Function at 0x140148b70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov qword [rbp - 8], 0xfffffffffffffffe
mov rdi, qword [rcx]
test rdi, rdi
je 0x140148df4
mov r14, rcx
mov rbx, qword [rdx]
mov eax, dword [0x1402c7220]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0xb8]
cmp eax, 1
je 0x140148be9
test eax, eax
jne 0x140148c24
mov eax, dword [0x1402c7220]
mov rcx, qword gs:[0x58]
mov rsi, qword [rcx + rax*8]
lea rcx, [rsi + 0x68]
lea rdx, [0x140153b40]
call fcn.1401a7010
mov byte [rsi + 0xb8], 1
mov eax, dword [0x1402c7220]
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx + rax*8]
movzx eax, byte [rcx + 0xb4]
movzx ecx, byte [rcx + 0xb5]
test al, al
je 0x140148c2a
test cl, cl
jne 0x140148c2a
mov rax, qword [rbx]
mov rcx, qword [rbx + 8]
call qword [rax + 0x10]
mov sil, 2
jmp 0x140148dac
xor eax, eax
xor ecx, ecx
jmp 0x140148c5f
xor edx, edx
mov r8d, ecx
sub r8b, 1
movzx r8d, r8b
cmovb r8d, edx
test al, al
movzx edx, cl
cmovne edx, r8d
mov r8d, dword [0x1402c7220]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
mov byte [r8 + 0xb5], dl
mov byte [rbp - 0x40], al
mov byte [rbp - 0x3f], cl
mov rax, qword [rdi + 0x30]
test al, 2
jne 0x140148da0
mov sil, 1
test al, 4
jne 0x140148dac
test al, 1
je 0x140148ce2
mov rax, qword [rbx + 8]
cmp rax, qword [rdi + 0x28]
jne 0x140148cb7
mov rax, qword [rdi + 0x20]
mov rcx, qword [rbx]
mov rdx, qword [rax]
cmp rdx, qword [rcx]
jne 0x140148cb7
mov rdx, qword [rax + 8]
cmp rdx, qword [rcx + 8]
jne 0x140148cb7
mov rdx, qword [rax + 0x10]
cmp rdx, qword [rcx + 0x10]
jne 0x140148cb7
mov rax, qword [rax + 0x18]
cmp rax, qword [rcx + 0x18]
je 0x140148d17
mov rax, qword [rdi + 0x30]
nop dword [rax + rax]
mov rcx, rax
and rcx, 0xfffffffffffffffe
lock cmpxchg qword [rdi + 0x30], rcx
jne 0x140148cc0
test al, 2
jne 0x140148d9a
mov rax, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x28]
call qword [rax + 0x18]
mov rax, qword [rbx]
mov rcx, qword [rbx + 8]
call qword [rax]
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rdx
mov rax, qword [rdi + 0x30]
nop word [rax + rax]
mov rcx, rax
or rcx, 1
lock cmpxchg qword [rdi + 0x30], rcx
jne 0x140148d00
test al, 2
jne 0x140148da0
mov sil, 2
cmp byte [rbp - 0x40], 0
je 0x140148dac
movzx ebx, byte [rbp - 0x3f]
mov eax, dword [0x1402c7220]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0xb8]
cmp eax, 1
je 0x140148d78
test eax, eax
jne 0x140148dac
mov eax, dword [0x1402c7220]
mov rcx, qword gs:[0x58]
mov rdi, qword [rcx + rax*8]
lea rcx, [rdi + 0x68]
lea rdx, [0x140153b40]
call fcn.1401a7010
mov byte [rdi + 0xb8], 1
mov eax, dword [0x1402c7220]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov byte [rax + 0xb4], 1
mov byte [rax + 0xb5], bl
jmp 0x140148dac
lock or qword [rdi + 0x30], 1
movzx esi, byte [rdi + 0x38]
mov byte [rdi + 0x38], 0
xor sil, 1
test sil, sil
je 0x140148dbf
movzx eax, sil
cmp eax, 2
je 0x140148de7
mov sil, 1
jmp 0x140148de7
mov rax, qword [r14]
test rax, rax
mov qword [rbp - 0x10], r14
je 0x140148dda
lock dec qword [rax]
jne 0x140148dda
mov rcx, qword [rbp - 0x10]
call fcn.14014cca0
mov rax, qword [rbp - 0x10]
mov qword [rax], 0
xor esi, esi
mov eax, esi
add rsp, 0x60
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
lea rax, [0x14021ec30]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 1
lea rax, str.there_is_no_such_thing_as_a_release_load_
mov qword [rbp - 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
lea rdx, str.C:Users_rootkit.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.38.1_src_synconeshot.rscalled_after_complete
lea rcx, [rbp - 0x40]
call fcn.1401ca220
int3