Function at 0x140018110
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rax, qword [rdx + 0x10]
xor ebx, ebx
mov rsi, qword [rdx]
mov r14, rdx
mov edi, 0xffffffff
mov r9d, ebx
movsxd rbp, dword [rax + 0x14]
mov r10, qword [rax]
mov dword [rcx + 0x14e4], ebx
mov dword [rcx + 0x14e8], 0x23d
test ebp, ebp
jle 0x14001819d
mov r8d, ebx
nop word [rax + rax]
cmp word [rsi + r8*4], bx
je 0x14001818c
movsxd rdx, dword [rcx + 0x14e4]
mov edi, r9d
lea eax, [rdx + 1]
mov dword [rcx + 0x14e4], eax
mov dword [rcx + rdx*4 + 0xbf4], r9d
mov byte [r8 + rcx + 0x14ec], bl
jmp 0x140018192
mov word [rsi + r8*4 + 2], bx
inc r9d
inc r8
cmp r8, rbp
jl 0x140018160
mov r8d, dword [rcx + 0x14e4]
mov r15d, 1
cmp r8d, 2
jge 0x14001820a
cmp edi, 2
lea eax, [r8 + 1]
mov dword [rcx + 0x14e4], eax
lea edx, [rdi + 1]
movsxd rax, r8d
mov r9d, edx
cmovge edx, ebx
cmovge r9d, edi
mov dword [rcx + rax*4 + 0xbf4], edx
movsxd rax, edx
mov word [rsi + rax*4], r15w
mov byte [rax + rcx + 0x14ec], bl
dec dword [rcx + 0x1748]
test r10, r10
je 0x1400181fa
movzx eax, word [r10 + rax*4 + 2]
sub dword [rcx + 0x174c], eax
mov r8d, dword [rcx + 0x14e4]
mov edi, r9d
cmp r8d, 2
jl 0x1400181b0
mov dword [r14 + 8], edi
mov r8d, dword [rcx + 0x14e4]
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
cmp eax, r15d
jl 0x140018240
mov r8d, ebx
mov rdx, rsi
call fcn.140018b40
dec ebx
cmp ebx, r15d
jge 0x140018224
mov r8d, dword [rcx + 0x14e4]
nop dword [rax]
movsxd rbx, dword [rcx + 0xbf4]
movsxd rax, r8d
mov edx, dword [rcx + rax*4 + 0xbf0]
lea eax, [r8 - 1]
mov dword [rcx + 0xbf4], edx
mov r8d, r15d
mov rdx, rsi
mov dword [rcx + 0x14e4], eax
call fcn.140018b40
movsxd rdx, dword [rcx + 0x14e8]
movsxd r8, dword [rcx + 0xbf4]
mov r9, r8
movsxd r10, ebp
lea eax, [rdx - 1]
mov dword [rcx + 0x14e8], eax
mov dword [rcx + rdx*4 + 0xbec], ebx
movsxd rdx, dword [rcx + 0x14e8]
lea eax, [rdx - 1]
mov dword [rcx + 0x14e8], eax
mov dword [rcx + rdx*4 + 0xbec], r8d
mov rdx, rsi
movzx eax, word [rsi + rbx*4]
add ax, word [rsi + r8*4]
mov word [rsi + r10*4], ax
movzx r8d, byte [rbx + rcx + 0x14ec]
movzx eax, byte [r9 + rcx + 0x14ec]
cmp r8b, al
cmovb r8d, eax
inc r8b
mov byte [rcx + r10 + 0x14ec], r8b
mov r8d, r15d
mov word [rsi + r9*4 + 2], bp
mov word [rsi + rbx*4 + 2], bp
mov dword [rcx + 0xbf4], ebp
inc ebp
call fcn.140018b40
mov r8d, dword [rcx + 0x14e4]
cmp r8d, 2
jge 0x140018240
movsxd r8, dword [rcx + 0x14e8]
mov rdx, r14
lea eax, [r8 - 1]
mov dword [rcx + 0x14e8], eax
mov eax, dword [rcx + 0xbf4]
mov dword [rcx + r8*4 + 0xbec], eax
call fcn.140018570
lea r8, [rcx + 0xbd0]
mov edx, edi
mov rcx, rsi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
jmp 0x1400187c0
sub rsp, 0x38
mov rax, qword [0x140282a80]
xor rax, rsp
mov qword [rsp + 0x20], rax
movzx eax, word [r8]
mov r11, rcx
movzx r9d, word [r8 + 2]
add eax, eax
movzx ecx, word [r8 + 6]
add r9d, eax
mov word [rsp + 2], ax
add r9d, r9d
movzx eax, word [r8 + 4]
add eax, r9d
mov word [rsp + 4], r9w
add eax, eax
movsxd r10, edx
add ecx, eax
mov word [rsp + 6], ax
movzx eax, word [r8 + 8]
add ecx, ecx
add eax, ecx
mov word [rsp + 8], cx
movzx ecx, word [r8 + 0xa]
add eax, eax
add ecx, eax
mov word [rsp + 0xa], ax
movzx eax, word [r8 + 0xc]
add ecx, ecx
add eax, ecx
mov word [rsp + 0xc], cx
movzx ecx, word [r8 + 0xe]
add eax, eax
add ecx, eax
mov word [rsp + 0xe], ax
movzx eax, word [r8 + 0x10]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x10], cx
movzx ecx, word [r8 + 0x12]
add eax, eax
add ecx, eax
mov word [rsp + 0x12], ax
movzx eax, word [r8 + 0x14]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x14], cx
movzx ecx, word [r8 + 0x16]
add eax, eax
add ecx, eax
mov word [rsp + 0x16], ax
movzx eax, word [r8 + 0x18]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x18], cx
movzx ecx, word [r8 + 0x1a]
add eax, eax
add ecx, eax
mov word [rsp + 0x1a], ax
add ecx, ecx
mov word [rsp + 0x1c], cx
add cx, word [r8 + 0x1c]
add cx, cx
mov word [rsp + 0x1e], cx
test edx, edx
js 0x14001895a
mov qword [rsp + 0x48], rbx
xor eax, eax
mov qword [rsp + 0x50], rsi
mov ebx, 0x80200802
mov qword [rsp + 0x30], rdi
movabs rsi, 0x101010101
movabs rdi, 0x884422110
nop dword [rax]
movzx r9d, word [r11 + rax*4 + 2]
test r9w, r9w
je 0x140018943
lea rdx, [rsp]
movzx r8d, word [rdx + r9*2]
lea rdx, [rdx + r9*2]
lea ecx, [r8 + 1]
mov word [rdx], cx
movzx ecx, r8b
imul rcx, rbx
and rcx, rdi
imul rcx, rsi
shr rcx, 0x20
movzx edx, cl
mov ecx, r8d
shr rcx, 8
imul rcx, rbx
shl edx, 8
and rcx, rdi
imul rcx, rsi
shr rcx, 0x20
movzx ecx, cl
or edx, ecx
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
sub ecx, r9d
sar edx, cl
mov word [r11 + rax*4], dx
inc rax
cmp rax, r10
jle 0x1400188e0
mov rdi, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x20]
xor rcx, rsp
call fcn.14002e100
add rsp, 0x38
ret