Function at 0x1400228d0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push r13
lea rbp, [rax - 0xc8]
sub rsp, 0x1b8
movsd xmm5, qword [0x140118318]
mov r13, rcx
movaps xmmword [rax - 0x48], xmm6
xorps xmm3, xmm3
movsd xmm6, qword [0x1401183c8]
xorps xmm4, xmm4
movaps xmmword [rax - 0x58], xmm7
movsd xmm7, qword [0x140118958]
movaps xmmword [rax - 0x68], xmm8
movsd xmm8, qword [0x140118888]
movaps xmmword [rax - 0x78], xmm9
movsd xmm9, qword [0x140118488]
movaps xmmword [rax - 0x88], xmm10
movsd xmm10, qword [0x140118538]
movaps xmmword [rax - 0x98], xmm11
movsd xmm11, qword [0x140118768]
movaps xmmword [rax - 0xa8], xmm12
xorps xmm12, xmm12
nop dword [rax + rax]
movaps xmm2, xmm4
movaps xmm1, xmm4
mulsd xmm2, xmm8
movaps xmm0, xmm4
mulsd xmm1, xmm9
mulsd xmm0, xmm4
mulsd xmm2, xmm4
mulsd xmm1, xmm4
subsd xmm2, xmm0
addsd xmm1, xmm10
divsd xmm2, xmm1
addsd xmm3, xmm2
comisd xmm3, xmm11
jbe 0x1400229a2
movaps xmm0, xmm4
mulsd xmm0, xmm5
subsd xmm3, xmm0
addsd xmm4, xmm6
comisd xmm7, xmm4
ja 0x140022960
movaps xmm11, xmmword [rsp + 0x130]
movaps xmm10, xmmword [rsp + 0x140]
movaps xmm9, xmmword [rsp + 0x150]
movaps xmm8, xmmword [rsp + 0x160]
movaps xmm7, xmmword [rsp + 0x170]
movaps xmm6, xmmword [rsp + 0x180]
comisd xmm12, xmm3
movaps xmm12, xmmword [rsp + 0x120]
jbe 0x140022a08
call 0x14007cd04
call fcn.14007ccb6
mov rax, r13
add rsp, 0x1b8
pop r13
pop rbp
ret
mov qword [rsp + 0x1e8], rbx
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x1b0], rsi
xor eax, eax
mov qword [rsp + 0x1a8], rdi
mov qword [rsp + 0x1a0], r12
mov qword [rsp + 0x198], r14
mov qword [rsp + 0x190], r15
nop
mov byte [rcx], al
lea rcx, [rcx + 1]
inc eax
cmp eax, 0x100
jb 0x140022a40
xor r9d, r9d
lea rsi, [0x14007cd04]
xor cl, cl
mov r10d, 0xff
xor edi, edi
mov r11d, 1
cmp r10d, r11d
jbe 0x140022a80
nop
lea r11d, [r11*2 + 1]
cmp r11d, r10d
jb 0x140022a70
nop dword [rax]
movzx eax, cl
movzx edx, byte [rsp + rax + 0x20]
mov eax, r9d
test r9d, r9d
je 0x140022ac7
sub eax, 1
je 0x140022abd
sub eax, 1
je 0x140022ab3
cmp eax, 1
je 0x140022aa9
lea eax, [r9 - 4]
movzx eax, byte [rax + rsi]
jmp 0x140022acc
cvttsd2si rax, xmm3
shr eax, 0x18
jmp 0x140022acc
cvttsd2si rax, xmm3
shr eax, 0x10
jmp 0x140022acc
cvttsd2si rax, xmm3
shr eax, 8
jmp 0x140022acc
cvttsd2si rax, xmm3
add al, dl
lea r8d, [r9 + 1]
movzx edx, al
cmp r8d, 0x23
lea eax, [rdx + 0x23]
movzx ecx, al
cmovb ecx, edx
xor r9d, r9d
cmp r8d, 0x23
movzx ebx, cl
mov eax, ebx
cmovb r9d, r8d
and eax, r11d
inc edi
cmp edi, 0xb
jbe 0x140022b03
xor edx, edx
div r10d
mov eax, edx
movzx ecx, bl
cmp eax, r10d
ja 0x140022a80
je 0x140022b31
mov edx, eax
mov ecx, r10d
movzx eax, byte [rsp + rdx + 0x20]
xor byte [rsp + rcx + 0x20], al
movzx eax, byte [rsp + rcx + 0x20]
xor byte [rsp + rdx + 0x20], al
movzx eax, byte [rsp + rdx + 0x20]
xor byte [rsp + rcx + 0x20], al
movzx ecx, bl
add r10d, 0xffffffff
jne 0x140022a61
movzx r10d, byte [rsp + rbx + 0x20]
lea r12, fcn.14007ccb6
movzx edx, byte [rsp + 0x27]
movzx esi, byte [rsp + 0x21]
movzx r15d, byte [rsp + 0x23]
movzx ebx, byte [rsp + r10 + 0x20]
movzx r14d, byte [rsp + 0x25]
add r15b, byte [rsp + rsi + 0x20]
inc sil
movzx r11d, byte [r12]
movzx ecx, byte [r12 + 1]
add r11b, 7
movzx edi, byte [r12 + 2]
add cl, 0x48
movzx r9d, r15b
add dil, 7
shl r11b, 4
add r15b, bl
or r11b, cl
shl dil, 4
movzx ecx, sil
inc sil
movzx eax, byte [rsp + r9 + 0x20]
mov byte [rsp + r10 + 0x20], al
movzx eax, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, byte [rsp + rcx + 0x20]
mov byte [rsp + rdx + 0x20], al
mov byte [rsp + rcx + 0x20], bl
add r14b, byte [rsp + rbx + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rcx, rax
movzx r10d, r15b
movzx eax, byte [rsp + rdx + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rax, rbx
movzx r9d, r11b
movzx eax, al
movzx edx, byte [rsp + rcx + 0x20]
movzx ecx, byte [r12 + 3]
add cl, 0x48
xor dl, byte [rsp + rax + 0x20]
or dil, cl
movzx eax, byte [rsp + r10 + 0x20]
xor dl, r11b
movzx r11d, byte [rsp + r9 + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx r8d, dl
movzx ecx, sil
movzx eax, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
movzx eax, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], r11b
add r14b, byte [rsp + r11 + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, r11
movzx eax, al
movzx edx, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
xor dl, dil
mov byte [r13], dl
lea r13, [r12 + 4]
movzx eax, byte [r13]
movzx ecx, byte [r12 + 5]
add al, 7
add cl, 0x48
shl al, 4
mov r12, qword [rbp + 0xd0]
or cl, al
movzx r8d, dl
add r15b, r11b
mov byte [rbp + 0xe0], cl
inc sil
movzx r10d, r15b
movzx r9d, dil
movzx ecx, sil
movzx eax, byte [rsp + r10 + 0x20]
movzx ebx, byte [rsp + r9 + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
movzx eax, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], bl
add r14b, byte [rsp + rbx + 0x20]
movzx eax, r14b
mov byte [rbp + 0xd8], bl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
movzx r8d, byte [rbp + 0xe0]
add rcx, rax
movzx eax, cl
mov qword [rbp + 0xe0], select
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, rbx
mov ebx, 2
movzx eax, al
movzx edx, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
xor dl, r8b
mov byte [r12 + 1], dl
nop word [rax + rax]
movzx eax, byte [r13 + 2]
lea r13, [r13 + 2]
add r15b, byte [rbp + 0xd8]
add al, 7
movzx r11d, byte [r13 + 1]
inc sil
shl al, 4
add r11b, 0x48
or r11b, al
movzx r9d, r8b
movzx r8d, dl
inc rbx
movzx r10d, r15b
movzx ecx, sil
movzx edi, byte [rsp + r9 + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
movzx eax, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], dil
add r14b, byte [rsp + rdi + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx r8d, r11b
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, rdi
movzx eax, al
movzx edx, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
xor dl, r11b
test rbx, rbx
jle 0x140022e10
mov byte [rbx + r12 - 1], dl
sub qword [rbp + 0xe0], 1
mov byte [rbp + 0xd8], dil
jne 0x140022d60
movzx r11d, byte [rsp + r8 + 0x20]
lea r12, fcn.14007ccb6
movzx ecx, byte [r12 + 0x28]
add r15b, dil
movzx ebx, byte [r12 + 0x29]
add cl, 7
mov rdi, qword [rbp + 0xd0]
mov r9, r8
shl cl, 4
add bl, 0x48
or bl, cl
movzx r10d, r15b
inc sil
mov qword [rbp + 0xe0], reloc.WS2_32.dll_select
movzx ecx, sil
add r12, 0x2a
add r15b, r11b
inc sil
movzx eax, byte [rsp + r10 + 0x20]
mov byte [rsp + r8 + 0x20], al
movzx r8d, dl
movzx eax, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
movzx eax, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], r11b
add r14b, byte [rsp + r11 + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx r9d, bl
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, r11
movzx r10d, r15b
movzx eax, al
movzx edx, byte [rsp + rcx + 0x20]
movzx ecx, sil
xor dl, byte [rsp + rax + 0x20]
xor dl, bl
movzx ebx, byte [rsp + r9 + 0x20]
mov byte [rdi + 0x13], dl
movzx eax, byte [r12 + 1]
movzx r13d, byte [r12]
add al, 0x48
movzx r8d, dl
add r13b, 7
shl r13b, 4
or r13b, al
mov byte [rbp + 0xd8], bl
movzx eax, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
movzx eax, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], bl
add r14b, byte [rsp + rbx + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, rbx
mov ebx, reloc.WS2_32.dll_setsockopt
movzx eax, al
movzx edx, byte [rsp + rcx + 0x20]
movzx ecx, byte [rbp + 0xd8]
xor dl, byte [rsp + rax + 0x20]
xor dl, r13b
mov byte [rdi + 0x14], dl
nop dword [rax + rax]
movzx eax, byte [r12 + 3]
lea r12, [r12 + 2]
movzx r11d, byte [r12]
add al, 0x48
add r15b, cl
movzx r8d, dl
movzx r9d, r13b
add r11b, 7
movzx r10d, r15b
inc sil
movzx ecx, sil
inc rbx
shl r11b, 4
movzx edi, byte [rsp + r9 + 0x20]
or r11b, al
movzx eax, byte [rsp + r10 + 0x20]
movzx r13d, r11b
mov byte [rsp + r9 + 0x20], al
movzx eax, byte [rsp + r8 + 0x20]
mov byte [rsp + r10 + 0x20], al
movzx eax, byte [rsp + rcx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rsp + rcx + 0x20], dil
add r14b, byte [rsp + rdi + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r9 + 0x20]
add rcx, rax
movzx eax, byte [rsp + r8 + 0x20]
add rcx, rax
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add rax, rdi
movzx eax, al
movzx edx, byte [rsp + rcx + 0x20]
xor dl, byte [rsp + rax + 0x20]
mov rax, qword [rbp + 0xd0]
xor dl, r11b
test rbx, rbx
jle 0x140023045
mov byte [rbx + rax - 1], dl
sub qword [rbp + 0xe0], 1
movzx ecx, dil
jne 0x140022f90
mov r15, qword [rsp + 0x190]
mov r14, qword [rsp + 0x198]
mov r12, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0x1a8]
mov rsi, qword [rsp + 0x1b0]
mov rbx, qword [rsp + 0x1e8]
mov byte [rax + 0x26], 0
add rsp, 0x1b8
pop r13
pop rbp
ret