, qword [rbx + 0xc0]
cmp r8, rdx
jae 0x14009d66e
movzx ecx, byte [r8]
inc r8
mov qword [rbx + 0xb8], r8
jmp 0x14009d69c
cmp dword [rbx + 0x30], 0
je 0x14009d69a
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
mov rdx, qword [rbx + 0xc0]
movzx ecx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
jmp 0x14009d69c
xor cl, cl
lea edi, [rsi*4]
mov byte [rbp + rdi + 0xf80], cl
cmp r8, rdx
jae 0x14009d6bf
movzx r9d, byte [r8]
inc r8
mov qword [rbx + 0xb8], r8
jmp 0x14009d6ef
cmp dword [rbx + 0x30], 0
je 0x14009d6ec
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
mov rdx, qword [rbx + 0xc0]
movzx r9d, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
jmp 0x14009d6ef
xor r9b, r9b
lea eax, [rdi + 1]
mov byte [rbp + rax + 0xf80], r9b
cmp r8, rdx
jae 0x14009d70f
movzx edx, byte [r8]
inc r8
mov qword [rbx + 0xb8], r8
jmp 0x14009d736
cmp dword [rbx + 0x30], 0
je 0x14009d734
mov rcx, rbx
call fcn.1400a1350
mov rax, qword [rbx + 0xb8]
movzx edx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
jmp 0x14009d736
xor dl, dl
lea eax, [rdi + 2]
inc esi
mov byte [rbp + rax + 0xf80], dl
lea eax, [rdi + 3]
mov ecx, eax
mov byte [rbp + rax + 0xf80], 0xff
cmp esi, r12d
jb 0x14009d652
mov rcx, rbx
call fcn.140097a60
mov rcx, rbx
call fcn.140097a60
jmp 0x14009d024
movsxd rax, dword [rsp + 0x50]
add rax, rsi
mov qword [rsp + 0x70], rsi
mov esi, dword [rsp + 0x54]
mov qword [rsp + 0x78], rax
lea rax, [r14 + rcx]
xor r14d, r14d
mov qword [rbp - 0x70], rcx
mov edx, r14d
mov qword [rbp - 0x78], rcx
test esi, esi
mov qword [rbp - 0x68], rax
lea rcx, [rsp + 0x70]
mov dword [rbp - 0x60], 1
sete dl
call fcn.14009dda0
test eax, eax
je 0x14009d7bf
mov edi, dword [rbp - 0x78]
sub edi, dword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x14009d7cc
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, r14
mov qword [r15 + 0x10], rax
test rax, rax
je 0x14009d469
mov rcx, qword [r15 + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [rsp + 0x60]
mov qword [r15 + 8], r14
mov eax, dword [rbx + 8]
movzx r14d, byte [rsp + 0x40]
lea r9d, [rax + 1]
cmp ecx, r9d
jne 0x14009d80b
cmp ecx, 3
je 0x14009d80b
test r14b, r14b
je 0x14009d8b1
movzx r12d, byte [rsp + 0x41]
test r12b, r12b
jne 0x14009d819
mov r9d, eax
mov eax, dword [rsp + 0x5c]
mov r8d, edi
mov dword [rbx + 0xc], r9d
mov rcx, r15
mov rdx, qword [r15 + 0x10]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
mov eax, dword [r15 + 0x20]
mov dword [rsp + 0x20], eax
call fcn.140096030
test eax, eax
je 0x14009d469
test r12b, r12b
je 0x14009d95e
mov rcx, qword [r15]
mov eax, dword [rcx + 4]
imul eax, dword [rcx]
cmp dword [r15 + 0x20], 0x10
mov rcx, qword [r15 + 0x18]
jne 0x14009d8fa
test eax, eax
je 0x14009d95e
cmp dword [rbx + 0xc], 2
jne 0x14009d8bc
movzx r8d, word [rbp + 0xf70]
xor r13d, r13d
mov edx, eax
nop word [rax + rax]
cmp word [rcx], r8w
lea rcx, [rcx + 4]
mov eax, 0xffff
cmove ax, r13w
mov word [rcx - 2], ax
sub rdx, 1
jne 0x14009d890
jmp 0x14009d961
movzx r12d, byte [rsp + 0x41]
jmp 0x14009d819
movzx edx, word [rbp + 0xf74]
movzx r8d, word [rbp + 0xf72]
movzx r9d, word [rbp + 0xf70]
xor r13d, r13d
cmp word [rcx], r9w
jne 0x14009d8ee
cmp word [rcx + 2], r8w
jne 0x14009d8ee
cmp word [rcx + 4], dx
jne 0x14009d8ee
mov word [rcx + 6], r13w
add rcx, 8
sub rax, 1
jne 0x14009d8d3
jmp 0x14009d961
test eax, eax
je 0x14009d95e
cmp dword [rbx + 0xc], 2
jne 0x14009d92b
movzx r8d, byte [rsp + 0x48]
xor r13d, r13d
mov edx, eax
nop
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r13d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x14009d910
jmp 0x14009d961
movzx edx, byte [rsp + 0x4a]
movzx r8d, byte [rsp + 0x49]
movzx r9d, byte [rsp + 0x48]
nop dword [rax]
cmp byte [rcx], r9b
jne 0x14009d954
cmp byte [rcx + 1], r8b
jne 0x14009d954
cmp byte [rcx + 2], dl
jne 0x14009d954
mov byte [rcx + 3], 0
add rcx, 4
sub rax, 1
jne 0x14009d940
xor r13d, r13d
test esi, esi
je 0x14009da6a
cmp dword [0x1402c30f0], 0
je 0x14009da6a
cmp dword [rbx + 0xc], 2
jle 0x14009da6a
mov rax, qword [r15]
mov r10, qword [r15 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
test ecx, ecx
je 0x14009da6a
cmp dword [rax + 0xc], 3
jne 0x14009d9bf
mov edx, ecx
nop dword [rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 3]
sub rdx, 1
jne 0x14009d9a0
jmp 0x14009da6a
cmp dword [0x1402c30ec], 0
je 0x14009da46
mov esi, ecx
nop
movzx eax, byte [r10 + 3]
movzx ecx, byte [r10]
movzx edi, byte [r10 + 2]
test al, al
je 0x14009da2b
movzx r9d, al
xor edx, edx
movzx eax, byte [r10 + 1]
mov r8d, r9d
imul eax, eax, 0xff
shr r8d, 1
add eax, r8d
div r9d
xor edx, edx
mov byte [r10 + 1], al
movzx eax, cl
imul eax, eax, 0xff
movzx ecx, dil
add eax, r8d
div r9d
xor edx, edx
mov r11d, eax
imul eax, ecx, 0xff
add eax, r8d
div r9d
jmp 0x14009da33
movzx r11d, cl
movzx eax, dil
mov byte [r10], al
mov byte [r10 + 2], r11b
add r10, 4
sub rsi, 1
jne 0x14009d9d0
jmp 0x14009da6a
mov edx, ecx
nop dword [rax + rax]
movzx ecx, byte [r10]
movzx eax, byte [r10 + 2]
mov byte [r10], al
mov byte [r10 + 2], cl
lea r10, [r10 + 4]
sub rdx, 1
jne 0x14009da50
test r14b, r14b
je 0x14009db92
mov eax, dword [rsp + 0x60]
movzx edi, r14b
mov dword [rbx + 8], edi
mov dword [rbx + 0xc], edi
cmp eax, 3
jl 0x14009da8b
mov dword [rbx + 0xc], eax
mov edi, eax
mov rax, qword [r15]
mov rbx, qword [r15 + 0x18]
mov esi, dword [rax + 4]
imul esi, dword [rax]
test esi, esi
js 0x14009db86
test edi, edi
js 0x14009db86
je 0x14009daba
mov eax, 0x7fffffff
cdq
idiv edi
cmp esi, eax
jg 0x14009db86
mov eax, edi
imul eax, esi
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
test rax, rax
je 0x14009db86
test esi, esi
je 0x14009db76
mov r9d, esi
lea r8, [rax + 2]
cmp edi, 3
jne 0x14009db35
nop dword [rax + rax]
movzx edx, byte [rbx]
lea r8, [r8 + 3]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf80]
movzx ecx, byte [rbp + rdx*4 + 0xf82]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf81]
mov byte [r8 - 4], al
mov byte [r8 - 3], cl
sub r9, 1
jne 0x14009daf0
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x18], r14
jmp 0x14009db9a
movzx edx, byte [rbx]
lea r8, [r8 + 4]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf80]
movzx ecx, byte [rbp + rdx*4 + 0xf83]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf81]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf82]
mov byte [r8 - 4], al
mov byte [r8 - 3], cl
sub r9, 1
jne 0x14009db35
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x18], r14
jmp 0x14009db9a
lea rax, str.Out_of_memory
jmp 0x14009d462
test r12b, r12b
je 0x14009db9a
inc dword [rbx + 8]
mov rcx, qword [r15 + 0x10]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, 1
mov qword [r15 + 0x10], r13
jmp 0x14009d46b
movzx eax, al
mov dword [rbx + 8], eax
mov eax, 1
jmp 0x14009d46b
lea rax, str.PNG_not_supported:_1_2_4_8_16_bit_only
jmp 0x14009d462
lea rax, str.Image_too_large_to_decode
jmp 0x14009d462
lea rax, str.Very_large_image__corrupt__
jmp 0x14009d462
mov eax, edx
shr eax, 0x18
mov byte [0x14013a5c0], al
mov eax, edx
shr eax, 0x10
mov byte [0x14013a5c1], al
movzx eax, byte [rsp + 0x6c]
shr edx, 8
mov byte [0x14013a5c3], al
lea rax, str.PNG_not_supported:_unknown_PNG_chunk_type
mov byte [0x14013a5c2], dl
jmp 0x14009d462
mov dword [rbx + 8], 4
mov eax, 1
jmp 0x14009d46b