Function at 0x1806262d2
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call rax
mov r11, rax
cmc
test rax, rax
jmp 0x18072fa79
call rax
mov r11, rax
cmp ax, bx
test r8b, r9b
jmp 0x18072fa5a
call rax
jmp 0x18072fbea
mov byte [rsp + 0x18], r8b
cmc
test bp, r11w
mov qword [rsp + 0x10], rdx
cmp ecx, r14d
clc
push rbp
movzx bp, cl
push rsi
shrd bp, cx, 0xbf
movzx esi, ax
sub rsp, 0x178
sub esi, r8d
mov sil, spl
mov rbp, rdx
mov rsi, rcx
test rcx, rcx
jmp 0x18072f582
je 0x18072f5a9
test rdx, rdx
jmp 0x18072f590
je 0x18072f5a9
mov eax, 0x5a4d
cmp word [rcx], ax
jmp 0x18072f5a3
je 0x18072f5cf
xor eax, eax
shr sil, 0x87
rol bpl, 0xef
xchg bp, bp
add rsp, 0x178
not esi
pop rsi
movzx bp, r12b
xchg bp, bp
movsx bp, r12b
pop rbp
ret
movsxd rax, dword [rcx + 0x3c]
clc
cmp dword [rax + rcx], 0x4550
jmp 0x18072f5e0
jne 0x18072f5a9
mov r8d, dword [rax + rcx + 0x88]
mov dword [rsp + 0x30], r8d
test r8d, r8d
je 0x18072f5a9
mov r9d, dword [rax + rcx + 0x8c]
movzx cx, bpl
and rdx, 0x152175d5
shr ch, 0x60
lea rdx, [rsi + r8]
adc ch, dl
not ch
mov qword [rsp + 0x170], rbx
or cx, cx
mov qword [rsp + 0x168], rdi
sar cl, 0xb1
rcl rcx, cl
mov ecx, 0xffffffff
sub edi, edi
cmp dl, r11b
jmp 0x18072f643
mov dword [rsp + 0x20], r9d
cmp r13w, cx
cmp r12b, 0x80
mov qword [rsp + 0x28], rdx
clc
cmc
mov dword [rsp + 0x190], ecx
stc
cmp rbp, 0xffff
jmp 0x18072f66b
ja 0x18072f6b8
mov ecx, ebp
cmc
stc
test r10b, 0x14
sub ecx, dword [rdx + 0x10]
cmc
cmp r14b, 3
cmp ecx, dword [rdx + 0x14]
jmp 0x18072f689
jae 0x18072f6ac
mov eax, dword [rdx + 0x1c]
cdq
lea rax, [rax + rsi]
mov edx, dword [rax + rcx*4]
jmp 0x18072f69f
test edx, edx
jmp 0x18072f6a6
jne 0x18072f94f
sub eax, eax
jmp 0x18072f6b3
jmp 0x18072fbea
mov eax, dword [rdx + 0x18]
test eax, eax
jmp 0x18072f6c2
je 0x18072f917
mov r9d, dword [rdx + 0x20]
neg bx
lea r11d, [rax - 1]
mov ebx, edi
cmp r12, 0x78e15553
cmc
stc
lea r9, [r9 + rsi]
mov qword [rsp + 0x40], r9
test r11d, r11d
jmp 0x18072f6ef
js 0x18072f912
nop
mov r10, qword [rsp + 0x198]
lea eax, [r11 + rbx]
mov rbp, rdi
shld dx, sp, 0xeb
bsr edx, ebp
sar eax, 1
bsf edx, edi
xor dl, r10b
mov dword [rsp + 0x1a8], eax
btc r8, 0x66
neg edx
shl dx, 0xec
mov qword [rsp + 0x38], rax
neg r8w
mov r8d, dword [r9 + rax*4]
movzx rdx, r14w
btr dx, 0x73
mov eax, dword [r9 + rax*4]
sbb rdx, r11
ror r9d, cl
sub r10, rax
movzx eax, byte [rsp + 0x1a0]
bswap rdx
xadd dl, r9b
movsxd rdx, edi
lea r8, [r8 + rsi]
bsf r9, r11
sub r10, rsi
inc dh
nop
movsx edx, r8w
movzx edx, byte [r10 + r8]
seta r9b
movsx r9w, bl
movsx r9d, sp
movzx r9d, byte [r8]
jmp 0x18072f789
inc r8
test di, 0x78db
cmc
clc
test al, al
jmp 0x18072f79a
je 0x18072f7d3
mov ecx, ebp
mov al, 0xdc
ror ax, 0
lahf
mov eax, 0x61a8467d
clc
stc
rol eax, cl
cmc
add al, bpl
cmc
clc
stc
xor dl, al
xchg al, al
mov al, 0x58
mov al, byte [rsp + 0x1a0]
jmp 0x18072f7cb
inc rbp
test bx, 0x38e0
test dl, dl
jmp 0x18072f7da
je 0x18072f7ee
cmp dl, r9b
jmp 0x18072f7e8
je 0x18072f76e
cmp dl, r9b
jmp 0x18072f7f6
jb 0x18072f887
cmp dl, r9b
jbe 0x18072f83e
mov ebx, dword [rsp + 0x1a8]
mov rcx, 0x2d3d2063
movsxd rcx, ecx
movzx dx, r14b
mov rdx, qword [rsp + 0x28]
mov cx, 0xac0
xchg cl, cl
mov ecx, dword [rsp + 0x190]
jmp 0x18072f832
inc ebx
jmp 0x18072f839
jmp 0x18072f8c9
mov rdx, qword [rsp + 0x28]
movsxd rcx, ecx
lea ebx, [r11 + 1]
cbw
mov rax, rbp
mov eax, dword [rdx + 0x24]
movzx cx, dil
mov cl, ch
lea rcx, [rsi + rax]
movsx rax, r10w
cdqe
mov rax, qword [rsp + 0x38]
jmp 0x18072f86d
movzx ecx, word [rcx + rax*2]
jmp 0x18072f876
mov dword [rsp + 0x190], ecx
jmp 0x18072f882
jmp 0x18072f8c9
mov r11d, dword [rsp + 0x1a8]
movzx cx, bl
cmovo dx, r14w
jmp 0x18072f89d
mov rdx, qword [rsp + 0x28]
jmp 0x18072f8a7
mov ecx, dword [rsp + 0x190]
not r9w
movsx r9d, cx
movsx r9w, bpl
dec r11d
cmp spl, 0x37
xor r9d, 0x643e60c1
cmp ebx, r11d
movsxd r9, r9d
mov r9b, r10b
mov r9, qword [rsp + 0x40]
jmp 0x18072f8dc
jle 0x18072f6f6
mov rbp, qword [rsp + 0x198]
mov r9b, r15b
not r9b
mov r8d, dword [rsp + 0x30]
jmp 0x18072f903
mov r9d, dword [rsp + 0x20]
jmp 0x18072f90d
jmp 0x18072f917
mov r9d, dword [rsp + 0x20]
cmp ecx, dword [rdx + 0x14]
jmp 0x18072f91f
jae 0x18072f6ac
mov eax, dword [rdx + 0x1c]
btr rdx, 0x69
shr dh, cl
cwd
lea rax, [rax + rsi]
sbb dx, 0x47d1
mov dl, spl
inc edx
mov edx, dword [rax + rcx*4]
test edx, edx
jmp 0x18072f949
je 0x18072f6ac
cmp edx, r8d
jmp 0x18072f957
jb 0x18072fbd3
lea eax, [r9 + r8]
cmc
jmp 0x18072f967
cmp edx, eax
jae 0x18072fbd3
mov eax, edx
add rax, rsi
xor bl, sil
xor bl, 0x33
mov rbx, rax
cmc
rcl ch, 0x26
movzx ecx, byte [rax]
test cl, cl
jmp 0x18072f98b
je 0x18072f6ac
cmp cl, 0x2e
jmp 0x18072f999
je 0x18072f9c6
mov cl, byte [rbx + 1]
jmp 0x18072f9a7
inc rbx
cmp r15b, r12b
test cl, cl
jmp 0x18072f9b4
jne 0x18072f991
xor eax, eax
jmp 0x18072f9c1
jmp 0x18072fbea
mov r8, rbx
sub r8, rax
cmp r8, 0x104
jmp 0x18072f9d8
jae 0x18072f6ac
mov rcx, rdi
test r8, r8
jmp 0x18072f9e9
je 0x18072fa41
lea r9, [rsp + 0x50]
btr edx, esp
sub r9, rax
nop
rol edx, cl
cmovge dx, r13w
movzx rdx, r9w
movzx edx, byte [rax]
test r11b, r13b
clc
test dl, dl
jmp 0x18072fa14
je 0x18072fa41
inc rcx
jmp 0x18072fa22
mov byte [r9 + rax], dl
jmp 0x18072fa2b
inc rax
stc
test r10b, 0x27
cmp rcx, r8
jmp 0x18072fa3b
jb 0x18072fa06
mov byte [rsp + rcx + 0x50], dil
bswap cx
lea rcx, [rsp + 0x50]
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x18064df51
test rax, rax
jne 0x18072fa7f
lea rcx, [rsp + 0x50]
movsxd rax, ebp
not al
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
jmp 0x1806262d0
je 0x18072f6ac
cmp r11, rsi
jmp 0x18072fa87
jne 0x18072fb44
cmp byte [rsp + 0x1a0], dil
jmp 0x18072fa9a
je 0x18072fb1d
lea rax, [rsp + 0x50]
bsr cx, r14w
sub rbp, rax
bswap dx
nop
movsx cx, ch
lea rdx, [rsp + rdi + 0x50]
jmp 0x18072fac1
mov ecx, edi
movzx ax, bh
btr ax, 0xff
rcl rax, cl
mov eax, 0x61a8467d
rol eax, cl
cmp spl, 0x31
cmp bpl, bl
add al, dil
test r9b, 0x47
cmp r11w, sp
xor al, byte [rdx + rbp]
mov byte [rdx], al
jmp 0x18072faf2
je 0x18072fb11
inc rdi
test r10w, cx
cmp rdi, 0x104
jmp 0x18072fb0b
jb 0x18072fab5
lea rbp, [rsp + 0x50]
cqo
cwde
movzx edx, r13w
mov rdx, rbp
movzx ax, r15b
xchg ecx, ecx
mov rcx, rsi
movzx ax, sil
cmovl ax, r13w
mov ax, r8w
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x18072c1e4
cmp byte [rbx + 1], 0x23
movsxd rdx, r11d
jmp 0x18072fb50
lea rdx, [rbx + 1]
jmp 0x18072fb59
jne 0x18072fbbc
movzx edx, byte [rbx + 2]
add rbx, 2
stc
test dl, dl
jmp 0x18072fb6f
je 0x18072fbb6
nop
lea eax, [rdx - 0x30]
jmp 0x18072fb7e
inc rbx
cmc
test di, 0x2354
cmp rdx, r10
cmp al, 9
jmp 0x18072fb91
ja 0x18072fbb6
movsx eax, dl
mov dl, byte [rbx]
lea ecx, [rdi + rdi*4]
or edi, 0x295e6561
lea edi, [rax + rcx*2 - 0x30]
test dl, dl
jmp 0x18072fbb0
jne 0x18072fb76
movsxd rdx, edi
sub cl, 0x60
sub r8d, r8d
bswap cx
movsx rcx, bx
mov rcx, r11
call fcn.18072f546
jmp 0x18072fbea
mov eax, edx
shl bpl, 0x8b
test esi, esp
lea rax, [rax + rsi]
movsx ebx, r9w
shr rbp, 0xe9
shr bx, cl
mov rbx, qword [rsp + 0x170]
mov rdi, qword [rsp + 0x168]
rcl si, 0x28
ror si, cl
add rsp, 0x178
bswap bp
movsx rbp, bp
movsx si, r15b
pop rsi
movzx bp, dil
mov bpl, r12b
pop rbp
jmp 0x18072fc23
ret