Function at 0x180005b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xf8
mov rbx, rdx
mov r13d, ecx
lea edx, [rcx - 0x10]
mov dword [rbp + 0x7f], edx
cmp ecx, edx
jbe case.0x180005bf1.18
mov rdi, qword [rbp + 0x77]
lea r12d, [rcx - 0x87]
mov r14, qword [rbp + 0x77]
movzx r15d, byte [rbp + 0x67]
mov rsi, qword [rbp + 0x77]
lea r9, [0x180000000]
mov r10d, 0x74
mov r11d, 0x6d65
cmp r12d, 0x18
ja case.0x180005bf1.9
mov ecx, dword [r9 + r12*4 + 0x5fc8]
add rcx, r9
jmp rcx
mov ebx, 0x125
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x125
je 0x180005c16
cmp eax, 2
jne 0x180005c1c
mov eax, dword [rbp - 1]
jmp 0x180005fb3
lea rcx, [rbp - 0x21]
call rdi
add ebx, 2
cmp ebx, 0x129
jb 0x180005c00
mov edi, 0x126
nop dword [rax]
mov eax, edi
sub eax, 0x66
je 0x180005c7f
sub eax, 0x2e
je 0x180005cd0
sub eax, 0x69
je 0x180005cec
sub eax, 0x29
je 0x180005c5b
cmp eax, 0x97
je 0x180005cec
jmp 0x180005cae
xor r8d, r8d
lea rcx, [rsp + 0x48]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, rax
lea rdx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x71], rax
jmp 0x180005cae
movzx ebx, word [rsp + 0x48]
lea rdx, [rsp + 0x48]
xor r9d, r9d
xor r8d, r8d
mov ecx, 0xe4
call fcn.180008b50
lea rdx, [rbp + 0x67]
mov word [rbp + 0x67], bx
mov ecx, 0x32
call fcn.180024070
mov byte [rbp - 0x71], al
add edi, 0x97
cmp edi, 0x419
jb 0x180005c30
mov rdi, qword [rbp - 0x71]
mov edx, dword [rbp + 0x7f]
mov rbx, qword [rbp + 0x6f]
jmp case.0x180005bf1.9
movzx eax, word [rsp + 0x48]
movzx edx, ax
shr dx, 7
xor dx, ax
shr ax, 0xe
lea ecx, [rax + 3]
shr dx, cl
mov byte [rbp - 0x71], dl
mov rdi, qword [rbp - 0x71]
mov edx, dword [rbp + 0x7f]
mov rbx, qword [rbp + 0x6f]
jmp case.0x180005bf1.9
mov word [rsp + 0x3f], r11w
mov dword [rsp + 0x41], 0x666e49
jmp case.0x180005bf1.9
mov eax, 0x7953
mov dword [rsp + 0x38], 0x746547
mov word [rsp + 0x3b], ax
jmp case.0x180005bf1.9
mov eax, 0x73
mov word [rsp + 0x3d], ax
mov word [rsp + 0x3e], r10w
jmp case.0x180005bf1.9
mov eax, 0x6f
mov word [rsp + 0x44], ax
mov eax, dword [0x180044318]
mov dword [rsp + 0x48], eax
movzx eax, word [0x18004431c]
mov word [rsp + 0x4c], ax
jmp case.0x180005bf1.9
xor edx, edx
mov r8, rbx
lea ecx, [rdx + 0x3b]
call fcn.18001c870
test al, al
jne 0x180005e17
mov ebx, 0x35
nop word [rax + rax]
mov eax, ebx
sub eax, 0x35
je 0x180005dbb
sub eax, 1
je 0x180005d97
cmp eax, 1
je case.0x180005bf1.18
jmp 0x180005dda
xor ecx, ecx
movzx eax, r15b
test r14, r14
cmovne ecx, eax
movzx r15d, cl
test cl, cl
je 0x180005db4
mov rcx, r14
call qword [sym.imp.USER32.dll_DestroyWindow]
mov byte [rsp + 0x30], 0
jmp 0x180005dda
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov r15b, 1
call qword [sym.imp.USER32.dll_CreateDialogParamA]
mov r14, rax
inc ebx
cmp ebx, 0x38
jb 0x180005d80
mov edx, dword [rbp + 0x7f]
mov rbx, qword [rbp + 0x6f]
jmp case.0x180005bf1.9
mov ecx, dword [rbx + 0x30]
mov eax, 0x30
add rcx, rcx
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1800286c0
mov qword [rbx + 0x10], rax
mov byte [rsp + 0x30], 1
mov edx, dword [rbp + 0x7f]
jmp case.0x180005bf1.9
mov eax, dword [0x180044320]
mov dword [rbp - 0x7d], eax
movzx eax, word [0x180044324]
mov word [rbp - 0x79], ax
jmp case.0x180005bf1.9
mov eax, dword [rbp - 0x31]
mov dword [rbx + 0x30], eax
jmp case.0x180005bf1.9
mov eax, dword [str.Info]
mov ebx, 0x126
mov dword [rbp - 0x58], eax
movzx eax, byte [0x1800453a0]
mov byte [rbp - 0x54], al
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x66
je 0x180005ea4
sub eax, 0x2e
je 0x180005ee7
sub eax, 0x69
je 0x180005eeb
sub eax, 0x29
je 0x180005e7f
cmp eax, 0x97
je 0x180005eeb
jmp 0x180005ed3
xor r8d, r8d
lea rcx, str.kernel32.dll
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, rax
lea rdx, [rbp - 0x61]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x69], rax
jmp 0x180005ed3
xor r9d, r9d
lea rdx, str.kernel32.dll
xor r8d, r8d
mov ecx, 0xe4
call fcn.180008b50
mov eax, 0x6b
lea rdx, [rbp + 0x77]
mov word [rbp + 0x77], ax
lea ecx, [rax - 0x39]
call fcn.180024070
mov byte [rbp - 0x69], al
add ebx, 0x97
cmp ebx, 0x419
jb 0x180005e60
jmp 0x180005eeb
mov byte [rbp - 0x69], reloc.COMCTL32.dll_MakeDragList
mov rbx, qword [rbp + 0x6f]
mov rsi, qword [rbp - 0x69]
cmp qword [rbx + 0x28], 0
jne 0x180005faa
mov edx, dword [rbp + 0x7f]
jmp case.0x180005bf1.9
movzx eax, word [0x180044884]
lea rcx, [rbp - 0x61]
mov word [rbp - 0x61], ax
dec rcx
movzx eax, byte [0x180044886]
mov byte [rbp - 0x5f], al
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180005f22
movzx eax, word [0x1800453c4]
lea rdx, str.ystem
mov word [rcx], ax
mov r8d, 5
movzx eax, byte [0x1800453c6]
mov byte [rcx + 2], al
lea rcx, [rbp - 0x61]
call fcn.18002ccf0
mov edx, dword [rbp + 0x7f]
jmp case.0x180005bf1.9
lea rcx, [rbp - 0x51]
call rsi
mov edx, dword [rbp + 0x7f]
jmp case.0x180005bf1.9
mov eax, dword [0x1800453c8]
movsd xmm0, qword [str.l32.]
mov dword [rsp + 0x4c], 0x72
mov dword [rsp + 0x4e], eax
movzx eax, word [0x1800453d8]
mov word [rbp - 0x7f], ax
movsd qword [rsp + 0x52], xmm0
jmp case.0x180005bf1.9
mov dword [rbp - 0x7f], 0x64
dec r13d
dec r12d
cmp r13d, edx
jbe case.0x180005bf1.18
jmp 0x180005bc9
mov byte [rsp + 0x30], 1
mov eax, dword [rsp + 0x30]
add rsp, 0xf8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret