Function at 0x14000d9b0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbx
push r13
sub rsp, 0x4c8
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x94], 0xff
mov rbx, rcx
xor r13d, r13d
call fcn.14000d4c0
test rax, rax
je 0x14000da1d
mov ecx, dword [rbx + 4]
mov eax, ecx
neg eax
mov dword [rsp + 0x74], ecx
cmovs eax, ecx
mov dword [rbx + 4], eax
cmp eax, 0x1000000
jbe 0x14000da2a
mov rax, qword gs:[0x58]
mov edx, 0x28
mov rcx, qword [rax]
lea rax, str.too_large
mov qword [rdx + rcx], rax
xor eax, eax
add rsp, 0x4c8
pop r13
pop rbx
ret
cmp dword [rbx], 0x1000000
ja 0x14000da01
mov eax, dword [rsp + 0x84]
mov qword [rsp + 0x4e0], rbp
mov ebp, dword [rsp + 0x80]
mov qword [rsp + 0x4c0], rsi
mov esi, dword [rsp + 0x98]
mov qword [rsp + 0x4b8], rdi
mov edi, dword [rsp + 0x94]
mov qword [rsp + 0x4b0], r12
mov r12d, dword [rsp + 0x78]
mov dword [rsp + 0x500], eax
mov eax, dword [rsp + 0x88]
mov qword [rsp + 0x4a8], r14
mov r14d, dword [rsp + 0x7c]
mov qword [rsp + 0x4a0], r15
mov r15d, dword [rsp + 0x90]
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x70], r15d
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x508], edi
mov dword [rsp + 0x2c], esi
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x20], ebp
cmp ebp, 0xc
jne 0x14000daec
cmp r12d, 0x18
jge 0x14000db08
mov ecx, r14d
mov eax, 0x55555556
sub ecx, esi
sub ecx, 0x18
imul ecx
mov r13d, edx
shr r13d, 0x1f
add r13d, edx
jmp 0x14000daff
cmp r12d, 0x10
jge 0x14000db08
mov r13d, r14d
sub r13d, esi
sub r13d, ebp
sar r13d, 2
test r13d, r13d
jne 0x14000db95
mov edx, dword [rbx + 0xb8]
sub edx, dword [rbx + 0xd0]
mov r8d, dword [rbx + 0xc0]
add edx, r8d
lea eax, [rdx - 1]
cmp eax, 0x3ff
ja 0x14000e94a
cmp r14d, edx
jl 0x14000e935
mov ecx, r14d
sub ecx, edx
cmp ecx, 0x400
jg 0x14000e935
test ecx, ecx
je 0x14000db95
jns 0x14000db5c
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x14000db95
cmp qword [rbx + 0x10], 0
je 0x14000db8b
mov edx, dword [rbx + 0xc8]
sub edx, r8d
cmp edx, ecx
jge 0x14000db8b
mov rax, qword [rbx + 0xc8]
sub ecx, edx
mov edx, ecx
mov qword [rbx + 0xc0], rax
mov rcx, qword [rbx + 0x28]
call qword [rbx + 0x18]
jmp 0x14000db95
movsxd rax, ecx
add qword [rbx + 0xc0], rax
cmp r12d, 0x18
jne 0x14000dbab
cmp r15d, 0xff000000
jne 0x14000dbab
mov eax, 3
jmp 0x14000dbb6
xor eax, eax
test r15d, r15d
setne al
add eax, 3
mov dword [rbx + 8], eax
mov ecx, dword [rbx]
mov r8d, dword [rbx + 4]
test ecx, ecx
js 0x14000e920
jne 0x14000dbd3
lea r9d, [rcx*4]
jmp 0x14000dbf5
mov eax, 0x7fffffff
cdq
idiv ecx
cmp eax, 4
jl 0x14000e920
lea r9d, [rcx*4]
test r9d, r9d
js 0x14000e920
test r8d, r8d
js 0x14000e920
je 0x14000dc12
mov eax, 0x7fffffff
cdq
idiv r8d
cmp r9d, eax
jg 0x14000e920
test ecx, ecx
jne 0x14000dc20
lea r9d, [rcx*4]
jmp 0x14000dc43
mov eax, 0x7fffffff
cdq
idiv ecx
cmp eax, 4
jl 0x14000e90b
lea edx, [rcx*4]
test edx, edx
js 0x14000e90b
mov r9d, edx
test r8d, r8d
je 0x14000dc5a
mov eax, 0x7fffffff
cdq
idiv r8d
cmp r9d, eax
jg 0x14000e90b
imul r8d, ecx
lea eax, [r8*4]
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x50], rax
mov r10, rax
test rax, rax
je 0x14000e90b
cmp r12d, 0x10
jge 0x14000e239
xor edi, edi
mov dword [rsp + 0x500], edi
test r13d, r13d
je 0x14000e218
cmp r13d, 0x100
jg 0x14000e218
mov rsi, rax
test r13d, r13d
jle 0x14000de0f
mov r14d, dword [rsp + 0x20]
lea rbp, [rbx + 0x30]
xor r15d, r15d
movsxd rdi, r13d
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14000dcef
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000dd19
cmp dword [rbx + 0x30], 0
lea rbp, [rbx + 0x30]
je 0x14000dd17
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000dd19
xor cl, cl
mov qword [rsp + 0x40], rbp
mov byte [rsp + r15*4 + 0xa2], cl
cmp rax, qword [rbx + 0xc8]
jae 0x14000dd3e
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000dd64
cmp dword [rbp], 0
je 0x14000dd62
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000dd64
xor cl, cl
mov byte [rsp + r15*4 + 0xa1], cl
cmp rax, qword [rbx + 0xc8]
jae 0x14000dd88
movzx ecx, byte [rax]
lea rbp, [rbx + 0x30]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000ddae
cmp dword [rbp], 0
je 0x14000ddac
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000ddae
xor cl, cl
mov byte [rsp + r15*4 + 0xa0], cl
cmp r14d, 0xc
je 0x14000ddea
cmp rax, qword [rbx + 0xc8]
jae 0x14000ddd1
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000ddea
mov rax, qword [rsp + 0x40]
cmp dword [rax], 0
je 0x14000ddea
mov rcx, rbx
call fcn.140003730
inc qword [rbx + 0xc0]
mov byte [rsp + r15*4 + 0xa3], 0xff
inc r15
cmp r15, rdi
jl 0x14000dcd0
mov edi, dword [rsp + 0x500]
mov r14d, dword [rsp + 0x30]
mov ebp, dword [rsp + 0x20]
xor eax, eax
cmp ebp, 0xc
setne al
add eax, 3
imul eax, r13d
sub r14d, eax
sub r14d, dword [rsp + 0x2c]
sub r14d, ebp
je 0x14000de7f
test r14d, r14d
jns 0x14000de40
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x14000de7f
cmp qword [rbx + 0x10], 0
je 0x14000de75
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, r14d
jge 0x14000de75
mov rax, qword [rbx + 0xc8]
sub r14d, ecx
mov rcx, qword [rbx + 0x28]
mov edx, r14d
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
jmp 0x14000de7f
movsxd rax, r14d
add qword [rbx + 0xc0], rax
cmp r12d, 1
jne 0x14000de92
mov r15d, dword [rbx]
add r15d, 7
shr r15d, 3
jmp 0x14000deb0
cmp r12d, 4
jne 0x14000dea3
mov r15d, dword [rbx]
inc r15d
shr r15d, 1
jmp 0x14000deb0
cmp r12d, 8
jne 0x14000e1f7
mov r15d, dword [rbx]
mov eax, dword [rbx + 4]
neg r15d
and r15d, 3
mov ecx, eax
cmp r12d, 1
jne 0x14000e030
xor r12d, r12d
test eax, eax
jle 0x14000e81b
xor edi, edi
mov rax, qword [rbx + 0xc0]
mov ebp, 7
cmp rax, qword [rbx + 0xc8]
jae 0x14000def7
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000df1d
cmp dword [rbx + 0x30], 0
je 0x14000df1b
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000df1d
xor cl, cl
xor r14d, r14d
movzx edx, cl
cmp dword [rbx], r14d
jle 0x14000dfd7
nop dword [rax]
mov eax, edx
mov ecx, ebp
sar eax, cl
and eax, 1
lea rcx, [rax*4]
movzx eax, byte [rsp + rcx + 0xa0]
mov byte [rdi + rsi], al
movzx eax, byte [rsp + rcx + 0xa1]
mov byte [rdi + rsi + 1], al
movzx eax, byte [rsp + rcx + 0xa2]
mov byte [rdi + rsi + 2], al
lea eax, [r14 + 1]
mov byte [rdi + rsi + 3], 0xff
mov r14d, eax
mov ecx, dword [rbx]
add rdi, 4
cmp eax, ecx
je 0x14000dfd7
sub ebp, 1
jns 0x14000dfce
mov rax, qword [rbx + 0xc0]
mov ebp, 7
cmp rax, qword [rbx + 0xc8]
jae 0x14000dfa3
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000dfcb
cmp dword [rbx + 0x30], 0
je 0x14000dfc9
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
mov ecx, dword [rbx]
jmp 0x14000dfcb
xor dl, dl
movzx edx, dl
cmp r14d, ecx
jl 0x14000df30
test r15d, r15d
je 0x14000e01a
cmp qword [rbx + 0x10], 0
je 0x14000e010
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, r15d
jge 0x14000e010
mov rax, qword [rbx + 0xc8]
mov edx, r15d
sub edx, ecx
mov qword [rbx + 0xc0], rax
mov rcx, qword [rbx + 0x28]
call qword [rbx + 0x18]
jmp 0x14000e01a
mov eax, r15d
add qword [rbx + 0xc0], rax
mov eax, dword [rbx + 4]
inc r12d
mov ecx, eax
cmp r12d, eax
jl 0x14000ded3
jmp 0x14000e81b
xor r14d, r14d
test eax, eax
jle 0x14000e81b
nop dword [rax + rax]
xor ebp, ebp
cmp dword [rbx], ebp
jle 0x14000e19e
nop word [rax + rax]
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14000e06f
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e095
cmp dword [rbx + 0x30], 0
je 0x14000e093
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e095
xor cl, cl
mov edx, 0x30
xor r8d, r8d
mov rax, rbx
movzx eax, cl
lea r9, [rdx + rbx]
cmp r12d, 4
jne 0x14000e0b7
mov r8d, eax
and r8d, 0xf
shr eax, 4
movsxd rcx, edi
lea rdx, [rax*4]
movzx eax, byte [rsp + rdx + 0xa0]
inc edi
mov byte [rcx + rsi], al
movzx eax, byte [rsp + rdx + 0xa1]
movsxd rcx, edi
inc edi
mov byte [rcx + rsi], al
movzx eax, byte [rsp + rdx + 0xa2]
movsxd rcx, edi
inc edi
mov byte [rcx + rsi], al
movsxd rax, edi
inc edi
mov byte [rax + rsi], 0xff
lea eax, [rbp + 1]
cmp eax, dword [rbx]
je 0x14000e19e
cmp r12d, 8
jne 0x14000e152
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14000e128
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e14e
cmp dword [r9], 0
je 0x14000e14c
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e14e
xor cl, cl
movzx r8d, cl
movsxd rcx, edi
lea rdx, [r8*4]
movzx eax, byte [rsp + rdx + 0xa0]
inc edi
add ebp, 2
mov byte [rcx + rsi], al
movzx eax, byte [rsp + rdx + 0xa1]
movsxd rcx, edi
inc edi
mov byte [rcx + rsi], al
movzx eax, byte [rsp + rdx + 0xa2]
movsxd rcx, edi
inc edi
mov byte [rcx + rsi], al
movsxd rax, edi
inc edi
mov byte [rax + rsi], 0xff
cmp ebp, dword [rbx]
jl 0x14000e050
test r15d, r15d
je 0x14000e1e1
cmp qword [rbx + 0x10], 0
je 0x14000e1d7
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, r15d
jge 0x14000e1d7
mov rax, qword [rbx + 0xc8]
mov edx, r15d
sub edx, ecx
mov qword [rbx + 0xc0], rax
mov rcx, qword [rbx + 0x28]
call qword [rbx + 0x18]
jmp 0x14000e1e1
mov eax, r15d
add qword [rbx + 0xc0], rax
mov eax, dword [rbx + 4]
inc r14d
mov ecx, eax
cmp r14d, eax
jl 0x14000e040
jmp 0x14000e81b
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_bpp
jmp 0x14000e95d
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.invalid
jmp 0x14000e95d
xor r9d, r9d
sub r14d, esi
mov dword [rsp + 0x5c], r9d
mov r13d, r9d
mov dword [rsp + 0x64], r9d
mov dword [rsp + 0x6c], r9d
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x58], r9d
mov dword [rsp + 0x60], r9d
mov dword [rsp + 0x68], r9d
mov dword [rsp + 0x2c], r9d
sub r14d, ebp
je 0x14000e2ca
test r14d, r14d
jns 0x14000e284
mov rax, qword [rbx + 0xc8]
mov qword [rbx + 0xc0], rax
jmp 0x14000e2ca
cmp qword [rbx + 0x10], r9
je 0x14000e2c0
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, r14d
jge 0x14000e2c0
mov rax, qword [rbx + 0xc8]
sub r14d, ecx
mov rcx, qword [rbx + 0x28]
mov edx, r14d
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
mov r10, qword [rsp + 0x50]
xor r9d, r9d
jmp 0x14000e2ca
movsxd rax, r14d
add qword [rbx + 0xc0], rax
cmp r12d, 0x18
jne 0x14000e2d7
mov eax, dword [rbx]
lea edx, [rax + rax*2]
jmp 0x14000e2e6
cmp r12d, 0x10
jne 0x14000e2e3
mov edx, dword [rbx]
add edx, edx
jmp 0x14000e2e6
mov edx, r9d
neg edx
mov rsi, r10
and edx, 3
mov dword [rsp + 0x28], edx
cmp r12d, 0x18
jne 0x14000e30d
mov r9d, 1
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x38], r9
jmp 0x14000e54e
mov r10d, dword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov r11d, dword [rsp + 0x24]
mov qword [rsp + 0x38], r9
cmp r12d, 0x20
jne 0x14000e385
xor r9d, r9d
mov qword [rsp + 0x38], r9
cmp r10d, 0xff
jne 0x14000e385
mov ecx, dword [rsp + 0x500]
mov rsi, rax
mov qword [rsp + 0x38], r9
cmp r11d, 0xff00
jne 0x14000e38c
mov qword [rsp + 0x38], r9
cmp ecx, 0xff0000
jne 0x14000e38c
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], rax
cmp r15d, 0xff000000
jne 0x14000e3b0
mov r9d, 2
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r9
jmp 0x14000e54e
mov ecx, dword [rsp + 0x500]
test ecx, ecx
je 0x14000e8ed
test r11d, r11d
je 0x14000e8ed
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rax
test r10d, r10d
je 0x14000e8ed
call fcn.14000d350
mov edx, dword [rsp + 0x500]
sub eax, 7
mov ecx, dword [rsp + 0x500]
shr edx, 1
and ecx, 0x55555555
and edx, 0x55555555
mov dword [rsp + 0x5c], eax
add edx, ecx
mov ecx, edx
and edx, 0x33333333
shr ecx, 2
and ecx, 0x33333333
add ecx, edx
mov edx, ecx
shr edx, 4
add edx, ecx
mov ecx, r11d
and edx, 0xf0f0f0f
mov eax, edx
shr eax, 8
add edx, eax
mov eax, edx
shr eax, 0x10
add eax, edx
movzx r14d, al
mov dword [rsp + 0x58], r14d
call fcn.14000d350
sub eax, 7
mov edx, r11d
shr edx, 1
mov ecx, r11d
and edx, 0x55555555
mov dword [rsp + 0x64], eax
and ecx, 0x55555555
add edx, ecx
mov ecx, edx
and edx, 0x33333333
shr ecx, 2
and ecx, 0x33333333
add ecx, edx
mov edx, ecx
shr edx, 4
add edx, ecx
mov ecx, r10d
and edx, 0xf0f0f0f
mov eax, edx
shr eax, 8
add edx, eax
mov eax, edx
shr eax, 0x10
add eax, edx
movzx ebp, al
mov dword [rsp + 0x60], ebp
call fcn.14000d350
sub eax, 7
mov edx, r10d
shr edx, 1
mov ecx, r10d
and edx, 0x55555555
mov dword [rsp + 0x6c], eax
and ecx, 0x55555555
add edx, ecx
mov ecx, edx
and edx, 0x33333333
shr ecx, 2
and ecx, 0x33333333
add ecx, edx
mov edx, ecx
shr edx, 4
add edx, ecx
mov ecx, r15d
and edx, 0xf0f0f0f
mov eax, edx
shr eax, 8
add edx, eax
mov eax, edx
shr eax, 0x10
add eax, edx
movzx r11d, al
mov dword [rsp + 0x68], r11d
call fcn.14000d350
sub eax, 7
mov edx, r15d
shr edx, 1
mov ecx, r15d
and edx, 0x55555555
mov dword [rsp + 0x30], eax
and ecx, 0x55555555
add edx, ecx
mov ecx, edx
and edx, 0x33333333
shr ecx, 2
and ecx, 0x33333333
add ecx, edx
mov edx, ecx
shr edx, 4
add edx, ecx
and edx, 0xf0f0f0f
mov eax, edx
shr eax, 8
add edx, eax
mov eax, edx
shr eax, 0x10
add eax, edx
movzx r8d, al
mov dword [rsp + 0x2c], r8d
cmp r14d, 8
ja 0x14000e8ed
cmp ebp, 8
ja 0x14000e8ed
cmp r11d, 8
ja 0x14000e8ed
cmp r8d, 8
ja 0x14000e8ed
mov edx, dword [rsp + 0x28]
mov eax, dword [rbx + 4]
xor ebp, ebp
mov dword [rsp + 0x20], ebp
mov ecx, eax
test eax, eax
jle 0x14000e81b
mov eax, dword [rbx]
movsxd rcx, r13d
test r9, r9
je 0x14000e6f0
xor ebp, ebp
test eax, eax
jle 0x14000e7be
mov r15d, dword [rsp + 0x508]
lea r14, [rcx + rsi]
lea rdi, [rbx + 0x30]
nop dword [rax]
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14000e5af
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e5d9
cmp dword [rbx + 0x30], 0
lea rdi, [rbx + 0x30]
je 0x14000e5d7
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e5d9
xor cl, cl
mov byte [r14 + 2], cl
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14000e5fc
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e621
cmp dword [rdi], 0
je 0x14000e61f
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e621
xor cl, cl
mov byte [r14 + 1], cl
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14000e648
movzx ecx, byte [rax]
lea rdi, [rbx + 0x30]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e66d
cmp dword [rdi], 0
je 0x14000e66b
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e66d
xor cl, cl
cmp qword [rsp + 0x38], 2
mov byte [r14], cl
jne 0x14000e6c2
mov rax, qword [rbx + 0xc0]
cmp rax, qword [rbx + 0xc8]
jae 0x14000e69b
movzx ecx, byte [rax]
lea rdi, [rbx + 0x30]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e6c4
cmp dword [rdi], 0
je 0x14000e6be
mov rcx, rbx
call fcn.140003730
mov rax, qword [rbx + 0xc0]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xc0], rax
jmp 0x14000e6c4
xor cl, cl
jmp 0x14000e6c4
mov cl, 0xff
mov byte [r14 + 3], cl
add r13d, 4
movzx eax, cl
add r14, 4
or r15d, eax
inc ebp
cmp ebp, dword [rbx]
jl 0x14000e590
mov dword [rsp + 0x508], r15d
mov edi, r15d
jmp 0x14000e7ba
xor r15d, r15d
test eax, eax
jle 0x14000e7c2
lea r14, [rcx + rsi]
mov esi, dword [rsp + 0x70]
mov rcx, rbx
call fcn.140003940
cmp r12d, 0x10
jne 0x14000e715
mov ebp, eax
jmp 0x14000e72d
mov rcx, rbx
mov edi, eax
call fcn.140003940
mov ebp, eax
shl ebp, 0x10
add ebp, edi
mov edi, dword [rsp + 0x508]
mov r8d, dword [rsp + 0x58]
mov ecx, ebp
and ecx, dword [rsp + 0x500]
mov edx, dword [rsp + 0x5c]
call fcn.14000d3c0
mov r8d, dword [rsp + 0x60]
mov ecx, ebp
and ecx, dword [rsp + 0x24]
mov edx, dword [rsp + 0x64]
mov byte [r14], al
call fcn.14000d3c0
mov r8d, dword [rsp + 0x68]
mov ecx, ebp
and ecx, dword [rsp + 0x48]
mov edx, dword [rsp + 0x6c]
mov byte [r14 + 1], al
call fcn.14000d3c0
mov byte [r14 + 2], al
test esi, esi
je 0x14000e78f
mov r8d, dword [rsp + 0x2c]
and ebp, esi
mov edx, dword [rsp + 0x30]
mov ecx, ebp
call fcn.14000d3c0
jmp 0x14000e794
mov eax, 0xff
mov byte [r14 + 3], al
or edi, eax
add r14, 4
mov dword [rsp + 0x508], edi
add r13d, 4
inc r15d
cmp r15d, dword [rbx]
jl 0x14000e703
mov rsi, qword [rsp + 0x40]
mov edx, dword [rsp + 0x28]
mov ebp, dword [rsp + 0x20]
test edx, edx
je 0x14000e803
cmp qword [rbx + 0x10], 0
je 0x14000e7fa
mov ecx, dword [rbx + 0xc8]
sub ecx, dword [rbx + 0xc0]
cmp ecx, edx
jge 0x14000e7fa
mov rax, qword [rbx + 0xc8]
sub edx, ecx
mov rcx, qword [rbx + 0x28]
mov qword [rbx + 0xc0], rax
call qword [rbx + 0x18]
mov edx, dword [rsp + 0x28]
jmp 0x14000e803
mov eax, edx
add qword [rbx + 0xc0], rax
mov eax, dword [rbx + 4]
inc ebp
mov r9, qword [rsp + 0x38]
mov ecx, eax
mov dword [rsp + 0x20], ebp
cmp ebp, eax
jl 0x14000e561
cmp dword [rsp + 0x508], 0
jne 0x14000e84d
imul eax, dword [rbx]
lea eax, [rax*4 - 1]
movsxd rdx, eax
test eax, eax
js 0x14000e84d
mov rax, qword [rsp + 0x50]
nop dword [rax + rax]
mov byte [rdx + rax], 0xff
sub rdx, 4
jns 0x14000e840
mov ecx, dword [rbx + 4]
cmp dword [rsp + 0x74], 0
jle 0x14000e8c0
xor r10d, r10d
mov edx, ecx
test ecx, 0xfffffffe
jle 0x14000e8c0
mov ecx, dword [rbx]
sub edx, r10d
dec edx
mov r9d, ecx
imul edx, ecx
xor r8d, r8d
imul r9d, r10d
lea eax, [rcx*4]
shl edx, 2
shl r9d, 2
add rdx, rsi
add r9, rsi
test eax, eax
jle 0x14000e8af
sub r9, rdx
movzx eax, byte [rdx]
inc r8d
movzx ecx, byte [rdx + r9]
mov byte [rdx + r9], al
mov byte [rdx], cl
lea rdx, [rdx + 1]
mov eax, dword [rbx]
shl eax, 2
cmp r8d, eax
jl 0x14000e890
mov ecx, dword [rbx + 4]
inc r10d
mov eax, ecx
mov edx, ecx
sar eax, 1
cmp r10d, eax
jl 0x14000e861
mov eax, dword [rbx]
mov rdx, qword [rsp + 0x4e8]
mov dword [rdx], eax
mov rax, qword [rsp + 0x4f0]
mov dword [rax], ecx
mov rcx, qword [rsp + 0x4f8]
test rcx, rcx
je 0x14000e8e8
mov eax, dword [rbx + 8]
mov dword [rcx], eax
mov rax, rsi
jmp 0x14000e968
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_masks
jmp 0x14000e95d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.outofmem
jmp 0x14000e95d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.too_large
jmp 0x14000e95d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_offset
jmp 0x14000e95d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rax, str.bad_header
mov edx, 0x28
mov qword [rdx + rcx], rax
xor eax, eax
mov r14, qword [rsp + 0x4a8]
mov r12, qword [rsp + 0x4b0]
mov rdi, qword [rsp + 0x4b8]
mov rsi, qword [rsp + 0x4c0]
mov rbp, qword [rsp + 0x4e0]
mov r15, qword [rsp + 0x4a0]
add rsp, 0x4c8
pop r13
pop rbx
ret