Function at 0x1401093c0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push rbx
sub rsp, 0x210
mov qword [rsp + 0x1b8], rdx
mov qword [rsp + 0x1b0], rcx
call fcn.140108ce9
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x1b8]
mov qword [rsp + 0x1c0], rax
mov rax, rcx
add rax, 8
mov qword [rsp + 0x1c8], rax
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x1d0], rcx
mov rax, rdx
add rax, 8
mov qword [rsp + 0x1d8], rax
mov rax, qword [rdx + 8]
mov qword [rsp + 0x1e0], rax
cmp rcx, rax
sete r11b
cmp rcx, 0
sete bl
mov dl, bl
xor dl, 0xff
mov r8b, r11b
xor r8b, 0xff
mov r9b, 1
xor r9b, 1
mov r10b, 1
xor r10b, 0
mov cl, dl
and cl, r10b
and bl, r9b
mov r10b, r8b
and r10b, 0xff
and r11b, r9b
or cl, bl
or r10b, r11b
xor cl, r10b
or dl, r8b
xor dl, 0xff
mov r8b, 1
xor r8b, 0
or r8b, r9b
and dl, r8b
or cl, dl
test cl, 1
mov qword [rsp + 0x1e8], rax
jne 0x1401094f2
mov rax, qword [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1d0]
mov rcx, qword [rcx]
movabs rdx, 0x8f75dd2afc0681fb
movabs r8, 0xcf75dd2afc0681fb
xor rdx, r8
and rcx, rdx
cmp rcx, 0
mov qword [rsp + 0x1e8], rax
jne 0x1401094f2
mov rcx, qword [rsp + 0x1d0]
call fcn.14000e9f6
mov rax, qword [rsp + 0x1d8]
mov rax, qword [rax]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1a8], rax
mov eax, dword [0x1402576b0]
xor edx, edx
div dword [0x1402576b4]
mov ecx, 0x5d2b4a05
xor ecx, 0x49a4874f
xor eax, ecx
xor eax, 0x58e40888
mov ecx, 0xa1183a35
xor ecx, 0x76540043
sub eax, ecx
cmp eax, 0xad91bee2
jae 0x140109e04
mov r8, qword [rsp + 0x1b8]
mov r9, qword [rsp + 0x1c8]
mov r10, qword [rsp + 0x1a8]
mov eax, dword [0x1402576b8]
xor edx, edx
div dword [0x1402576bc]
mov rdx, qword [rsp + 0x1b0]
add eax, 0xc32d4bfa
mov r11d, 0x95739d6f
xor r11d, 0x13ae15f2
mov ecx, eax
and ecx, r11d
shl ecx, 1
add eax, 0x86dd889d
sub eax, ecx
xor eax, 0x1122b719
mov ecx, 0x9e2ce8a7
xor ecx, 0x3f93a4e
mov r11, qword [r8]
mov qword [rdx], r11
mov qword [r9], r10
mov r9, rdx
add r9, 0x10
mov qword [rsp + 0x170], r9
mov r9, rdx
add r9, 0x18
mov qword [rsp + 0x178], r9
mov rdx, qword [rdx + 0x18]
mov qword [rsp + 0x180], rdx
mov r9, r8
add r9, 0x10
mov qword [rsp + 0x188], r9
mov r9, r8
add r9, 0x18
mov qword [rsp + 0x190], r9
mov r8, qword [r8 + 0x18]
mov qword [rsp + 0x198], r8
cmp rdx, r8
sete r9b
cmp rdx, 0
sete r8b
mov dl, r8b
or dl, r9b
xor dl, 0xff
or r8b, r9b
mov r9b, 1
xor r9b, 0
xor r8b, r9b
xor dl, 0xff
xor r8b, 0xff
and dl, r8b
mov byte [rsp + 0x1a7], dl
cmp eax, ecx
je 0x14010953a
mov rax, qword [rsp + 0x198]
mov cl, byte [rsp + 0x1a7]
test cl, 1
mov qword [rsp + 0x168], rax
jne 0x1401096f7
jmp 0x140109659
mov rax, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x180]
mov rcx, qword [rcx]
movabs rdx, 0x3995fb6208bb978c
movabs r8, 0xc66a049df7446873
xor rdx, r8
xor rcx, rdx
mov r8, 0xffffffffffffffff
movabs rdx, 0x4000000000000000
xor r8, rdx
mov rdx, 0xffffffffffffffff
movabs r9, 0x70920537adff0142
xor rdx, r9
or rcx, r8
movabs r8, 0x70920537adff0142
or rdx, r8
xor rcx, 0xffffffffffffffff
and rcx, rdx
cmp rcx, 0
mov qword [rsp + 0x168], rax
jne 0x1401096f7
mov rcx, qword [rsp + 0x180]
call fcn.14000e9f6
mov rax, qword [rsp + 0x190]
mov rax, qword [rax]
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x178]
mov r9, qword [rsp + 0x170]
mov r10, qword [rsp + 0x188]
mov r8, qword [rsp + 0x168]
mov r10, qword [r10]
mov qword [r9], r10
mov qword [rdx], r8
mov rdx, rcx
add rdx, 0x20
mov qword [rsp + 0x130], rdx
mov rdx, rcx
add rdx, 0x28
mov qword [rsp + 0x138], rdx
mov rcx, qword [rcx + 0x28]
mov qword [rsp + 0x140], rcx
mov rdx, rax
add rdx, 0x20
mov qword [rsp + 0x148], rdx
mov rdx, rax
add rdx, 0x28
mov qword [rsp + 0x150], rdx
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x158], rax
cmp rcx, rax
sete dl
cmp rcx, 0
sete cl
or cl, dl
test cl, 1
mov qword [rsp + 0x160], rax
jne 0x140109803
mov rax, qword [rsp + 0x158]
mov rcx, qword [rsp + 0x140]
mov rcx, qword [rcx]
movabs rdx, 0xeded696e4aa86248
movabs r8, 0xaded696e4aa86248
xor rdx, r8
and rcx, rdx
cmp rcx, 0
mov qword [rsp + 0x160], rax
jne 0x140109803
mov rcx, qword [rsp + 0x140]
call fcn.14000e9f6
mov rax, qword [rsp + 0x150]
mov rax, qword [rax]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x138]
mov r9, qword [rsp + 0x130]
mov r10, qword [rsp + 0x148]
mov r8, qword [rsp + 0x160]
mov r10, qword [r10]
mov qword [r9], r10
mov qword [rdx], r8
mov rdx, rcx
add rdx, 0x30
mov qword [rsp + 0xf8], rdx
mov rdx, rcx
add rdx, 0x38
mov qword [rsp + 0x100], rdx
mov rcx, qword [rcx + 0x38]
mov qword [rsp + 0x108], rcx
mov rdx, rax
add rdx, 0x30
mov qword [rsp + 0x110], rdx
mov rdx, rax
add rdx, 0x38
mov qword [rsp + 0x118], rdx
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x120], rax
cmp rcx, rax
sete r11b
cmp rcx, 0
sete bl
mov cl, 1
xor cl, 0
mov dl, bl
xor dl, cl
mov r9b, r11b
xor r9b, 0xff
mov r8b, 1
xor r8b, 1
mov cl, dl
and cl, 0xff
and bl, r8b
mov r10b, r9b
and r10b, 0xff
and r11b, r8b
or cl, bl
or r10b, r11b
xor cl, r10b
or dl, r9b
xor dl, 0xff
or r8b, 1
and dl, r8b
or cl, dl
test cl, 1
mov qword [rsp + 0x128], rax
jne 0x14010998d
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x108]
mov rcx, qword [rcx]
xor rcx, 0xffffffffffffffff
mov r8, 0xffffffffffffffff
movabs rdx, 0x4000000000000000
xor r8, rdx
mov rdx, 0xffffffffffffffff
movabs r9, 0xe8ad362ab7517b69
xor rdx, r9
or rcx, r8
movabs r8, 0xe8ad362ab7517b69
or rdx, r8
xor rcx, 0xffffffffffffffff
and rcx, rdx
movabs rdx, 0x47e201de96408d19
movabs r8, 0x47e201de96408d19
xor rdx, r8
cmp rcx, rdx
mov qword [rsp + 0x128], rax
jne 0x14010998d
mov rcx, qword [rsp + 0x108]
call fcn.14000e9f6
mov rax, qword [rsp + 0x118]
mov rax, qword [rax]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0xf0], rax
mov eax, dword [0x1402576c0]
mov edx, dword [0x1402576c4]
mov ecx, eax
xor ecx, 0xffffffff
and ecx, edx
xor edx, 0xffffffff
and eax, edx
sub eax, ecx
mov ecx, 0x1fc3e090
xor edx, edx
div ecx
xor eax, 0xd6ba7e8b
add eax, 0x6c9dea37
cmp eax, 0xd3310756
je 0x140109e0d
mov rdx, qword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1b0]
mov r8, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf0]
mov r10, qword [rsp + 0xf8]
mov r11, qword [rsp + 0x110]
mov eax, dword [0x1402576c8]
sub eax, dword [0x1402576cc]
imul eax, eax, 0xf753e8f9
and eax, 0xc6e8d6f5
or eax, 0x31f29a2b
mov r11, qword [r11]
mov qword [r10], r11
mov qword [r8], r9
mov r8, rcx
add r8, 0x40
mov qword [rsp + 0xb8], r8
mov r8, rcx
add r8, 0x48
mov qword [rsp + 0xc0], r8
mov rcx, qword [rcx + 0x48]
mov qword [rsp + 0xc8], rcx
mov r8, rdx
add r8, 0x40
mov qword [rsp + 0xd0], r8
mov r8, rdx
add r8, 0x48
mov qword [rsp + 0xd8], r8
mov rdx, qword [rdx + 0x48]
mov qword [rsp + 0xe0], rdx
cmp rcx, rdx
sete dl
cmp rcx, 0
sete cl
or cl, dl
mov byte [rsp + 0xef], cl
cmp eax, 0x2cf0edef
jb 0x1401099d5
mov rax, qword [rsp + 0xe0]
mov cl, byte [rsp + 0xef]
test cl, 1
mov qword [rsp + 0xb0], rax
jne 0x140109b13
jmp 0x140109ac4
mov rax, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0xc8]
movabs rcx, 0x4000000000000000
and rcx, qword [rdx]
cmp rcx, 0
mov qword [rsp + 0xb0], rax
jne 0x140109b13
mov rcx, qword [rsp + 0xc8]
call fcn.14000e9f6
mov rax, qword [rsp + 0xd8]
mov rax, qword [rax]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0xc0]
mov r9, qword [rsp + 0xb8]
mov r10, qword [rsp + 0xd0]
mov r8, qword [rsp + 0xb0]
mov r10, qword [r10]
mov qword [r9], r10
mov qword [rdx], r8
mov rdx, rcx
add rdx, 0x50
mov qword [rsp + 0x78], rdx
mov rdx, rcx
add rdx, 0x58
mov qword [rsp + 0x80], rdx
mov rcx, qword [rcx + 0x58]
mov qword [rsp + 0x88], rcx
mov rdx, rax
add rdx, 0x50
mov qword [rsp + 0x90], rdx
mov rdx, rax
add rdx, 0x58
mov qword [rsp + 0x98], rdx
mov rax, qword [rax + 0x58]
mov qword [rsp + 0xa0], rax
cmp rcx, rax
sete dl
cmp rcx, 0
sete cl
or cl, dl
test cl, 1
mov qword [rsp + 0xa8], rax
jne 0x140109c78
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
mov rcx, qword [rcx]
xor rcx, 0xffffffffffffffff
movabs r8, 0xda817f22538e4f88
movabs rdx, 0x9a817f22538e4f88
xor r8, rdx
movabs rdx, 0x76db44fc461b9778
movabs r9, 0x8924bb03b9e46887
xor rdx, r9
xor r8, rdx
mov rdx, 0xffffffffffffffff
movabs r9, 0x368ddc18e8281210
xor rdx, r9
or rcx, r8
movabs r8, 0x368ddc18e8281210
or rdx, r8
movabs r8, 0xaa6fe66f99e610c3
movabs r9, 0x559019906619ef3c
xor r8, r9
xor rcx, r8
and rcx, rdx
cmp rcx, 0
mov qword [rsp + 0xa8], rax
jne 0x140109c78
mov rcx, qword [rsp + 0x88]
call fcn.14000e9f6
mov rax, qword [rsp + 0x98]
mov rax, qword [rax]
mov qword [rsp + 0xa8], rax
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x80]
mov r9, qword [rsp + 0x78]
mov r10, qword [rsp + 0x90]
mov r8, qword [rsp + 0xa8]
mov r10, qword [r10]
mov qword [r9], r10
mov qword [rdx], r8
mov rdx, rax
add rdx, 0x60
mov qword [rsp + 0x50], rdx
mov rdx, rax
add rdx, 0x68
mov qword [rsp + 0x58], rdx
mov rax, qword [rax + 0x68]
mov rdx, rcx
add rdx, 0x60
mov qword [rsp + 0x60], rdx
mov rdx, rcx
add rdx, 0x68
mov qword [rsp + 0x68], rdx
cmp rax, qword [rcx + 0x68]
mov qword [rsp + 0x70], rax
je 0x140109d27
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov qword [rsp + 0x200], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x208], rax
lea rcx, [rsp + 0x200]
call fcn.140018710
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
mov r10, qword [r10]
mov qword [r9], r10
mov qword [rdx], r8
mov rdx, rax
add rdx, 0x70
mov qword [rsp + 0x28], rdx
mov rdx, rax
add rdx, 0x78
mov qword [rsp + 0x30], rdx
mov rax, qword [rax + 0x78]
mov rdx, rcx
add rdx, 0x70
mov qword [rsp + 0x38], rdx
mov rdx, rcx
add rdx, 0x78
mov qword [rsp + 0x40], rdx
cmp rax, qword [rcx + 0x78]
mov qword [rsp + 0x48], rax
je 0x140109dde
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
mov qword [rsp + 0x1f0], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x1f8], rax
lea rcx, [rsp + 0x1f0]
call fcn.1400664e0
mov rax, qword [rsp + 0x1c0]
cmp byte [rax], 0
jne 0x140109dfb
add dword [rax], eax
add byte [rax - 0x75], cl
or byte [rax - 0x77], cl
test byte [rax + rdi*8], ah
add dword [rax], eax
add byte [rax - 0x73], cl
mov word [rax + rsi*8], fs
add dword [rax], eax
add al, ch
and bh, al
cmc
dec dword [rax - 0x75]
test byte [rax + rax*8], ah
add dword [rax], eax
add byte [rax - 0x7af0ffc8], al
sub al, byte [rax]
add byte [rax], al
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
mov r8, qword [r8]
mov qword [rdx], r8
mov qword [rax], rcx
add rsp, 0x210
pop rbx
ret
jrcxz 0x140109da4
sub dword [rax - 0x17], ebp
sub eax, 0xebfffff7
push rsp
jge 0x140109e7a
jmp 0x140109e63
jmp 0x1401099d5
invalid
lea ebp, [rcx - 0x75000000]
add eax, 0x14d84b