Function at 0x14002b310
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x130
movaps xmmword [rax - 0x48], xmm6
mov r13, rcx
movsd xmm6, qword [0x140212a38]
xorps xmm5, xmm5
xorps xmm4, xmm4
xorps xmm3, xmm3
movaps xmm2, xmm3
movaps xmm1, xmm3
mulsd xmm2, qword [0x140212998]
movaps xmm0, xmm3
mulsd xmm1, qword [0x140212128]
mulsd xmm0, xmm3
mulsd xmm2, xmm3
mulsd xmm1, xmm3
subsd xmm2, xmm0
addsd xmm1, qword [0x140212330]
divsd xmm2, xmm1
addsd xmm4, xmm2
comisd xmm4, xmmword [0x1402125b0]
jbe 0x14002b397
movaps xmm0, xmm3
mulsd xmm0, qword [0x140212098]
subsd xmm4, xmm0
addsd xmm3, qword [0x14020d168]
comisd xmm6, xmm3
ja 0x14002b345
comisd xmm5, xmm4
jbe 0x14002b3ba
call fcn.140048f92
call fcn.140048f5e
jmp 0x14002ba73
xor eax, eax
lea rcx, [rsp + 0x20]
mov byte [rcx], al
inc eax
inc rcx
cmp eax, 0x100
jb 0x14002b3c1
xor r10d, r10d
mov r9d, 0xff
xor cl, cl
xor edi, edi
lea r11d, [rdi + 1]
cmp r9d, r11d
jbe 0x14002b3f2
lea r11d, [r11*2 + 1]
cmp r11d, r9d
jb 0x14002b3e5
movzx eax, cl
mov dl, byte [rsp + rax + 0x20]
mov eax, r10d
test r10d, r10d
je 0x14002b43e
sub eax, 1
je 0x14002b434
sub eax, 1
je 0x14002b42a
cmp eax, 1
je 0x14002b420
lea ecx, [r10 - 4]
lea rax, [fcn.140048f92]
mov al, byte [rcx + rax]
jmp 0x14002b443
cvttsd2si rax, xmm4
shr eax, 0x18
jmp 0x14002b443
cvttsd2si rax, xmm4
shr eax, 0x10
jmp 0x14002b443
cvttsd2si rax, xmm4
shr eax, 8
jmp 0x14002b443
cvttsd2si rax, xmm4
add al, dl
lea r8d, [r10 + 1]
movzx edx, al
cmp r8d, 0x19
lea eax, [rdx + 0x19]
movzx ecx, al
cmovb ecx, edx
sbb r10d, r10d
movzx ebx, cl
and r10d, r8d
mov eax, ebx
inc edi
and eax, r11d
cmp edi, 0xb
jbe 0x14002b475
xor edx, edx
div r9d
mov eax, edx
mov cl, bl
cmp eax, r9d
ja 0x14002b3f2
je 0x14002b49f
mov edx, eax
mov ecx, r9d
mov al, byte [rsp + rdx + 0x20]
xor byte [rsp + rcx + 0x20], al
mov al, byte [rsp + rcx + 0x20]
xor byte [rsp + rdx + 0x20], al
mov al, byte [rsp + rdx + 0x20]
xor byte [rsp + rcx + 0x20], al
mov cl, bl
add r9d, 0xffffffff
jne 0x14002b3da
movzx r10d, byte [rsp + rbx + 0x20]
lea rsi, [fcn.140048f5e]
movzx ecx, byte [rsp + 0x27]
movzx r14d, byte [rsp + 0x21]
mov r8d, ecx
mov r15b, byte [rsp + 0x25]
movzx ebx, byte [rsp + r10 + 0x20]
mov r11b, byte [rsi + 1]
mov r12b, byte [rsp + r14 + 0x20]
sub r11b, 0x16
add r12b, byte [rsp + 0x23]
inc r14b
mov al, byte [rsi]
mov dil, byte [rsi + 3]
shl al, 4
sub dil, 0x16
or r11b, al
movzx r9d, r12b
add r12b, bl
mov al, byte [rsp + r9 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx ecx, r14b
inc r14b
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], bl
add r15b, byte [rsp + rbx + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rcx, rax
movzx r10d, r12b
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rax, rbx
movzx r9d, r11b
movzx eax, al
lea rbx, [rsi + 4]
mov dl, byte [rsp + rcx + 0x20]
mov cl, byte [rsi + 2]
shl cl, 4
xor dl, byte [rsp + rax + 0x20]
or dil, cl
mov al, byte [rsp + r10 + 0x20]
xor dl, r11b
movzx r11d, byte [rsp + r9 + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx r8d, dl
movzx ecx, r14b
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], r11b
add r15b, byte [rsp + r11 + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx r9d, dil
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, r11
movzx eax, al
mov dl, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
xor dl, dil
mov byte [r13], dl
mov sil, byte [rsi + 5]
mov al, byte [rbx]
sub sil, 0x16
shl al, 4
or sil, al
movzx edi, byte [rsp + r9 + 0x20]
add r12b, r11b
movzx r8d, dl
inc r14b
movzx r10d, r12b
mov edx, edi
movzx ecx, r14b
mov byte [rbp + 0x70], dil
mov qword [rbp + 0x78], 9
mov al, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], dil
add r15b, byte [rsp + rdi + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, rdi
mov edi, 2
movzx eax, al
mov dl, byte [rsp + rcx + 0x20]
mov cl, byte [rbp + 0x70]
xor dl, byte [rsp + rax + 0x20]
xor dl, sil
mov byte [r13 + 1], dl
jmp 0x14002b698
mov sil, byte [rbp + 0x70]
add r12b, cl
movzx r8d, dl
movzx r10d, r12b
lea rbx, [rbx + 2]
mov al, byte [rbx]
inc r14b
mov r11b, byte [rbx + 1]
inc rdi
shl al, 4
sub r11b, 0x16
or r11b, al
movzx r9d, sil
mov al, byte [rsp + r10 + 0x20]
movzx ecx, r14b
mov byte [rbp + 0x70], r11b
movzx esi, byte [rsp + r9 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov edx, esi
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], sil
add r15b, byte [rsp + rsi + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, rsi
movzx eax, al
mov dl, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
xor dl, r11b
test rdi, rdi
jle 0x14002b73c
mov byte [rdi + r13 - 1], dl
sub qword [rbp + 0x78], 1
mov cl, sil
jne 0x14002b694
movzx r8d, dl
lea rbx, [fcn.140048f5e]
add rbx, 0x18
movzx r9d, r11b
add r12b, sil
mov qword [rbp + 0x78], 0xa
movzx r10d, r12b
inc r14b
movzx ecx, r14b
mov esi, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
movzx r11d, byte [rsp + r9 + 0x20]
mov al, byte [rbx]
mov edx, r11d
mov dil, byte [rbx + 1]
shl al, 4
sub dil, 0x16
or dil, al
mov al, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], r11b
add r15b, byte [rsp + r11 + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, r11
movzx eax, al
mov dl, byte [rsp + rcx + 0x20]
mov cl, r11b
xor dl, byte [rsp + rax + 0x20]
xor dl, dil
mov byte [r13 + 0xb], dl
add r12b, cl
movzx r8d, dl
movzx r9d, dil
lea rbx, [rbx + 2]
mov al, byte [rbx]
inc r14b
mov r11b, byte [rbx + 1]
inc rsi
shl al, 4
sub r11b, 0x16
movzx edi, byte [rsp + r9 + 0x20]
or r11b, al
movzx r10d, r12b
mov edx, edi
movzx ecx, r14b
mov byte [rbp + 0x70], dil
mov al, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], dil
add r15b, byte [rsp + rdi + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, rdi
mov dil, r11b
movzx eax, al
mov dl, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
xor dl, r11b
test rsi, rsi
jle 0x14002b8a0
mov byte [rsi + r13 - 1], dl
sub qword [rbp + 0x78], 1
mov r8b, byte [rbp + 0x70]
mov cl, r8b
jne 0x14002b7f9
add r12b, r8b
movzx r9d, dil
movzx r8d, dl
lea rsi, [fcn.140048f5e]
mov al, byte [rsi + 0x2e]
inc r14b
mov bl, byte [rsi + 0x2f]
movzx r11d, byte [rsp + r9 + 0x20]
sub bl, 0x16
shl al, 4
or bl, al
movzx r10d, r12b
movzx ecx, r14b
add r12b, r11b
inc r14b
mov al, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], r11b
add r15b, byte [rsp + r11 + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx r9d, bl
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx edi, byte [rsp + r9 + 0x20]
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, r11
movzx r10d, r12b
movzx eax, al
add r12b, dil
mov dl, byte [rsp + rcx + 0x20]
movzx ecx, r14b
xor dl, byte [rsp + rax + 0x20]
xor dl, bl
mov byte [r13 + 0x16], dl
mov al, byte [rsi + 0x30]
mov sil, byte [rsi + 0x31]
shl al, 4
sub sil, 0x16
or sil, al
movzx r8d, dl
mov al, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], dil
add r15b, byte [rsp + rdi + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx r9d, sil
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx r11d, byte [rsp + r9 + 0x20]
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, rdi
movzx eax, al
mov dl, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
lea rax, [fcn.140048f5e]
xor dl, sil
mov byte [r13 + 0x17], dl
mov bl, byte [rax + 0x33]
mov al, byte [rax + 0x32]
sub bl, 0x16
shl al, 4
or bl, al
inc r14b
movzx r8d, dl
movzx r10d, r12b
movzx ecx, r14b
mov al, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], r11b
add r15b, byte [rsp + r11 + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, r11
movzx eax, al
mov dl, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
xor dl, bl
mov byte [r13 + 0x18], dl
mov byte [r13 + 0x19], 0
lea r11, [rsp + 0x130]
mov rax, r13
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret