Function at 0x1800ce8d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r15
sub rsp, 0x20
mov r10, qword [rcx]
mov r15d, r8d
mov rsi, qword [rcx + 8]
mov rbx, rcx
mov ebp, edx
mov rdi, qword [r10 + 0x20]
cmp rsi, qword [rcx + 0x10]
jae 0x1800ceb47
movzx r9d, byte [rdi + rbp*8 + 5]
cmp r9b, 0x5b
jne 0x1800ce965
movzx eax, byte [rdi + rbp*8 + 2]
and al, 0x1f
cmp al, 0x13
jne 0x1800ce9cd
mov eax, dword [rbx + 0x18]
movzx ecx, word [rdi + rbp*8]
and eax, 0xf000
cmp eax, 0x1000
ja 0x1800ce942
mov edx, ecx
inc r8d
mov rcx, rbx
call fcn.1800cef30
jmp 0x1800ce949
mov dword [rsi], ecx
add qword [rbx + 8], 4
cmp dword [rbx + 0x1c], 0x15
jne 0x1800ce95e
mov rax, qword [rbx + 8]
mov dword [rax], 0x20000
add qword [rbx + 8], 4
xor eax, eax
jmp 0x1800cea7c
cmp r9b, 0x1c
jne 0x1800ce9cd
test dword [rcx + 0x18], 0xf000
movsd xmm1, qword [rdi + rbp*8 + 8]
jne 0x1800ce9b4
cvttsd2si rcx, xmm1
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
ucomisd xmm1, xmm0
jp 0x1800ceb47
jne 0x1800ceb47
mov dword [rsi], 0x30000
add qword [rbx + 8], 4
mov rax, qword [rbx + 8]
mov dword [rax], ecx
add qword [rbx + 8], 4
xor eax, eax
jmp 0x1800cea7c
cvttsd2si ecx, xmm1
movsx eax, cx
cmp ecx, eax
jne 0x1800ceb47
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
jmp 0x1800ce987
movzx r11d, byte [r10 + 0xbd]
movzx r8d, word [r10 + r11*2 + 0x192]
cmp r8d, ebp
jbe 0x1800cea28
movzx eax, word [rdi + r8*8]
cmp eax, ebp
jne 0x1800cea1d
cmp r11b, 0x5c
je 0x1800cea95
movzx eax, word [rdi + r8*8 + 2]
xor eax, dword [rbx + 0x18]
test eax, 0xfff
jne 0x1800cea1d
movzx ecx, byte [rdi + r8*8 + 4]
movzx eax, byte [r10 + 0xbc]
and cl, 0x80
and al, 0x80
cmp cl, al
jae 0x1800cea95
movzx r8d, word [rdi + r8*8 + 6]
cmp r8d, ebp
ja 0x1800ce9e3
sub r9b, 0x29
mov qword [rsp + 0x40], r14
cmp r9b, 1
ja 0x1800ceb2c
mov r8d, dword [rbx + 0x18]
mov eax, r8d
and eax, 0xf000
cmp eax, 0x2000
jne 0x1800cea5a
test r15d, r15d
jle 0x1800cea5a
add r8d, 0x1000
movzx edx, bp
mov rcx, r10
call fcn.1800ce890
test rax, rax
je 0x1800ceaa1
movzx eax, word [rax + 2]
mov dword [rsi], eax
add qword [rbx + 8], 4
xor eax, eax
mov r14, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r12
pop rdi
ret
mov dword [rsi], r8d
add qword [rbx + 8], 4
xor eax, eax
jmp 0x1800cea7c
cmp dword [rbx + 0x1c], 0x15
jne 0x1800cead1
mov r8d, 0x226e
mov rcx, r10
call fcn.1800ce890
test rax, rax
je 0x1800cead1
movzx eax, word [rax + 2]
mov dword [rsi], eax
add qword [rbx + 8], 4
mov rax, qword [rbx + 8]
mov dword [rax], 0x20000
jmp 0x1800cea70
inc r15d
cmp r15d, 0x64
jge 0x1800ceb2c
movzx edx, word [rdi + rbp*8]
mov r8d, r15d
mov rcx, rbx
call fcn.1800ce8d0
movzx edx, word [rdi + rbp*8 + 2]
mov r8d, r15d
mov rcx, rbx
mov r14d, eax
call fcn.1800ce8d0
add r14d, eax
cmp r14d, 1
jg 0x1800ceb28
movzx ecx, byte [rdi + rbp*8 + 5]
mov rax, qword [rbx + 8]
shl ecx, 8
or ecx, dword [rbx + 0x1c]
shl ecx, 0x10
add ecx, ebp
mov dword [rax], ecx
mov eax, r14d
add qword [rbx + 8], 4
jmp 0x1800cea77
mov qword [rbx + 8], rsi
mov rax, qword [rbx + 8]
lea ecx, [rbp + 0x10000]
mov dword [rax], ecx
mov eax, 1
add qword [rbx + 8], 4
jmp 0x1800cea77
mov eax, 0xa
jmp 0x1800cea7c