Function at 0x18000ac80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
mov r15, rcx
mov r9d, dword [rcx + 0x24]
mov r14d, dword [rcx + 0x28]
mov r12d, dword [rcx + 0x2c]
mov eax, dword [rcx + 0x54]
mov dword [rsp + 0x2c], eax
mov eax, dword [rcx + 0x50]
mov dword [rsp + 0x30], eax
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rcx + 0x38]
mov qword [rsp + 0x48], rax
mov ebp, r9d
and ebp, 0x7fff
lea rax, [rcx + 0x80c8]
mov qword [rsp + 0x88], rax
lea rax, [rcx + 0x192a2]
mov qword [rsp + 0x68], rax
lea rax, [rcx + 0x1c8]
mov qword [rsp + 0x70], rax
mov rax, qword [r15 + 0xb8]
test rax, rax
jne 0x18000ad15
test r14d, r14d
je 0x18000b359
cmp dword [r15 + 0xa8], 0
je 0x18000b359
mov dword [rsp + 0x3c], r9d
mov esi, 0x1000
sub esi, r14d
cmp rax, rsi
cmovb rsi, rax
sub rax, rsi
mov qword [r15 + 0xb8], rax
lea eax, [r14 + rsi]
mov dword [rsp + 0x34], eax
test esi, esi
je 0x18000add0
add r14d, dword [rsp + 0x3c]
mov rdi, qword [r15 + 0xb0]
jmp 0x18000ad71
add rdi, rbx
mov qword [r15 + 0xb0], rdi
add r14d, ebx
sub esi, ebx
je 0x18000add0
and r14d, 0x7fff
mov ebx, 0x8000
sub ebx, r14d
cmp ebx, esi
cmovae ebx, esi
lea rcx, [r15 + r14]
add rcx, 0xc8
mov rdx, rdi
mov r8, rbx
call fcn.180072cc0
cmp r14d, 0x100
ja 0x18000ad60
mov rax, qword [rsp + 0x88]
lea rcx, [rax + r14]
mov r8d, 0x101
sub r8d, r14d
cmp ebx, r8d
cmovb r8d, ebx
mov rdx, rdi
call fcn.180072cc0
jmp 0x18000ad60
mov ecx, 0x8000
mov eax, dword [rsp + 0x34]
sub ecx, eax
cmp ecx, r12d
cmovae ecx, r12d
mov r12d, ecx
cmp eax, 0xfff
ja 0x18000adfa
cmp dword [r15 + 0xa8], 0
je 0x18000b351
cmp eax, 4
jae 0x18000af2b
xor r14d, r14d
mov ebx, dword [rsp + 0x34]
test ebx, ebx
mov r9d, dword [rsp + 0x3c]
je 0x18000acf2
mov eax, r12d
add ebx, 0xffffffff
mov edx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x2c]
mov r10, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
jmp 0x18000ae52
add ebp, 1
and ebp, 0x7fff
add ebx, 0xffffffff
jae 0x18000b320
mov eax, ebp
movzx eax, byte [r15 + rax + 0xc8]
mov byte [rdi], al
shr byte [r10], 1
add r8d, 1
lea rcx, [rdi + 1]
add edx, 0xffffffff
add rdi, 2
test edx, edx
cmove r10, rcx
cmovne rdi, rcx
mov ecx, 8
cmove edx, ecx
add word [r15 + rax*2 + 0x81ca], 1
add r9d, 1
add r12d, 1
cmp r12d, 0x8000
mov eax, 0x8000
cmovae r12d, eax
cmp rdi, qword [rsp + 0x68]
jbe 0x18000ae40
mov esi, r9d
mov dword [r15 + 0x24], r9d
mov dword [r15 + 0x28], ebx
mov dword [r15 + 0x2c], r12d
mov dword [r15 + 0x54], r8d
mov qword [r15 + 0x30], rdi
mov qword [r15 + 0x38], r10
mov dword [r15 + 0x50], edx
mov rcx, r15
xor edx, edx
call fcn.18000bfb0
test eax, eax
jne 0x18000b338
mov r8d, dword [r15 + 0x54]
mov rdi, qword [r15 + 0x30]
mov r10, qword [r15 + 0x38]
mov edx, dword [r15 + 0x50]
mov r9d, esi
jmp 0x18000ae40
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], rsi
mov dword [rsp + 0x2c], r8d
mov dword [rsp + 0x30], ebx
add ebp, r13d
and ebp, 0x7fff
mov dword [rsp + 0x34], r14d
cmp r14d, 3
jbe 0x18000ae03
mov r13d, ebp
lea rcx, [r15 + r13]
add rcx, 0xc8
mov qword [rsp + 0x90], rcx
call fcn.180005bd0
mov ebp, eax
mov esi, eax
and esi, 0xffffff
mov eax, esi
shr eax, 0x11
mov ecx, ebp
and ecx, 0xfff
xor ecx, eax
movzx edx, word [r15 + rcx*2 + 0x292aa]
mov r11d, dword [rsp + 0x3c]
mov word [r15 + rcx*2 + 0x292aa], r11w
mov eax, r11d
sub eax, edx
mov dword [rsp + 0x50], eax
movzx edi, ax
mov dword [rsp + 0x38], r12d
cmp r12d, edi
jb 0x18000b110
mov r12d, edx
and r12d, 0x7fff
lea rbx, [r15 + r12]
add rbx, 0xc8
mov rcx, rbx
mov r14, r13
mov r13, rdx
call fcn.180005bd0
mov rcx, r13
mov r13, r14
mov r11d, dword [rsp + 0x3c]
and eax, 0xffffff
cmp eax, esi
jne 0x18000b110
mov qword [rsp + 0x58], rdi
mov dword [rsp + 0x54], ebp
mov esi, r11d
mov rax, qword [rsp + 0x70]
lea rdx, [rax + r13]
mov qword [rsp + 0x78], rdx
and ecx, 0x7fff
add rcx, rax
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x60], r13
lea r14, [r15 + r13]
add r12, r15
mov edi, 0x20
xor r13d, r13d
nop word [rax + rax]
lea rcx, [r14 + r13]
add rcx, 0xca
call fcn.18000f0c0
mov ebp, eax
lea rcx, [r12 + r13]
add rcx, 0xca
call fcn.18000f0c0
cmp bp, ax
jne 0x18000b144
lea rcx, [r14 + r13]
add rcx, 0xcc
call fcn.18000f0c0
mov ebp, eax
lea rcx, [r12 + r13]
add rcx, 0xcc
call fcn.18000f0c0
cmp bp, ax
jne 0x18000b158
lea rcx, [r14 + r13]
add rcx, 0xce
call fcn.18000f0c0
mov ebp, eax
lea rcx, [r12 + r13]
add rcx, 0xce
call fcn.18000f0c0
cmp bp, ax
jne 0x18000b16c
lea rcx, [r14 + r13]
add rcx, 0xd0
call fcn.18000f0c0
mov ebp, eax
lea rcx, [r12 + r13]
add rcx, 0xd0
call fcn.18000f0c0
cmp bp, ax
jne 0x18000b180
add rbx, 8
add edi, 0xffffffff
add r13, 8
cmp r13d, 0x100
jne 0x18000b010
xor edi, edi
mov r11d, esi
mov ebx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x2c]
mov rsi, qword [rsp + 0x48]
mov r9, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x34]
mov r12d, dword [rsp + 0x38]
mov ebp, dword [rsp + 0x50]
mov r10, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x78]
jmp 0x18000b1ba
mov rcx, qword [rsp + 0x40]
mov byte [rcx], bpl
mov rsi, qword [rsp + 0x48]
shr byte [rsi], 1
add rcx, 1
movzx eax, bpl
mov ebp, 1
mov ebx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x2c]
mov r14d, dword [rsp + 0x34]
mov r12d, dword [rsp + 0x38]
jmp 0x18000b286
add rbx, 2
lea rcx, [r14 + r13]
add rcx, 0xca
mov r10, rbx
jmp 0x18000b196
add rbx, 4
lea rcx, [r14 + r13]
add rcx, 0xcc
mov r10, rbx
jmp 0x18000b196
add rbx, 6
lea rcx, [r14 + r13]
add rcx, 0xce
mov r10, rbx
jmp 0x18000b196
lea rcx, [r14 + r13]
add rcx, 0xd0
lea r10, [r12 + r13]
add r10, 0xd0
mov r11d, esi
mov ebx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x2c]
mov rsi, qword [rsp + 0x48]
mov r9, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x34]
mov r12d, dword [rsp + 0x38]
mov ebp, dword [rsp + 0x50]
mov eax, ecx
sub eax, dword [rsp + 0x90]
and eax, 0xfffffffe
mov cl, byte [rcx]
xor edx, edx
cmp cl, byte [r10]
sete dl
or edx, eax
test bp, bp
mov ebp, 0x102
mov eax, 0
cmove ebp, eax
test edi, edi
cmovne ebp, edx
cmp ebp, 3
jb 0x18000b1fb
cmp dword [rsp + 0x58], 0x2000
jb 0x18000b212
cmp ebp, 3
jne 0x18000b212
mov eax, dword [rsp + 0x54]
mov byte [r9], al
shr byte [rsi], 1
add r9, 1
movzx eax, al
mov ebp, 1
jmp 0x18000b27e
cmp ebp, r14d
cmovae ebp, r14d
mov rax, qword [rsp + 0x58]
add eax, 0xffffffff
lea r10d, [rbp - 3]
mov byte [r9], r10b
mov dword [r9 + 1], eax
add r9, 3
mov cl, byte [rsi]
shr cl, 1
or cl, 0x80
mov byte [rsi], cl
mov ecx, eax
and ecx, 0x1ff
lea rdx, [0x1800a57d0]
add rcx, rdx
mov rdx, rax
shr rdx, 8
lea rdi, [0x1800a59d0]
add rdx, rdi
cmp eax, 0x200
cmovb rdx, rcx
movzx ecx, byte [rdx]
add word [r15 + rcx*2 + 0x840a], 1
lea rcx, [0x1800a5a50]
movzx eax, word [rcx + r10*2]
mov rcx, r9
mov r13, qword [rsp + 0x60]
add word [r15 + rax*2 + 0x81ca], 1
add ebx, 0xffffffff
lea rdx, [rcx + 1]
test ebx, ebx
cmove rsi, rcx
cmovne rdx, rcx
mov eax, 8
cmove ebx, eax
add r8d, ebp
add r11d, ebp
add r12d, ebp
cmp r12d, 0x8000
mov eax, 0x8000
cmovae r12d, eax
sub r14d, ebp
cmp rdx, qword [rsp + 0x68]
mov dword [rsp + 0x3c], r11d
jbe 0x18000af00
mov dword [r15 + 0x24], r11d
mov dword [r15 + 0x28], r14d
mov dword [r15 + 0x2c], r12d
mov dword [r15 + 0x54], r8d
mov qword [r15 + 0x30], rdx
mov qword [r15 + 0x38], rsi
mov dword [r15 + 0x50], ebx
mov rcx, r15
xor edx, edx
call fcn.18000bfb0
test eax, eax
jne 0x18000b338
mov r8d, dword [r15 + 0x54]
mov rax, qword [r15 + 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [r15 + 0x38]
mov qword [rsp + 0x48], rax
mov ebx, dword [r15 + 0x50]
jmp 0x18000af0a
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r10
mov dword [rsp + 0x2c], r8d
mov dword [rsp + 0x30], edx
jmp 0x18000acf2
not eax
shr eax, 0x1f
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r14d, eax
mov r9d, dword [rsp + 0x3c]
mov dword [r15 + 0x24], r9d
mov dword [r15 + 0x28], r14d
mov dword [r15 + 0x2c], r12d
mov eax, dword [rsp + 0x2c]
mov dword [r15 + 0x54], eax
mov rax, qword [rsp + 0x40]
mov qword [r15 + 0x30], rax
mov rax, qword [rsp + 0x48]
mov qword [r15 + 0x38], rax
mov eax, dword [rsp + 0x30]
mov dword [r15 + 0x50], eax
mov eax, 1
jmp 0x18000b33d