Function at 0x14012c870
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.140160af0
sub rsp, rax
mov rax, qword [0x14029e8b8]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov rbx, qword [rcx]
mov edi, edx
mov dword [rsp + 0x4c], edx
xor r14b, r14b
xor edx, edx
mov byte [rsp + 0x41], r14b
mov qword [rcx + 0x10], rdx
mov r13, rcx
mov qword [rcx + 8], rdx
mov r14d, 1
mov qword [rcx + 0x18], rdx
mov r15d, edx
mov rcx, rbx
mov dword [rsp + 0x48], r14d
mov dword [rsp + 0x64], r8d
mov r12d, edx
mov byte [rsp + 0x40], 0
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x5c], edx
mov dword [rsp + 0x60], edx
mov dword [rsp + 0x54], edx
mov dword [rsp + 0x58], edx
call fcn.140126c30
test eax, eax
je 0x14012d46f
cmp edi, r14d
je 0x14012d436
mov rcx, rbx
call fcn.140128d00
mov rcx, rbx
mov esi, eax
call fcn.140128d00
shl esi, 0x10
mov rcx, rbx
add esi, eax
mov dword [rsp + 0x68], esi
call fcn.140128d00
mov rcx, rbx
mov edi, eax
call fcn.140128d00
shl edi, 0x10
lea edx, [rdi + rax]
mov dword [rsp + 0x6c], edx
mov rcx, qword [rsp + 0x68]
shr rcx, 0x20
cmp ecx, 0x49484452
ja 0x14012cd1d
je 0x14012cab2
cmp ecx, 0x43674249
je 0x14012ca4f
cmp ecx, 0x49444154
je 0x14012c9b7
cmp ecx, 0x49454e44
jne 0x14012cd31
test r14d, r14d
jne 0x14012d461
cmp dword [rsp + 0x4c], r14d
jne 0x14012d436
mov rsi, qword [r13 + 8]
test rsi, rsi
jne 0x14012cfbd
lea rax, str.no_IDAT
jmp 0x14012d468
test r14d, r14d
jne 0x14012d461
movzx eax, byte [rsp + 0x40]
test al, al
je 0x14012c9d2
test r12d, r12d
je 0x14012d365
cmp dword [rsp + 0x4c], 2
je 0x14012d37d
mov eax, dword [rsp + 0x50]
lea edi, [rsi + rax]
cmp edi, eax
jl 0x14012d46f
cmp edi, r15d
jbe 0x14012ca2d
test r15d, r15d
jne 0x14012ca03
mov r15d, 0x1000
cmp esi, r15d
cmova r15d, esi
cmp edi, r15d
jbe 0x14012ca10
add r15d, r15d
cmp edi, r15d
ja 0x14012ca08
mov rcx, qword [r13 + 8]
mov edx, r15d
call fcn.1401c977c
test rax, rax
je 0x14012d29b
mov qword [r13 + 8], rax
mov eax, dword [rsp + 0x50]
mov edx, eax
mov r8d, esi
add rdx, qword [r13 + 8]
mov rcx, rbx
call fcn.140128f90
test eax, eax
je 0x14012d371
mov dword [rsp + 0x50], edi
jmp 0x14012cfa8
mov dword [rsp + 0x58], 1
test esi, esi
jns 0x14012ca6e
mov rax, qword [rbx + 0xc0]
mov qword [rbx + 0xb8], rax
jmp 0x14012cfa8
cmp qword [rbx + 0x10], 0
je 0x14012caa3
mov ecx, dword [rbx + 0xc0]
sub ecx, dword [rbx + 0xb8]
cmp ecx, esi
jge 0x14012caa3
mov rax, qword [rbx + 0xc0]
sub esi, ecx
mov rcx, qword [rbx + 0x28]
mov edx, esi
mov qword [rbx + 0xb8], rax
call qword [rbx + ILCombine]
jmp 0x14012cfa8
movsxd rax, esi
add qword [rbx + 0xb8], rax
jmp 0x14012cfa8
test r14d, r14d
je 0x14012d3ea
mov dword [rsp + 0x48], 0
cmp esi, 0xd
jne 0x14012d3e1
mov rcx, rbx
call fcn.140128d00
mov rcx, rbx
mov edi, eax
call fcn.140128d00
shl edi, 0x10
add eax, edi
mov dword [rbx], eax
cmp eax, 0x1000000
ja 0x14012d3d5
mov rcx, rbx
call fcn.140128d00
mov rcx, rbx
mov edi, eax
call fcn.140128d00
shl edi, 0x10
lea ecx, [rax + rdi]
mov dword [rbx + 4], ecx
cmp ecx, 0x1000000
ja 0x14012d3d5
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x14012cb36
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14012cb5c
cmp dword [rbx + 0x30], 0
je 0x14012cb5a
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14012cb5c
xor cl, cl
movzx ecx, cl
mov dword [rsp + 0x54], ecx
cmp ecx, 8
ja 0x14012d3c9
mov edx, 0x116
bt edx, ecx
jae 0x14012d3c9
cmp rax, qword [rbx + 0xc0]
jae 0x14012cb92
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14012cbb8
cmp dword [rbx + 0x30], 0
je 0x14012cbb6
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14012cbb8
xor cl, cl
movzx edi, cl
mov dword [rsp + 0x60], edi
cmp edi, 6
ja 0x14012d3bd
cmp edi, 3
jne 0x14012cbd8
movzx esi, dil
mov byte [rsp + 0x40], dil
jmp 0x14012cbe7
test dil, 1
jne 0x14012d3bd
movzx esi, byte [rsp + 0x40]
cmp rax, qword [rbx + 0xc0]
jb 0x14012cc05
cmp dword [rbx + 0x30], 0
je 0x14012cc1a
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
test cl, cl
jne 0x14012d38d
cmp rax, qword [rbx + 0xc0]
jb 0x14012cc38
cmp dword [rbx + 0x30], 0
je 0x14012cc4d
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
test cl, cl
jne 0x14012d399
cmp rax, qword [rbx + 0xc0]
jae 0x14012cc65
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14012cc8b
cmp dword [rbx + 0x30], 0
je 0x14012cc89
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
movzx ecx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14012cc8b
xor cl, cl
movzx r14d, cl
mov dword [rsp + 0x5c], r14d
cmp r14d, 1
ja 0x14012d3b1
mov ecx, dword [rbx]
test ecx, ecx
je 0x14012d3a5
mov r9d, dword [rbx + 4]
test r9d, r9d
je 0x14012d3a5
xor edx, edx
mov eax, 0x40000000
div ecx
test sil, sil
jne 0x14012cd00
xor edx, edx
mov r8d, edi
shr r8d, 2
mov ecx, edi
and ecx, 2
and r8d, 1
or ecx, 1
add r8d, ecx
div r8d
mov dword [rbx + 8], r8d
cmp eax, r9d
jb 0x14012d3d5
cmp dword [rsp + 0x4c], 2
je 0x14012d436
mov r14d, dword [rsp + 0x48]
jmp 0x14012cfa8
shr eax, 2
mov dword [rbx + 8], 1
cmp eax, r9d
jb 0x14012d3d5
mov r14d, dword [rsp + 0x48]
jmp 0x14012cfa8
cmp ecx, 0x504c5445
je 0x14012ce62
cmp ecx, 0x74524e53
je 0x14012cd53
test r14d, r14d
jne 0x14012d461
bt edx, 0x1d
jae 0x14012d3f3
mov edx, esi
mov rcx, rbx
call fcn.1401303e0
jmp 0x14012cfa8
test r14d, r14d
jne 0x14012d461
cmp qword [r13 + 8], 0
jne 0x14012d44f
cmp byte [rsp + 0x40], r14b
je 0x14012cdfe
cmp dword [rsp + 0x4c], 2
je 0x14012d42f
test r12d, r12d
je 0x14012d426
cmp esi, r12d
ja 0x14012d43d
xor edi, edi
mov byte [rsp + 0x40], 4
test esi, esi
je 0x14012cfa8
nop
mov rax, qword [rbx + 0xb8]
cmp rax, qword [rbx + 0xc0]
jae 0x14012cdbf
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14012cde5
cmp dword [rbx + 0x30], 0
je 0x14012cde3
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
movzx edx, byte [rax]
inc rax
mov qword [rbx + 0xb8], rax
jmp 0x14012cde5
xor dl, dl
lea eax, [rdi*4 + 3]
inc edi
mov byte [rbp + rax + 0xf70], dl
cmp edi, esi
jb 0x14012cda0
jmp 0x14012cfa8
mov ecx, dword [rbx + 8]
test cl, 1
je 0x14012d446
lea eax, [rcx + rcx]
cmp esi, eax
jne 0x14012d43d
xor esi, esi
mov byte [rsp + 0x41], 1
test ecx, ecx
jle 0x14012cfa8
movsxd r14, dword [rsp + 0x54]
lea rcx, [0x14029e820]
add r14, rcx
lea rdi, [rsp + 0x44]
mov rcx, rbx
call fcn.140128d00
movzx ecx, byte [r14]
lea rdi, [rdi + 1]
movzx edx, al
inc esi
imul edx, ecx
mov byte [rdi - 1], dl
cmp esi, dword [rbx + 8]
jl 0x14012ce38
mov r14d, dword [rsp + 0x48]
jmp 0x14012cfa8
test r14d, r14d
jne 0x14012d461
cmp esi, 0x300
ja 0x14012d458
mov eax, 0xaaaaaaab
mul esi
mov r12d, edx
shr r12d, 1
lea eax, [r12 + r12*2]
cmp eax, esi
jne 0x14012d458
xor esi, esi
test r12d, r12d
je 0x14012cfa8
mov r8, qword [rbx + 0xb8]
mov rdx, qword [rbx + 0xc0]
cmp r8, rdx
jae 0x14012cebe
movzx ecx, byte [r8]
inc r8
mov qword [rbx + 0xb8], r8
jmp 0x14012ceec
cmp dword [rbx + 0x30], 0
je 0x14012ceea
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
mov rdx, qword [rbx + 0xc0]
movzx ecx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
jmp 0x14012ceec
xor cl, cl
lea edi, [rsi*4]
mov byte [rbp + rdi + 0xf70], cl
cmp r8, rdx
jae 0x14012cf0f
movzx r9d, byte [r8]
inc r8
mov qword [rbx + 0xb8], r8
jmp 0x14012cf3f
cmp dword [rbx + 0x30], 0
je 0x14012cf3c
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
mov rdx, qword [rbx + 0xc0]
movzx r9d, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
jmp 0x14012cf3f
xor r9b, r9b
lea eax, [rdi + 1]
mov byte [rbp + rax + 0xf70], r9b
cmp r8, rdx
jae 0x14012cf5f
movzx edx, byte [r8]
inc r8
mov qword [rbx + 0xb8], r8
jmp 0x14012cf86
cmp dword [rbx + 0x30], 0
je 0x14012cf84
mov rcx, rbx
call fcn.14012ff60
mov rax, qword [rbx + 0xb8]
movzx edx, byte [rax]
lea r8, [rax + 1]
mov qword [rbx + 0xb8], r8
jmp 0x14012cf86
xor dl, dl
lea eax, [rdi + 2]
inc esi
mov byte [rbp + rax + 0xf70], dl
lea eax, [rdi + 3]
mov ecx, eax
mov byte [rbp + rax + 0xf70], 0xff
cmp esi, r12d
jb 0x14012cea2
mov rcx, rbx
call fcn.140128d00
mov rcx, rbx
call fcn.140128d00
jmp 0x14012c918
mov edi, dword [rbx]
mov r15d, dword [rsp + 0x54]
imul edi, r15d
add edi, 7
shr edi, 3
imul edi, dword [rbx + 8]
inc edi
imul edi, dword [rbx + 4]
movsxd r14, edi
mov rcx, r14
call fcn.1401b81b8
mov r12d, dword [rsp + 0x58]
mov rcx, rax
test rax, rax
jne 0x14012cff4
xor esi, esi
jmp 0x14012d04a
movsxd rax, dword [rsp + 0x50]
add rax, rsi
mov qword [rsp + 0x70], rsi
xor esi, esi
mov qword [rsp + 0x78], rax
lea rax, [r14 + rcx]
mov qword [rbp - 0x70], rcx
mov edx, esi
mov qword [rbp - 0x78], rcx
test r12d, r12d
mov qword [rbp - 0x68], rax
lea rcx, [rsp + 0x70]
mov dword [rbp - 0x60], 1
sete dl
call fcn.14012d640
test eax, eax
je 0x14012d041
mov edi, dword [rbp - 0x78]
sub edi, dword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x14012d04d
mov rcx, qword [rbp - 0x70]
call fcn.1401b3018
mov rax, rsi
mov qword [r13 + 0x10], rax
test rax, rax
je 0x14012d46f
mov rcx, qword [r13 + 8]
call fcn.1401b3018
mov ecx, dword [rsp + 0x64]
mov qword [r13 + 8], rsi
mov eax, dword [rbx + 8]
movzx esi, byte [rsp + 0x40]
lea r9d, [rax + 1]
cmp ecx, r9d
jne 0x14012d08a
cmp ecx, 3
je 0x14012d08a
test sil, sil
je 0x14012d11b
movzx r14d, byte [rsp + 0x41]
test r14b, r14b
jne 0x14012d098
mov r9d, eax
mov eax, dword [rsp + 0x5c]
mov r8d, edi
mov ecx, dword [rsp + 0x60]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov rcx, r13
mov dword [rbx + 0xc], r9d
mov rdx, qword [r13 + 0x10]
mov dword [rsp + 0x20], r15d
call fcn.140127650
test eax, eax
je 0x14012d46f
test r14b, r14b
je 0x14012d15e
mov rax, qword [r13]
mov rcx, qword [r13 + 0x18]
mov edx, dword [rax + 4]
imul edx, dword [rax]
test edx, edx
je 0x14012d15e
cmp dword [rbx + 0xc], 2
jne 0x14012d126
movzx r8d, byte [rsp + 0x44]
xor r15d, r15d
nop dword [rax]
nop word [rax + rax]
cmp byte [rcx], r8b
lea rcx, [rcx + 2]
mov eax, 0xff
cmove eax, r15d
mov byte [rcx - 1], al
sub rdx, 1
jne 0x14012d100
jmp 0x14012d161
movzx r14d, byte [rsp + 0x41]
jmp 0x14012d098
movzx r8d, byte [rsp + 0x45]
movzx r9d, byte [rsp + 0x44]
mov eax, edx
movzx edx, byte [rsp + 0x46]
nop dword [rax]
cmp byte [rcx], r9b
jne 0x14012d154
cmp byte [rcx + 1], r8b
jne 0x14012d154
cmp byte [rcx + 2], dl
jne 0x14012d154
mov byte [rcx + 3], 0
add rcx, 4
sub rax, 1
jne 0x14012d140
xor r15d, r15d
test r12d, r12d
je 0x14012d25a
cmp dword [0x1402ba440], 0
je 0x14012d25a
cmp dword [rbx + 0xc], 2
jle 0x14012d25a
mov rax, qword [r13]
mov r9, qword [r13 + 0x18]
mov ecx, dword [rax + 4]
imul ecx, dword [rax]
test ecx, ecx
je 0x14012d25a
cmp dword [rax + 0xc], 3
jne 0x14012d1bf
mov edx, ecx
nop
movzx ecx, byte [r9]
movzx eax, byte [r9 + 2]
mov byte [r9], al
mov byte [r9 + 2], cl
lea r9, [r9 + 3]
sub rdx, 1
jne 0x14012d1a0
jmp 0x14012d25a
cmp dword [0x1402ba2fc], 0
je 0x14012d237
mov edi, ecx
nop word [rax + rax]
movzx eax, byte [r9 + 3]
movzx ecx, byte [r9]
movzx r11d, byte [r9 + 2]
test al, al
je 0x14012d21c
movzx r8d, al
xor edx, edx
movzx eax, byte [r9 + 1]
imul eax, eax, 0xff
div r8d
xor edx, edx
mov byte [r9 + 1], al
movzx eax, cl
imul eax, eax, 0xff
movzx ecx, r11b
div r8d
xor edx, edx
mov r10d, eax
imul eax, ecx, 0xff
div r8d
jmp 0x14012d224
movzx r10d, cl
movzx eax, r11b
mov byte [r9], al
mov byte [r9 + 2], r10b
add r9, 4
sub rdi, 1
jne 0x14012d1d0
jmp 0x14012d25a
mov edx, ecx
nop dword [rax]
movzx ecx, byte [r9]
movzx eax, byte [r9 + 2]
mov byte [r9], al
mov byte [r9 + 2], cl
lea r9, [r9 + 4]
sub rdx, 1
jne 0x14012d240
test sil, sil
je 0x14012d34e
mov eax, dword [rsp + 0x64]
movzx esi, sil
mov dword [rbx + 8], esi
mov dword [rbx + 0xc], esi
cmp eax, 3
jl 0x14012d27b
mov dword [rbx + 0xc], eax
mov esi, eax
mov rax, qword [r13]
mov ecx, esi
mov rbx, qword [r13 + 0x18]
mov edi, dword [rax + 4]
imul edi, dword [rax]
imul ecx, edi
call fcn.1401b81b8
mov r14, rax
test rax, rax
jne 0x14012d2a7
lea rax, str.outofmem
jmp 0x14012d468
test edi, edi
je 0x14012d341
mov r9d, edi
lea r8, [rax + 2]
cmp esi, 3
jne 0x14012d300
nop dword [rax + rax]
movzx edx, byte [rbx]
lea r8, [r8 + 3]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
movzx ecx, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 4], al
mov byte [r8 - 3], cl
sub r9, 1
jne 0x14012d2c0
jmp 0x14012d341
movzx edx, byte [rbx]
lea r8, [r8 + 4]
lea rbx, [rbx + 1]
movzx eax, byte [rbp + rdx*4 + 0xf70]
movzx ecx, byte [rbp + rdx*4 + 0xf73]
mov byte [r8 - 6], al
movzx eax, byte [rbp + rdx*4 + 0xf71]
mov byte [r8 - 5], al
movzx eax, byte [rbp + rdx*4 + 0xf72]
mov byte [r8 - 4], al
mov byte [r8 - 3], cl
sub r9, 1
jne 0x14012d300
mov rcx, qword [r13 + 0x18]
call fcn.1401b3018
mov qword [r13 + 0x18], r14
mov rcx, qword [r13 + 0x10]
call fcn.1401b3018
mov eax, 1
mov qword [r13 + 0x10], r15
jmp 0x14012d471
lea rax, str.no_PLTE
jmp 0x14012d468
lea rax, str.outofdata
jmp 0x14012d468
movzx eax, al
mov dword [rbx + 8], eax
mov eax, 1
jmp 0x14012d471
lea rax, str.bad_comp_method
jmp 0x14012d468
lea rax, str.bad_filter_method
jmp 0x14012d468
lea rax, str.0_pixel_image
jmp 0x14012d468
lea rax, str.bad_interlace_method
jmp 0x14012d468
lea rax, str.bad_ctype
jmp 0x14012d468
lea rax, str.1_2_4_8_bit_only
jmp 0x14012d468
lea rax, str.too_large
jmp 0x14012d468
lea rax, str.bad_IHDR_len
jmp 0x14012d468
lea rax, str.multiple_IHDR
jmp 0x14012d468
mov eax, edx
shr eax, 0x18
mov byte [0x14029e850], al
mov eax, edx
shr eax, 0x10
mov byte [0x14029e851], al
movzx eax, byte [rsp + 0x6c]
shr edx, 8
mov byte [0x14029e853], al
lea rax, [0x14029e850]
mov byte [0x14029e852], dl
jmp 0x14012d468
lea rax, str.tRNS_before_PLTE
jmp 0x14012d468
mov dword [rbx + 8], 4
mov eax, 1
jmp 0x14012d471
lea rax, str.bad_tRNS_len
jmp 0x14012d468
lea rax, str.tRNS_with_alpha
jmp 0x14012d468
lea rax, str.tRNS_after_IDAT
jmp 0x14012d468
lea rax, str.invalid_PLTE
jmp 0x14012d468
lea rax, str.first_not_IHDR
mov qword [0x1402ba2f0], rax
xor eax, eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.140160a40
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret