Function at 0x1800ce710
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r15
sub rsp, 0x20
mov r10, qword [rcx]
mov r15d, r8d
mov rsi, qword [rcx + 8]
mov rbx, rcx
mov ebp, edx
mov rdi, qword [r10 + 0x20]
cmp rsi, qword [rcx + 0x10]
jae 0x1800ce987
movzx r9d, byte [rdi + rbp*8 + 5]
cmp r9b, 0x5b
jne 0x1800ce7a5
movzx eax, byte [rdi + rbp*8 + 2]
and al, 0x1f
cmp al, 0x13
jne 0x1800ce80d
mov eax, dword [rbx + 0x18]
movzx ecx, word [rdi + rbp*8]
and eax, 0xf000
cmp eax, 0x1000
ja 0x1800ce782
mov edx, ecx
inc r8d
mov rcx, rbx
call fcn.1800ced70
jmp 0x1800ce789
mov dword [rsi], ecx
add qword [rbx + 8], 4
cmp dword [rbx + 0x1c], 0x15
jne 0x1800ce79e
mov rax, qword [rbx + 8]
mov dword [rax], 0x20000
add qword [rbx + 8], 4
xor eax, eax
jmp 0x1800ce8bc
cmp r9b, 0x1c
jne 0x1800ce80d
test dword [rcx + 0x18], 0xf000
movsd xmm1, qword [rdi + rbp*8 + 8]
jne 0x1800ce7f4
cvttsd2si rcx, xmm1
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
ucomisd xmm1, xmm0
jp 0x1800ce987
jne 0x1800ce987
mov dword [rsi], 0x30000
add qword [rbx + 8], 4
mov rax, qword [rbx + 8]
mov dword [rax], ecx
add qword [rbx + 8], 4
xor eax, eax
jmp 0x1800ce8bc
cvttsd2si ecx, xmm1
movsx eax, cx
cmp ecx, eax
jne 0x1800ce987
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
jmp 0x1800ce7c7
movzx r11d, byte [r10 + 0xbd]
movzx r8d, word [r10 + r11*2 + 0x192]
cmp r8d, ebp
jbe 0x1800ce868
movzx eax, word [rdi + r8*8]
cmp eax, ebp
jne 0x1800ce85d
cmp r11b, 0x5c
je 0x1800ce8d5
movzx eax, word [rdi + r8*8 + 2]
xor eax, dword [rbx + 0x18]
test eax, 0xfff
jne 0x1800ce85d
movzx ecx, byte [rdi + r8*8 + 4]
movzx eax, byte [r10 + 0xbc]
and cl, 0x80
and al, 0x80
cmp cl, al
jae 0x1800ce8d5
movzx r8d, word [rdi + r8*8 + 6]
cmp r8d, ebp
ja 0x1800ce823
sub r9b, 0x29
mov qword [rsp + 0x40], r14
cmp r9b, 1
ja 0x1800ce96c
mov r8d, dword [rbx + 0x18]
mov eax, r8d
and eax, 0xf000
cmp eax, 0x2000
jne 0x1800ce89a
test r15d, r15d
jle 0x1800ce89a
add r8d, 0x1000
movzx edx, bp
mov rcx, r10
call fcn.1800ce6d0
test rax, rax
je 0x1800ce8e1
movzx eax, word [rax + 2]
mov dword [rsi], eax
add qword [rbx + 8], 4
xor eax, eax
mov r14, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r12
pop rdi
ret
mov dword [rsi], r8d
add qword [rbx + 8], 4
xor eax, eax
jmp 0x1800ce8bc
cmp dword [rbx + 0x1c], 0x15
jne 0x1800ce911
mov r8d, 0x226e
mov rcx, r10
call fcn.1800ce6d0
test rax, rax
je 0x1800ce911
movzx eax, word [rax + 2]
mov dword [rsi], eax
add qword [rbx + 8], 4
mov rax, qword [rbx + 8]
mov dword [rax], 0x20000
jmp 0x1800ce8b0
inc r15d
cmp r15d, 0x64
jge 0x1800ce96c
movzx edx, word [rdi + rbp*8]
mov r8d, r15d
mov rcx, rbx
call fcn.1800ce710
movzx edx, word [rdi + rbp*8 + 2]
mov r8d, r15d
mov rcx, rbx
mov r14d, eax
call fcn.1800ce710
add r14d, eax
cmp r14d, 1
jg 0x1800ce968
movzx ecx, byte [rdi + rbp*8 + 5]
mov rax, qword [rbx + 8]
shl ecx, 8
or ecx, dword [rbx + 0x1c]
shl ecx, 0x10
add ecx, ebp
mov dword [rax], ecx
mov eax, r14d
add qword [rbx + 8], 4
jmp 0x1800ce8b7
mov qword [rbx + 8], rsi
mov rax, qword [rbx + 8]
lea ecx, [rbp + 0x10000]
mov dword [rax], ecx
mov eax, 1
add qword [rbx + 8], 4
jmp 0x1800ce8b7
mov eax, 0xa
jmp 0x1800ce8bc