Function at 0x7ffcbe65c435
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call rax
mov r11, rax
cmp sp, si
test r13w, 0x1525
test rax, rax
jmp 0x7ffcbea10651
call rax
mov r11, rax
clc
test rax, rax
jmp 0x7ffcbea10635
mov byte [rsp + 0x18], r8b
cmp dh, 0xee
clc
mov qword [rsp + 0x10], rdx
test rdx, rdx
push rbp
push rsi
sub rsp, 0x178
movzx rsi, r10w
mov rbp, rdx
test r11b, r10b
clc
and sil, r8b
mov rsi, rcx
stc
jmp 0x7ffcbea1019d
test rcx, rcx
jmp 0x7ffcbea101a5
je 0x7ffcbea101cc
test rdx, rdx
jmp 0x7ffcbea101b3
je 0x7ffcbea101cc
mov eax, 0x5a4d
cmp word [rcx], ax
jmp 0x7ffcbea101c6
je 0x7ffcbea101e6
sub eax, eax
shrd rbp, rbp, 0x26
bsf rsi, rdi
add rsp, 0x178
pop rsi
pop rbp
jmp 0x7ffcbea101e5
ret
movsxd rax, dword [rcx + 0x3c]
cmp r13d, 0x362c1322
cmp dword [rax + rcx], 0x4550
jmp 0x7ffcbea101fd
jne 0x7ffcbea101cc
mov r8d, dword [rax + rcx + 0x88]
cmp r13b, 0xa9
cmc
cmp r8d, ebx
mov dword [rsp + 0x30], r8d
test r8d, r8d
je 0x7ffcbea101cc
mov r9d, dword [rax + rcx + 0x8c]
or cx, bp
movzx ecx, r8w
lea rdx, [rsi + r8]
seto ch
mov qword [rsp + 0x170], rbx
shl ch, cl
mov ch, 0xc5
mov qword [rsp + 0x168], rdi
mov ecx, 0xffffffff
cmc
stc
sub edi, edi
clc
mov dword [rsp + 0x20], r9d
cmp r10w, 0x50dc
mov qword [rsp + 0x28], rdx
test r13b, 0xdd
jmp 0x7ffcbea1026f
mov dword [rsp + 0x190], ecx
cmp rbp, 0xffff
jmp 0x7ffcbea10282
ja 0x7ffcbea102c6
mov ecx, ebp
sub ecx, dword [rdx + 0x10]
stc
clc
cmp ecx, dword [rdx + 0x14]
jmp 0x7ffcbea10297
jae 0x7ffcbea102bf
mov eax, dword [rdx + 0x1c]
add rax, rsi
rcr rdx, 0xe4
movsxd rdx, r13d
mov edx, dword [rax + rcx*4]
jmp 0x7ffcbea102b2
test edx, edx
jmp 0x7ffcbea102b9
jne 0x7ffcbea10512
xor eax, eax
jmp 0x7ffcbea107be
mov eax, dword [rdx + 0x18]
jmp 0x7ffcbea102cf
test eax, eax
jmp 0x7ffcbea102d6
je 0x7ffcbea104df
mov r9d, dword [rdx + 0x20]
lea r11d, [rax - 1]
rcl bx, 0xc3
bt bx, 0x4e
mov ebx, edi
cmp r9b, 0xda
lea r9, [r9 + rsi]
mov qword [rsp + 0x40], r9
cmp spl, r15b
clc
test r11d, r11d
js 0x7ffcbea104d9
nop
movzx bp, r15b
mov r10, qword [rsp + 0x198]
sal dl, cl
or r8b, 0x65
stc
lea eax, [r11 + rbx]
shl r8, 0
test r14b, r15b
sal r8, cl
mov rbp, rdi
sar eax, 1
shr r8b, 0x89
mov dword [rsp + 0x1a8], eax
xor r8w, r14w
mov qword [rsp + 0x38], rax
jmp 0x7ffcbea1034a
mov r8d, dword [r9 + rax*4]
movzx rdx, dx
mov eax, dword [r9 + rax*4]
sub r10, rax
sal r9b, 0x80
xor dl, r13b
movzx eax, byte [rsp + 0x1a0]
bt dx, r15w
add r8, rsi
sub r10, rsi
nop
mov r9b, 0xc9
movzx edx, byte [r10 + r8]
inc r9w
movzx r9d, byte [r8]
jmp 0x7ffcbea10389
inc r8
test al, al
je 0x7ffcbea103c1
mov ecx, ebp
mov eax, 0x7f185b4b
clc
stc
jmp 0x7ffcbea103a2
rol eax, cl
add al, bpl
clc
jmp 0x7ffcbea103ad
xor dl, al
mov al, byte [rsp + 0x1a0]
jmp 0x7ffcbea103bb
inc rbp
test r14b, r10b
test dl, dl
jmp 0x7ffcbea103c8
je 0x7ffcbea103dc
cmp dl, r9b
jmp 0x7ffcbea103d6
je 0x7ffcbea10377
cmp dl, r9b
jmp 0x7ffcbea103e4
jb 0x7ffcbea1045c
cmp dl, r9b
jmp 0x7ffcbea103f2
jbe 0x7ffcbea1041d
mov ebx, dword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x28]
setns ch
inc rcx
mov ecx, dword [rsp + 0x190]
jmp 0x7ffcbea10416
inc ebx
jmp 0x7ffcbea10492
mov rdx, qword [rsp + 0x28]
cbw
xchg al, ch
lea ebx, [r11 + 1]
mov eax, dword [rdx + 0x24]
movzx rcx, r10w
setle ch
lea rcx, [rsi + rax]
mov rax, qword [rsp + 0x38]
jmp 0x7ffcbea10442
movzx ecx, word [rcx + rax*2]
jmp 0x7ffcbea1044b
mov dword [rsp + 0x190], ecx
jmp 0x7ffcbea10457
jmp 0x7ffcbea10492
mov r11d, dword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x28]
mov cl, 0xb7
xchg r9w, cx
not r9b
mov ecx, dword [rsp + 0x190]
movsx r9, r13w
movzx r9, si
movzx r9w, bpl
dec r11d
sar r9w, 0x6d
sub r9w, bp
cmp ebx, r11d
mov r9, qword [rsp + 0x40]
jmp 0x7ffcbea1049f
jle 0x7ffcbea1030f
mov rbp, qword [rsp + 0x198]
mov r9w, 0x79d1
movsx r8w, dil
movzx r8d, r12w
mov r8d, dword [rsp + 0x30]
jmp 0x7ffcbea104ca
mov r9d, dword [rsp + 0x20]
jmp 0x7ffcbea104d4
jmp 0x7ffcbea104df
mov r9d, dword [rsp + 0x20]
stc
cmp ecx, dword [rdx + 0x14]
jmp 0x7ffcbea104e7
jae 0x7ffcbea102bf
mov eax, dword [rdx + 0x1c]
lea rax, [rax + rsi]
rcl dh, cl
cmc
test r15b, 0xac
mov edx, dword [rax + rcx*4]
test r15d, 0x74737578
test edx, edx
jmp 0x7ffcbea1050c
je 0x7ffcbea102bf
cmp edx, r8d
jmp 0x7ffcbea1051a
jb 0x7ffcbea107ac
lea eax, [r9 + r8]
test spl, 0x31
cmp sp, 0x21b
jmp 0x7ffcbea10532
cmp edx, eax
jmp 0x7ffcbea10539
jae 0x7ffcbea107ac
mov eax, edx
and bl, r14b
rol bh, 0xbc
xadd bx, cx
add rax, rsi
rcl bx, cl
mov rbx, rax
sbb cl, 0x36
shl rcx, 0x7f
movzx rcx, r13w
movzx ecx, byte [rax]
stc
cmp r12b, r13b
test cl, cl
jmp 0x7ffcbea1056d
je 0x7ffcbea102bf
cmp cl, 0x2e
jmp 0x7ffcbea1057b
je 0x7ffcbea105a5
mov cl, byte [rbx + 1]
jmp 0x7ffcbea10589
inc rbx
test cl, cl
jmp 0x7ffcbea10593
jne 0x7ffcbea10573
xor eax, eax
jmp 0x7ffcbea105a0
jmp 0x7ffcbea107be
mov r8, rbx
clc
cmc
sub r8, rax
cmp bx, 0x279c
cmc
cmp r8, 0x104
jae 0x7ffcbea102bf
mov rcx, rdi
test r8, r8
jmp 0x7ffcbea105cb
je 0x7ffcbea10616
lea r9, [rsp + 0x50]
sub r9, rax
movsx rdx, r11w
rcr dh, 0x8a
nop
xor dl, r13b
movzx edx, byte [rax]
test dl, dl
jmp 0x7ffcbea105ee
je 0x7ffcbea10616
inc rcx
jmp 0x7ffcbea105fc
mov byte [r9 + rax], dl
jmp 0x7ffcbea10605
inc rax
clc
test r8b, dl
stc
cmp rcx, r8
jb 0x7ffcbea105e4
mov byte [rsp + rcx + 0x50], dil
lea rcx, [rsp + 0x50]
cwde
movzx rax, cx
movsx rax, r8w
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x7ffcbe6835c0
jne 0x7ffcbea10657
lea rcx, [rsp + 0x50]
xchg ah, al
setge al
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x7ffcbe65c433
je 0x7ffcbea102bf
cmp r11, rsi
jmp 0x7ffcbea1065f
jne 0x7ffcbea10701
cmp byte [rsp + 0x1a0], dil
je 0x7ffcbea106e5
lea rax, [rsp + 0x50]
btc edx, r8d
mov dx, 0x1698
sar ecx, cl
sub rbp, rax
xchg cx, ax
movsx cx, ah
nop
lea rdx, [rsp + rdi + 0x50]
mov ecx, edi
bswap rax
bts rax, r14
mov eax, 0x7f185b4b
rol eax, cl
clc
cmp ebp, 0x9235b8
cmc
add al, dil
jmp 0x7ffcbea106b1
xor al, byte [rdx + rbp]
mov byte [rdx], al
jmp 0x7ffcbea106bb
je 0x7ffcbea106d6
inc rdi
cmp rdi, 0x104
jmp 0x7ffcbea106d0
jb 0x7ffcbea1068c
lea rbp, [rsp + 0x50]
jmp 0x7ffcbea106e5
mov rdx, rbp
movzx cx, r12b
lahf
cbw
mov rcx, rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
jmp 0x7ffcbea107be
cmp byte [rbx + 1], 0x23
cmovo edx, r14d
movzx dx, r10b
mov dx, 0x27ba
lea rdx, [rbx + 1]
jmp 0x7ffcbea1071b
jne 0x7ffcbea1078c
movzx edx, byte [rbx + 2]
stc
add rbx, 2
jmp 0x7ffcbea10733
test dl, dl
jmp 0x7ffcbea1073a
je 0x7ffcbea10789
nop
cmovl rax, r10
cbw
movzx rax, r8w
lea eax, [rdx - 0x30]
jmp 0x7ffcbea10753
inc rbx
cmp al, 9
jmp 0x7ffcbea1075d
ja 0x7ffcbea10789
movsx eax, dl
setle ch
mov dl, byte [rbx]
xadd cl, cl
lea ecx, [rdi + rdi*4]
movsx rdi, r14w
add dil, r12b
lea edi, [rax + rcx*2 - 0x30]
test dl, dl
jmp 0x7ffcbea10783
jne 0x7ffcbea1074b
movsxd rdx, edi
xor r8d, r8d
movsx cx, bl
xchg ch, ch
movzx cx, dil
mov rcx, r11
jmp 0x7ffcbea107a2
call fcn.7ffcbea1016c
jmp 0x7ffcbea107be
mov eax, edx
movzx rbx, r10w
seta dil
lea rax, [rax + rsi]
cmp r10b, 0x9b
mov rbx, qword [rsp + 0x170]
sbb dil, r12b
rcr dil, cl
cmp r12w, 0x30bc
mov rdi, qword [rsp + 0x168]
add rsp, 0x178
pop rsi
movsx rbp, bp
pop rbp
jmp 0x7ffcbea107ec
ret