Function at 0x140067df0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov r11, rsp
push r14
sub rsp, 0x50
test dword [rcx], 0x100
mov r14, rcx
je 0x140068038
mov rax, qword [rcx + 0x10]
mov qword [r11 + 0x10], rbx
lea rbx, [rcx + 8]
mov qword [r11 - 0x10], rdi
mov byte [rax], 0
xor dword [rcx], 0x100
je 0x140067f77
mov rdi, qword [rbx]
mov qword [r11 + 0x20], rsi
mov rsi, rdi
cmp rdi, qword [rcx + 0x10]
jae 0x140067f6f
mov qword [r11 + 0x18], rbp
mov qword [r11 - 0x18], r12
lea r12, str.quot
mov qword [r11 - 0x20], r13
xor r13d, r13d
mov qword [r11 - 0x28], r15
lea r15, str.XML_SUCCESS
nop dword [rax]
mov ecx, dword [r14]
test cl, 2
je 0x140067ea1
movzx eax, byte [rdi]
cmp al, 0xd
jne 0x140067e8c
cmp byte [rdi + 1], 0xa
jne 0x140067e81
add rdi, 2
mov byte [rsi], 0xa
jmp 0x140067f4a
inc rdi
mov byte [rsi], 0xa
jmp 0x140067f4a
cmp al, 0xa
jne 0x140067ea1
cmp byte [rdi + 1], 0xd
jne 0x140067e81
add rdi, 2
mov byte [rsi], al
jmp 0x140067f4a
test cl, 1
je 0x140067f42
cmp byte [rdi], 0x26
jne 0x140067f42
cmp byte [rdi + 1], 0x23
jne 0x140067efe
xor eax, eax
mov dword [rsp + 0x60], r13d
lea r8, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x20]
mov word [rsp + 0x28], ax
mov rcx, rdi
call fcn.140068050
test rax, rax
je 0x140067f42
movsxd rbx, dword [rsp + 0x60]
lea rdx, [rsp + 0x20]
mov r8, rbx
mov rcx, rsi
mov rdi, rax
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbx
jmp 0x140067f4d
mov rbx, r12
movsxd r8, dword [rbx + 8]
lea rcx, [rdi + 1]
mov rdx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x140067f21
movsxd rax, dword [rbx + 8]
cmp byte [rax + rdi + 1], 0x3b
je 0x140067f2c
add rbx, 0x10
cmp rbx, r15
jl 0x140067f01
jmp 0x140067f47
movzx eax, byte [rbx + 0xc]
mov byte [rsi], al
inc rsi
mov eax, dword [rbx + 8]
add eax, 2
cdqe
add rdi, rax
jmp 0x140067f4d
movzx eax, byte [rdi]
mov byte [rsi], al
inc rdi
inc rsi
cmp rdi, qword [r14 + 0x10]
jb 0x140067e60
mov r15, qword [rsp + 0x30]
lea rbx, [r14 + 8]
mov r13, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x70]
mov byte [rsi], 0
mov rsi, qword [rsp + 0x78]
test byte [r14], 4
je 0x14006801c
mov rbx, qword [rbx]
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rbx]
movsx eax, cl
shr eax, 7
test al, 1
jne 0x140067fac
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
je 0x140067fac
inc rbx
jmp 0x140067f90
mov qword [r14 + 8], rbx
movzx ecx, byte [rbx]
test cl, cl
je 0x14006801c
mov rdi, rbx
nop word [rax + rax]
movsx eax, cl
shr eax, 7
test al, 1
jne 0x140068007
movzx ecx, cl
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
je 0x140068007
nop word [rax + rax]
movzx ecx, byte [rbx]
movsx eax, cl
shr eax, 7
test al, 1
jne 0x140067ffc
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
je 0x140067ffc
inc rbx
jmp 0x140067fe0
cmp byte [rbx], 0
je 0x140068019
mov byte [rdi], 0x20
inc rdi
movzx eax, byte [rbx]
inc rbx
mov byte [rdi], al
inc rdi
movzx ecx, byte [rbx]
test cl, cl
jne 0x140067fc0
mov byte [rdi], 0
and dword [r14], 0x200
mov rax, qword [r14 + 8]
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
pop r14
ret
mov rax, qword [rcx + 8]
add rsp, 0x50
pop r14
ret