Function at 0x140099f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r13, rdx
movzx r8d, byte [rcx + 0x10]
cmp r8b, 0x80
je 0x140099f7c
movzx eax, byte [rcx + 0x1a]
movzx edx, byte [rcx + 0x1b]
movzx r9d, byte [rcx + 0x19]
mov byte [rsp + 0x68], r9b
mov r9, qword [rcx + 0x11]
mov qword [rsp + 0x60], r9
mov r14, qword [rcx]
mov r15, qword [rcx + 8]
movzx r10d, byte [rcx + 0x1c]
cmp r10b, 0x80
je 0x140099faa
movzx r11d, byte [rcx + 0x26]
movzx ebx, byte [rcx + 0x27]
movzx r9d, byte [rcx + 0x25]
mov byte [rsp + 0x78], r9b
mov rcx, qword [rcx + 0x1d]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r15
mov byte [rsp + 0x48], r8b
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x49], rcx
movzx ecx, byte [rsp + 0x68]
mov byte [rsp + 0x51], cl
mov byte [rsp + 0x52], al
mov byte [rsp + 0x53], dl
mov byte [rsp + 0x2d], r10b
mov byte [rsp + 0x54], r10b
movzx ecx, byte [rsp + 0x78]
mov byte [rsp + 0x5d], cl
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x55], rcx
mov byte [rsp + 0x2c], r11b
mov byte [rsp + 0x5e], r11b
mov byte [rsp + 0x2b], bl
mov byte [rsp + 0x5f], bl
cmp r8b, 0x80
jne 0x14009a1c3
mov qword [rsp + 0x80], r13
test r14, r14
je 0x14009a1b5
cmp r14, r15
je 0x14009a1b5
lea rbx, [rsp + 0x48]
mov rax, qword [rsp + 0x80]
mov rdi, qword [rax + 0x20]
mov r12, qword [rax + 0x28]
lea r13, [0x1400b7364]
lea rsi, [rsp + 0x2e]
jmp 0x14009a059
cmp r14, r15
je 0x14009a1b5
movzx eax, byte [r14]
test al, al
js 0x14009a070
inc r14
jmp 0x14009a0e0
mov ecx, eax
and ecx, 0x1f
movzx r8d, byte [r14 + 1]
and r8d, 0x3f
cmp al, 0xdf
jbe 0x14009a0bb
movzx edx, byte [r14 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp al, 0xf0
jb 0x14009a0c9
movzx eax, byte [r14 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and eax, 0x3f
or eax, edx
or eax, ecx
cmp eax, 0x110000
je 0x14009a1b5
add r14, 4
jmp 0x14009a0e0
add r14, 2
shl ecx, 6
or ecx, r8d
mov eax, ecx
jmp 0x14009a0e0
add r14, 3
shl ecx, 0xc
or edx, ecx
mov eax, edx
nop word cs:[rax + rax]
mov byte [rsp + 0x30], 0
mov word [rsp + 0x2e], 0
mov byte [rsp + 0x37], 0x7d
mov ecx, eax
shr ecx, 0x14
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x31], cl
mov ecx, eax
shr ecx, 0x10
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x32], cl
mov ecx, eax
shr ecx, 0xc
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x33], cl
mov ecx, eax
shr ecx, 8
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x34], cl
mov ecx, eax
shr ecx, 4
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x35], cl
mov ecx, eax
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x36], cl
or eax, 1
bsr ebp, eax
xor ebp, 0x1c
shr ebp, 2
mov byte [rbp + rsi], 0x7b
mov word [rbp + rsi - 2], 0x755c
movzx eax, word [rsp + 0x36]
mov word [rbx + 8], ax
mov rax, qword [rsp + 0x2e]
mov qword [rbx], rax
mov byte [rsp + 0x53], 0xa
nop
cmp rbp, 0xc
je 0x14009a050
lea eax, [rbp - 1]
mov byte [rsp + 0x52], al
movzx edx, byte [rsp + rbp + 0x46]
mov rcx, rdi
call qword [r12 + 0x20]
inc rbp
test al, al
je 0x14009a180
add rbp, 0xfffffffffffffffd
cmp rbp, 9
ja 0x14009a050
jmp 0x14009a20a
cmp byte [rsp + 0x2d], 0x80
jne 0x14009a20f
xor esi, esi
jmp 0x14009a259
movzx edi, al
movzx esi, dl
mov rbx, qword [r13 + 0x20]
mov r12, qword [r13 + 0x28]
nop word cs:[rax + rax]
cmp rdi, rsi
jae 0x14009a00d
lea eax, [rdi + 1]
mov byte [rsp + 0x52], al
cmp rdi, 0xa
jae 0x14009a26f
movzx edx, byte [rsp + rdi + 0x48]
mov rcx, rbx
call qword [r12 + 0x20]
inc rdi
test al, al
je 0x14009a1e0
mov sil, 1
jmp 0x14009a259
movzx edi, byte [rsp + 0x2c]
movzx r14d, byte [rsp + 0x2b]
mov rax, qword [rsp + 0x80]
mov rbx, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
nop word [rax + rax]
cmp rdi, r14
setb sil
jae 0x14009a259
lea eax, [rdi + 1]
mov byte [rsp + 0x5e], al
cmp rdi, 0xa
jae 0x14009a26f
movzx edx, byte [rsp + rdi + 0x54]
mov rcx, rbx
call qword [r15 + 0x20]
inc rdi
test al, al
je 0x14009a230
mov eax, esi
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, [0x1400b92d8]
mov edx, 0xa
mov rcx, rdi
call dbg.panic_bounds_check
int3