Function at 0x18007cc40
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x13a0]
mov eax, 0x14a0
call fcn.18011ed00
sub rsp, rax
mov rax, qword [0x18029b200]
xor rax, rsp
mov qword [rbp + 0x1390], rax
mov r12, rcx
mov dword [rsp + 0x58], r8d
xor ecx, ecx
mov dword [rsp + 0x48], edx
xor eax, eax
mov dword [rsp + 0x4c], ecx
mov r14d, ecx
mov dword [rsp + 0x54], ecx
mov rdi, qword [r12]
mov r15d, ecx
mov r13d, ecx
mov dword [rsp + 0x50], ecx
mov qword [r12 + 0x10], rcx
mov ebx, edx
mov qword [r12 + 8], rcx
mov qword [r12 + 0x18], rcx
mov rcx, rdi
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x40], 0
mov word [rbp + 0xf80], ax
mov byte [rbp + 0xf82], al
mov dword [rsp + 0x44], 1
call fcn.180074da0
test eax, eax
je 0x18007dc1d
cmp ebx, 1
je 0x18007dbae
mov rcx, rdi
call fcn.1800773d0
mov rcx, rdi
mov esi, eax
call fcn.1800773d0
shl esi, 0x10
mov rcx, rdi
add esi, eax
call fcn.1800773d0
mov rcx, rdi
mov ebx, eax
call fcn.1800773d0
shl ebx, 0x10
lea ecx, [rax + rbx]
mov eax, esi
mov ebx, ecx
shl rbx, 0x20
or rbx, rax
mov qword [rsp + 0x60], rbx
cmp ecx, 0x49484452
ja 0x18007d0b9
je 0x18007ce40
cmp ecx, 0x43674249
je 0x18007ce31
cmp ecx, 0x49444154
je 0x18007cd8b
cmp ecx, 0x49454e44
jne 0x18007d0cd
cmp dword [rsp + 0x44], 0
je 0x18007d409
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.first_not_IHDR
jmp 0x18007dc14
cmp dword [rsp + 0x44], 0
jne 0x18007cd6c
movzx esi, byte [rsp + 0x41]
test sil, sil
je 0x18007cda5
test r15d, r15d
je 0x18007d99c
cmp dword [rsp + 0x48], 2
je 0x18007da18
cmp ebx, 0x40000000
ja 0x18007d9f9
mov esi, dword [rsp + 0x4c]
lea eax, [rbx + rsi]
cmp eax, esi
jl 0x18007dc1d
cmp eax, r14d
jbe 0x18007ce0b
test r14d, r14d
jne 0x18007cde2
mov r14d, 0x1000
cmp ebx, r14d
cmova r14d, ebx
cmp eax, r14d
jbe 0x18007cdef
add r14d, r14d
cmp eax, r14d
ja 0x18007cde7
mov rcx, qword [r12 + 8]
mov edx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18007d9bb
mov qword [r12 + 8], rax
mov rdx, rsi
mov r8d, ebx
add rdx, qword [r12 + 8]
mov rcx, rdi
call fcn.180077680
test eax, eax
je 0x18007d9da
add esi, ebx
mov dword [rsp + 0x4c], esi
jmp 0x18007d3f4
mov dword [rsp + 0x50], 1
test esi, esi
jmp 0x18007d0e8
cmp dword [rsp + 0x44], 0
je 0x18007db07
mov dword [rsp + 0x44], 0
cmp esi, 0xd
jne 0x18007dae8
mov rcx, rdi
call fcn.1800773d0
mov rcx, rdi
mov ebx, eax
call fcn.1800773d0
shl ebx, 0x10
mov rcx, rdi
add eax, ebx
mov dword [rdi], eax
call fcn.1800773d0
mov rcx, rdi
mov ebx, eax
call fcn.1800773d0
shl ebx, 0x10
add eax, ebx
mov dword [rdi + 4], eax
cmp eax, 0x1000000
ja 0x18007d086
cmp dword [rdi], 0x1000000
ja 0x18007d086
mov rax, qword [rdi + 0xc0]
cmp rax, qword [rdi + 0xc8]
jae 0x18007cec5
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007ceeb
cmp dword [rdi + 0x30], 0
je 0x18007cee9
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007ceeb
xor cl, cl
movzx eax, cl
mov dword [r12 + 0x20], eax
cmp eax, 0x10
ja 0x18007dac9
mov ecx, 0x10116
bt ecx, eax
jae 0x18007dac9
mov rax, qword [rdi + 0xc0]
cmp rax, qword [rdi + 0xc8]
jae 0x18007cf29
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007cf4f
cmp dword [rdi + 0x30], 0
je 0x18007cf4d
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007cf4f
xor cl, cl
movzx ebx, cl
mov dword [rsp + 0x54], ebx
cmp ebx, 6
ja 0x18007da2e
cmp ebx, 3
jne 0x18007cf79
cmp dword [r12 + 0x20], 0x10
je 0x18007da2e
movzx esi, bl
mov byte [rsp + 0x41], bl
jmp 0x18007cf87
test bl, 1
jne 0x18007da2e
movzx esi, byte [rsp + 0x41]
cmp rax, qword [rdi + 0xc8]
jb 0x18007cfa5
cmp dword [rdi + 0x30], 0
je 0x18007cfba
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
test cl, cl
jne 0x18007da4d
cmp rax, qword [rdi + 0xc8]
jb 0x18007cfd8
cmp dword [rdi + 0x30], 0
je 0x18007cfed
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
test cl, cl
jne 0x18007da6c
cmp rax, qword [rdi + 0xc8]
jae 0x18007d005
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007d02b
cmp dword [rdi + 0x30], 0
je 0x18007d029
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007d02b
xor cl, cl
movzx r13d, cl
cmp r13d, 1
ja 0x18007daaa
mov ecx, dword [rdi]
test ecx, ecx
je 0x18007da8b
mov r9d, dword [rdi + 4]
test r9d, r9d
je 0x18007da8b
xor edx, edx
mov eax, 0x40000000
div ecx
test sil, sil
jne 0x18007d0a5
xor edx, edx
mov r8d, ebx
shr r8d, 2
mov ecx, ebx
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rdi + 8], r8d
cmp eax, r9d
jae 0x18007d3f4
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.too_large
jmp 0x18007dc14
shr eax, 2
mov dword [rdi + 8], 1
cmp eax, r9d
jb 0x18007d086
jmp 0x18007d3f4
cmp ecx, 0x504c5445
je 0x18007d2af
cmp ecx, 0x74524e53
je 0x18007d147
cmp dword [rsp + 0x44], 0
jne 0x18007cd6c
mov ecx, dword [rsp + 0x64]
bt ecx, 0x1d
jae 0x18007db26
test ebx, ebx
je 0x18007d3f4
jns 0x18007d103
mov rax, qword [rdi + 0xc8]
mov qword [rdi + 0xc0], rax
jmp 0x18007d3f4
cmp qword [rdi + 0x10], 0
je 0x18007d138
mov ecx, dword [rdi + 0xc8]
sub ecx, dword [rdi + 0xc0]
cmp ecx, ebx
jge 0x18007d138
mov rax, qword [rdi + 0xc8]
sub ebx, ecx
mov rcx, qword [rdi + 0x28]
mov edx, ebx
mov qword [rdi + 0xc0], rax
call qword [rdi + Ordinal_26]
jmp 0x18007d3f4
movsxd rax, ebx
add qword [rdi + 0xc0], rax
jmp 0x18007d3f4
cmp dword [rsp + 0x44], 0
jne 0x18007cd6c
cmp qword [r12 + 8], 0
jne 0x18007dbde
cmp byte [rsp + 0x41], 0
je 0x18007d1fe
cmp dword [rsp + 0x48], 2
je 0x18007dba7
test r15d, r15d
je 0x18007db8b
cmp ebx, r15d
ja 0x18007db6c
xor esi, esi
mov byte [rsp + 0x41], 4
test ebx, ebx
je 0x18007d3f4
nop word [rax + rax]
mov rax, qword [rdi + 0xc0]
cmp rax, qword [rdi + 0xc8]
jae 0x18007d1bf
movzx edx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007d1e5
cmp dword [rdi + 0x30], 0
je 0x18007d1e3
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007d1e5
xor dl, dl
lea eax, [rsi*4 + 3]
inc esi
mov byte [rbp + rax + 0xf90], dl
cmp esi, ebx
jb 0x18007d1a0
jmp 0x18007d3f4
mov ecx, dword [rdi + 8]
test cl, 1
je 0x18007dbc2
lea eax, [rcx + rcx]
cmp ebx, eax
jne 0x18007db6c
cmp dword [rsp + 0x48], 2
mov byte [rsp + 0x40], 1
je 0x18007dbb5
xor eax, eax
cmp dword [r12 + 0x20], 0x10
mov esi, eax
mov ebx, eax
jne 0x18007d269
test ecx, ecx
jle 0x18007d3f4
nop dword [rax + rax]
cmp rbx, 3
jge 0x18007d3f4
mov rcx, rdi
call fcn.1800773d0
mov word [rbp + rbx*2 + 0xf84], ax
inc esi
inc rbx
cmp esi, dword [rdi + 8]
jl 0x18007d240
jmp 0x18007d3f4
test ecx, ecx
jle 0x18007d3f4
cmp rbx, 3
jge 0x18007d3f4
mov rcx, rdi
call fcn.1800773d0
movsxd rcx, dword [r12 + 0x20]
lea rdx, [0x18012f830]
movzx eax, al
inc esi
movzx edx, byte [rcx + rdx]
imul eax, edx
mov byte [rbp + rbx + 0xf80], al
inc rbx
cmp esi, dword [rdi + 8]
jl 0x18007d271
jmp 0x18007d3f4
cmp dword [rsp + 0x44], 0
jne 0x18007cd6c
cmp esi, 0x300
ja 0x18007dbfa
mov eax, 0xaaaaaaab
mul esi
mov r15d, edx
shr r15d, 1
lea eax, [r15 + r15*2]
cmp eax, esi
jne 0x18007dbfa
xor esi, esi
test r15d, r15d
je 0x18007d3f4
nop word [rax + rax]
mov rdx, qword [rdi + 0xc0]
cmp rdx, qword [rdi + 0xc8]
jae 0x18007d30f
movzx ecx, byte [rdx]
inc rdx
mov qword [rdi + 0xc0], rdx
jmp 0x18007d336
cmp dword [rdi + 0x30], 0
je 0x18007d334
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx ecx, byte [rax]
lea rdx, [rax + 1]
mov qword [rdi + 0xc0], rdx
jmp 0x18007d336
xor cl, cl
lea ebx, [rsi*4]
mov byte [rbp + rbx + 0xf90], cl
cmp rdx, qword [rdi + 0xc8]
jae 0x18007d35d
movzx r8d, byte [rdx]
inc rdx
mov qword [rdi + 0xc0], rdx
jmp 0x18007d386
cmp dword [rdi + 0x30], 0
je 0x18007d383
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx r8d, byte [rax]
lea rdx, [rax + 1]
mov qword [rdi + 0xc0], rdx
jmp 0x18007d386
xor r8b, r8b
lea eax, [rbx + 1]
mov byte [rbp + rax + 0xf90], r8b
cmp rdx, qword [rdi + 0xc8]
jae 0x18007d3ab
movzx r8d, byte [rdx]
lea rax, [rdx + 1]
mov qword [rdi + 0xc0], rax
jmp 0x18007d3d3
cmp dword [rdi + 0x30], 0
je 0x18007d3d0
mov rcx, rdi
call fcn.180081a00
mov rax, qword [rdi + 0xc0]
movzx r8d, byte [rax]
inc rax
mov qword [rdi + 0xc0], rax
jmp 0x18007d3d3
xor r8b, r8b
lea eax, [rbx + 2]
inc esi
mov byte [rbp + rax + 0xf90], r8b
lea eax, [rbx + 3]
mov byte [rbp + rax + 0xf90], 0xff
cmp esi, r15d
jb 0x18007d2f0
mov rcx, rdi
call fcn.1800773d0
mov rcx, rdi
call fcn.1800773d0
jmp 0x18007ccf0
cmp dword [rsp + 0x48], 0
jne 0x18007dbae
mov rbx, qword [r12 + 8]
test rbx, rbx
jne 0x18007d43d
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.no_IDAT
jmp 0x18007dc14
mov eax, dword [r12 + 0x20]
imul eax, dword [rdi]
add eax, 7
shr eax, 3
imul eax, dword [rdi + 8]
inc eax
imul eax, dword [rdi + 4]
movsxd rsi, eax
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
test rax, rax
jne 0x18007d473
mov qword [r12 + 0x10], rax
jmp 0x18007dc1d
movsxd rax, dword [rsp + 0x4c]
xor r15d, r15d
add rax, rbx
mov qword [rbp - 0x68], rcx
mov edx, r15d
mov qword [rsp + 0x78], rax
cmp dword [rsp + 0x50], edx
lea rax, [rsi + rcx]
mov qword [rbp - 0x70], rcx
lea rcx, [rsp + 0x70]
sete dl
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 1
call fcn.18007dde0
test eax, eax
je 0x18007d988
mov rax, qword [rbp - 0x68]
mov ebx, dword [rbp - 0x70]
sub ebx, dword [rbp - 0x68]
mov qword [r12 + 0x10], rax
test rax, rax
je 0x18007dc1d
mov rcx, qword [r12 + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [rsp + 0x58]
mov qword [r12 + 8], r15
mov eax, dword [rdi + 8]
lea r9d, [rax + 1]
cmp ecx, r9d
jne 0x18007d503
cmp ecx, 3
je 0x18007d503
cmp byte [rsp + 0x41], r15b
je 0x18007d5d9
movzx r14d, byte [rsp + 0x40]
test r14b, r14b
jne 0x18007d511
mov r9d, eax
mov eax, dword [rsp + 0x54]
mov r8d, ebx
mov dword [rdi + 0xc], r9d
mov rcx, r12
mov rdx, qword [r12 + 0x10]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
mov eax, dword [r12 + 0x20]
mov dword [rsp + 0x20], eax
call fcn.180075e80
test eax, eax
je 0x18007dc1d
test r14b, r14b
je 0x18007d6a9
mov rcx, qword [r12]
mov eax, dword [rdi + 0xc]
mov rbx, qword [r12 + 0x18]
mov esi, dword [rcx + 4]
imul esi, dword [rcx]
cmp dword [r12 + 0x20], 0x10
jne 0x18007d620
cmp eax, 2
je 0x18007d5e4
cmp eax, 4
je 0x18007d58d
mov r8d, 0x137f
lea rdx, str.E:ProjectsLucasExecutor_src_fonts_stb_image.h
lea rcx, str.out_n__2__out_n__4
call sub.api_ms_win_crt_runtime_l1_1_0.dll__wassert
test esi, esi
je 0x18007d6a9
movzx edx, word [rbp + 0xf88]
lea rax, [rbx + 4]
movzx r8d, word [rbp + 0xf86]
movzx r9d, word [rbp + 0xf84]
mov ecx, esi
cmp word [rax - 4], r9w
jne 0x18007d5ca
cmp word [rax - 2], r8w
jne 0x18007d5ca
cmp word [rax], dx
jne 0x18007d5ca
mov word [rax + 2], r15w
add rax, 8
sub rcx, 1
jne 0x18007d5b2
jmp 0x18007d6a9
movzx r14d, byte [rsp + 0x40]
jmp 0x18007d511
test esi, esi
je 0x18007d6a9
movzx edx, word [rbp + 0xf84]
mov ecx, esi
nop word [rax + rax]
cmp word [rbx], dx
lea rbx, [rbx + 4]
mov eax, 0xffff
cmove ax, r15w
mov word [rbx - 2], ax
sub rcx, 1
jne 0x18007d600
jmp 0x18007d6a9
cmp eax, 2
je 0x18007d684
cmp eax, 4
je 0x18007d643
mov r8d, 0x1365
lea rdx, str.E:ProjectsLucasExecutor_src_fonts_stb_image.h
lea rcx, str.out_n__2__out_n__4
call sub.api_ms_win_crt_runtime_l1_1_0.dll__wassert
test esi, esi
je 0x18007d6a9
movzx edx, byte [rbp + 0xf82]
lea rax, [rbx + 2]
movzx r8d, byte [rbp + 0xf81]
movzx r9d, byte [rbp + 0xf80]
mov ecx, esi
cmp byte [rax - 2], r9b
jne 0x18007d678
cmp byte [rax - 1], r8b
jne 0x18007d678
cmp byte [rax], dl
jne 0x18007d678
mov byte [rax + 1], r15b
add rax, 4
sub rcx, 1
jne 0x18007d664
jmp 0x18007d6a9
test esi, esi
je 0x18007d6a9
movzx edx, byte [rbp + 0xf80]
mov ecx, esi
cmp byte [rbx], dl
lea rbx, [rbx + 2]
mov eax, 0xff
cmove eax, r15d
mov byte [rbx - 1], al
sub rcx, 1
jne 0x18007d691
cmp dword [rsp + 0x50], 0
mov r15d, dword [0x18029ef40]
je 0x18007d81c
mov rax, qword gs:[0x58]
mov r14, qword [rax + r15*8]
mov eax, reloc.WS2_32.dll_recv
cmp dword [rax + r14], 0
je 0x18007d6df
mov eax, reloc.WS2_32.dll_sendto
mov eax, dword [rax + r14]
jmp 0x18007d6e5
mov eax, dword [0x18029e398]
test eax, eax
je 0x18007d816
cmp dword [rdi + 0xc], 2
jle 0x18007d816
mov rax, qword [r12]
mov rbx, qword [r12 + 0x18]
mov esi, dword [rax + 4]
imul esi, dword [rax]
mov ecx, dword [rax + 0xc]
cmp ecx, 3
jne 0x18007d73b
test esi, esi
je 0x18007d816
mov edx, esi
nop dword [rax + rax]
movzx ecx, byte [rbx]
movzx eax, byte [rbx + 2]
mov byte [rbx], al
mov byte [rbx + 2], cl
lea rbx, [rbx + 3]
sub rdx, 1
jne 0x18007d720
jmp 0x18007d816
cmp ecx, 4
je 0x18007d759
mov r8d, 0x13ee
lea rdx, str.E:ProjectsLucasExecutor_src_fonts_stb_image.h
lea rcx, str.s__img_out_n__4
call sub.api_ms_win_crt_runtime_l1_1_0.dll__wassert
mov eax, Ordinal_26
cmp dword [rax + r14], 0
je 0x18007d770
mov eax, Ordinal_30
mov eax, dword [rax + r14]
jmp 0x18007d776
mov eax, dword [0x18029e394]
test esi, esi
je 0x18007d816
test eax, eax
je 0x18007d7f5
add rbx, 2
mov r11d, esi
nop dword [rax]
movzx eax, byte [rbx + 1]
movzx r10d, byte [rbx - 2]
movzx ecx, byte [rbx]
test al, al
je 0x18007d7e0
mov r8d, eax
mov r9d, eax
movzx eax, byte [rbx - 1]
xor edx, edx
imul eax, eax, 0xff
shr r8d, 1
add eax, r8d
div r9d
xor edx, edx
mov byte [rbx - 1], al
imul eax, r10d, 0xff
add eax, r8d
div r9d
xor edx, edx
mov r10d, eax
imul eax, ecx, 0xff
add eax, r8d
div r9d
jmp 0x18007d7e3
movzx eax, cl
mov byte [rbx - 2], al
mov byte [rbx], r10b
add rbx, 4
sub r11, 1
jne 0x18007d790
jmp 0x18007d816
mov edx, esi
nop word [rax + rax]
movzx ecx, byte [rbx]
movzx eax, byte [rbx + 2]
mov byte [rbx], al
mov byte [rbx + 2], cl
lea rbx, [rbx + 4]
sub rdx, 1
jne 0x18007d800
movzx r14d, byte [rsp + 0x40]
movzx eax, byte [rsp + 0x41]
test al, al
je 0x18007d95c
mov r14d, eax
mov dword [rdi + 8], eax
mov dword [rdi + 0xc], eax
mov eax, dword [rsp + 0x58]
cmp eax, 3
jl 0x18007d841
mov dword [rdi + 0xc], eax
mov r14d, eax
mov rax, qword [r12]
mov rbx, qword [r12 + 0x18]
mov esi, dword [rax + 4]
imul esi, dword [rax]
test esi, esi
js 0x18007d943
test r14d, r14d
js 0x18007d943
je 0x18007d874
mov eax, 0x7fffffff
cdq
idiv r14d
cmp esi, eax
jg 0x18007d943
mov eax, r14d
imul eax, esi
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x18007d943
cmp r14d, 3
mov r14, rax
jne 0x18007d8db
test esi, esi
je 0x18007d931
lea r8, [rax + 2]
mov r9d, esi
movzx edx, byte [rbx]
lea r8, [r8 + 3]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf90]
movzx ecx, byte [rbp + rdx*4 + 0xf92]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf91]
mov byte [r8 - 4], al
mov byte [r8 - 3], cl
sub r9, 1
jne 0x18007d8a4
jmp 0x18007d931
test esi, esi
je 0x18007d931
lea r8, [rax + 2]
mov r9d, esi
nop word [rax + rax]
movzx edx, byte [rbx]
lea r8, [r8 + 4]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf90]
movzx ecx, byte [rbp + rdx*4 + 0xf93]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf91]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf92]
mov byte [r8 - 4], al
mov byte [r8 - 3], cl
sub r9, 1
jne 0x18007d8f0
mov rcx, qword [r12 + 0x18]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r12 + 0x18], r14
jmp 0x18007d964
mov rax, qword gs:[0x58]
lea rdx, str.outofmem
mov rax, qword [rax + r15*8]
jmp 0x18007dc14
test r14b, r14b
je 0x18007d964
inc dword [rdi + 8]
mov rcx, qword [r12 + 0x10]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
mov rcx, rdi
mov qword [r12 + 0x10], rax
call fcn.180077550
mov eax, 1
jmp 0x18007dc1f
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r12 + 0x10], r15
jmp 0x18007dc1d
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.no_PLTE
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.outofmem
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.outofdata
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.IDAT_size_limit
jmp 0x18007dc14
test sil, sil
je 0x18007dbae
mov dword [rdi + 8], esi
mov eax, 1
jmp 0x18007dc1f
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_ctype
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_comp_method
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_filter_method
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.0_pixel_image
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_interlace_method
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.1_2_4_8_16_bit_only
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_IHDR_len
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.multiple_IHDR
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov eax, ecx
shr eax, 0x18
mov byte [str.XXXX_PNG_chunk_not_known], al
mov eax, ecx
shr eax, 0x10
mov byte [0x180198a11], al
mov eax, ecx
shr eax, 8
mov byte [0x180198a12], al
mov rax, qword gs:[0x58]
mov byte [0x180198a13], cl
mov rax, qword [rax + rdx*8]
lea rdx, str.XXXX_PNG_chunk_not_known
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.bad_tRNS_len
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_before_PLTE
jmp 0x18007dc14
mov dword [rdi + 8], 4
mov eax, 1
jmp 0x18007dc1f
lea eax, [rcx + 1]
mov dword [rdi + 8], eax
mov eax, 1
jmp 0x18007dc1f
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_with_alpha
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.tRNS_after_IDAT
jmp 0x18007dc14
mov edx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rdx*8]
lea rdx, str.invalid_PLTE
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rcx + rax], rdx
xor eax, eax
mov rcx, qword [rbp + 0x1390]
xor rcx, rsp
call fcn.18011eca0
lea r11, [rsp + 0x14a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret