Function at 0x10011510
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10040d88
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x1005901c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x94], esi
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x9c], eax
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
mov dword [ebp - 0x84], edi
cmp dword [ecx + 8], eax
jae 0x100118f7
mov al, byte [esi + 0x10]
test al, al
je 0x100118f7
movq xmm0, qword [ecx]
xor al, al
mov ecx, dword [ecx + 8]
mov dl, 1
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x7c], al
mov word [ebp - 0x7b], 0x100
mov byte [ebp - 0x7e], dl
mov byte [ebp - 0x79], al
movq qword [ebp - 0x70], xmm0
mov dword [ebp - 0x68], ecx
mov dword [ebp - 4], 0
jmp 0x100115a7
mov dl, byte [ebp - 0x7e]
mov dh, byte [esi + 0x10]
mov byte [ebp - 0x89], dh
cmp dl, 8
jae 0x1001168e
nop dword [eax]
movzx ecx, al
cmp byte [ebp + ecx - 0x79], dh
jae 0x10011682
lea ecx, [ecx + ecx*2]
lea edx, [ebp - 0x70]
lea edx, [edx + ecx*4]
mov ecx, dword [edx + 4]
sub ecx, dword [edx]
cmp dword [edx + 8], ecx
jae 0x1001167f
lea ecx, [eax + 1]
movzx eax, al
mov dword [ebp - 0x98], eax
lea edi, [ebp - 0x70]
and cl, 7
lea esi, [ebp - 0x70]
mov byte [ebp - 0x7c], cl
lea eax, [eax + eax*2]
movq xmm0, qword [edi + eax*4]
lea edi, [edi + eax*4]
movzx eax, cl
lea ecx, [ebp - 0x70]
lea eax, [eax + eax*2]
movq qword [ecx + eax*4], xmm0
lea ecx, [ecx + eax*4]
mov eax, dword [edi + 8]
mov dword [ecx + 8], eax
movzx eax, byte [ebp - 0x7c]
lea eax, [eax + eax*2]
mov edx, dword [esi + eax*4]
lea esi, [esi + eax*4]
mov dword [edi], edx
mov ecx, dword [esi + 4]
mov dword [edi + 4], ecx
sub ecx, edx
mov eax, dword [esi + 8]
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x98]
shr ecx, 1
add ecx, edx
mov dword [edi], ecx
mov dword [esi + 4], ecx
inc byte [ebp + eax - 0x79]
mov cl, byte [ebp + eax - 0x79]
movzx eax, byte [ebp - 0x7c]
mov byte [ebp + eax - 0x79], cl
mov dl, byte [ebp - 0x7a]
mov al, byte [ebp - 0x7c]
add dl, 1
mov byte [ebp - 0x7e], dl
mov byte [ebp - 0x7a], dl
mov dword [ebp - 0x88], eax
cmp dl, 8
jae 0x10011682
mov dh, byte [ebp - 0x89]
jmp 0x100115c0
mov dl, byte [ebp - 0x7e]
mov esi, dword [ebp - 0x94]
mov edi, dword [ebp - 0x84]
mov ecx, dword [esi + 0xc]
cmp ecx, 2
jne 0x100118ab
mov ecx, dword [esi]
cmp ecx, 1
ja 0x100116b9
test ecx, ecx
je 0x100117e9
cmp byte [esi + 0x10], 0
je 0x100117e9
mov dword [esi], 0
cmp dl, 1
jbe 0x10011848
movzx eax, byte [ebp - 0x7b]
push dword [ebp - 0x9c]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x90]
push 0x80
push eax
mov dword [ebp - 0x90], 0
call sub.tbb12.dll_void____cdecl_tbb::detail::r1::allocate_class_tbb::detail::d1::small_object_pool____unsigned_int__struct_tbb::detail::d1::execution_data_const__
mov edi, eax
push 0x30
push 0
lea ecx, [edi + 0x10]
mov dword [edi + 8], 0
push ecx
mov dword [edi + 0xc], 0
call fcn.100263d0
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x84]
mov esi, dword [ebp - 0x84]
mov dword [edi], vtable.tbb::detail::d1::start_for_class_Intel::OpenCL::TaskExecutor::BlockedRange__struct_TaskLoopBody1D_class_Intel::OpenCL::TaskExecutor::BlockedRange___class_tbb::detail::d1::affinity_partitioner_.0
lea eax, [ecx + ecx*2]
movq xmm0, qword [ebp + eax*4 - 0x70]
movq qword [edi + 0x40], xmm0
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [edi + 0x48], eax
mov eax, dword [edx + 0x4c]
mov dword [edi + 0x4c], eax
shr dword [edx + 0x54], 1
mov eax, dword [edx + 0x54]
mov dword [edi + 0x54], eax
mov eax, dword [edx + 0x58]
add eax, dword [edx + 0x54]
xor edx, edx
div dword [esi + 0x5c]
mov dword [edi + 0x58], edx
mov edx, esi
mov esi, dword [ebp - 0x9c]
push esi
push 0x10
mov eax, dword [edx + 0x5c]
mov dword [edi + 0x5c], eax
mov dword [edi + 0x60], 2
mov al, byte [edx + 0x64]
mov byte [edi + 0x64], al
mov eax, dword [edx + 0x68]
mov dword [edi + 0x68], eax
mov eax, dword [ebp - 0x90]
mov dword [edi + 0x6c], eax
mov al, byte [ebp + ecx - 0x79]
sub byte [edi + 0x64], al
lea eax, [ebp - 0x90]
push eax
call sub.tbb12.dll_void____cdecl_tbb::detail::r1::allocate_class_tbb::detail::d1::small_object_pool____unsigned_int__struct_tbb::detail::d1::execution_data_const__
mov edx, dword [ebp - 0x84]
add esp, 0x24
mov ecx, dword [edx + 0x50]
mov dword [eax], ecx
mov dword [eax + 4], 2
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
mov byte [eax + 0xc], 0
mov dword [edx + 0x50], eax
mov dword [edi + 0x50], eax
cmp dword [edi + 0x54], 0
mov edx, dword [esi]
mov esi, dword [ebp - 0x94]
je 0x10011824
mov ecx, dword [edi + 0x58]
mov eax, dword [edi + 0x68]
movzx eax, word [eax + ecx*2]
test ax, ax
jne 0x10011817
shr ecx, 4
push ecx
push edx
push edi
call sub.tbb12.dll_void___cdecl_tbb::detail::r1::spawn_class_tbb::detail::d1::task___class_tbb::detail::d1::task_group_context___unsigned_short_int_
add esp, 0xc
jmp 0x1001182e
mov eax, dword [edi + 0x50]
add eax, 0xc
mov al, byte [eax]
test al, al
mov al, byte [ebp - 0x7c]
je 0x1001180c
mov dl, byte [ebp - 0x7a]
inc byte [esi + 0x10]
mov byte [ebp - 0x7e], dl
mov dword [ebp - 0x88], eax
jmp 0x100116b9
mov cl, byte [ebp - 0x7a]
mov byte [ebp - 0x7e], cl
jmp 0x100118b6
push eax
push edx
push edi
call sub.tbb12.dll_void___cdecl_tbb::detail::r1::spawn_class_tbb::detail::d1::task___class_tbb::detail::d1::task_group_context___unsigned_short_int_
add esp, 0xc
jmp 0x1001182e
push edx
push edi
call sub.tbb12.dll_void___cdecl_tbb::detail::r1::spawn_class_tbb::detail::d1::task___class_tbb::detail::d1::task_group_context__
add esp, 8
mov cl, byte [ebp - 0x7e]
mov eax, dword [ebp - 0x98]
dec cl
inc al
mov byte [ebp - 0x7e], cl
and al, 7
mov byte [ebp - 0x7a], cl
mov byte [ebp - 0x7b], al
jmp 0x1001186a
movzx edx, al
mov cl, byte [ebp + edx - 0x79]
cmp cl, byte [esi + 0x10]
jae 0x100118b6
lea ecx, [edx + edx*2]
lea edx, [ebp - 0x70]
lea edx, [edx + ecx*4]
mov ecx, dword [edx + 4]
sub ecx, dword [edx]
cmp dword [edx + 8], ecx
jae 0x100118b6
mov cl, byte [ebp - 0x7e]
test cl, cl
je 0x10011900
mov eax, dword [ebp - 0x9c]
push dword [eax]
call sub.tbb12.dll_bool___cdecl_tbb::detail::r1::is_group_execution_cancelled_class_tbb::detail::d1::task_group_context__
mov edi, dword [ebp - 0x84]
add esp, 4
test al, al
mov eax, dword [ebp - 0x88]
je 0x100115a4
mov cl, byte [ebp - 0x7e]
nop dword [eax]
dec al
and al, 7
add cl, 0xff
jne 0x100118a0
jmp 0x10011900
test ecx, ecx
jne 0x100118b6
mov dword [esi + 0xc], 2
movzx eax, al
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x88], eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push eax
lea ecx, [edi + 0x4c]
call fcn.1000c690
mov eax, dword [ebp - 0x88]
mov cl, byte [ebp - 0x7e]
sub al, 1
dec cl
and eax, 0xffffff07
mov byte [ebp - 0x7e], cl
mov byte [ebp - 0x7a], cl
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x7c], al
jmp 0x1001186a
push ecx
lea ecx, [edi + 0x4c]
call fcn.1000c690
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10021496
mov esp, ebp
pop ebp
ret 0xc