Function at 0x180035c38
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp r8d, 3
jl 0x180036007
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
movaps xmmword [rax - 0x38], xmm6
mov r12d, r9d
movaps xmmword [rax - 0x48], xmm7
mov rsi, rdx
movaps xmmword [rax - 0x58], xmm8
mov rbx, rcx
mov edi, r8d
test r9d, 0xff000000
je 0x180035fdb
test byte [rcx + 0x30], 4
mov rax, qword [rcx + 0x38]
movss xmm7, dword [rax]
movss xmm8, dword [rax + 4]
je 0x180035f4f
movss xmm6, dword [rcx + 0xc0]
lea edx, [rdi*8 - 6]
mov eax, r9d
add edx, edi
and eax, 0xffffff
mov dword [rsp + 0xa0], eax
lea eax, [rdi + rdi]
mov r8d, eax
mov dword [rsp + 0x20], eax
call fcn.180034aec
mov r13d, dword [rbx + 0x34]
mov r8d, 2
mov r9d, r8d
lea ebp, [r8 - 1]
mov rax, qword [rbx + 0x50]
movzx edx, r9w
add dx, dx
add r9d, ebp
add dx, r13w
movzx ecx, dx
mov word [rax], r13w
sub cx, r8w
mov rax, qword [rbx + 0x50]
mov word [rax + 2], cx
mov rax, qword [rbx + 0x50]
mov word [rax + 4], dx
add qword [rbx + 0x50], 6
cmp r9d, edi
jl 0x180035cdc
mov r14, qword [rbx + 0x38]
xor r15d, r15d
cmp edi, dword [r14 + 0x34]
jle 0x180035d68
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x180035d41
mov rax, qword [0x18010ece0]
test rax, rax
je 0x180035d3b
dec dword [rax + 0xf4]
call qword [sym.imp.msvcrt.dll_free]
mov rax, qword [0x18010ece0]
test rax, rax
je 0x180035d53
add dword [rax + 0xf4], ebp
movsxd rcx, edi
shl rcx, 3
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [r14 + 0x38], rax
mov dword [r14 + 0x34], edi
mov rax, qword [rbx + 0x38]
lea r14d, [rdi - 1]
mov rcx, rsi
mov rdx, rdi
mov r9, qword [rax + 0x38]
movsxd rax, edi
lea rax, [rax*8 - 8]
movss xmm1, dword [rcx]
movss xmm2, dword [rcx + 4]
subss xmm1, dword [rax + rsi]
subss xmm2, dword [rax + rsi + 4]
movaps xmm0, xmm1
movaps xmm3, xmm2
mulss xmm0, xmm1
mulss xmm3, xmm2
addss xmm3, xmm0
comiss xmm3, dword [0x1800ce858]
jbe 0x180035dc0
rsqrtss xmm0, xmm3
mulss xmm1, xmm0
mulss xmm2, xmm0
xorps xmm1, xmmword [0x1800ceb60]
movss dword [rax + r9 + 4], xmm1
movss dword [rax + r9], xmm2
mov rax, rcx
sub rax, rsi
add rcx, 8
sub rdx, rbp
jne 0x180035d85
movss xmm4, dword [0x1800ce898]
lea r11, [rsi + 4]
mov r10, r9
mulss xmm6, xmm4
sub r10, rsi
mov esi, dword [rsp + 0xa0]
movss xmm2, dword [r10 + r11 - 4]
movss xmm3, dword [r10 + r11]
movsxd rax, r14d
addss xmm2, dword [r9 + rax*8]
addss xmm3, dword [r9 + rax*8 + 4]
mulss xmm2, xmm4
mulss xmm3, xmm4
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, dword [0x1800ce85c]
jbe 0x180035e60
movss xmm0, dword [0x1800ce8cc]
divss xmm0, xmm1
movss xmm1, dword [0x1800ce924]
minss xmm1, xmm0
mulss xmm2, xmm1
mulss xmm3, xmm1
movss xmm0, dword [r11 - 4]
movzx edx, r15w
mov rax, qword [rbx + 0x48]
add r14w, r14w
mulss xmm2, xmm6
add dx, dx
mulss xmm3, xmm6
lea ecx, [r14 + r13]
subss xmm0, xmm2
lea r8d, [rdx + r13]
movss dword [rax], xmm0
movss xmm1, dword [r11]
mov rax, qword [rbx + 0x48]
subss xmm1, xmm3
movss dword [rax + 4], xmm1
mov rax, qword [rbx + 0x48]
movss dword [rax + 8], xmm7
movss dword [rax + 0xc], xmm8
mov rax, qword [rbx + 0x48]
mov dword [rax + 0x10], r12d
addss xmm2, dword [r11 - 4]
mov rax, qword [rbx + 0x48]
movss dword [rax + 0x14], xmm2
addss xmm3, dword [r11]
mov rax, qword [rbx + 0x48]
add r11, 8
movss dword [rax + 0x18], xmm3
mov rax, qword [rbx + 0x48]
movss dword [rax + 0x1c], xmm7
movss dword [rax + 0x20], xmm8
mov rax, qword [rbx + 0x48]
mov dword [rax + 0x24], esi
mov rax, qword [rbx + 0x50]
add qword [rbx + 0x48], 0x28
mov word [rax], r8w
mov rax, qword [rbx + 0x50]
mov word [rax + 2], cx
lea ecx, [r13 + 1]
mov rax, qword [rbx + 0x50]
add cx, r14w
mov r14d, r15d
add r15d, ebp
mov word [rax + 4], cx
mov rax, qword [rbx + 0x50]
mov word [rax + 6], cx
lea ecx, [r13 + 1]
mov rax, qword [rbx + 0x50]
add ecx, edx
mov word [rax + 8], cx
mov rax, qword [rbx + 0x50]
mov word [rax + 0xa], r8w
add qword [rbx + 0x50], 0xc
cmp r15d, edi
jl 0x180035e00
movzx eax, word [rsp + 0x20]
jmp 0x180035fd8
lea eax, [rdi - 2]
mov r8d, edi
lea edx, [rax + rax*2]
call fcn.180034aec
mov rcx, rdi
mov ebp, 1
mov rax, qword [rbx + 0x48]
movsd xmm0, qword [rsi]
lea rsi, [rsi + 8]
movsd qword [rax], xmm0
mov rax, qword [rbx + 0x48]
movss dword [rax + 8], xmm7
movss dword [rax + 0xc], xmm8
mov rax, qword [rbx + 0x48]
mov dword [rax + 0x10], r12d
add qword [rbx + 0x48], 0x14
sub rcx, rbp
jne 0x180035f65
lea r8d, [rcx + 2]
mov rcx, qword [rbx + 0x50]
movzx eax, word [rbx + 0x34]
mov word [rcx], ax
movzx ecx, r8w
add cx, word [rbx + 0x34]
mov rax, qword [rbx + 0x50]
sub cx, bp
mov word [rax + 2], cx
movzx ecx, r8w
mov rax, qword [rbx + 0x50]
add r8d, ebp
add cx, word [rbx + 0x34]
mov word [rax + 4], cx
add qword [rbx + 0x50], 6
cmp r8d, edi
jl 0x180035f9a
movzx eax, di
add dword [rbx + 0x34], eax
movaps xmm6, xmmword [rsp + 0x50]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm7, xmmword [rsp + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret