Function at 0x1400777a0
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x290
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14049e608]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov rsi, rcx
mov qword [rsp + 0x70], rcx
lea r14, [0x14049f330]
lea r12, [0x1407366e0]
mov r10d, 0x4c
mov r11d, 0xffff0000
movabs r13, 0x112e0be826d694b3
movabs r15, 0x311cdad160000
mov rax, qword [0x14049f330]
test rax, rax
je 0x140077f4e
movzx eax, byte [0x14049f688]
test al, al
setne al
test al, al
je 0x140077a44
mov qword [rsp + 0x48], 0x1312d00
call fcn.140317990
mov rbx, rax
call fcn.140317974
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rdx, [rax + rcx]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
lea rdi, [rdx + 0x1312d00]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], rdi
call fcn.140317990
mov rbx, rax
call fcn.140317974
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rdx, [rcx + rax]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdi
cmp rdx, rdi
jge 0x140077a00
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x60], rdi
movsd xmm0, qword [0x14045b4a0]
movsd qword [rsp + 0x60], xmm0
movsd xmm6, qword [0x14045b4c8]
movsd qword [rsp + 0x60], xmm6
movsd qword [rsp + 0x48], xmm6
movsd qword [rsp + 0x48], xmm6
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], rdi
nop dword [rax]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov rbx, rdi
sub rbx, rdx
call fcn.140317a80
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x48], rax
imul rcx, rax, 0x64
mov qword [rsp + 0x48], rcx
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
movsd qword [rsp + 0x48], xmm0
movsd qword [rsp + 0x48], xmm0
comisd xmm0, xmm6
seta al
test al, al
je 0x14007796c
add rcx, r15
jmp 0x140077974
mov qword [rsp + 0x48], rbx
add rcx, rbx
mov rax, r13
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rsp + 0x48], rdx
mov qword [rbp + 0xe0], rdx
imul rax, rdx, 0x3b9aca00
mov qword [rsp + 0x48], rax
sub rcx, rax
mov qword [rsp + 0x48], rcx
mov dword [rbp + 0xe8], ecx
lea rcx, [rbp + 0xe0]
call fcn.140317dfc
call fcn.140317990
mov rbx, rax
call fcn.140317974
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rdx, [rcx + rax]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x48], rdx
cmp rdx, rdi
jl 0x140077920
mov qword [rsp + 0x48], rdx
movzx eax, byte [0x14049f688]
test al, al
setne al
test al, al
je 0x140077a20
mov rax, qword [0x14049f330]
test rax, rax
jne 0x140077847
mov rax, qword [0x14049f330]
test rax, rax
je 0x140077f4e
mov rcx, rsi
call fcn.140078540
mov r10d, 0x4c
mov r11d, 0xffff0000
mov r15b, 1
mov byte [rsp + 0x50], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
nop dword [rax + rax]
mov rcx, qword [rsi + 0x890]
mov rax, qword [0x14049f330]
cmp rax, rcx
jne 0x140077f3c
lea r13, [rsi + 0x78]
movzx eax, byte [r13 + 0x820]
imul rcx, rax, 0x268
lea rdi, [r13 + 0x330]
add rdi, rcx
movzx ecx, byte [rsi + 0x4a]
mov edx, 1
shl rdx, cl
movzx ecx, byte [rdi + 2]
mov eax, 1
shl rax, cl
cmp rax, rdx
jne 0x140077f3c
movzx r8d, byte [r13 + 0x820]
imul rcx, r8, 0x268
mov edx, dword [rcx + r13 + 0x330]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r11d
and ecx, edx
cmp ecx, 0x6b000000
jne 0x140077b02
mov edx, 0x20
jmp 0x140077b11
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, r10
imul rcx, r8, 0x198
add rcx, rdx
mov ebx, dword [rcx + r13]
mov dword [rsp + 0x68], ebx
mov eax, dword [rsi + 0x8c8]
test eax, eax
je 0x140077b5a
cmp ebx, eax
jae 0x140077f49
cmp qword [rsi + 0x60], 1
jne 0x140077b5a
movzx eax, byte [r13 + 0x820]
imul rcx, rax, 0x198
mov rax, qword [0x1407366e0]
xor qword [rcx + r13], rax
mov ebx, dword [rsp + 0x68]
mov byte [rsp + 0x51], 1
movzx eax, byte [r13 + 0x820]
imul rcx, rax, 0x268
mov edx, dword [rcx + r13 + 0x330]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r11d
and ecx, edx
cmp ecx, 0x6b000000
jne 0x140077b9d
mov r9d, 0x20
jmp 0x140077bad
mov r9d, 0x27
cmp ecx, 0x6c000000
cmove r9, r10
movzx eax, byte [r13 + 0x820]
imul rcx, rax, 0x268
mov edx, dword [rcx + r13 + 0x330]
mov eax, edx
and eax, 0xff000000
mov r8d, 0xff000000
cmp eax, 0x63000000
cmove r8d, r11d
and r8d, edx
mov ecx, 4
cmp r8d, 0x6b000000
mov eax, 8
cmove ecx, eax
movzx eax, byte [r13 + 0x820]
imul r14, rax, 0x198
lea rax, [r9 + rcx]
add r14, rax
add r14, r13
mov edx, dword [rdi]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r11d
and ecx, edx
cmp ecx, 0x72000000
jne 0x140077dc5
test r15b, r15b
je 0x140077c8c
mov byte [rsp + 0x50], 0
cmp byte [rdi + 0x261], 0
je 0x140077c63
movzx eax, byte [r13 + 0x820]
imul rdx, rax, 0x198
add rdx, r13
mov r9, r14
mov r8, qword [rdi + 0x20]
mov rcx, rdi
call fcn.14003ac30
movzx eax, byte [r13 + 0x820]
imul r8, rax, 0x198
add r8, r13
mov r9, qword [rdi + 0x20]
lea rdx, [rbp + 0xf0]
mov rcx, qword [rsi + 0x8a0]
call fcn.14014dc00
mov rcx, rsi
call fcn.140078270
test al, al
je 0x140077f35
cmp byte [rdi + 0x261], 0
je 0x140077cf5
movups xmm0, xmmword [r14]
movaps xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [r14 + 0x10]
movaps xmmword [rbp + 0x140], xmm1
movups xmm0, xmmword [r14 + 0x20]
movaps xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [r14 + 0x30]
movaps xmmword [rbp + 0x160], xmm1
movzx eax, byte [r13 + 0x820]
imul rdx, rax, 0x198
add rdx, r13
mov r9, r14
mov r8, qword [rdi + 0x20]
mov rcx, rdi
call fcn.14003ac30
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0x48], rax
movzx eax, byte [r13 + 0x820]
mov byte [rsp + 0x40], al
mov r14, qword [rsi + 0x8a0]
mov dword [rsp + 0x58], 0x9fc0
ldmxcsr dword [rsp + 0x58]
xor eax, eax
mov r15d, eax
cmp dword [0x140736d64], 1
je 0x140077d76
nop dword [rax]
mov rax, qword [r14]
lea rdx, [rbp + 0xf0]
mov rcx, r14
call qword [rax + gethostname]
mov r9d, 0x100
lea r8, [r14 + 0x980]
mov edx, 0x40
lea rcx, [rbp + 0xf0]
call qword [case.0x14014f91d.0]
inc r15d
mov eax, dword [0x140736d64]
dec eax
cmp r15d, eax
jb 0x140077d30
lea r12, [0x1407366e0]
mov rax, qword [r14]
lea rdx, [rbp + 0xf0]
mov rcx, r14
call qword [rax + gethostname]
movzx eax, byte [rsp + 0x40]
imul r8, rax, 0x198
add r8, r13
mov r9, qword [rsp + 0x48]
mov edx, 0x40
lea rcx, [rbp + 0xf0]
call qword [case.0x14014f91d.0]
mov rax, qword [r14]
lea rdx, [rsi + 0x28]
lea r8, [rbp + 0xf0]
mov rcx, r14
call qword [rax + 0x18]
jmp 0x140077e4a
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r11d
and ecx, edx
cmp ecx, 0x6c000000
je 0x140077e35
mov r15, qword [rdi + 0x78]
mov r12, qword [rdi + 0x20]
movzx eax, byte [r13 + 0x820]
imul r14, rax, 0x198
add r14, r13
mov rax, qword [rsp + 0x70]
mov r8d, dword [rax + 0x4c]
mov edx, dword [rax + 0x54]
mov rcx, rdi
call fcn.1400a2bf0
mov qword [rsp + 0x20], r15
lea r9, [rsi + 0x68]
lea r8, [rsi + 0x28]
mov rdx, r12
mov rcx, r14
call rax
mov rsi, qword [rsp + 0x70]
lea r12, [0x1407366e0]
jmp 0x140077e3a
mov byte [rsp + 0x51], 0
mov rcx, rsi
call fcn.140078270
test al, al
je 0x140077f35
cmp byte [rsp + 0x51], 0
je 0x140077ef5
mov rdx, qword [rsi + 0x40]
mov eax, dword [rsi + 0x8c8]
test eax, eax
je 0x140077e93
cmp ebx, eax
jae 0x140077ef1
prefetchw byte [0x1407366e0]
mov rax, qword [0x1407366e0]
nop dword [rax]
mov rcx, rax
xor rcx, rdx
lock cmpxchg qword [0x1407366e0], rcx
jne 0x140077e80
jmp 0x140077ef1
cmp rdx, qword [rdi + 0x80]
jae 0x140077ef1
lea rax, [rbp + 0x130]
cmp byte [rdi + 0x261], 0
mov ecx, 0
cmove rax, rcx
lea r9, [rsi + 0x28]
mov r8d, ebx
mov qword [rsp + 0x30], rax
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.14008c700
nop
cmp qword [0x140737758], 0
je 0x140077edf
mov rdx, rax
call fcn.14008c870
nop
mov rcx, qword [rbp + 8]
call fcn.140319610
mov rcx, qword [rbp - 8]
call fcn.140319610
inc qword [rsi + 8]
cmp byte [rsi + 0x51], 0
movzx r15d, byte [rsp + 0x50]
lea r14, [0x14049f330]
mov r10d, 0x4c
mov r11d, 0xffff0000
je 0x140077a70
call sub.KERNEL32.dll_SwitchToThread
lea r14, [0x14049f330]
mov r10d, 0x4c
mov r11d, 0xffff0000
jmp 0x140077a70
lea r14, [0x14049f330]
mov rcx, rsi
call fcn.140078540
jmp 0x1400777fa
call fcn.140070e30
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1403195b0
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret