Function at 0x140008a9f
Capabilities:
Access peb ldr_data
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
movaps xmmword [rsp + 0xc0], xmm6
lea rsi, [rsp + 0xb8]
and qword [rsi], 0
mov ecx, 0x5f8b75ca
call fcn.140008d7e
lea rdx, [0x140018862]
xor ecx, ecx
xor r8d, r8d
mov r9, rsi
call rax
mov rsi, qword [rsi]
test rsi, rsi
je 0x140008d62
mov rbx, qword [rsi]
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
add rax, 0x20
mov qword [rsp + 0x28], rax
xorps xmm0, xmm0
lea r8, str..data
cmp rcx, qword [rsp + 0x28]
je 0x140008d62
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
movzx r9d, word [rcx + 0x48]
cmp r9, 0x7e
ja 0x140008c50
xor edx, edx
cmp r9, rdx
je 0x140008b94
mov r10, qword [rcx + 0x50]
movzx r10d, word [r10 + rdx*2]
test r10w, r10w
je 0x140008b94
lea r11d, [r10 - 0x61]
lea edi, [r10 - 0x20]
cmp r11w, 0x1a
cmovae edi, r10d
mov word [rsp + rdx*2 + 0x30], di
inc rdx
jmp 0x140008b65
mov edx, 0x250
lea r9, [rsp + 0x30]
movzx r10d, word [r9]
test r10d, r10d
je 0x140008bb6
add r9, 2
xor edx, r10d
imul edx, edx, 0x27d4eb4f
jmp 0x140008b9e
cmp edx, 0xc5499dc8
jne 0x140008c50
mov rax, qword [rcx + 0x20]
mov r10d, dword [rax + 0x3c]
lea r11, [r10 + rax]
add r11, 0x18
mov qword [rsp + 0x20], rax
add r10, rax
movzx edi, word [r11 - 0x12]
xor r14d, r14d
cmp r14, rdi
je 0x140008c50
movzx edx, word [r10 + 0x14]
imul r15, r14, 0x28
add r15, r11
add r15, rdx
xor r12d, r12d
movsx r13d, byte [r15 + r12]
mov dl, byte [r12 + r8]
movsx ebp, dl
test r13d, r13d
je 0x140008c3b
test dl, dl
je 0x140008c3b
lea eax, [r13 - 0x61]
lea r9d, [r13 - 0x20]
cmp al, 0x1a
movzx eax, r9b
cmovae eax, r13d
lea r9d, [rdx - 0x61]
add dl, 0xe0
cmp r9b, 0x1a
movzx edx, dl
cmovb ebp, edx
cmp al, bpl
jne 0x140008c40
inc r12
jmp 0x140008bf9
sub r13d, ebp
jmp 0x140008c46
mov r13d, 1
inc r14
test r13d, r13d
jne 0x140008be2
jmp 0x140008c58
mov rcx, qword [rcx]
jmp 0x140008b18
mov eax, dword [r15 + 8]
mov ecx, dword [r15 + 0xc]
add rcx, qword [rsp + 0x20]
add rax, rcx
cmp rbx, rsi
je 0x140008d62
cmp rbx, rcx
jb 0x140008c7b
cmp rbx, rax
jbe 0x140008c80
mov rbx, qword [rbx]
jmp 0x140008c68
mov ecx, 0xf050db7f
call fcn.140008d7e
mov rcx, rsi
call rax
test rbx, rbx
je 0x140008d62
mov r15, qword [rbx]
movabs r14, 0x60276e7d3234332d
lea rsi, [rsp + 0x30]
mov ebp, 0xa
lea rdi, [0x140098688]
xorps xmm6, xmm6
cmp r15, rbx
je 0x140008d62
movups xmm0, xmmword [0x1400986a0]
movaps xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [0x140098690]
movaps xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x50], r14
mov rcx, rsi
call fcn.140018740
mov rcx, rax
call fcn.140018760
mov r8, 0xffffffffffffffff
mov ecx, r15d
mov eax, ecx
xor edx, edx
div ebp
or dl, 0x30
mov byte [rsp + r8 + 0x31], dl
inc r8
cmp ecx, 9
mov ecx, eax
ja 0x140008cf9
mov byte [rsp + r8 + 0x31], 0
xor eax, eax
cmp rax, r8
jae 0x140008d38
mov cl, byte [rsp + rax + 0x30]
mov dl, byte [rsp + r8 + 0x30]
mov byte [rsp + rax + 0x30], dl
mov byte [rsp + r8 + 0x30], cl
inc rax
dec r8
jmp 0x140008d19
mov rcx, rsi
call fcn.140018760
mov rcx, rdi
call fcn.140018760
mov rax, qword [r15]
mov rcx, qword [r15 + 8]
mov qword [rax + 8], rcx
mov qword [rcx], rax
movups xmmword [r15], xmm6
mov r15, rax
jmp 0x140008cb9
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret