Function at 0x18004b170
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xd0
mov eax, dword [rbp + 0x6f]
mov r15, rcx
imul ecx, eax, 0x39c
mov r10, r9
mov esi, eax
mov dword [rbp - 0x19], ecx
cmp eax, ecx
ja 0x18004b536
mov r13, qword [rbp - 0x11]
mov edi, dword [rbp + 0x6f]
mov ebx, dword [rbp + 0x6f]
mov r14d, dword [rbp + 0x6f]
mov r12, qword [rbp - 0x11]
xor ecx, ecx
cmp esi, 0x1fb0
ja 0x18004b3a9
je 0x18004b386
cmp esi, 0xf0
ja 0x18004b258
je 0x18004b4b9
mov eax, esi
sub eax, 0x2c
je 0x18004b22f
sub eax, 0x3c
je 0x18004b224
cmp eax, 0x66
jne 0x18004b506
xor r9d, r9d
lea r8d, [rax + 0x5f]
xor edx, edx
mov rcx, r15
call fcn.180066ec0
mov rdi, rax
test eax, eax
je 0x18004b502
mov dword [rbp - 0x39], eax
jmp 0x18004b536
mov r14d, 0x3020100
jmp 0x18004b506
xor r9d, r9d
mov r8, r15
mov edx, SHSetInstanceExplorer
xor ecx, ecx
call fcn.180054560
mov r10, qword [rbp + 0x67]
mov r13, rax
cmp qword [r10], rax
cmovb rax, qword [r10]
mov qword [rbp - 9], rax
jmp 0x18004b506
cmp esi, 0xd68
je 0x18004b2ef
cmp esi, 0x1aa4
jne 0x18004b509
test r12, r12
je 0x18004b2df
mov rax, qword [rbp - 9]
lea r8, [rbp - 0x49]
mov qword [rbp - 0x41], rax
mov r9, r15
lea rax, [rbp - 0x39]
mov qword [rbp - 0x39], rcx
mov qword [rsp + 0x28], rax
mov edx, 0x83
lea rax, [rbp - 0x41]
mov qword [rbp - 0x49], rcx
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.180080850
mov rax, qword [rbp - 9]
xor r9d, r9d
mov qword [rbp - 0x39], rax
xor r8d, r8d
lea rax, [rbp - 0x39]
mov edx, 0x8d
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.18007e870
mov eax, dword [rbp + 0x6f]
mov r10, qword [rbp + 0x67]
mov qword [rbp - 0x39], r12
jmp 0x18004b509
mov r12, qword [0x18009c020]
mov qword [rbp - 0x39], r12
jmp 0x18004b509
movzx eax, byte [r15 + 2]
cmp al, 8
jne 0x18004b32b
mov rax, qword [r15 + 0x20]
lea r9, [rbp - 0x41]
mov qword [rbp - 0x49], rax
lea rdx, [rbp - 0x49]
mov rax, qword [r15 + 8]
lea rcx, [rbp + 7]
mov r8d, PathMakeUniqueName
mov qword [rbp + 7], rax
mov qword [rbp - 0x41], r13
call fcn.18005da50
mov r12, rax
jmp 0x18004b502
mov dword [rbp - 0x29], eax
xor r9d, r9d
lea rax, [rbp - 0x11]
mov qword [rbp - 0x11], r13
mov qword [rsp + 0x68], rax
xor r8d, r8d
mov qword [rsp + 0x60], rcx
lea rax, [rbp - 0x29]
mov qword [rsp + 0x58], rcx
xor edx, edx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x55
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.18007a460
mov r12, rax
jmp 0x18004b502
mov rax, r15
mov ecx, 0x40
nop
mov dword [rax], r14d
lea rax, [rax + 4]
add r14d, 0x4040404
sub rcx, 1
jne 0x18004b390
jmp 0x18004b506
cmp esi, 0x27e0
je 0x18004b536
cmp esi, 0x3ec4
je 0x18004b4a3
cmp esi, 0x4920
je 0x18004b422
cmp esi, 0x9150
je 0x18004b401
cmp esi, 0xd980
jne 0x18004b509
mov eax, dword [rdx]
lea r8, [rbp - 0x31]
mov rdx, qword [rbp + 0x77]
lea rcx, [rbp - 0x49]
mov r9d, 0x63
mov dword [rbp - 0x31], ebx
mov dword [rbp - 0x49], eax
call fcn.180042c10
jmp 0x18004b502
mov byte [rbp - 0x51], 0
lea r8, [rbp - 0x49]
mov dword [rbp - 0x49], ebx
lea r9, [rbp - 0x51]
mov rdx, r15
mov ecx, 0x77
call fcn.18002dce0
jmp 0x18004b502
mov eax, dword [rdx]
mov r9d, 0x101
mov r8, qword [rbp - 1]
lea rdx, [rbp - 0x49]
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov dword [rbp - 0x49], eax
call fcn.18002b900
mov rdx, qword [rbp + 0x67]
lea r8, [rbp - 0x31]
mov dword [rbp - 0x31], eax
lea rcx, [rbp - 0x41]
mov rax, qword [rbp + 0x7f]
mov r9d, 0x63
mov eax, dword [rax]
mov dword [rbp - 0x41], eax
call fcn.180042c10
mov rcx, qword [rbp + 0x5f]
lea r8, [rbp - 0x41]
mov rdx, qword [rbp - 1]
mov r9d, 0x63
mov eax, dword [rcx]
lea rcx, [rbp - 0x49]
mov dword [rbp - 0x41], eax
mov rax, qword [rbp + 0x57]
mov eax, dword [rax]
mov dword [rbp - 0x49], eax
call fcn.180042c10
mov rax, qword [rbp + 0x5f]
lea r8, [rbp - 0x41]
mov byte [rbp - 0x51], 1
mov eax, dword [rax]
mov dword [rbp - 0x41], eax
jmp 0x18004b40c
mov eax, 0x6d
cmp eax, 0x6d
je 0x18004b51c
add eax, 0x308a
cmp eax, 0x308a
jbe 0x18004b4a8
mov rax, qword [rbp + 0x7f]
lea rdx, [rbp - 0x41]
mov qword [rsp + 0x20], rcx
mov r9d, 0x101
mov r8, r10
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbp - 0x41], eax
call fcn.18002b900
mov r9d, 0x8b
mov dword [rbp - 0x21], eax
lea r8, [rbp - 0x21]
mov qword [rsp + 0x20], 0
mov rdx, r15
xor ecx, ecx
mov rbx, rax
call fcn.18005ba20
mov qword [rbp - 1], rax
mov r10, qword [rbp + 0x67]
mov eax, dword [rbp + 0x6f]
imul ecx, eax, 0x4d
add esi, ecx
cmp esi, dword [rbp - 0x19]
ja 0x18004b536
mov rdx, qword [rbp + 0x57]
jmp 0x18004b1c9
mov eax, dword [r10]
lea r8, [rbp + 0x6f]
mov rdx, r15
mov dword [rbp + 0x6f], eax
mov ecx, 0x39
call fcn.180009340
mov dword [rbp - 0x39], edi
mov rax, qword [rbp - 0x39]
mov rbx, qword [rsp + 0x110]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret