Function at 0x140049f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
movaps xmmword [rsp + 0x60], xmm6
mov rdi, rcx
mov rax, qword [0x1400ed028]
xor rax, rsp
mov qword [rsp + 0x58], rax
cmp byte [rdx + 0x17], 0
js 0x14004a198
mov word [rdx], 0
mov byte [rdx + 0x17], 0
cmp byte [r8 + 0x17], 0
mov qword [rsp + 0x30], r8
js 0x14004a1ad
mov word [r8], 0
mov byte [r8 + 0x17], 0
movzx eax, byte [rdi + 0x17]
mov r15d, eax
and r15d, 0x7f
test al, al
mov r12, qword [rdi]
cmovns r12, rdi
cmovs r15, qword [rdi + 8]
movzx eax, byte [0x1400ff3c8]
and eax, 1
neg rax
cmp rax, 0xfffffffffffffffd
je 0x14004a170
mov qword [rsp + 0x38], rdx
xor ebp, ebp
lea rsi, [0x1400da9d0]
movabs r13, 0xaaaaaaaaaaaaaaaa
movaps xmm6, xmmword [0x1400d7af0]
lea rcx, [rsp + 0x40]
mov rax, rbp
shl rax, 4
mov qword [rsp + 0x50], r13
movaps xmmword [rsp + 0x40], xmm6
mov rdx, qword [rax + rsi]
mov r8, qword [rax + rsi + 8]
mov rbx, rcx
call fcn.14001be10
movzx eax, byte [rsp + 0x57]
test al, al
jns 0x140049fdb
mov r10, qword [rsp + 0x48]
jmp 0x140049fe2
mov r10d, eax
and r10d, 0x7f
cmp r10, r15
mov rcx, rbx
ja 0x14004a04a
mov r14b, 1
test r10, r10
je 0x14004a174
mov rdx, rcx
test al, al
jns 0x14004a002
mov rdx, qword [rsp + 0x40]
xor r8d, r8d
movzx r9d, word [r12 + r8*2]
cmp r9w, word [rdx + r8*2]
jne 0x14004a04a
inc r8
cmp r10, r8
jne 0x14004a005
mov r8, r10
test al, al
js 0x14004a17c
test r14b, r14b
jne 0x14004a054
mov qword [rsp + 0x28], r8
inc rbp
movzx eax, byte [0x1400ff3c8]
xor rax, 3
cmp rbp, rax
jb 0x140049fa9
jmp 0x14004a170
xor r14d, r14d
mov r8, qword [rsp + 0x28]
jmp 0x14004a01c
test r8, r8
je 0x14004a170
movzx edx, byte [rdi + 0x17]
test dl, dl
mov rsi, qword [rsp + 0x38]
jns 0x14004a070
mov rax, qword [rdi + 8]
jmp 0x14004a075
mov eax, edx
and eax, 0x7f
cmp r8, rax
je 0x14004a170
mov rcx, rdi
test dl, dl
jns 0x14004a088
mov rcx, qword [rdi]
lea rdx, [rcx + rax*2]
mov r8, rdx
test rax, rax
jle 0x14004a0b6
btr rax, 0x3f
mov r8, rcx
cmp word [r8], 0x3d
je 0x14004a0b1
add r8, 2
dec rax
jne 0x14004a09c
mov r8, rdx
jmp 0x14004a0b6
test r8, r8
je 0x14004a0ac
mov rax, r8
sub rax, rcx
sar rax, 1
cmp r8, rdx
mov r14, 0xffffffffffffffff
cmovne r14, rax
lea r15, [rdi + 0x18]
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x40]
mov rdx, rdi
xor r8d, r8d
mov r9, r14
call fcn.140026590
cmp byte [rsi + 0x17], 0
js 0x14004a1c2
mov rax, qword [rsp + 0x50]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsi], xmm0
mov bl, 1
cmp r14, 0xffffffffffffffff
je 0x14004a14b
inc r14
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x40]
mov rdx, rdi
mov r8, r14
mov r9, 0xffffffffffffffff
call fcn.140026590
mov rsi, qword [rsp + 0x30]
cmp byte [rsi + 0x17], 0
js 0x14004a1cf
mov rax, qword [rsp + 0x50]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsi], xmm0
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400686c0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ebx, ebx
jmp 0x14004a14b
xor r8d, r8d
jmp 0x14004a01c
mov qword [rsp + 0x28], r8
mov rcx, qword [rsp + 0x40]
call fcn.1400673b0
mov rcx, rbx
mov r8, qword [rsp + 0x28]
jmp 0x14004a024
mov rax, qword [rdx]
mov word [rax], 0
mov qword [rdx + 8], 0
jmp 0x140049f3a
mov rax, qword [r8]
mov word [rax], 0
mov qword [r8 + 8], 0
jmp 0x140049f55
mov rcx, qword [rsi]
call fcn.1400673b0
jmp 0x14004a0f3
mov rcx, qword [rsi]
call fcn.1400673b0
jmp 0x14004a13a