Function at 0x140011900
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 8], ecx
push rsi
push rdi
sub rsp, 0x88
xor eax, eax
test eax, eax
je 0x140011b24
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rbp
push 0x5e32d4
push qword fs:[rax]
mov dword fs:[rax], esp
lea ecx, [rbp - 0x10]
mov edx, dword [rax]
add byte [rax], cl
add byte [rdx], al
or byte [rbp + rdx + 0x4e], dh
add al, 0x53
add dword gs:[rax], eax
sub al, 0x54
outsd dx, dword [rsi]
insd dword [rdi], dx
jo 0x1400119aa
jb 0x1400119b0
jb 0x140011989
push rbx
jns 0x1400119c3
imul edx, dword [rax + 0x18005067], 1
add bh, bh
sbb byte [rcx], al
add bh, bh
add dword [rax], eax
add byte [rax], al
add byte [rcx + 0x5a], bl
pop rsi
pop rbx
ret
add al, ch
imul ecx, dword [rax - 0x1e], 0x440e8dff
invalid
add byte [rbp - 0x75], dl
in al, dx
add dword [rdx], 8
add cl, byte [rax]
sub al, 0x54
add byte [rax], al
add byte [rbx + rdx*2], al
insb byte [rdi], dx
add al, byte [rax]
add al, 0x53
insb byte [rdi], dx
insb byte [rdi], dx
add al, byte [rax]
add byte [rax + rdx + 0x10040], bl
add eax, 0x791be849
invalid
xor eax, eax
test eax, eax
je 0x140011d3b
nop
nop
and byte [rax], al
or dword [rax], eax
add byte [rax], al
add byte [rax], al
push rbp
mov ebp, esp
add esp, 0xffffffe4
push rbx
push rsi
mov al, 4
add al, byte [rax]
xor eax, eax
test eax, eax
je 0x140011f52
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add byte [rax], al
add esp, 0xc
mov eax, edi
pop rdi
pop rsi
pop rbx
ret
xor eax, eax
test eax, eax
je 0x140012169
rol byte [rbp + 0xd840fc0], 2
add byte [rax], al
nop
nop
nop
nop
add eax, dword gs:[eax]
add byte [rax], al
add byte [rax], al
or byte [rax], al
add ecx, dword [rax]
mov eax, 0x78004cf0
pop rbx
pop rsp
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add ah, dl
pop rdi
pop rsp
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax + rbp*2 + 0x59540059], bh
push rsp
pop rcx
pop rcx
add byte [rax], al
add al, 0x53
insb byte [rdi], dx
add al, byte [rax]
add byte [rax + 0x100551b], dh
add byte [rsi], al
add spl, sil
call [rcx + 0x26]
add byte [rdx], cl
add dword [rax], eax
add al, byte [rax]
push rsi
push rsp
imul esi, dword [rcx + rdi*2 - 0x64], 0x50004010
pop rax
add byte [rax + 0x5c], r11b
add byte [rcx], r8b
mov eax, ebx
call fcn.140012218
inc dword [rbp - 4]
dec dword [rbp - 0xc]
jne 0x140011f53
mov ebp, dword [rax]
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax - 0xfffdfc], dh
invalid
xor eax, eax
test eax, eax
je 0x140012380
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
or al, byte [rsi + 0x4f]
outsb dx, byte [rsi]
push rdx
jne 0x1400121f5
imul r13, qword [rsi + 0x65], 0x4c010002
jb 0x140012203
push rbx
je 0x14001220d
insb byte [rdi], dx
add dword gs:[rax], eax
add byte [rax], al
add byte [rcx], al
add byte [rax], al
add ah, al
loopne 0x1400121f2
call 0x13fe6ae7c
add esp, 0x10
push rsi
mov eax, dword [rbp - 0x2c]
push rax
lea ebx, [rcx]
je 0x140012227
push rsp
invalid
invalid
insd dword [rdi], dx
invalid
add eax, dword [rbx - 0x73efc40]
add dl, byte [rax - 0x75]
test eax, edi
clc
invalid
and ah, ah
add dword [rax], 0
test byte [rax], al
jo 0x14001222e
add byte [rax + 4], dh
add byte [rbx + rax - 0x2affb8], dil
jmp 0x14001221f
add bpl, dl
invalid
xor eax, eax
test eax, eax
je 0x140012597
nop
nop
nop
nop
nop
nop
insb byte [rdi], dx
insb byte [rdi], dx
invalid
xor eax, eax
test eax, eax
je 0x1400127ae
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push qword [rbx]
rcr byte [rdx + 0x59], 0x59
mov dword fs:[rax], edx
jmp 0x1400125d5
add byte [rax], al
add byte [rax], al
add al, byte [rdi]
push rsp
push 0x616e6572
jb 0x140012614
push rsp
imul r14, qword [rbx + 0x74], 0x72656e65
push rbp
mov ebp, esp
add esp, 0xfffffff8
push rbx
push rsi
push rdi
xor ecx, ecx
mov dword [rbp - 8], ecx
mov esi, edx
mov edx, esi
mov eax, ebx
call 0x13ff6f480
jmp 0x140012d3e
jne 0x1400125fe
pop rsi
pop rbx
ret
xor eax, eax
test eax, eax
je 0x1400129c5
nop
nop
nop
nop
nop
nop
nop
nop
invalid
xor eax, eax
test eax, eax
je 0x140012bdc
nop
pop rdx
sub byte [rbx - 0x36ccf715], bl
mov dword [rdx + 0x28], ecx
mov dword [rdx + 0x2c], ecx
mov ecx, dword [rax + 0xc]
outsd dx, dword [rsi]
insd dword [rdi], dx
jo 0x140012a46
jb 0x140012a4c
jb 0x140012a25
push rbx
jns 0x140012a5f
je 0x140012a53
insd dword [rdi], dx
and eax, 0x53000000
mov ecx, dword [rdx]
mov word [rcx], 0x25
movzx ecx, al
shl esp, 0x83
add byte [rax], al
test byte [rax], al
xor al, 0x84
add byte [rax], sil
push rax
add byte [rsi - 0x231700b3], dh
invalid
add al, byte [rax]
add byte [r8], bpl
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rbx], cl
add byte gs:[rax], al
add byte [rax + 0x4308ffff], al
outsd dx, dword [rsi]
insd dword [rdi], dx
jo 0x140012a9d
jb 0x140012aa3
jb 0x140012a5c
add byte [rax], al
add byte [rax + 0x4f08ffff], al
outsb dx, byte [rsi]
or byte [rdi + 0x6e], cl
outsd dx, dword [rsi]
je 0x140012ab6
imul esp, dword [rsi + 0x79], 0xe58b5b00
jns 0x140012a50
pop rbx
mov esp, ebp
pop rbp
insd dword [rdi], dx
add byte [rbp + 0xa], dh
add byte [rax], al
add byte [rax], al
add byte [rax + rax], cl
or al, byte [rax]
add byte [rax], al
add byte [rax], al
or al, 0
add ecx, dword [rax]
in al, dx
push rdx
add byte [rax], r8b
add byte [rsp + riz*8], al
add al, 1
add bh, bh
invalid
add dword [rax - 0x3b7c00fe], esi
sub al, 0x5f
pop rsi
pop rbx
ret
test dword [rax], ebx
invalid
xor eax, eax
test eax, eax
je 0x140012df3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ah, dh
call [rcx]
invalid
cmp dword [rax + 0x7c], 0xfffffffc
in al, 0xff
push rsi
push rdi
lea esi, [rbp - 0x3c]
movsd dword [rdi], dword [rsi]
movsd dword [rdi], dword [rsi]
movsd dword [rdi], dword [rsi]
movsd dword [rdi], dword [rsi]
pop rdi
pop rsi
mov eax, dword [rdx + 0x75]
je 0x140012dc8
outsd dx, dword [rsi]
outsb dx, byte [rsi]
insb byte [rdi], dx
imul esp, dword [rbx + 0x6b], 0x204b000
add byte [rsi + riz*2 + 2], ch
add byte [rax], al
mov al, 0x31
push rbp
add byte [rcx], al
add byte [rsi], al
je 0x140012dd1
jl 0x140012d4e
add byte [r14], r9b
add byte [rax], al
add byte [rax], al
add byte [rcx], al
add byte [rax], al
add byte [rax], dl
mov eax, 0x49ea0400
add byte [rdi], al
jae 0x140012dfe
jb 0x140012dfb
jns 0x140012d91
add byte [rax], al
push rbp
mov ebp, esp
add esp, 0xffffff58
push rbx
push rsi
push rdi
xor ecx, ecx
mov dword [rbp - 0x63fffffe], ecx
adc byte [rax], al
sbb byte [rax], al
add bl, byte [rcx + 0x32]
add al, byte [rax]
add byte [rcx + rcx*4 - 0x277407ab], bl
xor eax, eax
push rbp
push 0x675134
push qword fs:[rax]
add byte [rax], al
add byte [rbx + rdx*2], al
insb byte [rdi], dx
add al, byte [rax]
add al, byte [rax]
add al, byte [rax]
sub byte [rax], al
cwde
fild dword [rbp - 4]
cld
call 0x13ff27bbc
mov edx, dword [rsi + 0x14]
call 0x13ff03218
cmp eax, dword [rax]
add byte [rax], cl
add byte [rcx], al
or byte [rsi + rdx*4 + 0x4e], bh
add al, 0x53
insb byte [rdi], dx
nop
nop
nop
mov rax, qword gs:[0x60]
mov qword [rsp + 0x48], rax
add byte [rax - 0x77], cl
and al, 0x48
xor eax, eax
test eax, eax
je 0x140013018
nop
nop
nop
nop
nop
cmp esi, eax
je 0x140012e20
mov eax, dword [rbx]
mov edx, 0x26
call fcn.140012d34
jne 0x140012e31
mov eax, dword [rbp - 4]
test eax, eax
je 0x140012e2e
sub eax, 4
mov eax, dword [rax]
lea ebx, [rax + 0x20]
je 0x140012e88
xor dword [r15 + 0x66], ecx
push rbp
outsb dx, byte [rsi]
imul esp, dword [rbx + 0x6f], 0x2666c64
add byte [rax], cl
fdiv qword [rax + 0x20044]
invalid
test byte [rbp - 0x7cfffffd], dl
call 0xca012d95
lea ebx, [rax - 0x76000002]
push rbp
cld
mov esi, eax
xor eax, eax
push rbp
push rbp
movabs al, byte [0xe75e31e85980458d]
dec dword [rbp + 0x6a508045]
jne 0x140012eb9
mov eax, ebx
call fcn.140012b24
pop rbx
ret
xor eax, eax
test eax, eax
je 0x14001322f
add byte [rax], al
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
outsb dx, byte gs:[rsi]
jb 0x14001308c
imul esi, dword [rax + rbp*2 + 0x49], 0x26c83e64
add byte [rax + 0x4e], al
jne 0x140013020
xor eax, eax
pop rdx
pop rcx
pop rcx
mov dword fs:[rax], edx
push 0x46fc1a
mov eax, dword [rsi + 8]
test byte [rax + 0x188], 1
je 0x140013067
mov eax, dword [rbx + 0x40]
mov esi, esi
dec dword [rsi + 0x75]
out dx, al
push 0
push 0x2000
mov eax, dword [rbp - 0x18]
mov edx, dword [rbp - 8]
mov eax, dword [rbp + 0x14]
call qword [rbp + 0x10]
xor eax, eax
pop rdx
pop rcx
pop rcx
mov dword fs:[rax], edx
std
invalid
add byte [rax], al
add al, ch
or byte [rax], al
add byte [rax], al
push 0
push 0
jne 0x140013094
push rcx
push rbx
push rsi
push rdi
xor eax, dword [rax]
add dword [rcx], eax
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rcx], al
add byte [rax], al
add byte [rax], al
add byte [rdx + rax*2 + 0x65], ch
jbe 0x14001311a
insb byte [rdi], dx
adc eax, 0x6f447074
invalid
jae 0x140013190
jb 0x14001318d
jns 0x140013123
add cl, byte [rax]
cmp dword fs:[rax + rax], eax
cmp dword [rax + rax], eax
add byte [rbx + rdx*2], al
insb byte [rdi], dx
add al, byte [rax]
add dword [rbx + 0x42004d], eax
hlt
jno 0x1400131d3
add al, byte gs:[rax]
add al, byte [rax]
pushfq
adc byte [rax], al
cld
sti
add byte [r12 + rdi*8], r9b
add byte [r9], r8b
add byte [rax], cl
sub eax, dword [rdi]
push rax
mov eax, dword [rdi + 4]
push rax
mov eax, dword [rdi]
push rax
mov eax, dword [rbp - 4]
call 0x180d1bd88
mov ecx, dword [rbp - 4]
mov ecx, dword [rcx + 4]
mov dword [rbp - 0x14], ecx
mov ecx, dword [rbp - 0x14]
mov eax, esi
pop rsi
pop rbx
pop rcx
pop rbp
ret
add byte [rbx - 0x75], dl
sbb al, 0x8b
adc cl, byte [rbx - 0xe774f7]
push rbx
call 0x140014b28
ret
mov rax, qword [rsp + 0x48]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x58], rax
xor eax, eax
test eax, eax
je 0x140013462
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jae 0x1400132c3
imul ebp, dword [esi + 0x67], 0x654d542e
jae 0x1400132df
invalid
call [rdi + riz]
add byte [rdx], r8b
hlt
add byte [rcx], dh
add byte [rax], al
add byte [rbx + 0x6d764115], cl
add byte [rax - 0x126817f4], dh
inc dword [rax]
or byte [rax], al
add cl, byte [rax]
and byte [rcx + 0x58], bl
add byte [rax], al
add byte [rbx + rdx*2], al
insb byte [rdi], dx
je 0x14001337b
insb byte [rdi], dx
outsb dx, byte gs:[rsi]
imul ebp, dword [esi + 0x65], 0x73616c43
jae 0x14001334e
push qword [rcx - 0x74fc4dff]
clc
call fcn.140011c90
xor eax, eax
pop rdx
ret
add byte [rbx - 0x7403aa75], cl
in al, dx
call 0x13ffc387c
xor eax, eax
push rbp
invalid
invalid