Function at 0x140295c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x20
mov rax, qword [rdx + 0x10]
xor r11d, r11d
mov r14, qword [rdx]
mov esi, 0xffffffff
mov r15, rdx
mov rbx, rcx
mov r8d, r11d
mov edx, r11d
movsxd rbp, dword [rax + 0x14]
mov r10, qword [rax]
lea r12d, [rsi + 2]
mov dword [rcx + 0x14fc], r11d
mov dword [rcx + 0x1500], 0x23d
test ebp, ebp
jle 0x140295cb0
nop dword [rax]
cmp word [r14 + rdx*4], r11w
je 0x140295c8c
movsxd rcx, dword [rbx + 0x14fc]
mov esi, r8d
lea eax, [rcx + 1]
mov dword [rbx + 0x14fc], eax
mov dword [rbx + rcx*4 + 0xc0c], r8d
mov byte [rdx + rbx + 0x1504], r11b
jmp 0x140295c92
mov word [r14 + rdx*4 + 2], r11w
inc r8d
inc rdx
cmp rdx, rbp
jl 0x140295c60
mov edx, dword [rbx + 0x14fc]
cmp edx, 2
jge 0x140295d07
nop dword [rax + rax]
cmp esi, 2
lea eax, [rsi + 1]
lea ecx, [rsi + 1]
cmovge eax, esi
cmovge ecx, r11d
mov esi, eax
lea eax, [rdx + 1]
mov dword [rbx + 0x14fc], eax
movsxd rax, edx
mov dword [rbx + rax*4 + 0xc0c], ecx
movsxd rax, ecx
mov word [r14 + rax*4], r12w
mov byte [rax + rbx + 0x1504], r11b
dec dword [rbx + 0x1760]
test r10, r10
je 0x140295cfc
movzx eax, word [r10 + rax*4 + 2]
sub dword [rbx + 0x1764], eax
mov edx, dword [rbx + 0x14fc]
cmp edx, 2
jl 0x140295cb0
mov dword [r15 + 8], esi
mov ecx, dword [rbx + 0x14fc]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mov edi, eax
cmp eax, r12d
jl 0x140295d40
nop
mov r8d, edi
mov rdx, r14
mov rcx, rbx
call fcn.140296860
dec edi
cmp edi, r12d
jge 0x140295d20
mov ecx, dword [rbx + 0x14fc]
nop dword [rax + rax]
movsxd rdi, dword [rbx + 0xc0c]
mov r8d, r12d
movsxd rax, ecx
mov rdx, r14
mov ecx, dword [rbx + rax*4 + 0xc08]
mov dword [rbx + 0xc0c], ecx
mov rcx, rbx
dec dword [rbx + 0x14fc]
call fcn.140296860
movsxd rdx, dword [rbx + 0xc0c]
movsxd rcx, dword [rbx + 0x1500]
mov r8, rdx
movsxd r9, ebp
lea eax, [rcx - 1]
mov dword [rbx + 0x1500], eax
mov dword [rbx + rcx*4 + 0xc04], edi
movsxd rcx, dword [rbx + 0x1500]
lea eax, [rcx - 1]
mov dword [rbx + 0x1500], eax
mov dword [rbx + rcx*4 + 0xc04], edx
mov rcx, rbx
movzx eax, word [r14 + rdi*4]
add ax, word [r14 + rdx*4]
mov word [r14 + r9*4], ax
movzx edx, byte [rdi + rbx + 0x1504]
movzx eax, byte [r8 + rbx + 0x1504]
cmp dl, al
cmovb edx, eax
inc dl
mov byte [r9 + rbx + 0x1504], dl
mov rdx, r14
mov word [r14 + r8*4 + 2], bp
mov r8d, r12d
mov word [r14 + rdi*4 + 2], bp
mov dword [rbx + 0xc0c], ebp
inc ebp
call fcn.140296860
mov ecx, dword [rbx + 0x14fc]
cmp ecx, 2
jge 0x140295d40
movsxd r8, dword [rbx + 0x1500]
mov rdx, r15
mov rcx, rbx
lea eax, [r8 - 1]
mov dword [rbx + 0x1500], eax
mov eax, dword [rbx + 0xc0c]
mov dword [rbx + r8*4 + 0xc04], eax
call fcn.140296340
lea r8, [rbx + 0xbe8]
mov edx, esi
mov rcx, r14
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop r12
jmp 0x140296550
sub rsp, 0x58
mov rax, qword [0x14036c028]
xor rax, rsp
mov qword [rsp + 0x40], rax
movzx eax, word [r8]
mov r10, rcx
movzx r9d, word [r8 + 2]
add eax, eax
movzx ecx, word [r8 + 6]
add r9d, eax
mov word [rsp + 0x22], ax
add r9d, r9d
movzx eax, word [r8 + 4]
add eax, r9d
mov word [rsp + 0x24], r9w
add eax, eax
movsxd r11, edx
add ecx, eax
mov word [rsp + 0x26], ax
movzx eax, word [r8 + 8]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x28], cx
movzx ecx, word [r8 + 0xa]
add eax, eax
add ecx, eax
mov word [rsp + 0x2a], ax
movzx eax, word [r8 + 0xc]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x2c], cx
movzx ecx, word [r8 + 0xe]
add eax, eax
add ecx, eax
mov word [rsp + 0x2e], ax
movzx eax, word [r8 + 0x10]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x30], cx
movzx ecx, word [r8 + 0x12]
add eax, eax
add ecx, eax
mov word [rsp + 0x32], ax
movzx eax, word [r8 + 0x14]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x34], cx
movzx ecx, word [r8 + 0x16]
add eax, eax
add ecx, eax
mov word [rsp + 0x36], ax
movzx eax, word [r8 + 0x18]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x38], cx
movzx ecx, word [r8 + 0x1a]
add eax, eax
add ecx, eax
mov word [rsp + 0x3a], ax
movzx eax, word [r8 + 0x1c]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x3c], cx
add eax, eax
mov word [rsp + 0x3e], ax
test edx, edx
js 0x140296674
xor r9d, r9d
movzx edx, word [r10 + r9*4 + 2]
test edx, edx
je 0x14029666c
lea r8, [rsp + 0x20]
movzx ecx, word [r8 + rdx*2]
lea r8, [r8 + rdx*2]
lea eax, [rcx + 1]
mov word [r8], ax
call fcn.140295ab0
mov word [r10 + r9*4], ax
inc r9
cmp r9, r11
jle 0x140296643
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140020b10
add rsp, 0x58
ret