Function at 0x180002150
Capabilities:
Accept command line arguments
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x160
mov rax, qword [0x18001a2b0]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov ebp, r8d
mov r12, rdx
mov rsi, rcx
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor r13d, r13d
mov r9d, 0x400
mov edi, eax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], r13
xor edx, edx
mov ecx, 0x1300
mov r8d, edi
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov r14d, 0x40
add eax, 0x28
mov ecx, r14d
movsxd rdx, eax
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_LocalSize]
mov rcx, qword [rsp + 0x48]
lea r8, str.Failed_with_error__d:__s
mov qword [rsp + 0x20], rcx
mov rdx, rax
mov r9d, edi
mov rcx, rbx
call fcn.180001c60
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r11d, r13d
mov rax, rsi
nop
mov byte [rax], r11b
inc r11d
inc rax
cmp r11d, 0x100
jl 0x180002220
mov r8d, r13d
lea r9, [rsp + 0x50]
nop word [rax + rax]
mov eax, r8d
inc r8d
inc r9
cdq
idiv ebp
cmp r8d, 0x100
movsxd rax, edx
movzx ecx, byte [rax + r12]
mov byte [r9 - 1], cl
jl 0x180002240
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rbp, rax
test rax, rax
je 0x1800022c6
mov ebx, r13d
cmp dword [rsp + 0x40], ebx
jle 0x1800022bd
mov rdi, rax
nop dword [rax]
mov rcx, qword [rdi]
lea rdx, [0x180014598]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov ecx, dword [0x18001bf28]
test eax, eax
cmovne ecx, ebx
inc ebx
add rdi, 8
cmp ebx, dword [rsp + 0x40]
mov dword [0x18001bf28], ecx
jl 0x180002290
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea r10, [rsp + 0x50]
lea r11, [rsp + 0x51]
lea rbx, [rsp + 0x52]
lea rdi, [rsp + 0x53]
sub r10, rsi
sub r11, rsi
sub rbx, rsi
mov rbp, rsi
sub rdi, rsi
nop dword [rax]
movzx r9d, byte [rbp]
movzx eax, byte [r10 + rbp]
add rbp, 4
add eax, r13d
add eax, r9d
cdq
movzx edx, dl
add eax, edx
movzx eax, al
sub eax, edx
movsxd r8, eax
movzx eax, byte [r11 + rbp - 4]
movzx ecx, byte [r8 + rsi]
add eax, r8d
mov byte [rbp - 4], cl
mov byte [r8 + rsi], r9b
movzx r9d, byte [rbp - 3]
add eax, r9d
cdq
movzx edx, dl
add eax, edx
movzx eax, al
sub eax, edx
movsxd r8, eax
movzx eax, byte [rbx + rbp - 4]
movzx ecx, byte [r8 + rsi]
add eax, r8d
mov byte [rbp - 3], cl
mov byte [r8 + rsi], r9b
movzx r9d, byte [rbp - 2]
add eax, r9d
cdq
movzx edx, dl
add eax, edx
movzx eax, al
sub eax, edx
movsxd r8, eax
movzx eax, byte [rdi + rbp - 4]
movzx ecx, byte [r8 + rsi]
add eax, r8d
mov byte [rbp - 2], cl
mov byte [r8 + rsi], r9b
movzx r9d, byte [rbp - 1]
add eax, r9d
cdq
movzx edx, dl
add eax, edx
movzx eax, al
sub eax, edx
sub r14, 1
movsxd r13, eax
movzx ecx, byte [r13 + rsi]
mov byte [rbp - 1], cl
mov byte [r13 + rsi], r9b
jne 0x1800022f0
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.1800045c0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret