Function at 0x1800da5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
lea r12d, [r8 - 6]
mov esi, r8d
mov rbx, rdx
mov r13, rcx
cmp r8d, r12d
jbe 0x1800da8a4
mov r14, qword [rsp + 0x98]
lea ebp, [r8 - 0x91]
mov r15, qword [rsp + 0x98]
xor edi, edi
movzx edx, word [0x180477404]
lea r8, [0x180000000]
cmp ebp, 9
ja case.0x1800da64a.4
mov ecx, dword [r8 + rbp*4 + 0xda8cc]
add rcx, r8
jmp rcx
mov word [0x1804775a0], dx
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x28], 0x11a
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor ecx, ecx
call fcn.18009be40
xor r9d, r9d
mov dword [rsp + 0x28], 0x11a
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
mov rbx, rax
call fcn.18009be40
movzx edx, word [rbx + 0xc]
not dx
and dx, 3
movzx ecx, word [rax + 0xc]
mov eax, 0xc0
shl dx, 4
not cx
and cx, ax
mov ax, word [0x4000130]
or dx, cx
not ax
shl dx, 6
mov ecx, 0x3ff
and ax, cx
or dx, ax
mov eax, 0x2000
xor dx, ax
mov word [0x180477404], dx
jmp 0x1800da88f
mov r14, qword [rbx]
test r14, r14
jne case.0x1800da64a.4
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x98]
xor edx, edx
mov qword [rsp + 0x20], r13
xor ecx, ecx
mov qword [rsp + 0x98], 0x10
mov r8d, 0xac
call fcn.18009b6a0
mov qword [rbx], rax
mov r14, rax
movzx edx, word [0x180477404]
jmp case.0x1800da64a.4
inc qword [r14 + 8]
movzx edx, word [0x180477404]
jmp case.0x1800da64a.4
mov rdx, qword [r14]
mov qword [rsp + 0x98], 0x30
test rdx, rdx
je 0x1800da783
mov rax, qword [r14 + 8]
lea r8, [rsp + 0x30]
mov r9, r13
lea rcx, [rax + rax*2]
shl rcx, 4
lea rax, [rsp + 0x98]
mov qword [rsp + 0x30], rcx
mov ecx, 0x60
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.180020df0
jmp 0x1800da7a4
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x98]
xor edx, edx
mov qword [rsp + 0x20], r13
xor ecx, ecx
mov r8d, 0xac
call fcn.18009b6a0
mov rcx, rax
mov qword [r14], rax
mov rax, qword [r14 + 8]
movzx edx, word [0x180477404]
lea r15, [rax + rax*2]
shl r15, 4
add r15, rcx
jmp case.0x1800da64a.4
cmp byte [0x180472358], 0
je case.0x1800da64a.4
mov edi, reloc.SHLWAPI.dll_GetAcceptLanguagesW
mov eax, edi
sub eax, 0xe
je 0x1800da846
cmp eax, 1
jne 0x1800da882
cmp dx, word [0x1804775a0]
je 0x1800da83e
mov ebx, 0x59
cmp ebx, 0x59
je 0x1800da81c
cmp ebx, 0x1cdb
jne 0x1800da829
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x3f]
call fcn.18004b450
mov word [0x1804775a4], ax
jmp 0x1800da829
movzx eax, byte [0x180472358]
mov byte [0x18047235a], al
add ebx, 0x1c82
cmp ebx, 0x3904
jbe 0x1800da7f5
movzx edx, word [0x180477404]
dec byte [0x18047235a]
jmp 0x1800da882
cmp byte [0x18047235a], 0
jne 0x1800da882
mov ecx, 0x10d
mov eax, ecx
sub eax, 0x10c
je 0x1800da871
cmp eax, 1
jne 0x1800da878
movzx eax, byte [reloc.SHLWAPI.dll_GetAcceptLanguagesW]
mov byte [0x18047235a], al
jmp 0x1800da878
mov word [0x1804775a4], dx
dec ecx
cmp ecx, 0x10b
ja 0x1800da854
dec edi
cmp edi, 0xd
ja 0x1800da7d7
xor edi, edi
mov rbx, qword [rsp + 0x88]
dec esi
dec ebp
cmp esi, r12d
ja 0x1800da62f
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, r15
jmp 0x1800da8ac