Function at 0x1400b9dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rsi, rcx
mov r13d, dword [rcx + 0x24]
mov r14d, dword [rcx + 0x28]
mov ecx, dword [rcx + 0x2c]
mov r10d, dword [rsi + 0x54]
mov ebp, dword [rsi + 0x50]
mov r15, qword [rsi + 0x30]
mov r11, qword [rsi + 0x38]
mov ebx, r13d
and ebx, 0x7fff
lea rax, [rsi + 0xc8]
mov qword [rsp + 0x60], rax
lea rax, [rsi + 0x80c8]
mov qword [rsp + 0x80], rax
lea rax, [rsi + 0x192a2]
mov qword [rsp + 0x70], rax
lea rax, [rsi + 0x1c8]
mov qword [rsp + 0x68], rax
lea rax, [rsi + 0xd0]
mov qword [rsp + 0x78], rax
mov rax, qword [rsi + 0xb8]
test rax, rax
je 0x1400ba2e3
mov dword [rsp + 0x58], ecx
mov qword [rsp + 0x48], r11
mov dword [rsp + 0x2c], r10d
mov edx, 0x1000
mov rcx, r14
mov qword [rsp + 0x30], r14
sub edx, r14d
cmp rax, rdx
cmovb rdx, rax
sub rax, rdx
mov qword [rsi + 0xb8], rax
mov qword [rsp + 0x50], rdx
test rdx, rdx
je 0x1400b9f0e
mov rax, qword [rsp + 0x30]
lea r12d, [rax + r13]
mov rdx, qword [rsi + 0xb0]
mov rax, qword [rsp + 0x50]
mov r14d, eax
and r12d, 0x7fff
mov edi, 0x8000
sub edi, r12d
cmp edi, r14d
cmovae edi, r14d
mov rax, qword [rsp + 0x60]
lea rcx, [rax + r12]
mov r8, rdi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
cmp r12d, 0x100
ja 0x1400b9ef5
mov rax, qword [rsp + 0x80]
lea rcx, [rax + r12]
mov rdx, qword [rsi + 0xb0]
mov r8d, 0x101
sub r8d, r12d
cmp edi, r8d
cmovb r8d, edi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov rdx, rdi
add rdx, qword [rsi + 0xb0]
mov qword [rsi + 0xb0], rdx
add r12d, edi
sub r14d, edi
jne 0x1400b9e9d
mov r14, qword [rsp + 0x30]
add r14d, dword [rsp + 0x50]
mov edi, 0x8000
sub edi, r14d
mov eax, dword [rsp + 0x58]
cmp edi, eax
cmovae edi, eax
cmp dword [rsi + 0xa8], 0
jne 0x1400b9f3f
cmp r14d, 0x1000
jb 0x1400ba311
cmp r14d, 4
mov r10d, dword [rsp + 0x2c]
mov r11, qword [rsp + 0x48]
jb 0x1400ba232
mov r12d, ebx
mov eax, dword [rsi + r12 + 0xc8]
mov ecx, eax
and ecx, 0xffffff
mov edx, ecx
shr edx, 0x11
mov r8d, eax
and r8d, 0xfff
xor r8d, edx
movzx r9d, word [rsi + r8*2 + 0x292aa]
mov word [rsi + r8*2 + 0x292aa], r13w
mov edx, r13d
sub edx, r9d
movzx edx, dx
mov dword [rsp + 0x50], edx
cmp edi, edx
jb 0x1400ba093
mov edx, r9d
and edx, 0x7fff
mov r8, qword [rsp + 0x60]
mov r8d, dword [r8 + rdx]
mov ebx, 0xffffff
and r8d, ebx
cmp r8d, ecx
jne 0x1400ba093
mov qword [rsp + 0x48], r11
mov dword [rsp + 0x2c], r10d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x58], r13
mov rcx, qword [rsp + 0x60]
add rcx, r12
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x68]
lea r13, [rcx + r12]
mov qword [rsp + 0x40], r12
lea r14, [rsi + r12]
mov rcx, qword [rsp + 0x78]
lea r12, [rcx + rdx]
mov r8d, 0x20
xor ecx, ecx
lea r10, [r14 + rcx]
add r10, 0xc8
movzx r11d, word [r10 + 2]
movzx ebx, word [r12 + rcx - 6]
cmp r11w, bx
jne 0x1400ba136
movzx r11d, word [r14 + rcx + 0xcc]
movzx ebx, word [r12 + rcx - 4]
cmp r11w, bx
jne 0x1400ba13c
movzx r11d, word [r14 + rcx + 0xce]
movzx ebx, word [r12 + rcx - 2]
cmp r11w, bx
jne 0x1400ba142
movzx r11d, word [r14 + rcx + 0xd0]
movzx ebx, word [r12 + rcx]
cmp r11w, bx
jne 0x1400ba222
dec r8d
add rcx, 8
cmp ecx, 0x100
jne 0x1400ba006
mov r11b, byte [r13]
mov rcx, qword [rsp + 0x68]
mov bl, byte [rcx + rdx]
xor r8d, r8d
jmp 0x1400ba149
mov byte [r15], al
shr byte [r11], 1
inc r15
movzx eax, al
mov ebx, 1
mov rcx, r15
inc word [rsi + rax*2 + 0x81ca]
xor r15d, r15d
dec ebp
cmove r11, rcx
sete r15b
mov eax, 8
cmove ebp, eax
add r15, rcx
add r10d, ebx
add r13d, ebx
add edi, ebx
mov eax, 0x8000
cmp edi, eax
cmovae edi, eax
sub r14d, ebx
cmp r15, qword [rsp + 0x70]
jbe 0x1400ba11e
mov dword [rsi + 0x24], r13d
mov dword [rsi + 0x28], r14d
mov dword [rsi + 0x2c], edi
mov dword [rsi + 0x54], r10d
mov qword [rsi + 0x30], r15
mov qword [rsi + 0x38], r11
mov dword [rsi + 0x50], ebp
mov rcx, rsi
xor edx, edx
call fcn.1400bad20
test eax, eax
jne 0x1400ba2f7
mov r10d, dword [rsi + 0x54]
mov r15, qword [rsi + 0x30]
mov r11, qword [rsi + 0x38]
mov ebp, dword [rsi + 0x50]
add ebx, r12d
and ebx, 0x7fff
cmp r14d, 3
ja 0x1400b9f53
jmp 0x1400ba232
add r10, 2
jmp 0x1400ba146
add r10, 4
jmp 0x1400ba146
add r10, 6
mov r13, r10
mov r14, qword [rsp + 0x30]
mov r10d, dword [rsp + 0x2c]
mov r12, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
sub r13d, ecx
and r13d, 0xfffffffe
xor ecx, ecx
cmp r11b, bl
sete cl
or ecx, r13d
mov r13, qword [rsp + 0x58]
cmp r9w, r13w
mov ebx, 0x102
mov edx, 0
cmove ebx, edx
test r8d, r8d
cmovne ebx, ecx
cmp ebx, 3
jae 0x1400ba19d
mov byte [r15], al
mov r11, qword [rsp + 0x48]
jmp 0x1400ba096
cmp dword [rsp + 0x50], 0x2000
jb 0x1400ba1ac
cmp ebx, 3
je 0x1400ba190
cmp ebx, r14d
cmovae ebx, r14d
mov r9d, dword [rsp + 0x50]
dec r9d
lea eax, [rbx - 3]
mov byte [r15], al
mov dword [r15 + 1], r9d
add r15, 3
mov r11, qword [rsp + 0x48]
mov cl, byte [r11]
shr cl, 1
or cl, 0x80
mov byte [r11], cl
mov ecx, r9d
and ecx, 0x1ff
lea rdx, [0x1400d3c30]
add rcx, rdx
mov edx, r9d
shr edx, 8
lea r8, [0x1400d3e30]
add rdx, r8
cmp r9d, 0x200
cmovb rdx, rcx
movzx ecx, byte [rdx]
inc word [rsi + rcx*2 + 0x840a]
lea rcx, [0x1400d3eb0]
movzx eax, word [rcx + rax*2]
jmp 0x1400ba0a4
lea r13, [r14 + rcx]
add r13, 0xd0
jmp 0x1400ba149
mov r12d, r14d
xor r14d, r14d
mov ecx, edi
test r12d, r12d
je 0x1400b9e38
dec r12d
mov eax, ebx
movzx eax, byte [rsi + rax + 0xc8]
mov byte [r15], al
shr byte [r11], 1
inc r10d
lea rcx, [r15 + 1]
dec ebp
add r15, 2
test ebp, ebp
cmove r11, rcx
cmovne r15, rcx
mov ecx, 8
cmove ebp, ecx
inc word [rsi + rax*2 + 0x81ca]
inc r13d
inc edi
mov eax, 0x8000
cmp edi, eax
cmovae edi, eax
cmp r15, qword [rsp + 0x70]
jbe 0x1400ba2ca
mov dword [rsi + 0x24], r13d
mov dword [rsi + 0x28], r12d
mov dword [rsi + 0x2c], edi
mov dword [rsi + 0x54], r10d
mov qword [rsi + 0x30], r15
mov qword [rsi + 0x38], r11
mov dword [rsi + 0x50], ebp
mov rcx, rsi
xor edx, edx
call fcn.1400bad20
test eax, eax
jne 0x1400ba2f7
mov r10d, dword [rsi + 0x54]
mov r15, qword [rsi + 0x30]
mov r11, qword [rsi + 0x38]
mov ebp, dword [rsi + 0x50]
inc ebx
and ebx, 0x7fff
add r12d, 0xffffffff
jb 0x1400ba246
mov ecx, edi
jmp 0x1400b9e38
cmp dword [rsi + 0xa8], 0
je 0x1400ba31d
test r14d, r14d
jne 0x1400b9e48
jmp 0x1400ba31d
setns al
movzx eax, al
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, edi
mov r10d, dword [rsp + 0x2c]
mov r11, qword [rsp + 0x48]
mov dword [rsi + 0x24], r13d
mov dword [rsi + 0x28], r14d
mov dword [rsi + 0x2c], ecx
mov dword [rsi + 0x54], r10d
mov qword [rsi + 0x30], r15
mov qword [rsi + 0x38], r11
mov dword [rsi + 0x50], ebp
mov al, 1
jmp 0x1400ba2fa