Function at 0x140035b90
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov r11, rsp
sub rsp, 0xce8
mov rax, qword [0x14008b5a0]
mov qword [rsp + 0xca0], rax
mov qword [r11 - 0x10], rbp
mov qword [r11 - 0x18], rsi
mov qword [r11 - 0x20], rdi
mov qword [r11 - 0x28], r12
mov qword [r11 - 0x38], r14
mov r14d, dword [rcx + 0x8a0]
lea eax, [r14*8 + 0x100]
movsxd rsi, r9d
mov ebp, r8d
cmp eax, 0x320
mov r12d, edx
mov rdi, rcx
jb 0x140035be6
xor eax, eax
jmp 0x140035ed5
mov qword [rsp + 0xce0], rbx
movsxd rbx, eax
lea rcx, [rsp + 0x20]
add rbx, rbx
xor edx, edx
mov r8, rbx
call fcn.14004c980
lea rcx, [rsp + 0x660]
mov r8, rbx
xor edx, edx
call fcn.14004c980
mov eax, dword [rsp + 0xd18]
movsxd rdx, dword [rsp + 0xd10]
mov r10d, 1
mov ecx, r12d
mov r11, rsi
mov ebx, r10d
rol bl, cl
mov ecx, ebp
rol r10b, cl
test eax, eax
je 0x140035e2c
mov rsi, qword [rdi + 0x50]
mov r8, qword [rdi + 0x48]
mov qword [rsp + 0xcb8], r13
mov r13, rax
lea r9, [rdx*4]
shl r11, 2
mov eax, r12d
mov ecx, r12d
shr rax, 3
test byte [rax + rsi], bl
jne 0x140035c7a
movzx ecx, byte [r8 + rcx]
jmp 0x140035d30
movzx edx, byte [r8 + rcx]
cmp dl, 7
jae 0x140035ce6
mov rax, qword [rdi + 0x40]
mov ecx, dword [r11 + rax]
cmp ecx, 0x400
jae 0x140035cab
movzx ecx, byte [rcx + rdi + 0x47c]
movzx eax, dl
lea ecx, [rax + rcx*8 + 0x100]
jmp 0x140035d2c
cmp ecx, 0x80000
jae 0x140035cd1
mov rax, rcx
shr rax, 9
movzx ecx, byte [rax + rdi + 0x47c]
movzx eax, dl
add ecx, 0x12
lea ecx, [rax + rcx*8 + 0x100]
jmp 0x140035d2c
shr ecx, 0x11
movzx eax, dl
movzx ecx, cl
add ecx, 0x22
lea ecx, [rax + rcx*8 + 0x100]
jmp 0x140035d2c
mov rax, qword [rdi + 0x40]
mov ecx, dword [r11 + rax]
cmp ecx, 0x400
jae 0x140035d00
movzx ecx, byte [rcx + rdi + 0x47c]
jmp 0x140035d25
cmp ecx, 0x80000
jae 0x140035d1c
mov rax, rcx
shr rax, 9
movzx ecx, byte [rax + rdi + 0x47c]
add ecx, 0x12
jmp 0x140035d25
shr ecx, 0x11
movzx ecx, cl
add ecx, 0x22
lea ecx, [rcx*8 + 0x107]
add r11, 4
movsxd rax, ecx
inc r12d
rol bl, 1
inc word [rsp + rax*2 + 0x20]
mov eax, ebp
mov ecx, ebp
shr rax, 3
test byte [rax + rsi], r10b
jne 0x140035d55
movzx ecx, byte [rcx + r8]
jmp 0x140035e0b
movzx edx, byte [rcx + r8]
cmp dl, 7
jae 0x140035dc1
mov rax, qword [rdi + 0x40]
mov ecx, dword [r9 + rax]
cmp ecx, 0x400
jae 0x140035d86
movzx ecx, byte [rcx + rdi + 0x47c]
movzx eax, dl
lea ecx, [rax + rcx*8 + 0x100]
jmp 0x140035e07
cmp ecx, 0x80000
jae 0x140035dac
mov rax, rcx
shr rax, 9
movzx ecx, byte [rax + rdi + 0x47c]
movzx eax, dl
add ecx, 0x12
lea ecx, [rax + rcx*8 + 0x100]
jmp 0x140035e07
shr ecx, 0x11
movzx eax, dl
movzx ecx, cl
add ecx, 0x22
lea ecx, [rax + rcx*8 + 0x100]
jmp 0x140035e07
mov rax, qword [rdi + 0x40]
mov ecx, dword [r9 + rax]
cmp ecx, 0x400
jae 0x140035ddb
movzx ecx, byte [rcx + rdi + 0x47c]
jmp 0x140035e00
cmp ecx, 0x80000
jae 0x140035df7
mov rax, rcx
shr rax, 9
movzx ecx, byte [rax + rdi + 0x47c]
add ecx, 0x12
jmp 0x140035e00
shr ecx, 0x11
movzx ecx, cl
add ecx, 0x22
lea ecx, [rcx*8 + 0x107]
add r9, 4
inc ebp
movsxd rax, ecx
rol r10b, 1
inc word [rsp + rax*2 + 0x660]
dec r13
jne 0x140035c61
mov r13, qword [rsp + 0xcb8]
mov rbx, qword [rsp + 0xce0]
lea eax, [r14*8 + 0x100]
xor r9d, r9d
test eax, eax
je 0x140035ed2
mov r8, r9
mov r10d, eax
lea r11, [0x140000000]
movzx eax, word [rsp + r8 + 0x20]
cmp ax, 0x100
jae 0x140035e6e
movzx eax, ax
movzx edx, byte [rax + r11 + 0x6e170]
jmp 0x140035e81
movzx eax, ax
shr rax, 8
movzx edx, byte [rax + r11 + 0x6e170]
add edx, 8
movzx eax, word [rsp + r8 + 0x660]
cmp ax, 0x100
jae 0x140035e9e
movzx eax, ax
movzx ecx, byte [rax + r11 + 0x6e170]
jmp 0x140035eb1
movzx eax, ax
shr rax, 8
movzx ecx, byte [rax + r11 + 0x6e170]
add ecx, 8
mov eax, dword [r11 + rdx*4 + 0x6e120]
add r8, 2
sub eax, dword [r11 + rcx*4 + 0x6e120]
cdq
xor eax, edx
sub eax, edx
add r9d, eax
dec r10
jne 0x140035e54
mov eax, r9d
mov r14, qword [rsp + 0xcb0]
mov r12, qword [rsp + 0xcc0]
mov rdi, qword [rsp + 0xcc8]
mov rsi, qword [rsp + 0xcd0]
mov rbp, qword [rsp + 0xcd8]
mov rcx, qword [rsp + 0xca0]
call fcn.14004c890
add rsp, 0xce8
ret