Function at 0x1403b4a36
Capabilities:
Access peb ldr_data
Encrypt data using rc4 prga

Disassembly:
push rsi
mov r8b, 5
and r8w, di
shr ch, 0x86
push rdi
push rbx
not ecx
sub rsp, 0x250
lea rbx, [rsp + 0x40]
mov r8d, 0x208
sal ch, 0x13
xadd ecx, ecx
movzx rcx, sp
mov rcx, rbx
cmc
cmp r14w, 0x4f90
sub edx, edx
jmp 0x1403b4a72
call fcn.1404580e6
movzx esi, word [0x1400b5f50]
test si, si
jmp 0x1403b4a86
jne 0x1403b4b5f
mov rax, qword gs:[0x30]
ror dl, cl
cmp r9w, dx
shr dil, cl
mov rax, qword [rax + 0x60]
sbb dh, 0xdc
rcr dl, cl
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
movzx edx, word [rcx + 0x58]
cmp rdx, 0x104
mov eax, 0x104
cmovb rax, rdx
bts di, r12w
mov rdx, qword [rcx + 0x60]
movzx edi, word [rdx]
movzx ecx, r10w
inc ch
lea rcx, [0x1400b5f50]
test di, di
je 0x1403b4b30
sub esi, esi
test r11, r12
test r11, 0x31326975
nop dword [rax]
stc
cmp rax, rsi
jmp 0x1403b4b01
je 0x1403b4b3e
mov word [rcx], di
rcr dil, cl
add rcx, 2
movzx edi, word [rdx + rsi*2 + 2]
add rsi, 1
cmp r11b, r10b
test di, di
jmp 0x1403b4b25
jne 0x1403b4af9
sub rax, rsi
stc
clc
test rax, rax
jmp 0x1403b4b38
je 0x1403b4b4a
mov word [rcx], 0
ror sil, 0x88
shl sil, cl
movzx esi, word [0x1400b5f50]
test si, si
jmp 0x1403b4b59
je 0x1403b4c6a
mov eax, 0x104
btr edx, 0xec
xor ecx, ecx
btr dx, sp
cmovp bx, r13w
movzx ebx, bp
lea rdx, [0x1400b5f50]
sub ebx, ecx
or bx, 0x5b90
sar bh, cl
nop word cs:[rax + rax]
ror ebx, cl
nop
cmc
movsx ebx, r10w
mov word [rsp + rcx + 0x40], si
bts ebx, r13d
movzx ebx, word [rcx + rdx + 2]
stc
test bx, bx
je 0x1403b4c1a
mov word [rsp + rcx + 0x42], bx
bt ebx, esi
movsx bx, ch
movzx ebx, word [rcx + rdx + 4]
test bx, bx
je 0x1403b4c42
cmp rcx, 0x204
je 0x1403b4c62
add rax, 0xfffffffffffffffd
add rsi, r13
jmp 0x1403b4be8
mov word [rsp + rcx + 0x44], bx
movzx esi, word [rcx + rdx + 6]
stc
test bh, 0xd9
clc
add rcx, 6
test dil, r9b
test si, si
jmp 0x1403b4c06
jne 0x1403b4b98
lea rbx, [rsp + rcx]
stc
add rbx, 0x40
jmp 0x1403b4c4f
lea rbx, [rsp + rcx]
cmp bx, r10w
test r11w, bp
test r12b, 0x78
add rbx, 0x42
cmc
jmp 0x1403b4c34
add rax, 0xffffffffffffffff
jmp 0x1403b4c3d
jmp 0x1403b4c4f
lea rbx, [rsp + rcx]
add rbx, 0x44
clc
add rax, 0xfffffffffffffffe
test rax, rax
jmp 0x1403b4c57
jne 0x1403b4c6a
jmp 0x1403b4c7b
lea rbx, [rsp + rcx]
add rbx, 0x44
mov word [rbx], 0
movsx dx, bpl
jmp 0x1403b4c7b
lea rcx, [0x1400b5f50]
mov edx, 0xc
jmp 0x1403b4c8c
call fcn.1403fc6e3
movabs rax, 0x9f2148e5e0165d1b
setp ch
mov qword [rsp + 0x20], rax
cdqe
movabs rax, 0xbfbb7414416b3872
bswap cx
cmovg cx, dx
mov qword [rsp + 0x28], rax
seto cl
movzx cx, sil
movsx rcx, ax
movabs rcx, 0x9f44489de0735d35
jmp 0x1403b4cd6
mov qword [rsp + 0x30], rcx
jmp 0x1403b4ce0
mov qword [rsp + 0x38], rax
bswap eax
jmp 0x1403b4cf1
lea rax, [rsp + 0x30]
jmp 0x1403b4cfb
movdqa xmm0, xmmword [rsp + 0x20]
pxor xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x20], xmm0
movd ecx, xmm0
lea rax, [0x1400b5f4e]
jmp 0x1403b4d1f
nop dword [rax]
cmp word [rax + 2], 0
lea rax, [rax + 2]
jne 0x1403b4d26
test cx, cx
je 0x1403b4d7f
lea rdx, [rsp + 0x22]
clc
nop word cs:[rax + rax]
nop
mov word [rax], cx
rcl cl, 0x6a
bts ecx, r9d
add rax, 2
movzx cx, r10b
movzx ecx, word [rdx]
test spl, 0xaa
clc
add rdx, 2
test cl, 0xd6
test cx, cx
jmp 0x1403b4d79
jne 0x1403b4d4f
mov word [rax], 0
mov cx, 0xb17
lea rdx, [0x1400b5f50]
movzx ecx, bx
movzx cx, ch
lea rcx, [rsp + 0x40]
call qword [0x1400db028]
nop
movsx bx, dl
add rsp, 0x250
jmp 0x1403b4db6
pop rbx
jmp 0x1403b4dc0
pop rdi
movzx si, r13b
pop rsi
jmp 0x1403b4dcc
ret