Function at 0x140b1950e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call rax
mov r11, rax
test r13w, r13w
test rax, rax
jmp 0x140db49f2
call rax
mov r11, rax
stc
test rax, rax
jmp 0x140db49d1
call rax
jmp 0x140db4b50
mov byte [rsp + 0x18], r8b
cmp r9b, 0x55
mov qword [rsp + 0x10], rdx
stc
test r9b, r9b
push rbp
rol rbp, cl
bts rbp, rcx
sal bp, cl
push rsi
sub rsp, 0x178
shr bpl, cl
cmp bp, 0x2e3e
and bp, 0x7fbb
mov rbp, rdx
sal sil, cl
shrd si, r8w, 0x8e
movsxd rsi, r12d
mov rsi, rcx
test rcx, rcx
jmp 0x140db452f
je 0x140db455e
test rdx, rdx
jmp 0x140db453d
je 0x140db455e
mov eax, 0x5a4d
test cx, 0x1611
test r13b, bpl
cmp word [rcx], ax
jmp 0x140db4558
je 0x140db4579
xor eax, eax
stc
sbb esi, 0x21407b05
add rsp, 0x178
mov bpl, reloc.WLDAP32.dll_Ordinal_45
pop rsi
pop rbp
jmp 0x140db4578
ret
movsxd rax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jmp 0x140db4589
jne 0x140db455e
mov r8d, dword [rax + rcx + 0x88]
mov dword [rsp + 0x30], r8d
test r8d, r8d
je 0x140db455e
mov r9d, dword [rax + rcx + 0x8c]
not dh
movzx dx, ch
lea rdx, [rsi + r8]
shr rcx, 0xc0
rcr ecx, cl
seto cl
mov qword [rsp + 0x170], rbx
shr ch, 0xe4
add cx, 0x3ee8
setb ch
mov qword [rsp + 0x168], rdi
bts cx, di
bt rcx, 0x7c
xor cl, r9b
mov ecx, 0xffffffff
test bl, 0xf5
cmp r12w, r8w
cmc
sub edi, edi
test esi, ecx
mov dword [rsp + 0x20], r9d
test r15b, 0x70
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x190], ecx
cmp rbp, 0xffff
jmp 0x140db4619
ja 0x140db466e
mov ecx, ebp
clc
sub ecx, dword [rdx + 0x10]
cmp ecx, dword [rdx + 0x14]
jmp 0x140db462d
jae 0x140db4662
mov eax, dword [rdx + 0x1c]
or dl, r15b
add rax, rsi
sal dx, cl
shld dx, r10w, 0xbd
bswap rdx
mov edx, dword [rax + rcx*4]
cmp r13w, r9w
jmp 0x140db4655
test edx, edx
jmp 0x140db465c
jne 0x140db48a9
sub eax, eax
jmp 0x140db4669
jmp 0x140db4b50
mov eax, dword [rdx + 0x18]
clc
test bpl, dl
test eax, eax
jmp 0x140db467c
je 0x140db4886
mov r9d, dword [rdx + 0x20]
lea r11d, [rax - 1]
movzx ebx, r11w
shl bh, cl
mov ebx, edi
add r9, rsi
jmp 0x140db469a
mov qword [rsp + 0x40], r9
test r11d, r11d
jmp 0x140db46a7
js 0x140db4879
nop
rol bpl, cl
mov r10, qword [rsp + 0x198]
lea eax, [r11 + rbx]
mov rbp, rdi
cmovl dx, si
sar eax, 1
movzx r8, ax
sal dx, 0xb7
rol r8d, cl
mov dword [rsp + 0x1a8], eax
or r8, r15
mov qword [rsp + 0x38], rax
mov r8d, dword [r9 + rax*4]
sub dl, bh
ror rdx, cl
mov eax, dword [r9 + rax*4]
shld r9, r14, 0x71
cwd
sub r10, rax
btr r9, 0x9b
bswap ax
movzx eax, byte [rsp + 0x1a0]
add r8, rsi
sub r9b, r14b
sub r10, rsi
movzx rdx, ax
nop
not r9b
cwd
movzx edx, byte [r10 + r8]
movsx r9d, r15w
mov r9b, Ordinal_41
movsx r9, r13w
movzx r9d, byte [r8]
jmp 0x140db4733
inc r8
cmp r14d, 0x12692543
test al, al
jmp 0x140db4744
je 0x140db476f
mov ecx, ebp
movsxd rax, r14d
mov eax, 0x16a477cd
stc
rol eax, cl
jmp 0x140db475c
add al, bpl
cmp dil, 0xfb
xor dl, al
mov al, byte [rsp + 0x1a0]
inc rbp
test dl, dl
jmp 0x140db4776
je 0x140db478a
cmp dl, r9b
jmp 0x140db4784
je 0x140db471a
cmp dl, r9b
jmp 0x140db4792
jb 0x140db4810
cmp dl, r9b
jmp 0x140db47a0
jbe 0x140db47d0
mov ebx, dword [rsp + 0x1a8]
movsx ecx, cx
mov rdx, qword [rsp + 0x28]
mov ecx, r15d
mov ecx, dword [rsp + 0x190]
jmp 0x140db47c4
inc ebx
jmp 0x140db47cb
jmp 0x140db483c
mov rdx, qword [rsp + 0x28]
movsx ebx, sp
cbw
movzx rcx, si
lea ebx, [r11 + 1]
movsx ecx, si
mov rcx, rcx
xchg ecx, eax
mov eax, dword [rdx + 0x24]
lea rcx, [rsi + rax]
lahf
mov rax, qword [rsp + 0x38]
jmp 0x140db47fb
movzx ecx, word [rcx + rax*2]
mov dword [rsp + 0x190], ecx
jmp 0x140db480b
jmp 0x140db483c
mov r11d, dword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x28]
movsx r9w, r10b
movzx cx, r15b
mov ecx, dword [rsp + 0x190]
movsx r9d, si
inc r9w
dec r9b
dec r11d
cmp ebx, r11d
mov r9b, 0x69
setae r9b
mov r9, qword [rsp + 0x40]
jle 0x140db46b1
mov rbp, qword [rsp + 0x198]
jmp 0x140db4867
mov r8d, dword [rsp + 0x30]
xchg r9b, r9b
mov r9d, dword [rsp + 0x20]
jmp 0x140db4886
mov r9d, dword [rsp + 0x20]
jmp 0x140db4886
cmp ecx, dword [rdx + 0x14]
jae 0x140db4662
mov eax, dword [rdx + 0x1c]
add rax, rsi
cdq
add rdx, r15
mov edx, dword [rax + rcx*4]
test edx, edx
jmp 0x140db48a3
je 0x140db4662
cmp edx, r8d
jmp 0x140db48b1
jb 0x140db4b47
lea eax, [r9 + r8]
stc
test r14b, 0xbd
cmp edx, eax
jae 0x140db4b47
mov eax, edx
jmp 0x140db48d6
add rax, rsi
rcl bx, 0x8e
bt rbx, 0xc8
rcr cx, cl
mov rbx, rax
bt ecx, r9d
rcr cx, cl
rcr cx, 0xe4
movzx ecx, byte [rax]
cmp r12b, 0xab
jmp 0x140db48ff
test cl, cl
jmp 0x140db4906
je 0x140db4662
cmp cl, 0x2e
je 0x140db493b
mov cl, byte [rbx + 1]
jmp 0x140db491d
inc rbx
cmp r11, 0x3a9d1354
test cl, cl
jmp 0x140db492e
jne 0x140db490c
xor eax, eax
jmp 0x140db4b50
mov r8, rbx
test r9w, ax
cmp esp, ebx
sub r8, rax
cmp r14w, bx
cmc
cmp r8, 0x104
jmp 0x140db4958
jae 0x140db4662
mov rcx, rdi
test r8, r8
je 0x140db49ad
lea r9, [rsp + 0x50]
sub r9, rax
nop
movzx edx, byte [rax]
jmp 0x140db4987
test dl, dl
je 0x140db49ad
inc rcx
jmp 0x140db4997
mov byte [r9 + rax], dl
jmp 0x140db49a0
inc rax
stc
cmp rcx, r8
jb 0x140db4973
mov byte [rsp + rcx + 0x50], dil
lahf
lea rcx, [rsp + 0x50]
movsx rax, cx
movzx ax, r14b
movzx rax, si
mov rax, qword [0x140d48210]
jmp 0x140b4f292
jne 0x140db49f8
lea rcx, [rsp + 0x50]
cdqe
movzx ax, r13b
movsxd rax, r12d
mov rax, qword [0x140d48208]
jmp 0x140b1950c
je 0x140db4662
cmp r11, rsi
jmp 0x140db4a00
jne 0x140db4aa1
cmp byte [rsp + 0x1a0], dil
jmp 0x140db4a13
je 0x140db4a7f
lea rax, [rsp + 0x50]
btc cx, 0x9e
sub rbp, rax
cbw
bt dx, r12w
nop
cqo
lea rdx, [rsp + rdi + 0x50]
mov ch, dh
clc
mov ecx, edi
jmp 0x140db4a3f
mov eax, 0x16a477cd
rol eax, cl
clc
stc
add al, dil
jmp 0x140db4a50
xor al, byte [rdx + rbp]
jmp 0x140db4a58
mov byte [rdx], al
jmp 0x140db4a5f
je 0x140db4a7a
inc rdi
cmp rdi, 0x104
jmp 0x140db4a74
jb 0x140db4a30
lea rbp, [rsp + 0x50]
mov rdx, rbp
movzx rax, r11w
lahf
mov rcx, rsi
cmovg rax, r15
mov ah, 0xb5
movsx rax, ax
mov rax, qword [0x140d48218]
jmp 0x140d2950d
cmp byte [rbx + 1], 0x23
movzx dx, r10b
lea rdx, [rbx + 1]
jne 0x140db4b27
movzx edx, byte [rbx + 2]
test r15d, 0x3e5e2d59
jmp 0x140db4ac8
add rbx, 2
cmp dil, 0x1e
stc
clc
test dl, dl
je 0x140db4b24
nop
cdqe
cbw
lea eax, [rdx - 0x30]
jmp 0x140db4ae7
inc rbx
clc
jmp 0x140db4af0
cmp al, 9
jmp 0x140db4af7
ja 0x140db4b24
movsx eax, dl
stc
mov dl, byte [rbx]
lea ecx, [rdi + rdi*4]
movsxd rdi, r15d
movsx rdi, r9w
shr dil, 0xd
lea edi, [rax + rcx*2 - 0x30]
cmc
clc
test dl, dl
jmp 0x140db4b1e
jne 0x140db4adf
movsxd rdx, edi
xor r8d, r8d
movsx rcx, si
bswap cx
movsx ecx, r11w
mov rcx, r11
jmp 0x140db4b3d
call fcn.140db44e3
jmp 0x140db4b50
mov eax, edx
sub dil, 0x36
add rax, rsi
mov rbx, qword [rsp + 0x170]
test r15b, 0x8c
bswap rdi
jmp 0x140db4b64
mov rdi, qword [rsp + 0x168]
add rsp, 0x178
movsxd rsi, esp
pop rsi
mov bp, 0x3599
movzx ebp, r12w
setbe bpl
pop rbp
jmp 0x140db4b89
ret