Function at 0x140096bb0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r13, rdx
movzx r8d, byte [rcx + 0x10]
cmp r8b, 0x80
je 0x140096bec
movzx eax, byte [rcx + 0x1a]
movzx edx, byte [rcx + 0x1b]
movzx r9d, byte [rcx + 0x19]
mov byte [rsp + 0x68], r9b
mov r9, qword [rcx + 0x11]
mov qword [rsp + 0x60], r9
mov r14, qword [rcx]
mov r15, qword [rcx + 8]
movzx r10d, byte [rcx + 0x1c]
cmp r10b, 0x80
je 0x140096c1a
movzx r11d, byte [rcx + 0x26]
movzx ebx, byte [rcx + 0x27]
movzx r9d, byte [rcx + 0x25]
mov byte [rsp + 0x78], r9b
mov rcx, qword [rcx + 0x1d]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r15
mov byte [rsp + 0x48], r8b
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x49], rcx
movzx ecx, byte [rsp + 0x68]
mov byte [rsp + 0x51], cl
mov byte [rsp + 0x52], al
mov byte [rsp + 0x53], dl
mov byte [rsp + 0x2d], r10b
mov byte [rsp + 0x54], r10b
movzx ecx, byte [rsp + 0x78]
mov byte [rsp + 0x5d], cl
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x55], rcx
mov byte [rsp + 0x2c], r11b
mov byte [rsp + 0x5e], r11b
mov byte [rsp + 0x2b], bl
mov byte [rsp + 0x5f], bl
cmp r8b, 0x80
jne 0x140096e33
mov qword [rsp + 0x80], r13
test r14, r14
je 0x140096e25
cmp r14, r15
je 0x140096e25
lea rbx, [rsp + 0x48]
mov rax, qword [rsp + 0x80]
mov rdi, qword [rax + 0x20]
mov r12, qword [rax + 0x28]
lea r13, [0x140eb9ad4]
lea rsi, [rsp + 0x2e]
jmp 0x140096cc9
cmp r14, r15
je 0x140096e25
movzx eax, byte [r14]
test al, al
js 0x140096ce0
inc r14
jmp 0x140096d50
mov ecx, eax
and ecx, 0x1f
movzx r8d, byte [r14 + 1]
and r8d, 0x3f
cmp al, 0xdf
jbe 0x140096d2b
movzx edx, byte [r14 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp al, 0xf0
jb 0x140096d39
movzx eax, byte [r14 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and eax, 0x3f
or eax, edx
or eax, ecx
cmp eax, 0x110000
je 0x140096e25
add r14, 4
jmp 0x140096d50
add r14, 2
shl ecx, 6
or ecx, r8d
mov eax, ecx
jmp 0x140096d50
add r14, 3
shl ecx, 0xc
or edx, ecx
mov eax, edx
nop word cs:[rax + rax]
mov byte [rsp + 0x30], 0
mov word [rsp + 0x2e], 0
mov byte [rsp + 0x37], 0x7d
mov ecx, eax
shr ecx, 0x14
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x31], cl
mov ecx, eax
shr ecx, 0x10
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x32], cl
mov ecx, eax
shr ecx, 0xc
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x33], cl
mov ecx, eax
shr ecx, 8
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x34], cl
mov ecx, eax
shr ecx, 4
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x35], cl
mov ecx, eax
and ecx, 0xf
movzx ecx, byte [rcx + r13]
mov byte [rsp + 0x36], cl
or eax, 1
bsr ebp, eax
xor ebp, 0x1c
shr ebp, 2
mov byte [rbp + rsi], 0x7b
mov word [rbp + rsi - 2], 0x755c
movzx eax, word [rsp + 0x36]
mov word [rbx + 8], ax
mov rax, qword [rsp + 0x2e]
mov qword [rbx], rax
mov byte [rsp + 0x53], 0xa
nop
cmp rbp, 0xc
je 0x140096cc0
lea eax, [rbp - 1]
mov byte [rsp + 0x52], al
movzx edx, byte [rsp + rbp + 0x46]
mov rcx, rdi
call qword [r12 + 0x20]
inc rbp
test al, al
je 0x140096df0
add rbp, 0xfffffffffffffffd
cmp rbp, 9
ja 0x140096cc0
jmp 0x140096e7a
cmp byte [rsp + 0x2d], 0x80
jne 0x140096e7f
xor esi, esi
jmp 0x140096ec9
movzx edi, al
movzx esi, dl
mov rbx, qword [r13 + 0x20]
mov r12, qword [r13 + 0x28]
nop word cs:[rax + rax]
cmp rdi, rsi
jae 0x140096c7d
lea eax, [rdi + 1]
mov byte [rsp + 0x52], al
cmp rdi, 0xa
jae 0x140096edf
movzx edx, byte [rsp + rdi + 0x48]
mov rcx, rbx
call qword [r12 + 0x20]
inc rdi
test al, al
je 0x140096e50
mov sil, 1
jmp 0x140096ec9
movzx edi, byte [rsp + 0x2c]
movzx r14d, byte [rsp + 0x2b]
mov rax, qword [rsp + 0x80]
mov rbx, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
nop word [rax + rax]
cmp rdi, r14
setb sil
jae 0x140096ec9
lea eax, [rdi + 1]
mov byte [rsp + 0x5e], al
cmp rdi, 0xa
jae 0x140096edf
movzx edx, byte [rsp + rdi + 0x54]
mov rcx, rbx
call qword [r15 + 0x20]
inc rdi
test al, al
je 0x140096ea0
mov eax, esi
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, [0x140ebba48]
mov edx, 0xa
mov rcx, rdi
call dbg.panic_bounds_check
int3