Function at 0x14002bf70
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x130
xorps xmm5, xmm5
movaps xmmword [rax - 0x48], xmm6
movsd xmm6, qword [0x14025b100]
movaps xmm4, xmm5
movaps xmm3, xmm5
mov r12, rcx
movaps xmm1, xmm3
movaps xmm2, xmm3
movaps xmm0, xmm3
mulsd xmm2, qword [0x14025ab40]
mulsd xmm1, qword [0x14025a258]
mulsd xmm0, xmm3
mulsd xmm2, xmm3
mulsd xmm1, xmm3
addsd xmm1, qword [0x14025a5f0]
subsd xmm2, xmm0
divsd xmm2, xmm1
addsd xmm4, xmm2
comisd xmm4, xmmword [0x14025a9c8]
jbe 0x14002bff7
movaps xmm0, xmm3
mulsd xmm0, qword [0x140259fb8]
subsd xmm4, xmm0
addsd xmm3, qword [0x14025a110]
comisd xmm6, xmm3
ja 0x14002bfa5
comisd xmm5, xmm4
jbe 0x14002c01a
call fcn.1400377ec
call fcn.1400377b2
jmp 0x14002c54c
xor eax, eax
lea rcx, [rsp + 0x20]
mov byte [rcx], al
inc eax
inc rcx
cmp eax, 0x100
jb 0x14002c021
xor r10d, r10d
mov r9d, 0xff
xor r8b, r8b
xor ebx, ebx
lea r11d, [rbx + 1]
cmp r9d, r11d
jbe 0x14002c053
lea r11d, [r11*2 + 1]
cmp r11d, r9d
jb 0x14002c046
mov eax, r10d
test r10d, r10d
je 0x14002c0a1
dec eax
je 0x14002c097
dec eax
je 0x14002c08d
dec eax
je 0x14002c083
lea rax, [fcn.1400377ec]
lea ecx, [r10 - 4]
add rcx, rax
movzx eax, r8b
mov r8b, byte [rcx]
add r8b, byte [rsp + rax + 0x20]
jmp 0x14002c0b2
cvttsd2si rcx, xmm4
shr ecx, 0x18
jmp 0x14002c0a6
cvttsd2si rcx, xmm4
shr ecx, 0x10
jmp 0x14002c0a6
cvttsd2si rcx, xmm4
shr ecx, 8
jmp 0x14002c0a6
cvttsd2si rcx, xmm4
movzx eax, r8b
mov r8b, byte [rsp + rax + 0x20]
add r8b, cl
inc r10d
cmp r10d, 0x14
jb 0x14002c0c2
xor r10d, r10d
add r8b, 0x14
movzx eax, r8b
inc ebx
and eax, r11d
cmp ebx, 0xb
jbe 0x14002c0d7
xor edx, edx
div r9d
mov eax, edx
cmp eax, r9d
ja 0x14002c053
cmp r9d, eax
je 0x14002c102
mov edx, eax
mov ecx, r9d
mov al, byte [rsp + rdx + 0x20]
xor byte [rsp + rcx + 0x20], al
mov al, byte [rsp + rcx + 0x20]
xor byte [rsp + rdx + 0x20], al
mov al, byte [rsp + rdx + 0x20]
xor byte [rsp + rcx + 0x20], al
dec r9d
jne 0x14002c03b
movzx r10d, byte [rsp + 0x27]
movzx esi, byte [rsp + 0x21]
mov r15b, byte [rsp + 0x25]
mov r14b, byte [rsp + rsi + 0x20]
movzx eax, r8b
inc sil
movzx edx, byte [rsp + rax + 0x20]
add r14b, byte [rsp + 0x23]
movzx ebx, sil
movzx r11d, byte [rsp + rdx + 0x20]
movzx r8d, r14b
lea r13, [fcn.1400377b2]
mov al, byte [rsp + r8 + 0x20]
mov dil, byte [r13]
mov cl, byte [r13 + 1]
mov byte [rsp + rdx + 0x20], al
mov al, byte [rsp + r10 + 0x20]
add cl, 0x4c
mov byte [rsp + r8 + 0x20], al
mov al, byte [rsp + rbx + 0x20]
sub dil, 5
mov byte [rsp + r10 + 0x20], al
mov byte [rsp + rbx + 0x20], r11b
add r15b, byte [rsp + r11 + 0x20]
add r14b, byte [rsp + rbx + 0x20]
shl dil, 4
movzx eax, r15b
or dil, cl
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + r10 + 0x20]
add ecx, eax
movzx eax, byte [rsp + rdx + 0x20]
movzx r9d, r14b
add ecx, eax
inc sil
movzx eax, cl
movzx ecx, byte [rsp + r8 + 0x20]
movzx r8d, dil
movzx edx, byte [rsp + rax + 0x20]
movzx r10d, byte [rsp + r8 + 0x20]
add ecx, r11d
mov r11b, byte [r13 + 3]
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
xor cl, byte [rsp + rax + 0x20]
add r13, 2
add r11b, 0x4c
mov al, byte [r13]
xor cl, dil
lea rdi, [rsp + 0x20]
sub al, 5
movzx edx, cl
mov ebx, 1
shl al, 4
or r11b, al
mov al, byte [rsp + r9 + 0x20]
mov byte [rsp + r8 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, sil
add rdi, rax
mov al, byte [rdi]
mov byte [rsp + rdx + 0x20], al
mov byte [rdi], r10b
add r15b, byte [rsp + r10 + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r8 + 0x20]
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r9 + 0x20]
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
mov dl, byte [rsp + rdx + 0x20]
movzx eax, cl
xor dl, byte [rsp + rax + 0x20]
xor dl, r11b
mov byte [r12], dl
mov qword [rbp + 0x78], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov r8b, r11b
add r14b, byte [rdi]
movzx edx, dl
movzx r8d, r8b
movzx r10d, byte [rsp + r8 + 0x20]
movzx r9d, r14b
lea r13, [r13 + 2]
mov al, byte [r13]
mov r11b, byte [r13 + 1]
inc sil
sub al, 5
add r11b, 0x4c
lea rdi, [rsp + 0x20]
shl al, 4
inc rbx
or r11b, al
mov al, byte [rsp + r9 + 0x20]
mov byte [rsp + r8 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, sil
add rdi, rax
mov al, byte [rdi]
mov byte [rsp + rdx + 0x20], al
mov byte [rdi], r10b
add r15b, byte [rsp + r10 + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r8 + 0x20]
mov r8b, r11b
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r9 + 0x20]
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
mov dl, byte [rsp + rdx + 0x20]
movzx eax, cl
xor dl, byte [rsp + rax + 0x20]
xor dl, r11b
test rbx, rbx
jle 0x14002c305
mov byte [rbx + r12 - 1], dl
dec qword [rbp + 0x78]
jne 0x14002c262
movzx edx, dl
movzx r9d, r8b
movzx eax, sil
add r14b, byte [rsp + rax + 0x20]
movzx r10d, byte [rsp + r9 + 0x20]
lea r13, [fcn.1400377b2]
mov cl, byte [r13 + 0x1c]
mov bl, byte [r13 + 0x1d]
movzx r8d, r14b
mov al, byte [rsp + r8 + 0x20]
sub cl, 5
inc sil
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
shl cl, 4
mov byte [rsp + r8 + 0x20], al
movzx r11d, sil
add bl, 0x4c
mov al, byte [rsp + r11 + 0x20]
or bl, cl
lea rdi, [r13 + 0x1e]
mov byte [rsp + rdx + 0x20], al
mov byte [rsp + r11 + 0x20], r10b
add r15b, byte [rsp + r10 + 0x20]
add r14b, byte [rsp + r11 + 0x20]
movzx eax, r15b
inc sil
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
lea r13, [rsp + 0x20]
add ecx, eax
movzx eax, byte [rsp + r9 + 0x20]
movzx r9d, r14b
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r8 + 0x20]
movzx r8d, bl
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx r10d, byte [rsp + r8 + 0x20]
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
xor cl, byte [rsp + rax + 0x20]
xor cl, bl
mov ebx, 0xf
mov byte [r12 + 0xd], cl
mov al, byte [rdi]
mov dl, byte [rdi + 1]
sub al, 5
add dl, 0x4c
shl al, 4
or dl, al
mov al, byte [rsp + r9 + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rbp + 0x70], dl
movzx edx, cl
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, sil
add r13, rax
mov al, byte [r13]
mov byte [rsp + rdx + 0x20], al
mov byte [r13], r10b
add r15b, byte [rsp + r10 + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r8 + 0x20]
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r9 + 0x20]
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
mov dl, byte [rbp + 0x70]
xor cl, byte [rsp + rax + 0x20]
mov qword [rbp + 0x70], 0xd
xor cl, dl
mov byte [r12 + 0xe], cl
add r14b, byte [r13]
movzx r8d, dl
movzx edx, cl
movzx r10d, byte [rsp + r8 + 0x20]
movzx r9d, r14b
lea rdi, [rdi + 2]
mov al, byte [rdi + 1]
mov r11b, byte [rdi]
inc sil
add al, 0x4c
sub r11b, 5
lea r13, [rsp + 0x20]
shl r11b, 4
inc rbx
or r11b, al
mov al, byte [rsp + r9 + 0x20]
mov byte [rsp + r8 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, sil
add r13, rax
mov al, byte [r13]
mov byte [rsp + rdx + 0x20], al
mov byte [r13], r10b
add r15b, byte [rsp + r10 + 0x20]
movzx eax, r15b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r8 + 0x20]
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r9 + 0x20]
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
mov dl, r11b
xor cl, byte [rsp + rax + 0x20]
xor cl, r11b
test rbx, rbx
jle 0x14002c4fb
mov byte [rbx + r12 - 1], cl
dec qword [rbp + 0x70]
jne 0x14002c455
movzx eax, sil
movzx edx, cl
movzx r9d, r11b
add r14b, byte [rsp + rax + 0x20]
movzx r11d, byte [rsp + r9 + 0x20]
inc sil
movzx r10d, r14b
movzx ecx, sil
mov byte [r12 + 0x1c], 0
mov al, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + rdx + 0x20], al
mov byte [rsp + rcx + 0x20], r11b
lea r11, [rsp + 0x130]
mov rax, r12
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret