Function at 0x1404c3830
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call rax
mov r11, rax
test rax, rax
jmp 0x1405af562
call rax
mov r11, rax
jmp 0x1405af57b
call rax
jmp 0x1405af6ce
mov byte [rsp + 0x18], r8b
jmp 0x1405af08b
mov qword [rsp + 0x10], rdx
jmp 0x1405af09a
push rbp
btc ebp, r13d
bts rbp, r14
push rsi
rcl bpl, 0x37
sar bpl, cl
cmc
sub rsp, 0x178
mov rbp, rdx
movzx esi, r15w
shl sil, 0xda
sal sil, cl
mov rsi, rcx
test rcx, rcx
jmp 0x1405af0cc
je 0x1405af0fd
test rdx, rdx
jmp 0x1405af0da
je 0x1405af0fd
mov eax, 0x5a4d
cmc
cmp r10w, r12w
jmp 0x1405af0ef
cmp word [rcx], ax
jmp 0x1405af0f7
je 0x1405af121
xor eax, eax
movsxd rsi, esp
add rsp, 0x178
jmp 0x1405af10e
pop rsi
movsx bp, dl
movsx rbp, r12w
movzx ebp, cx
pop rbp
jmp 0x1405af120
ret
movsxd rax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jmp 0x1405af131
jne 0x1405af0fd
mov r8d, dword [rax + rcx + 0x88]
mov dword [rsp + 0x30], r8d
test r8d, r8d
jmp 0x1405af14c
je 0x1405af0fd
mov r9d, dword [rax + rcx + 0x8c]
xchg dl, dh
cdq
lea rdx, [rsi + r8]
bt rcx, rcx
mov qword [rsp + 0x170], rbx
add cx, 0x4b41
and rcx, r13
mov qword [rsp + 0x168], rdi
ror cx, 0x6b
rol ecx, 0xb3
mov ecx, 0xffffffff
xor edi, edi
mov dword [rsp + 0x20], r9d
test di, r14w
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x190], ecx
test r13b, 0x9d
jmp 0x1405af1a9
cmp rbp, 0xffff
jmp 0x1405af1b5
ja 0x1405af1f8
mov ecx, ebp
sub ecx, dword [rdx + 0x10]
test ax, r12w
cmp r11w, 0x26d8
cmp ecx, dword [rdx + 0x14]
jae 0x1405af1f1
mov eax, dword [rdx + 0x1c]
stc
sar dx, cl
lea rax, [rax + rsi]
rol dl, cl
setne dl
add dl, r14b
mov edx, dword [rax + rcx*4]
test edx, edx
jne 0x1405af434
sub eax, eax
jmp 0x1405af6ce
mov eax, dword [rdx + 0x18]
jmp 0x1405af200
test eax, eax
jmp 0x1405af207
je 0x1405af403
mov r9d, dword [rdx + 0x20]
lea r11d, [rax - 1]
mov ebx, edi
cmp dil, r11b
cmp r14b, 0x6a
lea r9, [r9 + rsi]
test ecx, edi
stc
mov qword [rsp + 0x40], r9
test r11d, r11d
jmp 0x1405af232
js 0x1405af3fa
nop
shrd r8, rdx, 0x68
inc al
jmp 0x1405af245
mov r10, qword [rsp + 0x198]
shl edx, 0x22
movzx eax, bp
bt edx, 0x73
lea eax, [r11 + rbx]
movsx r8w, r11b
cmc
mov rbp, rdi
bts r8w, r8w
sal dl, 0x30
sar eax, 1
btr edx, esp
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x38], rax
mov r8d, dword [r9 + rax*4]
movzx edx, bx
mov eax, dword [r9 + rax*4]
movzx rdx, r8w
sub r10, rax
cmova edx, edx
ror edx, cl
movzx eax, byte [rsp + 0x1a0]
add r8, rsi
sub r10, rsi
movsx edx, r10w
nop
movsx r9d, r13w
movsx r9, r8w
movzx edx, byte [r10 + r8]
movsx r9w, bl
jmp 0x1405af2be
movzx r9d, byte [r8]
inc r8
clc
stc
test al, al
jmp 0x1405af2ce
je 0x1405af302
mov ecx, ebp
bts ax, r9w
ror al, 0xbf
clc
mov eax, 0x59de0d89
jmp 0x1405af2e9
rol eax, cl
test r9b, 0x8f
cmc
add al, bpl
xor dl, al
mov al, r13b
mov al, byte [rsp + 0x1a0]
inc rbp
test dl, dl
jmp 0x1405af309
je 0x1405af318
cmp dl, r9b
je 0x1405af2af
cmp dl, r9b
jmp 0x1405af320
jb 0x1405af398
cmp dl, r9b
jmp 0x1405af32e
jbe 0x1405af35b
mov ebx, dword [rsp + 0x1a8]
movsxd rdx, r8d
mov rdx, qword [rsp + 0x28]
mov ecx, dword [rsp + 0x190]
jmp 0x1405af34f
inc ebx
jmp 0x1405af356
jmp 0x1405af3c6
mov rdx, qword [rsp + 0x28]
lea ebx, [r11 + 1]
movzx ax, ah
cwde
mov eax, dword [rdx + 0x24]
jmp 0x1405af371
lea rcx, [rsi + rax]
cwde
bswap ax
mov rax, qword [rsp + 0x38]
movzx ecx, word [rcx + rax*2]
jmp 0x1405af387
mov dword [rsp + 0x190], ecx
jmp 0x1405af393
jmp 0x1405af3c6
mov r11d, dword [rsp + 0x1a8]
cmovge cx, r9w
mov rdx, qword [rsp + 0x28]
movsx r9w, r12b
mov ecx, dword [rsp + 0x190]
movzx r9d, di
dec r11d
not r9d
adc r9b, bpl
rcr r9, cl
cmp ebx, r11d
movsx r9, bx
xchg r9, r9
mov r9, qword [rsp + 0x40]
jle 0x1405af245
mov rbp, qword [rsp + 0x198]
cmovbe r9w, bp
not r8
mov r8d, dword [rsp + 0x30]
mov r9d, dword [rsp + 0x20]
jmp 0x1405af403
mov r9d, dword [rsp + 0x20]
cmp spl, r14b
cmc
cmp ecx, dword [rdx + 0x14]
jmp 0x1405af40b
jae 0x1405af1f1
mov eax, dword [rdx + 0x1c]
sub rdx, rcx
btc rdx, r10
lea rax, [rax + rsi]
stc
rcr edx, 0x76
mov edx, dword [rax + rcx*4]
stc
test edx, edx
jmp 0x1405af42e
je 0x1405af1f1
cmp edx, r8d
jmp 0x1405af43c
jb 0x1405af6be
lea eax, [r9 + r8]
cmp r14b, 0xa9
stc
cmc
cmp edx, eax
jmp 0x1405af453
jae 0x1405af6be
mov eax, edx
and bx, r15w
add rax, rsi
sal ecx, cl
sar cl, 0xa8
mov rbx, rax
shr ch, cl
cmc
movzx ecx, byte [rax]
test rax, r12
stc
cmp sil, 0xef
test cl, cl
jmp 0x1405af47f
je 0x1405af1f1
cmp cl, 0x2e
jmp 0x1405af48d
je 0x1405af4b7
mov cl, byte [rbx + 1]
jmp 0x1405af49b
inc rbx
test cl, cl
jmp 0x1405af4a5
jne 0x1405af485
xor eax, eax
jmp 0x1405af4b2
jmp 0x1405af6ce
mov r8, rbx
sub r8, rax
jmp 0x1405af4c3
cmp r8, 0x104
jmp 0x1405af4cf
jae 0x1405af1f1
mov rcx, rdi
test r8, r8
jmp 0x1405af4e0
je 0x1405af53d
lea r9, [rsp + 0x50]
sub r9, rax
sub rdx, rdi
sbb dx, r8w
nop
and rdx, rsp
movzx edx, byte [rax]
jmp 0x1405af508
test dl, dl
jmp 0x1405af50f
je 0x1405af53d
inc rcx
jmp 0x1405af51d
mov byte [r9 + rax], dl
jmp 0x1405af526
inc rax
clc
jmp 0x1405af52f
cmp rcx, r8
jmp 0x1405af537
jb 0x1405af4f9
mov byte [rsp + rcx + 0x50], dil
movsx ecx, ax
bswap ax
lea rcx, [rsp + 0x50]
jmp 0x1405af556
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x1404c382e
jne 0x1405af589
lea rcx, [rsp + 0x50]
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
jmp 0x1404e2805
test rax, rax
jmp 0x1405af583
je 0x1405af1f1
cmp r11, rsi
jmp 0x1405af591
jne 0x1405af62b
cmp byte [rsp + 0x1a0], dil
jmp 0x1405af5a4
je 0x1405af605
lea rax, [rsp + 0x50]
not cl
btc rdx, r9
adc cx, cx
sub rbp, rax
stc
btr edx, ebx
nop
movzx edx, di
lea rdx, [rsp + rdi + 0x50]
stc
mov ecx, edi
bts ax, r13w
mov eax, 0x59de0d89
rol eax, cl
cmp ebx, 0x1cbf4382
add al, dil
xor al, byte [rdx + rbp]
mov byte [rdx], al
je 0x1405af600
inc rdi
cmp rdi, 0x104
jmp 0x1405af5fa
jb 0x1405af5c3
lea rbp, [rsp + 0x50]
mov rdx, rbp
movsx rcx, r8w
jmp 0x1405af611
mov rcx, rsi
movsx eax, sp
movzx eax, r13w
mov ax, 0x5c7f
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x140524ffa
cmp byte [rbx + 1], 0x23
not dx
movsx dx, r11b
cmovno rdx, r8
lea rdx, [rbx + 1]
jmp 0x1405af644
jne 0x1405af6ac
movzx edx, byte [rbx + 2]
jmp 0x1405af653
add rbx, 2
test dl, dl
je 0x1405af6a7
nop
not al
bswap ax
lea eax, [rdx - 0x30]
jmp 0x1405af66d
inc rbx
clc
cmp al, 9
jmp 0x1405af678
ja 0x1405af6a7
movsx eax, dl
sal dl, 0x97
rcr cx, cl
sub dl, 4
mov dl, byte [rbx]
btr cx, bp
dec cx
lea ecx, [rdi + rdi*4]
lea edi, [rax + rcx*2 - 0x30]
test dl, dl
jmp 0x1405af6a1
jne 0x1405af665
movsxd rdx, edi
sal cl, cl
xor r8d, r8d
xchg cl, ch
mov rcx, r11
call fcn.1405af080
jmp 0x1405af6ce
mov eax, edx
btr ebp, 0xdd
cmp eax, ebp
lea rax, [rax + rsi]
rcr bx, 0x26
mov rbx, qword [rsp + 0x170]
btc rbp, r12
cmc
mov rdi, qword [rsp + 0x168]
add rsp, 0x178
bswap esi
setb bpl
movzx rbp, bx
pop rsi
xchg bp, bp
cmovo bp, r8w
pop rbp
jmp 0x1405af703
ret