Function at 0x14007a4c0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x290
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14049e608]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov rsi, rcx
mov qword [rsp + 0x60], rcx
lea r15, [0x14049f330]
lea r14, [0x1407366e0]
mov r11d, 0xffff0000
mov r8d, 1
movabs r13, 0x112e0be826d694b3
movabs r12, 0x311cdad160000
lea ebx, [r8 + 0x4b]
mov rax, qword [0x14049f330]
test rax, rax
je 0x14007add9
movzx eax, byte [0x14049f688]
test al, al
setne al
test al, al
je 0x14007a777
mov qword [rsp + 0x48], 0x1312d00
nop dword [rax + rax]
call fcn.140317990
mov rbx, rax
call fcn.140317974
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rdx, [rax + rcx]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
lea rdi, [rdx + 0x1312d00]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], rdi
call fcn.140317990
mov rbx, rax
call fcn.140317974
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rdx, [rcx + rax]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdi
cmp rdx, rdi
jge 0x14007a730
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x58], rdi
movsd xmm0, qword [0x14045b4a0]
movsd qword [rsp + 0x58], xmm0
movsd xmm6, qword [0x14045b4c8]
movsd qword [rsp + 0x58], xmm6
movsd qword [rsp + 0x48], xmm6
movsd qword [rsp + 0x48], xmm6
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], rdi
nop word [rax + rax]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov rbx, rdi
sub rbx, rdx
call fcn.140317a80
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x48], rax
imul rcx, rax, 0x64
mov qword [rsp + 0x48], rcx
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
movsd qword [rsp + 0x48], xmm0
movsd qword [rsp + 0x48], xmm0
comisd xmm0, xmm6
seta al
test al, al
je 0x14007a69c
add rcx, r12
jmp 0x14007a6a4
mov qword [rsp + 0x48], rbx
add rcx, rbx
mov rax, r13
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rsp + 0x48], rdx
mov qword [rbp + 0xd0], rdx
imul rax, rdx, 0x3b9aca00
mov qword [rsp + 0x48], rax
sub rcx, rax
mov qword [rsp + 0x48], rcx
mov dword [rbp + 0xd8], ecx
lea rcx, [rbp + 0xd0]
call fcn.140317dfc
call fcn.140317990
mov rbx, rax
call fcn.140317974
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rdx, [rcx + rax]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
cmp rdx, rdi
jl 0x14007a650
mov qword [rsp + 0x48], rdx
movzx eax, byte [0x14049f688]
test al, al
setne al
test al, al
je 0x14007a750
mov rax, qword [0x14049f330]
test rax, rax
jne 0x14007a570
mov rax, qword [0x14049f330]
test rax, rax
je 0x14007add9
mov rcx, rsi
call fcn.14007b370
mov ebx, 0x4c
mov r11d, 0xffff0000
lea r8d, [rbx - 0x4b]
mov dil, 1
mov byte [rsp + 0x50], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
nop
mov rcx, qword [rsi + 0xf40]
mov rax, qword [0x14049f330]
cmp rax, rcx
jne 0x14007adc7
lea r12, [rsi + 0xc8]
movzx eax, byte [r12 + 0xe80]
imul rcx, rax, 0x268
lea r13, [r12 + 0x990]
add r13, rcx
movzx ecx, byte [rsi + 0x8a]
mov rdx, r8
shl rdx, cl
movzx ecx, byte [r13 + 2]
mov rax, r8
shl rax, cl
cmp rax, rdx
jne 0x14007adc7
movzx r8d, byte [r12 + 0xe80]
imul r10, r8, 0x268
mov r9d, dword [r10 + r12 + 0x990]
mov eax, r9d
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r11d
and ecx, r9d
cmp ecx, 0x6b000000
jne 0x14007a83a
mov edx, 0x20
jmp 0x14007a849
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, rbx
imul rax, r8, 0x4c8
add rax, r12
mov r11d, dword [rax + rdx]
mov dword [rbp + 0xe0], r11d
mov eax, r9d
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
mov eax, 0xffff0000
cmove ecx, eax
and ecx, r9d
cmp ecx, 0x6b000000
jne 0x14007a88a
mov edx, 0x20
jmp 0x14007a899
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, rbx
imul rcx, r8, 0x4c8
add rcx, qword [r10 + r12 + 0x9b0]
add rcx, r12
mov eax, dword [rcx + rdx]
mov dword [rbp + 0xe4], eax
imul rcx, r8, 0x268
mov r9, qword [rcx + r12 + 0x9b0]
imul rcx, r8, 0x268
mov edx, dword [rcx + r12 + 0x990]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
mov r10d, 0xffff0000
cmove ecx, r10d
and ecx, edx
cmp ecx, 0x6b000000
jne 0x14007a8fe
mov edx, 0x20
jmp 0x14007a90d
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, rbx
imul rcx, r8, 0x264
add rcx, r9
lea rax, [r12 + rcx*2]
mov ecx, dword [rax + rdx]
mov dword [rbp + 0xe8], ecx
mov eax, dword [rsi + 0xf78]
test eax, eax
je 0x14007a95c
cmp r11d, eax
jae 0x14007add4
cmp qword [rsi + 0xa0], 1
jne 0x14007a95c
movzx eax, byte [r12 + 0xe80]
imul rcx, rax, 0x4c8
mov rax, qword [0x1407366e0]
xor qword [rcx + r12], rax
mov byte [rsp + 0x51], 1
movzx eax, byte [r12 + 0xe80]
imul rcx, rax, 0x268
mov edx, dword [rcx + r12 + 0x990]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, edx
cmp ecx, 0x6b000000
jne 0x14007a9a0
mov r9d, 0x20
jmp 0x14007a9b0
mov r9d, 0x27
cmp ecx, 0x6c000000
cmove r9, rbx
movzx eax, byte [r12 + 0xe80]
imul rcx, rax, 0x268
mov edx, dword [rcx + r12 + 0x990]
mov eax, edx
and eax, 0xff000000
mov r8d, 0xff000000
cmp eax, 0x63000000
cmove r8d, r10d
and r8d, edx
mov ecx, 4
cmp r8d, 0x6b000000
mov eax, 8
cmove ecx, eax
movzx eax, byte [r12 + 0xe80]
imul rbx, rax, 0x4c8
lea rax, [r12 + rcx]
add rbx, rax
add rbx, r9
mov edx, dword [r13]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, edx
cmp ecx, 0x72000000
jne 0x14007abe1
test dil, dil
je 0x14007aa96
mov byte [rsp + 0x50], 0
cmp byte [r13 + 0x261], 0
je 0x14007aa6c
movzx eax, byte [r12 + 0xe80]
imul rdx, rax, 0x4c8
add rdx, r12
mov r9, rbx
mov r8, qword [r13 + 0x20]
mov rcx, r13
call fcn.14003ac30
movzx eax, byte [r12 + 0xe80]
imul r8, rax, 0x4c8
add r8, r12
mov r9, qword [r13 + 0x20]
lea rdx, [rbp + 0xf0]
mov rcx, qword [rsi + 0xf50]
call fcn.14014dc00
mov edx, 0x8000
cmp dword [rsi + 0xf78], 0
mov eax, 1
cmovne edx, eax
mov rcx, r12
call fcn.1400813d0
test al, al
je 0x14007adaa
cmp byte [r13 + 0x261], 0
je 0x14007ab11
movups xmm0, xmmword [rbx]
movaps xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [rbp + 0x140], xmm1
movups xmm0, xmmword [rbx + 0x20]
movaps xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbx + 0x30]
movaps xmmword [rbp + 0x160], xmm1
movzx eax, byte [r12 + 0xe80]
imul rdx, rax, 0x4c8
add rdx, r12
mov r9, rbx
mov r8, qword [r13 + 0x20]
mov rcx, r13
call fcn.14003ac30
mov r15, qword [r13 + 0x20]
movzx eax, byte [r12 + 0xe80]
mov byte [rsp + 0x40], al
mov rbx, qword [rsi + 0xf50]
mov dword [rsp + 0x48], 0x9fc0
ldmxcsr dword [rsp + 0x48]
xor eax, eax
mov edi, eax
cmp dword [0x140736d64], 1
je 0x14007ab94
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx]
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call qword [rax + gethostname]
mov r9d, 0x100
lea r8, [rbx + 0x980]
mov edx, 0x40
lea rcx, [rbp + 0xf0]
call qword [case.0x14014f91d.0]
inc edi
mov eax, dword [0x140736d64]
dec eax
cmp edi, eax
jb 0x14007ab50
lea r14, [0x1407366e0]
mov rax, qword [rbx]
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call qword [rax + gethostname]
movzx eax, byte [rsp + 0x40]
imul r8, rax, 0x4c8
add r8, r12
mov r9, r15
mov edx, 0x40
lea rcx, [rbp + 0xf0]
call qword [case.0x14014f91d.0]
mov rax, qword [rbx]
lea rdx, [rsi + 0x28]
lea r8, [rbp + 0xf0]
mov rcx, rbx
call qword [rax + 0x18]
jmp 0x14007ac91
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, edx
cmp ecx, 0x6c000000
je 0x14007ac68
mov r14, qword [r13 + 0x78]
mov r15, qword [r13 + 0x20]
lea rbx, [rsi + 0xa8]
lea rdi, [rsi + 0x28]
movzx eax, byte [r12 + 0xe80]
imul rsi, rax, 0x4c8
add rsi, r12
mov rax, qword [rsp + 0x60]
mov r8d, dword [rax + 0x8c]
mov edx, dword [rax + 0x94]
mov rcx, r13
call fcn.1400a2bf0
mov qword [rsp + 0x20], r14
mov r9, rbx
mov r8, rdi
mov rdx, r15
mov rcx, rsi
call rax
mov rsi, qword [rsp + 0x60]
lea r14, [0x1407366e0]
lea r15, [0x14049f330]
jmp 0x14007ac6d
mov byte [rsp + 0x51], 0
mov edx, 0x8000
cmp dword [rsi + 0xf78], 0
mov eax, 1
cmovne edx, eax
mov rcx, r12
call fcn.1400813d0
test al, al
je 0x14007adaa
cmp byte [rsp + 0x51], 0
je 0x14007ad67
xor r12d, r12d
mov ebx, r12d
lea rdi, [rsi + 0x28]
nop word [rax + rax]
mov rdx, qword [rdi + 0x18]
mov eax, dword [rsi + 0xf78]
test eax, eax
je 0x14007acf3
cmp dword [rbp + rbx*4 + 0xe0], eax
jae 0x14007ad51
prefetchw byte [0x1407366e0]
mov rax, qword [0x1407366e0]
nop dword [rax]
mov rcx, rax
xor rcx, rdx
lock cmpxchg qword [0x1407366e0], rcx
jne 0x14007ace0
jmp 0x14007ad51
cmp rdx, qword [r13 + 0x80]
jae 0x14007ad51
lea rax, [rbp + 0x130]
cmp byte [r13 + 0x261], 0
cmove rax, r12
mov r8d, dword [rbp + rbx*4 + 0xe0]
mov qword [rsp + 0x30], rax
mov r9, rdi
mov rdx, r13
lea rcx, [rbp - 0x20]
call fcn.14008c700
nop
cmp qword [0x140737758], 0
je 0x14007ad3f
mov rdx, rax
call fcn.14008c870
nop
mov rcx, qword [rbp - 8]
call fcn.140319610
mov rcx, qword [rbp - 0x18]
call fcn.140319610
inc rbx
add rdi, 0x20
cmp rbx, 3
jb 0x14007acb0
add qword [rsi + 8], 3
cmp byte [rsi + 0x91], 0
movzx edi, byte [rsp + 0x50]
lea r15, [0x14049f330]
mov ebx, 0x4c
mov r11d, 0xffff0000
lea r8d, [rbx - 0x4b]
je 0x14007a7a0
call sub.KERNEL32.dll_SwitchToThread
lea r15, [0x14049f330]
mov r11d, 0xffff0000
lea r8d, [rbx - 0x4b]
jmp 0x14007a7a0
movzx eax, byte [rsi + 0xf48]
imul rcx, rax, 0x268
add rcx, 0xa58
add rcx, rsi
call fcn.14008cc90
mov rcx, rsi
call fcn.14007b370
jmp 0x14007a51a
call fcn.140070e30
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1403195b0
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret