Function at 0x1400011c7
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x140007f90
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rax, qword [0x140017d30]
xor rax, rsp
mov qword [rsp + 0x30], rax
movzx ebx, byte [0x1400181f8]
lea r15, [0x140000000]
mov r14d, 1
xor sil, sil
xor r12d, r12d
lea ebp, [r14 + 0x1d]
lea r13d, [r14 + 0x13]
movsx eax, bl
mov edi, 0x2f
add eax, 0xffffffe3
cmp eax, 0x61
ja case.0x140008007.45
cdqe
movzx eax, byte [r15 + rax + 0x87cc]
mov ecx, dword [r15 + rax*4 + 0x8788]
add rcx, r15
jmp rcx
call fcn.140001343
movzx ebx, al
movzx ecx, r12w
nop word [rax + rax]
movsx rdi, cx
inc cx
cmp cx, 0x13
je 0x140008037
cmp byte [rdi + r15 + 0x16038], al
jne 0x140008020
cmp edi, 0x12
je 0x140008732
cmp cx, 4
jge 0x14000806e
call fcn.140001343
movzx ebx, al
cmp al, 0x68
jne 0x140008059
mov ecx, 0xc
jmp 0x140008061
mov sil, 1
mov ecx, 1
add cx, di
cmp cx, 1
je 0x140008725
cmp cx, 0x12
mov eax, 0x4d
cmove cx, ax
jmp 0x140008158
cmp dword [0x140019894], r12d
je 0x1400080aa
cmp byte [0x140019888], r12b
mov dword [0x140019894], r12d
je 0x1400080a0
mov ecx, ebp
call fcn.140001181
call fcn.14000150f
call fcn.140001087
cmp dword [0x140019898], r12d
je case.0x140008007.40
cmp byte [0x140019888], r12b
mov dword [0x140019898], r12d
je 0x1400080ca
mov ecx, ebp
call fcn.140001181
call fcn.14000150f
movzx ecx, byte [0x1400181f8]
call fcn.1400010c3
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
call fcn.140001343
movzx ebx, al
cmp al, 0x69
jne 0x140008140
mov eax, 0x49
jmp 0x140008155
call fcn.140001343
movzx ebx, al
cmp al, 0x75
jne 0x140008140
mov eax, 0x55
jmp 0x140008155
call fcn.140001343
movzx ebx, al
movzx ecx, r12w
movsx r8, cx
movsx rdx, cx
inc cx
cmp cx, 4
je 0x14000813b
cmp byte [rdx + r15 + 0x16154], al
jne 0x140008120
cmp edx, 3
jne 0x14000814c
movsx eax, byte [0x1400181f8]
mov sil, 1
jmp 0x140008155
movsx eax, byte [r8 + r15 + 0x16234]
movzx ecx, ax
call fcn.140001181
test sil, sil
je 0x140008617
xor sil, sil
mov byte [0x1400181f8], bl
jmp 0x140007fdd
call fcn.140001343
movzx r8d, al
movzx edx, r12w
movsx rcx, dx
inc dx
cmp dx, 3
je 0x140008198
cmp byte [rcx + r15 + 0x16158], r8b
jne 0x140008181
cmp ecx, 2
je 0x14000874b
add cx, 0x12
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
call fcn.140001343
movzx r8d, al
movzx ecx, r12w
nop word [rax + rax]
movsx rdx, cx
inc cx
cmp cx, 5
je 0x1400081f0
cmp byte [rdx + r15 + 0x16244], r8b
jne 0x1400081d0
cmp edx, 5
je 0x140008765
cmp edx, 4
jne 0x140008213
movzx edx, di
movzx ecx, dx
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
add dx, 0x15
movzx ecx, dx
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
mov ecx, 0x1f
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
cmp byte [0x1400181fb], r12b
jne 0x140008644
movsx ecx, bl
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
sub r14w, 1
jne 0x14000828b
cmp byte [0x14001987e], r12b
je 0x1400086b5
movsx ecx, bl
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
movsx ecx, bl
call fcn.140001181
inc r14w
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
movsx ecx, bl
call fcn.140001181
nop dword [rax]
call fcn.140001343
mov byte [0x1400181f8], al
cmp al, 0x1f
je 0x1400082f0
movzx ecx, al
call fcn.1400010c3
cmp byte [0x1400181f8], 0x1f
jne 0x1400082d0
mov cl, 0xa
call fcn.1400010c3
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
call fcn.14000150f
nop
call fcn.140001343
mov byte [0x1400181f8], al
cmp al, 0x1f
jne 0x140008329
mov al, 0xa
mov byte [0x1400181f8], al
jmp 0x140008331
cmp al, 0x3e
je 0x140008617
movzx ecx, al
call fcn.1400010c3
cmp byte [0x1400181f8], 0x3e
jne 0x140008310
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
movsx ecx, bl
call fcn.140001181
call fcn.140001343
mov byte [0x1400181f8], al
cmp al, 0x1f
jne 0x1400083c2
call fcn.140001451
lea rcx, [0x140018e00]
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], r12b
lea rcx, [rcx + 1]
jne 0x140008380
movzx eax, word [0x140013abc]
mov rdx, qword [0x1400181d8]
mov word [rcx], ax
lea rcx, [0x140018e00]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputs]
mov byte [0x140018e00], r12b
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
cmp al, 0x5c
jne 0x14000841c
movzx ecx, al
call fcn.1400010c3
call fcn.140001343
mov byte [0x1400181f8], al
movzx ebx, al
cmp al, 0x5b
jne 0x140008636
movzx ecx, bl
call fcn.1400010c3
call fcn.140001343
mov byte [0x1400181f8], al
movzx ebx, al
cmp al, 0x5d
jne 0x1400083e4
movzx ecx, al
call fcn.1400010c3
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
movzx ecx, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalpha]
test eax, eax
jne 0x140008448
movzx ecx, byte [0x1400181f8]
call fcn.1400010c3
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
mov edx, r12d
nop dword [rax + rax]
movzx ecx, byte [0x1400181f8]
movsxd rax, edx
inc edx
mov dword [0x140019904], edx
mov byte [rax + r15 + 0x198a0], cl
call fcn.1400010c3
call fcn.140001343
movzx ecx, al
mov byte [0x1400181f8], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalpha]
test eax, eax
je 0x14000848f
mov edx, dword [0x140019904]
jmp 0x140008450
movsxd rax, dword [0x140019904]
mov rcx, rax
inc eax
mov dword [0x140019904], eax
cmp rcx, 0x64
jae 0x14000877f
mov byte [rcx + r15 + 0x198a0], r12b
call fcn.14000110e
dec eax
cmp eax, 7
ja case.default.0x1400084d0
cdqe
mov ecx, dword [r15 + rax*4 + 0x8830]
add rcx, r15
jmp rcx
call fcn.140001087
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
call fcn.14000118b
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
call fcn.1400012c1
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
call fcn.1400010b9
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
call fcn.1400011c2
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
call fcn.1400011f4
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
call fcn.140001532
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
call fcn.1400015aa
movzx ebx, al
mov byte [0x1400181f8], al
xor sil, sil
jmp 0x140007fdd
movzx ebx, byte [0x1400181f8]
xor sil, sil
mov byte [0x1400181f8], bl
jmp 0x140007fdd
test bl, bl
js case.0x140008007.29
movzx ecx, r12w
movsx rdi, cx
inc cx
cmp cx, 0xa
je 0x1400085ba
cmp byte [rdi + r15 + 0x16238], bl
jne 0x1400085a3
cmp edi, 9
jne 0x1400085da
movsx ecx, bl
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
call fcn.140001343
movzx ebx, al
cmp al, 0x68
jne 0x14000862a
cmp edi, 8
jne 0x140008607
movzx ecx, r13w
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
movsx ecx, byte [0x1400181f8]
sub cx, 0x20
call fcn.140001181
call fcn.140001343
movzx ebx, al
mov byte [0x1400181f8], al
jmp 0x140007fdd
movsx ecx, byte [0x1400181f8]
call fcn.140001181
xor sil, sil
mov byte [0x1400181f8], bl
jmp 0x140007fdd
cmp byte [0x140019880], r12b
jne 0x140008652
mov ebp, 0x7d
movzx ecx, bp
call fcn.140001181
call fcn.140001451
movsxd rdx, dword [0x14001983c]
lea rcx, [0x140018600]
add rdx, rcx
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x140008677
inc r8
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1400012e4
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
cmp byte [0x140019880], r12b
jne 0x1400086c1
movsx ebp, bl
movzx ecx, bp
call fcn.140001181
call fcn.140001451
movsxd rdx, dword [0x14001983c]
lea rcx, [0x140018600]
add rdx, rcx
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x1400086e6
jmp 0x140008680
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdx, rax
lea rcx, str.Error:_missing_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputs]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140013547]
call fcn.140001311
int3
lea rcx, [0x140013ab8]
call fcn.140001311
int3
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x20], 0x2e
mov byte [rsp + 0x21], al
mov byte [rsp + 0x22], r12b
call fcn.140001311
int3
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x20], 0x22
mov byte [rsp + 0x21], r8b
mov byte [rsp + 0x22], r12b
call fcn.140001311
int3
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x20], 0x7e
mov byte [rsp + 0x21], r8b
mov byte [rsp + 0x22], r12b
call fcn.140001311
int3
call fcn.140001415
int3