Function at 0x14013ead0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x50
mov rax, qword [0x1402b3030]
xor rax, rsp
mov qword [rsp + 0x40], rax
xor eax, eax
mov qword [rsp + 0x38], 0xc0001
mov rdi, rdx
mov qword [rsp + 0x20], rax
mov rbx, rcx
mov qword [rsp + 0x28], rax
lea rdx, [0x1401f81f9]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x20]
xor r8d, r8d
call fcn.1400ea540
test eax, eax
jne 0x14013e4d2
cmp rbx, rdi
jae 0x14013e4d2
movzx r8d, byte [rbx]
lea rdx, str._02x:
lea rcx, [rsp + 0x20]
inc rbx
call fcn.1400ea730
test eax, eax
je 0x14013e4b1
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14014d450
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret
push rbx
push rbp
push rdi
sub rsp, 0x70
cmp byte [rcx + 0x1a], 0
jne case.0x14013eb11.7
movzx r10d, byte [rcx + 0x19]
lea eax, [r10 - 1]
cmp eax, 0x1d
ja case.0x14013eb11.7
lea r8, [0x140000000]
cdqe
movzx eax, byte [r8 + rax + 0x13eeac]
mov edx, dword [r8 + rax*4 + 0x13ee84]
add rdx, r8
jmp rdx
mov rdx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
sub rax, rdx
cmp rax, 1
jne case.default.0x14013eb44
cmp byte [rdx], 0
lea rax, str.TRUE
lea rcx, str.FALSE
cmovne rcx, rax
add rsp, 0x70
pop rdi
pop rbp
pop rbx
jmp qword [case.0x1400f50d8.0]
mov rdx, qword [rcx + 0x10]
mov r9, qword [rcx + 8]
mov rax, rdx
sub rax, r9
je case.default.0x14013eb44
cmp rax, 4
jbe 0x14013eb74
mov rcx, r9
add rsp, 0x70
pop rdi
pop rbp
pop rbx
jmp 0x14013e460
movsx r8d, byte [r9]
sar r8d, 0x1f
nop dword [rax]
movzx eax, byte [r9]
inc r9
shl r8d, 8
or r8d, eax
cmp r9, rdx
jb 0x14013eb80
cmp r8d, 0xa
lea rax, [0x1401f9e0c]
lea rdx, [0x1401f81f9]
cmovae rdx, rax
lea rcx, str._s_x
add rsp, 0x70
pop rdi
pop rbp
pop rbx
jmp sym.CheraxLoader.exe_curl_maprintf
mov rdx, qword [rcx + 0x10]
mov rcx, qword [rcx + 8]
inc rcx
cmp rcx, rdx
ja case.default.0x14013eb44
add rsp, 0x70
pop rdi
pop rbp
pop rbx
jmp 0x14013e460
mov rdx, qword [rcx + 0x10]
mov rcx, qword [rcx + 8]
add rsp, 0x70
pop rdi
pop rbp
pop rbx
jmp 0x14013e460
lea rcx, [0x1401f81f9]
add rsp, 0x70
pop rdi
pop rbp
pop rbx
jmp qword [case.0x1400f50d8.0]
mov rdx, qword [rcx + 0x10]
mov rcx, qword [rcx + 8]
add rsp, 0x70
pop rdi
pop rbp
pop rbx
jmp fcn.14013e970
mov rbx, qword [rcx + 8]
mov r10, qword [rcx + 0x10]
mov r8, rbx
cmp rbx, r10
jae 0x14013ec37
movzx eax, byte [r8]
sub al, 0x30
cmp al, 9
ja 0x14013ec37
inc r8
cmp r8, r10
jb 0x14013ec25
lea rdi, [rbx + 0xa]
mov rax, r8
sub rax, rdi
je 0x14013ec57
cmp rax, 2
je 0x14013ec5e
xor r11d, r11d
mov eax, r11d
add rsp, 0x70
pop rdi
pop rbp
pop rbx
ret
lea rdi, [0x14028f774]
cmp r8, r10
jae case.default.0x14013eb44
cmp byte [r8], 0x5a
jne 0x14013ec79
lea r8, [0x14028f7b8]
lea r10, [0x14028f7bb]
jmp 0x14013ec7c
inc r8
mov qword [rsp + 0x48], r8
lea rdx, [rbx + 4]
sub r10d, r8d
lea rax, [rbx + 8]
mov dword [rsp + 0x40], r10d
lea rcx, [rbx + 6]
xor r11d, r11d
mov qword [rsp + 0x38], rdi
cmp byte [rbx], 0x35
lea r9, [rbx + 2]
mov qword [rsp + 0x30], rax
mov r8, rbx
mov qword [rsp + 0x28], rcx
setl r11b
mov qword [rsp + 0x20], rdx
lea rcx, str._u_.2s__.2s__.2s__.2s:_.2s:_.2s__.s
lea edx, [r11 + 0x13]
call sym.CheraxLoader.exe_curl_maprintf
add rsp, 0x70
pop rdi
pop rbp
pop rbx
ret
mov qword [rsp + 0x98], rsi
lea rbp, [0x1401f81f9]
mov rsi, qword [rcx + 0x10]
mov qword [rsp + 0xa0], r14
mov r14, qword [rcx + 8]
mov qword [rsp + 0xa8], r15
mov r15, rbp
mov rbx, r14
cmp r14, rsi
jae 0x14013ed15
movzx eax, byte [rbx]
sub al, 0x30
cmp al, 9
ja 0x14013ed15
inc rbx
cmp rbx, rsi
jb 0x14013ed04
mov rax, rbx
mov dl, 0x30
sub rax, r14
sub rax, 0xc
je 0x14013ed41
sub rax, 1
je 0x14013ed3b
cmp rax, 1
je 0x14013ed37
xor r11d, r11d
jmp 0x14013ee1f
movzx edx, byte [rbx - 2]
movzx ecx, byte [rbx - 1]
jmp 0x14013ed44
movzx ecx, dl
xor r11d, r11d
mov rdi, rbx
cmp rbx, rsi
jae 0x14013ed94
movzx eax, byte [rbx]
sub al, 0x2c
test al, 0xfd
jne 0x14013ed94
inc rbx
nop dword [rax + rax]
inc rdi
cmp rdi, rsi
jae 0x14013ed73
movzx eax, byte [rdi]
cmp al, 0x30
jl 0x14013ed73
cmp al, 0x39
jle 0x14013ed60
mov r11, rdi
sub r11, rbx
sub r11, 1
je 0x14013ed94
lea rax, [rbx - 1]
add rax, r11
cmp byte [rax], 0x30
jne 0x14013ed94
dec rax
sub r11, 1
jne 0x14013ed86
cmp rdi, rsi
jae 0x14013edb8
cmp byte [rdi], 0x5a
jne 0x14013edae
lea rdi, str._GMT
lea rsi, [0x14028f784]
jmp 0x14013edb8
lea r15, [0x1401f8764]
inc rdi
mov qword [rsp + 0x68], rdi
lea rax, [0x14028756c]
sub esi, edi
lea r10, [r14 + 8]
mov dword [rsp + 0x60], esi
lea r9, [r14 + 6]
mov qword [rsp + 0x58], r15
lea r8, [r14 + 4]
mov qword [rsp + 0x50], rbx
test r11, r11
mov dword [rsp + 0x48], r11d
cmovne rbp, rax
movsx eax, cl
movsx ecx, dl
lea rdx, [r14 + 0xa]
mov qword [rsp + 0x40], rbp
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
lea rcx, str._.4s__.2s__.2s__.2s:_.2s:_c_c_s_.s_s_.s
mov qword [rsp + 0x28], rdx
mov rdx, r14
mov qword [rsp + 0x20], r10
call sym.CheraxLoader.exe_curl_maprintf
mov r11, rax
mov r15, qword [rsp + 0xa8]
mov rax, r11
mov r14, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x98]
add rsp, 0x70
pop rdi
pop rbp
pop rbx
ret
mov r9, qword [rcx + 0x10]
mov edx, r10d
mov r8, qword [rcx + 8]
lea rcx, [rsp + 0x90]
call fcn.14013e4f0
mov rcx, qword [rsp + 0x90]
xor r11d, r11d
test rax, rax
cmovs rcx, r11
mov rax, rcx
add rsp, 0x70
pop rdi
pop rbp
pop rbx
ret
xor eax, eax
add rsp, 0x70
pop rdi
pop rbp
pop rbx
ret