Function at 0x18000bca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rax, qword [rdx + 0x10]
xor ebx, ebx
mov rsi, qword [rdx]
mov r14, rdx
mov edi, 0xffffffff
mov r9d, ebx
movsxd rbp, dword [rax + 0x14]
mov r10, qword [rax]
mov dword [rcx + 0x149c], ebx
mov dword [rcx + 0x14a0], 0x23d
test ebp, ebp
jle 0x18000bd2d
mov r8d, ebx
nop word [rax + rax]
cmp word [rsi + r8*4], bx
je 0x18000bd1c
movsxd rdx, dword [rcx + 0x149c]
mov edi, r9d
lea eax, [rdx + 1]
mov dword [rcx + 0x149c], eax
mov dword [rcx + rdx*4 + 0xbac], r9d
mov byte [r8 + rcx + 0x14a4], bl
jmp 0x18000bd22
mov word [rsi + r8*4 + 2], bx
inc r9d
inc r8
cmp r8, rbp
jl 0x18000bcf0
mov r8d, dword [rcx + 0x149c]
mov r15d, 1
cmp r8d, 2
jge 0x18000bd9a
cmp edi, 2
lea eax, [r8 + 1]
mov dword [rcx + 0x149c], eax
lea edx, [rdi + 1]
movsxd rax, r8d
mov r9d, edx
cmovge edx, ebx
cmovge r9d, edi
mov dword [rcx + rax*4 + 0xbac], edx
movsxd rax, edx
mov word [rsi + rax*4], r15w
mov byte [rax + rcx + 0x14a4], bl
dec dword [rcx + 0x16fc]
test r10, r10
je 0x18000bd8a
movzx eax, word [r10 + rax*4 + 2]
sub dword [rcx + 0x1700], eax
mov r8d, dword [rcx + 0x149c]
mov edi, r9d
cmp r8d, 2
jl 0x18000bd40
mov dword [r14 + 8], edi
mov eax, dword [rcx + 0x149c]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
cmp eax, r15d
jl 0x18000bdc2
mov r8d, ebx
mov rdx, rsi
call fcn.18000c870
dec ebx
cmp ebx, r15d
jge 0x18000bdb0
movsxd r8, dword [rcx + 0x149c]
movsxd rbx, dword [rcx + 0xbac]
mov edx, dword [rcx + r8*4 + 0xba8]
lea eax, [r8 - 1]
mov dword [rcx + 0xbac], edx
mov r8d, r15d
mov rdx, rsi
mov dword [rcx + 0x149c], eax
call fcn.18000c870
movsxd rdx, dword [rcx + 0x14a0]
movsxd r8, dword [rcx + 0xbac]
mov r9, r8
movsxd r10, ebp
lea eax, [rdx - 1]
mov dword [rcx + 0x14a0], eax
mov dword [rcx + rdx*4 + 0xba4], ebx
movsxd rdx, dword [rcx + 0x14a0]
lea eax, [rdx - 1]
mov dword [rcx + 0x14a0], eax
mov dword [rcx + rdx*4 + 0xba4], r8d
mov rdx, rsi
movzx eax, word [rsi + rbx*4]
add ax, word [rsi + r8*4]
mov word [rsi + r10*4], ax
movzx r8d, byte [rbx + rcx + 0x14a4]
movzx eax, byte [r9 + rcx + 0x14a4]
cmp r8b, al
cmovb r8d, eax
inc r8b
mov byte [r10 + rcx + 0x14a4], r8b
mov r8d, r15d
mov word [rsi + r9*4 + 2], bp
mov word [rsi + rbx*4 + 2], bp
mov dword [rcx + 0xbac], ebp
inc ebp
call fcn.18000c870
cmp dword [rcx + 0x149c], 2
jge 0x18000bdc2
movsxd r8, dword [rcx + 0x14a0]
mov rdx, r14
lea eax, [r8 - 1]
mov dword [rcx + 0x14a0], eax
mov eax, dword [rcx + 0xbac]
mov dword [rcx + r8*4 + 0xba4], eax
call fcn.18000c340
lea r8, [rcx + 0xb88]
mov edx, edi
mov rcx, rsi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
jmp 0x18000c550
sub rsp, 0x38
mov rax, qword [0x180034008]
xor rax, rsp
mov qword [rsp + 0x20], rax
movzx eax, word [r8]
mov r10, rcx
movzx r9d, word [r8 + 2]
add eax, eax
movzx ecx, word [r8 + 6]
add r9d, eax
mov word [rsp + 2], ax
add r9d, r9d
movzx eax, word [r8 + 4]
add eax, r9d
mov word [rsp + 4], r9w
add eax, eax
movsxd r11, edx
add ecx, eax
mov word [rsp + 6], ax
movzx eax, word [r8 + 8]
add ecx, ecx
add eax, ecx
mov word [rsp + 8], cx
movzx ecx, word [r8 + 0xa]
add eax, eax
add ecx, eax
mov word [rsp + 0xa], ax
movzx eax, word [r8 + 0xc]
add ecx, ecx
add eax, ecx
mov word [rsp + 0xc], cx
movzx ecx, word [r8 + 0xe]
add eax, eax
add ecx, eax
mov word [rsp + 0xe], ax
movzx eax, word [r8 + 0x10]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x10], cx
movzx ecx, word [r8 + 0x12]
add eax, eax
add ecx, eax
mov word [rsp + 0x12], ax
movzx eax, word [r8 + 0x14]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x14], cx
movzx ecx, word [r8 + 0x16]
add eax, eax
add ecx, eax
mov word [rsp + 0x16], ax
movzx eax, word [r8 + 0x18]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x18], cx
movzx ecx, word [r8 + 0x1a]
add eax, eax
add ecx, eax
mov word [rsp + 0x1a], ax
movzx eax, word [r8 + 0x1c]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x1c], cx
add eax, eax
mov word [rsp + 0x1e], ax
test edx, edx
js 0x18000c685
xor r9d, r9d
movzx edx, word [r10 + r9*4 + 2]
test edx, edx
je 0x18000c67d
lea rcx, [rsp]
movzx r8d, word [rcx + rdx*2]
lea rcx, [rcx + rdx*2]
lea eax, [r8 + 1]
mov word [rcx], ax
xor eax, eax
mov ecx, r8d
dec edx
and ecx, 1
shr r8d, 1
or eax, ecx
add eax, eax
test edx, edx
jg 0x18000c663
shr eax, 1
mov word [r10 + r9*4], ax
inc r9
cmp r9, r11
jle 0x18000c643
mov rcx, qword [rsp + 0x20]
xor rcx, rsp
call fcn.18000d780
add rsp, 0x38
ret