Function at 0x140010453
Capabilities:
Encrypt data using rc4 prga
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
cmp r13b, bl
btr esi, edx
mov qword [rsp + 0x18], rdi
ror rax, 0xce
mov rax, rcx
push rbp
xor bpl, 0xaa
push r12
push r13
push r14
cmovne esi, r12d
adc r12w, r14w
push r15
shl bpl, cl
mov rbp, rsp
and r12b, 0x91
mov r15b, 0x78
sub rsp, 0x50
ror r15b, cl
rol eax, cl
mov eax, 0x5a4d
mov r15, r8
sets sil
movzx rsi, sp
btc si, 0x77
mov r12, rdx
bts si, bp
mov rsi, rcx
stc
test ebp, 0x74e263af
cmp word [rcx], ax
jmp 0x1400104c8
jne 0x14001078b
movsxd rbx, dword [rcx + 0x3c]
cmp r10w, 0x776
test r12b, 0x97
clc
add rbx, rcx
cmp r10, 0x5f4b5628
cmp dword [rbx], 0x4550
jmp 0x1400104f2
jne 0x14001078b
movzx eax, word [rbx + 0x14]
and r14b, dl
and r14b, 0xf9
lea r13, [rbx + 0x18]
rcl r14b, cl
shr r14w, 0xf6
test r13b, r13b
sub r8d, r8d
sbb r14, rax
btr r14w, r9w
movzx r14w, r13b
add r13, rax
add r14w, 0x5fa0
btc r14, 0
neg r14w
movzx r14d, r8w
cmp r8w, word [rbx + 6]
jmp 0x140010542
jae 0x14001078b
lea r9d, [r8 + 1]
movsx rax, r13w
movzx rax, ax
movsxd rax, r8d
movzx eax, r14w
jmp 0x140010560
xorps xmm0, xmm0
mov dword [rbp - 0x20], 0x8b97995e
btc edi, 0
or di, 0x20e0
mov word [rbp - 0x1c], 0x7184
xor ch, 0x5d
movups xmmword [rbp - 0x1a], xmm0
sal ecx, cl
lea rcx, [rax + rax*4]
xadd dl, dil
sal dl, cl
bts dx, bx
lea rdi, [rcx*8]
add rdi, r13
ror cl, 0x5a
sub eax, eax
mov dword [rbp - 0xa], eax
not dh
btr rdx, 0xb1
mov edx, r14d
mov byte [rbp - 6], al
mov cl, byte [rbp + r8 - 0x20]
lea edx, [r8 + 0x2e]
ror al, cl
rcr al, 0x13
mov al, dl
and al, cl
stc
test r10b, 0x6e
cmp r10b, r11b
add al, al
jmp 0x1400105d4
sub dl, al
cmp di, cx
sub dl, 0x42
clc
add dl, cl
mov byte [rbp + r8 - 0x20], dl
lea r8, [r8 + r9]
clc
stc
cmp r8, 0x1b
jmp 0x1400105f3
jb 0x1400105b0
lea rdx, [rbp - 0x20]
mov rcx, rdi
jmp 0x140010605
call qword [sym.imp.ntoskrnl.exe_strstr]
sub r8d, r8d
test r14, rsi
clc
cmc
test rax, rax
jmp 0x14001061b
jne 0x140010694
mov dword [rbp - 0x30], 0xc6f9ccfc
mov qword [rbp - 0x2c], rax
sub cl, r11b
mov dword [rbp - 0x24], eax
shr edx, 4
mov cl, byte [rbp + r8 - 0x30]
sar dl, 0xca
movsxd rdx, ebx
bt edx, 0xb6
lea edx, [r8 + 0x56]
rcl al, 0x53
mov al, dl
cmp edi, eax
and al, cl
add al, al
test r11b, 0xbc
sub dl, al
clc
test bl, bl
sub dl, 0x5a
add dl, cl
mov byte [rbp + r8 - 0x30], dl
jmp 0x14001066b
inc r8
cmp r8, 0x10
jmp 0x140010677
jb 0x140010635
mov eax, dword [rdi]
xor r8d, r8d
stc
test bp, 0x171
test spl, spl
cmp dword [rbp - 0x30], eax
jne 0x14001076c
mov r10d, dword [rdi + 0xc]
cmp r15b, r8b
add r10, rsi
or rax, 0xffffffffffffffff
jmp 0x1400106a7
inc rax
test sil, 0xdf
cmc
cmp byte [r15 + rax], r8b
jne 0x1400106a7
mov r11d, dword [rdi + 8]
shrd edx, ebp, 0x3f
and dl, r13b
mov edx, r8d
sub r11d, eax
je 0x14001076c
or r8, 0xffffffffffffffff
jmp 0x1400106d9
inc r8
cmp r11b, dil
cmp byte [r15 + r8], 0
jmp 0x1400106e9
jne 0x1400106d9
test r8, r8
jmp 0x1400106f7
je 0x140010750
mov edi, edx
cmc
sbb al, 0xdf
rcl ch, cl
mov r9, r15
dec al
sub rdi, r12
mov rcx, r12
and al, 0x21
add rdi, r10
sub r9, r12
mov al, byte [rcx]
cmp byte [rdi + rcx], al
jmp 0x140010721
je 0x140010737
cmp byte [r9 + rcx], 0x3f
jmp 0x140010731
jne 0x1400107f4
inc rcx
rcl eax, 0x41
movsx eax, cx
mov rax, rcx
sub rax, r12
clc
cmp rax, r8
jb 0x140010717
mov eax, edx
test r13b, 4
add rax, r10
jmp 0x14001075e
jne 0x14001078f
sub r8d, r8d
rol r9w, 0xcf
mov r9d, 1
cmp r8w, r9w
cmc
add r14w, r9w
cmp r14w, word [rbx + 6]
jmp 0x140010785
jb 0x140010557
sub eax, eax
not bl
lea r11, [rsp + 0x50]
not ebx
bswap rbp
movsx r13d, di
mov rbx, qword [r11 + 0x30]
jmp 0x1400107ad
mov rsi, qword [r11 + 0x38]
mov bpl, 0x89
mov r13d, r12d
mov rdi, qword [r11 + 0x40]
movzx r13, r8w
not r12b
bswap r13w
mov rsp, r11
pop r15
mov r13b, spl
pop r14
movzx r13, bp
movsx r12d, cx
mov rbp, 0x332555e3
pop r13
mov r12b, 0x27
movzx r12, r9w
pop r12
xchg bpl, bpl
pop rbp
jmp 0x1400107f3
ret
inc edx
cmp ecx, r13d
clc
cmp edx, r11d
jmp 0x140010802
jae 0x140010764
jmp 0x1400106d0