Function at 0x140efc390
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call rax
mov r11, rax
cmp ah, 0xb8
test r14, r11
test rax, rax
jmp 0x140fe0c1e
call rax
jmp 0x140fe0d9c
mov byte [rsp + 0x18], r8b
cmp al, bpl
cmp r11b, 0x25
test al, r14b
mov qword [rsp + 0x10], rdx
cmp cx, 0x160a
test r12, 0x4e2b6887
push rbp
test dx, sp
add rbp, r13
btc ebp, 0x32
push rsi
movzx rbp, dx
shr sil, cl
stc
sub rsp, 0x178
xchg bpl, bpl
stc
mov rbp, rdx
mov rsi, rcx
test r12b, dil
test rcx, rcx
je 0x140fe076f
test rdx, rdx
je 0x140fe076f
mov eax, 0x5a4d
cmp word [rcx], ax
jmp 0x140fe0769
je 0x140fe0786
xor eax, eax
add rsp, 0x178
mov esi, 0x5bb702cd
not sil
movzx ebp, dx
pop rsi
pop rbp
ret
movsxd rax, dword [rcx + 0x3c]
cmp r9b, r11b
cmp dword [rax + rcx], 0x4550
jmp 0x140fe0799
jne 0x140fe076f
mov r8d, dword [rax + rcx + 0x88]
jmp 0x140fe07ae
mov dword [rsp + 0x30], r8d
test r13w, 0x358b
cmc
test r8d, r8d
je 0x140fe076f
mov r9d, dword [rax + rcx + 0x8c]
lea rdx, [rsi + r8]
setno cl
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x168], rdi
clc
bsr ecx, r13d
mov ecx, 0xffffffff
jmp 0x140fe07f1
sub edi, edi
mov dword [rsp + 0x20], r9d
test rsi, 0x461f1827
test al, r11b
mov qword [rsp + 0x28], rdx
jmp 0x140fe0811
mov dword [rsp + 0x190], ecx
clc
cmp bx, sp
cmp rbp, 0xffff
jmp 0x140fe0828
ja 0x140fe087b
mov ecx, ebp
cmp cl, r14b
sub ecx, dword [rdx + 0x10]
cmp ecx, dword [rdx + 0x14]
jmp 0x140fe083e
jae 0x140fe086f
mov eax, dword [rdx + 0x1c]
and dl, 0xa5
add rax, rsi
xor edx, 0x740719e
bts edx, r14d
btr edx, 0xd7
mov edx, dword [rax + rcx*4]
cmp r15b, 0x21
test edx, edx
jmp 0x140fe0869
jne 0x140fe0af5
sub eax, eax
jmp 0x140fe0876
jmp 0x140fe0d9c
mov eax, dword [rdx + 0x18]
test al, spl
jmp 0x140fe0886
test eax, eax
jmp 0x140fe088d
je 0x140fe0aca
mov r9d, dword [rdx + 0x20]
lea r11d, [rax - 1]
btr bx, 0xb4
mov ebx, edi
add r9, rsi
mov qword [rsp + 0x40], r9
test bx, 0x4504
stc
cmc
test r11d, r11d
jmp 0x140fe08b9
js 0x140fe0abf
nop
mov r10, qword [rsp + 0x198]
sbb dx, si
sbb ah, 0xc1
lea eax, [r11 + rbx]
bts dx, r13w
mov rbp, rdi
sar eax, 1
sal r8d, cl
rcl dx, 0x34
mov dword [rsp + 0x1a8], eax
rcr r8w, 0x25
bsf r8w, cx
cmovs edx, eax
mov qword [rsp + 0x38], rax
rcr rdx, 0x4b
cwd
movsxd r8, esp
mov r8d, dword [r9 + rax*4]
mov eax, dword [r9 + rax*4]
movzx rdx, r14w
bt r9d, r13d
sub r10, rax
not r9
rcr ah, 0x69
mov r9b, 3
movzx eax, byte [rsp + 0x1a0]
ror r9b, cl
lea r8, [r8 + rsi]
bswap r9w
movzx r9w, r15b
sub r10, rsi
nop
movsxd r9, r8d
inc r9b
movsx dx, bpl
movzx edx, byte [r10 + r8]
movzx r9d, byte [r8]
jmp 0x140fe0956
inc r8
test cx, di
cmc
test al, al
jmp 0x140fe0964
je 0x140fe09a0
mov ecx, ebp
rcr ax, cl
mov eax, 0x68302cbf
cmc
rol eax, cl
test rbx, 0x55a052db
add al, bpl
cmc
cmp spl, dil
xor dl, al
seta al
mov al, byte [rsp + 0x1a0]
jmp 0x140fe0996
inc rbp
test ax, dx
test r15b, 0xba
test dl, dl
jmp 0x140fe09a7
je 0x140fe09bb
cmp dl, r9b
jmp 0x140fe09b5
je 0x140fe0948
cmp dl, r9b
jb 0x140fe0a4a
cmp dl, r9b
jmp 0x140fe09cc
jbe 0x140fe09f8
mov ebx, dword [rsp + 0x1a8]
jmp 0x140fe09e0
mov rdx, qword [rsp + 0x28]
mov ecx, dword [rsp + 0x190]
jmp 0x140fe09f1
inc ebx
jmp 0x140fe0a76
mov rdx, qword [rsp + 0x28]
lea ebx, [r11 + 1]
movzx eax, r14w
movzx rax, dx
seta cl
mov eax, dword [rdx + 0x24]
movzx ecx, r8w
jmp 0x140fe0a1b
lea rcx, [rsi + rax]
setp al
not ah
mov al, 0xc2
mov rax, qword [rsp + 0x38]
jmp 0x140fe0a30
movzx ecx, word [rcx + rax*2]
jmp 0x140fe0a39
mov dword [rsp + 0x190], ecx
jmp 0x140fe0a45
jmp 0x140fe0a76
mov r11d, dword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x28]
mov r9b, 0x6b
xchg cl, ch
mov ecx, dword [rsp + 0x190]
movzx r9w, r8b
movsxd r9, ebx
bswap r9w
dec r11d
bts r9, r11
cmp ebx, r11d
cmove r9d, r14d
movsx r9, r10w
setns r9b
mov r9, qword [rsp + 0x40]
jmp 0x140fe0a8f
jle 0x140fe08c0
mov rbp, qword [rsp + 0x198]
xchg r9, r8
setle r8b
mov r8d, dword [rsp + 0x30]
bswap r9w
not r9d
mov r9d, dword [rsp + 0x20]
jmp 0x140fe0aba
jmp 0x140fe0aca
mov r9d, dword [rsp + 0x20]
test r12b, 0x43
clc
stc
cmp ecx, dword [rdx + 0x14]
jmp 0x140fe0ad2
jae 0x140fe086f
mov eax, dword [rdx + 0x1c]
add rax, rsi
or dl, 0x89
mov edx, dword [rax + rcx*4]
cmp r9w, si
test edx, edx
jmp 0x140fe0aef
je 0x140fe086f
cmp edx, r8d
jb 0x140fe0d8a
lea eax, [r9 + r8]
cmc
cmp r13b, 0x90
cmp edx, eax
jmp 0x140fe0b0e
jae 0x140fe0d8a
mov eax, edx
rol rcx, cl
add rax, rsi
mov rbx, rax
movzx ecx, byte [rax]
cmp r9w, r9w
test cl, cl
je 0x140fe086f
cmp cl, 0x2e
jmp 0x140fe0b36
je 0x140fe0b64
mov cl, byte [rbx + 1]
jmp 0x140fe0b44
inc rbx
cmp dil, r14b
cmp r12w, 0x3bef
test cl, cl
jmp 0x140fe0b57
jne 0x140fe0b2e
xor eax, eax
jmp 0x140fe0d9c
mov r8, rbx
sub r8, rax
jmp 0x140fe0b73
cmp r8, 0x104
jmp 0x140fe0b7f
jae 0x140fe086f
mov rcx, rdi
cmp bl, r15b
test r8, r8
jmp 0x140fe0b93
je 0x140fe0bdb
lea r9, [rsp + 0x50]
sub r9, rax
ror rdx, 0x92
mov dx, si
nop
bt rdx, rdi
bswap edx
movzx edx, byte [rax]
clc
cmp ah, 0x47
test dl, dl
jmp 0x140fe0bbd
je 0x140fe0bdb
inc rcx
jmp 0x140fe0bcb
mov byte [r9 + rax], dl
inc rax
cmp rcx, r8
jb 0x140fe0baf
mov byte [rsp + rcx + 0x50], dil
xchg ah, cl
mov cl, r12b
movsx eax, sp
lea rcx, [rsp + 0x50]
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov r11, rax
test rax, rax
jmp 0x140fe0c01
jne 0x140fe0c24
lea rcx, [rsp + 0x50]
movzx rax, bp
bswap eax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x140efc38e
je 0x140fe086f
cmp r11, rsi
jne 0x140fe0ced
cmp byte [rsp + 0x1a0], dil
jmp 0x140fe0c3a
je 0x140fe0cce
lea rax, [rsp + 0x50]
rol dx, cl
movsx dx, r10b
sub rbp, rax
bts cx, r8w
nop
movzx eax, cx
rcl ax, cl
bts rcx, r15
lea rdx, [rsp + rdi + 0x50]
btr ax, bp
cwde
mov ecx, edi
cmovnp rax, r15
jmp 0x140fe0c76
mov eax, 0x68302cbf
clc
cmc
jmp 0x140fe0c82
rol eax, cl
clc
jmp 0x140fe0c8a
add al, dil
cmp sil, r14b
cmc
xor al, byte [rdx + rbp]
jmp 0x140fe0c99
mov byte [rdx], al
jmp 0x140fe0ca0
je 0x140fe0cbf
inc rdi
test r15d, r11d
cmc
cmp rdi, 0x104
jmp 0x140fe0cb9
jb 0x140fe0c60
lea rbp, [rsp + 0x50]
cdqe
movzx cx, r9b
bswap rcx
mov rdx, rbp
bswap rcx
mov ax, r8w
lahf
mov rcx, rsi
movzx ax, r10b
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x140f64542
cmp byte [rbx + 1], 0x23
sete dl
not edx
cqo
lea rdx, [rbx + 1]
jne 0x140fe0d76
movzx edx, byte [rbx + 2]
stc
clc
add rbx, 2
test dl, dl
je 0x140fe0d6a
nop
mov al, r8b
bswap ax
lea eax, [rdx - 0x30]
jmp 0x140fe0d23
inc rbx
jmp 0x140fe0d2b
cmp al, 9
jmp 0x140fe0d32
ja 0x140fe0d6a
movsx eax, dl
cmp spl, r14b
btr ecx, 0x71
mov dl, byte [rbx]
lea ecx, [rdi + rdi*4]
rcl di, cl
adc dil, r15b
and di, 0x643f
lea edi, [rax + rcx*2 - 0x30]
test rbx, 0x10b3678a
test dl, dl
jmp 0x140fe0d64
jne 0x140fe0d1b
movsxd rdx, edi
movsxd rcx, edx
not cx
xadd ch, cl
sub r8d, r8d
movsx rcx, r15w
mov rcx, r11
call fcn.140fe0702
jmp 0x140fe0d9c
mov eax, edx
xadd bl, dil
shl bh, cl
lea rax, [rax + rsi]
shr ebp, cl
movsx bx, dl
mov rbx, qword [rsp + 0x170]
mov rdi, qword [rsp + 0x168]
add rsp, 0x178
mov sil, r15b
pop rsi
bswap bp
sete bpl
pop rbp
jmp 0x140fe0dc4
ret