Function at 0x18001e3d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
and byte [rdx + 0x401], 0xf6
mov rdi, rdx
and dword [rdx + 0xc], 0xfeffffff
mov rbx, rcx
mov rsi, qword [rdx + 0x390]
mov rbp, qword [0x1803d9690]
mov qword [rdx + 0x420], 0
mov dword [rdx + 0x430], r8d
test rsi, rsi
je 0x18001e46c
mov rdx, qword [rsi + 0x1b8]
movsxd r8, dword [rsi + 0x1b0]
mov rax, rdx
lea rcx, [rdx + r8*8]
cmp rdx, rcx
jae 0x18001e46c
cmp qword [rax], rdi
je 0x18001e447
add rax, 8
cmp rax, rcx
jb 0x18001e437
jmp 0x18001e46c
sub rax, rdx
sar rax, 3
sub r8, rax
lea rcx, [rdx + rax*8]
lea r8, [r8*8 - 8]
lea rdx, [rcx + 8]
call sub.VCRUNTIME140.dll_memmove
dec dword [rsi + 0x1b0]
mov qword [rdi + 0x390], 0
mov qword [rdi + 0x3c0], rdi
mov qword [rdi + 0x3b8], rdi
mov qword [rdi + 0x3b0], rdi
mov qword [rdi + 0x3a8], rdi
mov qword [rdi + 0x3a0], rdi
test dword [rdi + 0xc], 0x800000
je 0x18001e4ca
mov rcx, rdi
nop word [rax + rax]
mov rax, qword [rcx + 0x390]
mov qword [rdi + 0x3c0], rax
mov rcx, rax
test dword [rax + 0xc], 0x800000
jne 0x18001e4b0
movsxd rdx, dword [rbx + 0x30]
xor eax, eax
test edx, edx
jle 0x18001e511
mov r8, qword [rbx + 0x38]
mov rcx, r8
nop dword [rax + rax]
cmp qword [rcx], rdi
je 0x18001e4f1
inc eax
add rcx, 8
cmp eax, edx
jl 0x18001e4e0
jmp 0x18001e511
cdqe
lea rcx, [r8 + rax*8]
mov r8, rdx
sub r8, rax
lea rdx, [rcx + 8]
lea r8, [r8*8 - 8]
call sub.VCRUNTIME140.dll_memmove
dec dword [rbx + 0x30]
cmp qword [rbx + 0x90], rdi
jne 0x18001e525
mov qword [rbx + 0x90], 0
or byte [rbx + 0xc9], 2
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x18001e55a
mov edx, dword [rdi + 0x90]
call fcn.180052940
mov eax, dword [rbx + 0x10]
shr eax, 0xb
not eax
and eax, 1
inc eax
cmp dword [rbx + 0x30], eax
jge 0x18001e55a
mov rcx, rbx
call fcn.180020df0
mov edx, dword [rbx + 0x30]
test edx, edx
jne 0x18001e587
test dword [rbx + 0x10], 0xc00
jne 0x18001e587
mov eax, dword [rbx]
cmp dword [rdi + 0x430], eax
je 0x18001e587
mov r8b, 1
mov rdx, rbx
mov rcx, rbp
call fcn.18001cb10
jmp 0x18001e661
mov r8d, edx
cmp edx, 1
jne 0x18001e5ef
mov eax, dword [rbx + 0x10]
shr eax, 0xb
test dl, al
jne 0x18001e5ef
mov rcx, qword [rbx + 0x88]
test rcx, rcx
je 0x18001e5ef
cmp byte [rcx + 0xca], 0
mov rax, qword [rbx + 0x38]
mov rdx, qword [rax]
je 0x18001e5d7
cmp qword [rbx + 0x18], 0
jne 0x18001e5d7
mov rax, qword [rcx + 0x30]
mov qword [rax + 0x88], rdx
mov rax, qword [rbx + 0x88]
mov rcx, qword [rax + 0x30]
mov eax, dword [rdx + 8]
mov dword [rcx], eax
mov rax, qword [rbx + 0x88]
movzx ecx, byte [rax + 0xce]
mov byte [rdx + 0xce], cl
mov r8d, dword [rbx + 0x30]
mov ecx, dword [rbx + 0x10]
mov eax, ecx
shr eax, 0xb
shr ecx, 0xa
cmp qword [rbx + 0x18], 0
movzx eax, al
movzx r9d, cl
cmovne r9d, eax
mov rax, qword [rbx + 0x20]
test rax, rax
je 0x18001e620
test byte [rax + 0xc8], 1
je 0x18001e620
mov al, 1
jmp 0x18001e622
xor al, al
movzx edx, al
test r8d, r8d
mov eax, 1
cmovg edx, eax
mov rax, qword [rbx + 0x28]
or dl, r9b
test rax, rax
je 0x18001e649
test byte [rax + 0xc8], 1
je 0x18001e649
mov cl, 1
jmp 0x18001e64b
xor cl, cl
movzx eax, byte [rbx + 0xc8]
or cl, dl
and cl, 1
and al, 0xfe
xor cl, al
mov byte [rbx + 0xc8], cl
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret