Function at 0x7ff633fa2c29
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call rax
mov r11, rax
cmp dx, sp
test rax, rax
jne 0x7ff633fd8ee7
lea rcx, [rsp + 0x50]
bswap rax
movsx ax, ah
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
call rax
mov r11, rax
test rax, rax
jmp 0x7ff633fd8ee1
call rax
jmp 0x7ff633fd9030
mov byte [rsp + 0x18], r8b
cmc
test rsi, rdi
mov qword [rsp + 0x10], rdx
stc
cmp r11, 0x32713553
push rbp
rcl bp, 0x77
btc bp, 0x13
push rsi
btc si, 0x57
movsx rbp, di
sub rsp, 0x178
mov rbp, rdx
mov rsi, rcx
test ah, 0x32
test rcx, rcx
jmp 0x7ff633fd8a33
je 0x7ff633fd8a55
test rdx, rdx
je 0x7ff633fd8a55
mov eax, 0x5a4d
cmp word [rcx], ax
jmp 0x7ff633fd8a4f
je 0x7ff633fd8a6c
xor eax, eax
stc
rol ebp, cl
add rsp, 0x178
pop rsi
xchg bpl, bpl
jmp 0x7ff633fd8a6a
pop rbp
ret
movsxd rax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jmp 0x7ff633fd8a7c
jne 0x7ff633fd8a55
mov r8d, dword [rax + rcx + 0x88]
clc
jmp 0x7ff633fd8a90
mov dword [rsp + 0x30], r8d
test r14w, 0x38c
test r8d, r8d
jmp 0x7ff633fd8aa3
je 0x7ff633fd8a55
mov r9d, dword [rax + rcx + 0x8c]
bsf cx, r14w
sar edx, cl
lea rdx, [rsi + r8]
mov qword [rsp + 0x170], rbx
dec cx
mov qword [rsp + 0x168], rdi
bswap cx
dec ch
mov ecx, 0xffffffff
cmp eax, 0xc3500fb
stc
xor edi, edi
jmp 0x7ff633fd8ae7
mov dword [rsp + 0x20], r9d
clc
test r10w, di
mov qword [rsp + 0x28], rdx
cmc
jmp 0x7ff633fd8afc
mov dword [rsp + 0x190], ecx
cmp r12b, 0x31
clc
cmp rbp, 0xffff
jmp 0x7ff633fd8b14
ja 0x7ff633fd8b6c
mov ecx, ebp
cmc
sub ecx, dword [rdx + 0x10]
cmp ecx, dword [rdx + 0x14]
jmp 0x7ff633fd8b28
jae 0x7ff633fd8b60
mov eax, dword [rdx + 0x1c]
rol dl, 0xae
shld dx, r14w, 0xc5
add rax, rsi
movsx edx, ax
or edx, 0x599e7c28
jmp 0x7ff633fd8b4b
mov edx, dword [rax + rcx*4]
jmp 0x7ff633fd8b53
test edx, edx
jmp 0x7ff633fd8b5a
jne 0x7ff633fd8dd7
sub eax, eax
jmp 0x7ff633fd8b67
jmp 0x7ff633fd9030
mov eax, dword [rdx + 0x18]
cmc
test r15b, 0x20
test eax, eax
jmp 0x7ff633fd8b7b
je 0x7ff633fd8dad
mov r9d, dword [rdx + 0x20]
sub bx, di
lea r11d, [rax - 1]
dec bl
or bx, 0xcaa
ror bl, 0x9a
mov ebx, edi
test esp, r10d
lea r9, [r9 + rsi]
mov qword [rsp + 0x40], r9
test r11d, r11d
jmp 0x7ff633fd8bac
js 0x7ff633fd8da8
nop
cqo
mov r10, qword [rsp + 0x198]
inc dl
shr r8b, cl
lea eax, [r11 + rbx]
sub dl, 0xd5
xor r8d, 0x24c538cf
shl edx, cl
mov rbp, rdi
btc r8w, 0x4d
ror r8d, cl
rcl r8b, 0x42
sar eax, 1
and dx, cx
sbb r8b, 0x99
mov dword [rsp + 0x1a8], eax
rcr dh, 0xbb
mov qword [rsp + 0x38], rax
movsx edx, r10w
mov r8d, dword [r9 + rax*4]
shr edx, 0x88
movzx edx, r11w
dec dx
mov eax, dword [r9 + rax*4]
rcr rdx, cl
sub r10, rax
bsf r9, rbp
movzx eax, byte [rsp + 0x1a0]
btr r9d, 0x12
rcl r9, 0x29
lea r8, [r8 + rsi]
rol r9w, cl
not r9w
sub r10, rsi
nop
inc dl
cwd
dec r9b
movzx edx, byte [r10 + r8]
mov r9b, r12b
movzx r9d, byte [r8]
jmp 0x7ff633fd8c53
inc r8
cmp cx, 0x7ca2
test r8b, sil
test al, al
jmp 0x7ff633fd8c65
je 0x7ff633fd8c9d
mov ecx, ebp
cdqe
bts rax, rdi
mov ax, r11w
mov eax, 0x633a260d
rol eax, cl
stc
cmp bl, r12b
add al, bpl
xor dl, al
mov al, byte [rsp + 0x1a0]
jmp 0x7ff633fd8c93
inc rbp
cmc
cmp r13w, 0x488
test dl, dl
jmp 0x7ff633fd8ca4
je 0x7ff633fd8cb8
cmp dl, r9b
jmp 0x7ff633fd8cb2
je 0x7ff633fd8c42
cmp dl, r9b
jb 0x7ff633fd8d2a
cmp dl, r9b
jmp 0x7ff633fd8cc9
jbe 0x7ff633fd8cf8
mov ebx, dword [rsp + 0x1a8]
cqo
movsxd rdx, r14d
mov rdx, qword [rsp + 0x28]
not ecx
setae ch
mov ecx, dword [rsp + 0x190]
jmp 0x7ff633fd8cf1
inc ebx
jmp 0x7ff633fd8d62
mov rdx, qword [rsp + 0x28]
cbw
lea ebx, [r11 + 1]
cwde
mov eax, dword [rdx + 0x24]
lea rcx, [rsi + rax]
cbw
mov ax, bx
mov rax, qword [rsp + 0x38]
movzx ecx, word [rcx + rax*2]
mov dword [rsp + 0x190], ecx
jmp 0x7ff633fd8d25
jmp 0x7ff633fd8d62
mov r11d, dword [rsp + 0x1a8]
movsx dx, cl
bswap cx
cwd
mov rdx, qword [rsp + 0x28]
movsx r9w, sil
mov ecx, dword [rsp + 0x190]
movsxd r9, r14d
movzx r9d, r8w
dec r11d
shr r9d, 0xbc
movsxd r9, edx
shld r9d, eax, 0x9f
cmp ebx, r11d
movsx r9d, r8w
movzx r9d, r14w
mov r9, qword [rsp + 0x40]
jmp 0x7ff633fd8d77
jle 0x7ff633fd8bb5
mov rbp, qword [rsp + 0x198]
mov r8w, r8w
not r8b
mov r8d, dword [rsp + 0x30]
setnp r9b
movsx r9, r15w
jmp 0x7ff633fd8d9e
mov r9d, dword [rsp + 0x20]
jmp 0x7ff633fd8dad
mov r9d, dword [rsp + 0x20]
cmp ecx, dword [rdx + 0x14]
jmp 0x7ff633fd8db5
jae 0x7ff633fd8b60
mov eax, dword [rdx + 0x1c]
add rax, rsi
cmp r13, 0x69783040
mov edx, dword [rax + rcx*4]
test r14w, bx
test edx, edx
je 0x7ff633fd8b60
cmp edx, r8d
jmp 0x7ff633fd8ddf
jb 0x7ff633fd901f
lea eax, [r9 + r8]
cmp edx, eax
jae 0x7ff633fd901f
mov eax, edx
add rax, rsi
mov rbx, rax
sar ch, 0x52
movzx ecx, byte [rax]
test cl, cl
jmp 0x7ff633fd8e06
je 0x7ff633fd8b60
cmp cl, 0x2e
je 0x7ff633fd8e38
mov cl, byte [rbx + 1]
jmp 0x7ff633fd8e1d
inc rbx
test spl, 0x27
test cl, cl
jne 0x7ff633fd8e0c
sub eax, eax
jmp 0x7ff633fd8e33
jmp 0x7ff633fd9030
mov r8, rbx
clc
sub r8, rax
test bp, 0x1cb1
clc
cmc
cmp r8, 0x104
jmp 0x7ff633fd8e52
jae 0x7ff633fd8b60
mov rcx, rdi
test r8, r8
jmp 0x7ff633fd8e63
je 0x7ff633fd8ec2
lea r9, [rsp + 0x50]
xadd dh, dh
bsr dx, ax
sub edx, r12d
sub r9, rax
nop
jmp 0x7ff633fd8e85
movzx edx, byte [rax]
stc
cmp rbp, 0x6010012a
test dl, dl
jmp 0x7ff633fd8e97
je 0x7ff633fd8ec2
inc rcx
jmp 0x7ff633fd8ea5
mov byte [r9 + rax], dl
jmp 0x7ff633fd8eae
inc rax
test r15b, bl
cmp rcx, r8
jmp 0x7ff633fd8ebc
jb 0x7ff633fd8e85
mov byte [rsp + rcx + 0x50], dil
cwde
lea rcx, [rsp + 0x50]
cmovo rax, rbp
cwde
sete al
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
jmp 0x7ff633fa2c27
je 0x7ff633fd8b60
cmp r11, rsi
jmp 0x7ff633fd8eef
jne 0x7ff633fd8f89
cmp byte [rsp + 0x1a0], dil
je 0x7ff633fd8f77
lea rax, [rsp + 0x50]
adc dx, 0x4603
sub rbp, rax
nop
cmovs cx, ax
movzx dx, r9b
movzx ecx, r9w
lea rdx, [rsp + rdi + 0x50]
movzx cx, r12b
rol al, cl
mov ecx, edi
mov eax, 0x633a260d
rol eax, cl
test r13, 0x35d64bf7
add al, dil
test r15w, 0x21a6
xor al, byte [rdx + rbp]
jmp 0x7ff633fd8f4b
mov byte [rdx], al
jmp 0x7ff633fd8f52
je 0x7ff633fd8f6d
inc rdi
cmp rdi, 0x104
jmp 0x7ff633fd8f67
jb 0x7ff633fd8f1e
lea rbp, [rsp + 0x50]
movzx dx, r11b
mov rdx, rbp
mov rcx, rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress_1]
jmp 0x7ff633fbe618
cmp byte [rbx + 1], 0x23
movzx dx, r15b
cmovb rdx, rsi
lea rdx, [rbx + 1]
jmp 0x7ff633fd8f9f
jne 0x7ff633fd900b
movzx edx, byte [rbx + 2]
cmp edi, r8d
jmp 0x7ff633fd8fb2
add rbx, 2
test r8w, 0x1fc8
test dl, dl
jmp 0x7ff633fd8fc3
je 0x7ff633fd9000
nop
lea eax, [rdx - 0x30]
jmp 0x7ff633fd8fd2
inc rbx
cmp al, 9
ja 0x7ff633fd9000
movsx eax, dl
test r11w, si
mov dl, byte [rbx]
lea ecx, [rdi + rdi*4]
ror dil, cl
lea edi, [rax + rcx*2 - 0x30]
stc
test r14, r14
cmp ax, 0x261f
test dl, dl
jne 0x7ff633fd8fca
movsxd rdx, edi
shrd rcx, r14, 0x14
movsxd rcx, r11d
sub r8d, r8d
cmova ecx, r15d
mov rcx, r11
call fcn.7ff633fd89f1
jmp 0x7ff633fd9030
mov eax, edx
bsf bx, ax
lea rax, [rax + rsi]
and rsi, rsi
btr ebx, r15d
mov rbx, qword [rsp + 0x170]
shr rsi, 0x70
or sil, 0xf5
rcl bpl, cl
mov rdi, qword [rsp + 0x168]
shr si, cl
bsf ebp, r12d
add rsp, 0x178
movsx si, dl
not bpl
bswap esi
pop rsi
movsx rbp, r13w
movzx bp, spl
pop rbp
jmp 0x7ff633fd9072
ret