Function at 0x140106d88
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov eax, 0x2088
call fcn.1401d4340
sub rsp, rax
mov qword [rsp + 0x70], rcx
call fcn.140106b40
xor eax, eax
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x60], rcx
xor eax, eax
cmp rcx, 0x2000
mov qword [rsp + 0x68], rax
je 0x140106037
mov rax, qword [rsp + 0x60]
mov byte [rsp + rax + 0x80], 0
add rax, 1
mov qword [rsp + 0x78], rax
jmp 0x140105ffe
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x50], rcx
xor eax, eax
cmp rcx, 0x100
mov qword [rsp + 0x58], rax
je 0x14010614b
mov rax, qword [rsp + 0x50]
mov ecx, eax
xor eax, eax
mov dword [rsp + 0x44], ecx
mov qword [rsp + 0x48], rax
mov ecx, dword [rsp + 0x44]
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], ecx
movabs rcx, 0xd989261f9efe5760
movabs rdx, 0xd989261f9efe5768
xor rcx, rdx
cmp rax, rcx
je 0x14010612d
mov rax, qword [rsp + 0x38]
mov ecx, dword [rsp + 0x40]
mov edx, ecx
shr edx, 1
mov r9d, ecx
xor r9d, 0xffffffff
xor ecx, 0xffffffff
and r9d, ecx
mov ecx, 0xf9865376
xor ecx, 0xf9865377
mov r8d, 0x5cf99503
xor r8d, 0xa3066afc
xor ecx, r8d
mov r8d, 0xffffffff
xor r8d, 1
and ecx, r8d
or r9d, ecx
xor r9d, 0xffffffff
mov r8d, 0xf292601e
xor r8d, 0xf292601e
mov ecx, 0xf32607a9
xor ecx, 0x1e9e8489
cmp r9d, 0
cmove ecx, r8d
xor ecx, edx
movabs rdx, 0x8399c827f4e706da
movabs r8, 0x8399c827f4e706db
xor rdx, r8
add rax, rdx
mov dword [rsp + 0x44], ecx
mov qword [rsp + 0x48], rax
jmp 0x140106067
mov rax, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x40]
mov dword [rsp + rax*4 + 0x80], ecx
add rax, 1
mov qword [rsp + 0x68], rax
jmp 0x140106037
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x30], rax
mov eax, dword [0x1401dbe80]
mov ecx, dword [0x1401dbe84]
add eax, 0x6f42907f
sub eax, ecx
sub eax, 0x6f42907f
add eax, 0x4003d324
mov ecx, 0x7dd25eaf
xor edx, edx
div ecx
mov ecx, 0x2beb15b7
xor ecx, 0x2da0a7e
imul eax, ecx
cmp eax, 0x1f550e12
ja 0x1401064f6
mov eax, dword [0x1401dbe88]
xor eax, 0x96f6e736
mov r8d, dword [0x1401dbe8c]
mov edx, 0x30c8f9ba
xor edx, 0xcf370645
mov ecx, eax
xor ecx, edx
mov edx, r8d
and edx, ecx
mov ecx, 0xffc2cbf3
xor ecx, 0x3d340c
mov r9d, r8d
xor r9d, ecx
mov ecx, eax
and ecx, r9d
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov edx, 0x6e10b508
xor edx, 0xbeb63336
mov ecx, eax
xor ecx, edx
mov edx, 0xffffffff
xor edx, 0xd0a6863e
and eax, edx
shl eax, 1
sub eax, ecx
mov ecx, 0xbfc24376
xor edx, edx
div ecx
mov rdx, qword [rsp + 0x30]
mov ecx, 0x55956291
xor ecx, 0x7c0b1fab
imul eax, ecx
mov ecx, 0x6e11cd04
xor ecx, 0x99d74de8
cmp rdx, 0x100
sete dl
mov byte [rsp + 0x2f], dl
cmp eax, ecx
je 0x140106194
mov al, byte [rsp + 0x2f]
test al, 1
jne 0x14010640b
jmp 0x14010624f
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + rax*4 + 0x80]
mov edx, ecx
shr edx, 8
or ecx, ecx
xor ecx, 0xffffffff
mov r8d, 0xff
or r8d, 0xff
xor r8d, 0xffffffff
or ecx, r8d
xor ecx, 0xffffffff
mov ecx, ecx
xor edx, dword [rsp + rcx*4 + 0x80]
mov dword [rsp + rax*4 + 0x480], edx
mov ecx, edx
shr ecx, 8
and edx, 0xff
mov edx, edx
xor ecx, dword [rsp + rdx*4 + 0x80]
mov dword [rsp + rax*4 + 0x880], ecx
mov edx, ecx
shr edx, 8
mov r8d, 0xb8ca1fd4
xor r8d, 0xb8ca1f2b
and ecx, r8d
mov ecx, ecx
xor edx, dword [rsp + rcx*4 + 0x80]
mov dword [rsp + rax*4 + 0xc80], edx
mov r9d, edx
shr r9d, 8
mov r8d, 0xffffffff
xor r8d, 0xff
mov ecx, edx
xor ecx, r8d
and ecx, edx
mov ecx, ecx
mov r8d, dword [rsp + rcx*4 + 0x80]
mov ecx, r9d
xor ecx, 0xffffffff
mov edx, 0xbde7da06
xor edx, 0x774a4ad2
and edx, ecx
mov r10d, 0xffffffff
xor r10d, 0xcaad90d4
and r9d, r10d
mov r11d, 0xa797ccad
xor r11d, 0x58683352
mov ecx, r8d
xor ecx, r11d
and ecx, 0xcaad90d4
and r8d, r10d
or edx, r9d
or ecx, r8d
xor edx, ecx
mov dword [rsp + rax*4 + 0x1080], edx
mov ecx, edx
shr ecx, 8
mov r8d, 0xf4374ac0
xor r8d, 0xf4374a3f
and edx, r8d
mov edx, edx
mov r8d, dword [rsp + rdx*4 + 0x80]
mov r9d, ecx
and r9d, r8d
mov edx, 0xed25580f
xor edx, 0xed25580d
imul edx, r9d
add ecx, r8d
sub ecx, edx
mov dword [rsp + rax*4 + 0x1480], ecx
mov edx, ecx
shr edx, 8
mov r8d, 0x1eb0fdc
xor r8d, 0x1eb0f23
and ecx, r8d
mov ecx, ecx
xor edx, dword [rsp + rcx*4 + 0x80]
mov dword [rsp + rax*4 + 0x1880], edx
mov ecx, edx
shr ecx, 8
or edx, edx
xor edx, 0xffffffff
mov r8d, 0xff
or r8d, 0xff
xor r8d, 0xffffffff
xor edx, 0xffffffff
xor r8d, 0xffffffff
and edx, r8d
mov edx, edx
xor ecx, dword [rsp + rdx*4 + 0x80]
mov dword [rsp + rax*4 + 0x1c80], ecx
movabs rcx, 0xa1ea51f4f81621a8
movabs rdx, 0xa1ea51f4f81621a8
xor rcx, rdx
sub rcx, rax
xor eax, eax
sub rax, 1
add rcx, rax
xor eax, eax
sub rax, rcx
mov qword [rsp + 0x58], rax
jmp 0x14010614b
mov ecx, dword [0x1401dbe90]
mov r8d, dword [0x1401dbe94]
mov edx, 0xa5c71bf7
xor edx, 0x5a38e408
mov eax, ecx
xor eax, edx
mov edx, r8d
and edx, eax
mov r9d, r8d
xor r9d, 0xffffffff
mov eax, ecx
and eax, r9d
imul eax, edx
mov edx, ecx
and edx, r8d
or ecx, r8d
imul ecx, edx
add ecx, eax
or ecx, 0xe0cfb64b
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0xffffffff
xor ecx, 0x7934ad85
mov edx, 0x7719c193
xor edx, 0xe2d6c16
mov r8d, 0xab710234
xor r8d, 0x548efdcb
xor edx, r8d
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
or eax, 0x3415c4f
mov ecx, 0x6deec599
xor ecx, 0xa0ef46c5
cmp eax, ecx
je 0x1401064ff
mov rcx, qword [rsp + 0x70]
mov eax, dword [0x1401dbe98]
sub eax, dword [0x1401dbe9c]
imul eax, eax, 0x33749db4
and eax, 0x21edd6ce
add eax, 0xac0e6c9c
add eax, 0x1a48cd81
sub eax, 0xac0e6c9c
mov dword [rsp + 0x28], eax
lea rdx, [rsp + 0x80]
mov r8d, 0x2000
call fcn.140106508
mov eax, dword [rsp + 0x28]
cmp eax, 0x1d727f8
jbe 0x14010649d
add rsp, 0x2088
ret
call qword [rdi - 0x40]
shr cl, 1
xchg ebp, eax
cld
invalid
adc al, 0xfe
cmp eax, 0xff95e9da
invalid
sub rsp, 0x28
call fcn.140106b40
lea rcx, [0x1401fbaa0]
add rsp, 0x28
jmp 0x140105fe0