Function at 0x1801b1ad8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call rax
mov r11, rax
cmp r12, r15
test rax, rax
jmp 0x1801e2cce
call rax
mov r11, rax
test rax, rax
jmp 0x1801e2cad
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
push rbp
or bp, r10w
sub ebp, 0x7d3c35c0
dec bp
push rsi
adc ebp, r13d
sub rsp, 0x178
bts rbp, r13
and esi, r10d
sbb bpl, dil
mov rbp, rdx
rol si, 0x32
adc esi, 0x62501097
mov rsi, rcx
jmp 0x1801e2830
test rcx, rcx
jmp 0x1801e2838
je 0x1801e285e
test rdx, rdx
je 0x1801e285e
mov eax, 0x5a4d
cmp r12b, 0x9b
cmp word [rcx], ax
jmp 0x1801e2858
je 0x1801e2888
xor eax, eax
bts si, r15w
add rsp, 0x178
movsx ebp, dx
movzx ebp, r15w
pop rsi
movsx bp, r11b
jmp 0x1801e2881
pop rbp
jmp 0x1801e2887
ret
movsxd rax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jmp 0x1801e2898
jne 0x1801e285e
mov r8d, dword [rax + rcx + 0x88]
cmc
mov dword [rsp + 0x30], r8d
cmc
test r13d, 0x61e5dc7
test r8d, r8d
jmp 0x1801e28bc
je 0x1801e285e
mov r9d, dword [rax + rcx + 0x8c]
shl dx, cl
sbb cl, 0xe1
lea rdx, [rsi + r8]
ror ecx, 0x5c
mov qword [rsp + 0x170], rbx
xor cl, 0xff
movsxd rcx, r10d
mov qword [rsp + 0x168], rdi
sal ecx, cl
mov ecx, 0xffffffff
cmp rsi, rcx
xor edi, edi
cmc
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x190], ecx
cmp rbp, 0xffff
jmp 0x1801e2917
ja 0x1801e295a
mov ecx, ebp
clc
sub ecx, dword [rdx + 0x10]
cmp ecx, dword [rdx + 0x14]
jmp 0x1801e292b
jae 0x1801e294e
mov eax, dword [rdx + 0x1c]
bswap dx
rol dx, cl
lea rax, [rax + rsi]
mov edx, dword [rax + rcx*4]
test edx, edx
jmp 0x1801e2948
jne 0x1801e2b9f
xor eax, eax
jmp 0x1801e2955
jmp 0x1801e2e11
mov eax, dword [rdx + 0x18]
stc
test eax, eax
jmp 0x1801e2965
je 0x1801e2b66
mov r9d, dword [rdx + 0x20]
shr bh, cl
movsx rbx, di
lea r11d, [rax - 1]
cmovb bx, sp
mov ebx, edi
lea r9, [r9 + rsi]
jmp 0x1801e2988
mov qword [rsp + 0x40], r9
test r11d, r11d
jmp 0x1801e2995
js 0x1801e2b59
nop
cwd
dec rdx
mov r10, qword [rsp + 0x198]
cmc
shl dx, cl
rcr r8w, cl
lea eax, [r11 + rbx]
mov rbp, rdi
bswap edx
sbb dx, di
inc r8d
sar eax, 1
cmc
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x38], rax
xor r8, r13
mov r8d, dword [r9 + rax*4]
cqo
shrd rdx, rax, 0x39
mov eax, dword [r9 + rax*4]
sub r10, rax
or al, 0xad
xadd ah, dh
movzx eax, byte [rsp + 0x1a0]
bts r9, rax
lea r8, [r8 + rsi]
sub r10, rsi
inc dh
dec dx
nop
movzx dx, r10b
movzx edx, byte [r10 + r8]
movzx r9w, r15b
movzx r9d, byte [r8]
inc r8
test r9b, bpl
clc
test al, al
jmp 0x1801e2a23
je 0x1801e2a57
mov ecx, ebp
mov eax, 0x13f96712
rol eax, cl
jmp 0x1801e2a3e
add al, bpl
cmp cx, 0x650b
xor dl, al
mov al, byte [rsp + 0x1a0]
jmp 0x1801e2a54
inc rbp
test dl, dl
je 0x1801e2a6d
cmp dl, r9b
jmp 0x1801e2a67
je 0x1801e2a07
cmp dl, r9b
jmp 0x1801e2a75
jb 0x1801e2af1
cmp dl, r9b
jmp 0x1801e2a83
jbe 0x1801e2aad
mov ebx, dword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x28]
mov ecx, dword [rsp + 0x190]
jmp 0x1801e2aa1
inc ebx
jmp 0x1801e2aa8
jmp 0x1801e2b20
mov rdx, qword [rsp + 0x28]
cwde
movsxd rcx, edi
movsx rbx, r8w
lea ebx, [r11 + 1]
cmovno rcx, rsi
cdqe
mov eax, dword [rdx + 0x24]
lea rcx, [rsi + rax]
movsxd rax, ebx
movsx ax, r10b
movzx eax, r11w
mov rax, qword [rsp + 0x38]
movzx ecx, word [rcx + rax*2]
mov dword [rsp + 0x190], ecx
jmp 0x1801e2aec
jmp 0x1801e2b20
mov r11d, dword [rsp + 0x1a8]
cqo
movzx r9d, r8w
mov rdx, qword [rsp + 0x28]
setge ch
jmp 0x1801e2b0c
mov ecx, dword [rsp + 0x190]
movsxd r9, r10d
xchg r9d, r9d
dec r11d
rcr r9b, 0x83
cmp ebx, r11d
bswap r9w
movsxd r9, r14d
mov r9w, 0x4f43
mov r9, qword [rsp + 0x40]
jmp 0x1801e2b39
jle 0x1801e29a1
mov rbp, qword [rsp + 0x198]
mov r8d, dword [rsp + 0x30]
mov r9b, r15b
mov r9d, dword [rsp + 0x20]
jmp 0x1801e2b66
mov r9d, dword [rsp + 0x20]
stc
cmp bpl, r13b
test r14w, r10w
cmp ecx, dword [rdx + 0x14]
jmp 0x1801e2b6e
jae 0x1801e294e
mov eax, dword [rdx + 0x1c]
xor dx, 0x39e8
btr dx, dx
lea rax, [rax + rsi]
shr dh, cl
mov edx, dword [rax + rcx*4]
clc
jmp 0x1801e2b92
test edx, edx
jmp 0x1801e2b99
je 0x1801e294e
cmp edx, r8d
jb 0x1801e2e0b
lea eax, [r9 + r8]
cmp rsi, 0x48931f56
test dx, r14w
jmp 0x1801e2bbc
cmp edx, eax
jmp 0x1801e2bc3
jae 0x1801e2e0b
mov eax, edx
add rax, rsi
mov rbx, rax
movzx ecx, di
movzx ecx, byte [rax]
test rax, 0x38447ccc
cmp edx, edi
test cl, cl
je 0x1801e294e
cmp cl, 0x2e
jmp 0x1801e2bef
je 0x1801e2c19
mov cl, byte [rbx + 1]
jmp 0x1801e2bfd
inc rbx
test cl, cl
jmp 0x1801e2c07
jne 0x1801e2be7
sub eax, eax
jmp 0x1801e2c14
jmp 0x1801e2e11
mov r8, rbx
stc
sub r8, rax
cmp r8, 0x104
jmp 0x1801e2c2c
jae 0x1801e294e
mov rcx, rdi
test r9d, eax
test r8, r8
je 0x1801e2c8e
lea r9, [rsp + 0x50]
shl rdx, 0xec
movzx rdx, r9w
sub r9, rax
nop
btc rdx, r12
movzx dx, r8b
movzx edx, byte [rax]
cmp r10w, 0x38db
test dl, dl
je 0x1801e2c8e
inc rcx
jmp 0x1801e2c74
mov byte [r9 + rax], dl
jmp 0x1801e2c7d
inc rax
cmp rcx, r8
jmp 0x1801e2c88
jb 0x1801e2c5b
mov byte [rsp + rcx + 0x50], dil
cwde
setle ch
mov cl, 0xa5
lea rcx, [rsp + 0x50]
setb ah
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x1801cc814
jne 0x1801e2cd4
lea rcx, [rsp + 0x50]
movzx rax, dx
nop
mov eax, 0x51c124ad
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x1801b1ad6
je 0x1801e294e
cmp r11, rsi
jmp 0x1801e2cdc
jne 0x1801e2d81
cmp byte [rsp + 0x1a0], dil
jmp 0x1801e2cef
je 0x1801e2d61
lea rax, [rsp + 0x50]
shl ch, 0xb2
add dl, r10b
sub rbp, rax
nop
lea rdx, [rsp + rdi + 0x50]
mov ecx, edi
clc
movsx ax, r10b
xchg ah, al
mov eax, 0x13f96712
jmp 0x1801e2d1e
rol eax, cl
stc
test rcx, 0x663c3f37
clc
add al, dil
xor al, byte [rdx + rbp]
mov byte [rdx], al
jmp 0x1801e2d36
je 0x1801e2d54
inc rdi
test r11b, r10b
cmp rdi, 0x104
jmp 0x1801e2d4e
jb 0x1801e2d04
lea rbp, [rsp + 0x50]
setp ah
movsx cx, r12b
mov rdx, rbp
mov rcx, rsi
movzx ax, r10b
movzx eax, r8w
setge al
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
jmp 0x1801e2e11
cmp byte [rbx + 1], 0x23
lea rdx, [rbx + 1]
jne 0x1801e2df0
movzx edx, byte [rbx + 2]
add rbx, 2
cmp sp, 0x6740
test r15b, spl
test dl, dl
je 0x1801e2de3
nop
movzx rax, r10w
setae al
lea eax, [rdx - 0x30]
inc rbx
cmp al, 9
ja 0x1801e2de3
movsx eax, dl
or ecx, 0x148c3f12
mov dl, byte [rbx]
lea ecx, [rdi + rdi*4]
and dil, dil
lea edi, [rax + rcx*2 - 0x30]
test r14b, 0xdd
test dl, dl
jmp 0x1801e2ddd
jne 0x1801e2daf
movsxd rdx, edi
jmp 0x1801e2df0
xor r8d, r8d
movsxd rcx, ebp
bswap cx
mov rcx, r11
jmp 0x1801e2e01
call fcn.1801e27ee
jmp 0x1801e2e11
mov eax, edx
add rax, rsi
cmc
mov rbx, qword [rsp + 0x170]
adc sil, 0x10
jmp 0x1801e2e25
mov rdi, qword [rsp + 0x168]
add rsp, 0x178
bswap bp
movzx si, bl
pop rsi
mov bpl, cl
cmovl bp, cx
pop rbp
jmp 0x1801e2e49
ret