Function at 0x140024938
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x130
xorps xmm5, xmm5
movaps xmmword [rax - 0x38], xmm6
movsd xmm6, qword [0x14025af70]
movaps xmm4, xmm5
movaps xmm3, xmm5
mov r15, rcx
movaps xmm1, xmm3
movaps xmm2, xmm3
movaps xmm0, xmm3
mulsd xmm2, qword [0x14025ad48]
mulsd xmm1, qword [0x14025a270]
mulsd xmm0, xmm3
mulsd xmm2, xmm3
mulsd xmm1, xmm3
addsd xmm1, qword [0x14025a388]
subsd xmm2, xmm0
divsd xmm2, xmm1
addsd xmm4, xmm2
comisd xmm4, xmmword [0x14025a7d0]
jbe 0x1400249c5
movaps xmm0, xmm3
mulsd xmm0, qword [0x140259eb8]
subsd xmm4, xmm0
addsd xmm3, qword [0x14025a110]
comisd xmm6, xmm3
ja 0x140024973
comisd xmm5, xmm4
jbe 0x1400249e8
call fcn.140037310
call fcn.1400372e2
jmp 0x140024f1c
xor eax, eax
lea rcx, [rsp + 0x20]
lea r12d, [rax + 1]
mov byte [rcx], al
add eax, r12d
add rcx, r12
cmp eax, 0x100
jb 0x1400249f3
xor r10d, r10d
mov r9d, 0xff
xor r8b, r8b
xor ebx, ebx
mov r11d, r12d
cmp r9d, r12d
jbe 0x140024a25
lea r11d, [r11*2 + 1]
cmp r11d, r9d
jb 0x140024a18
mov eax, r10d
test r10d, r10d
je 0x140024a73
dec eax
je 0x140024a69
dec eax
je 0x140024a5f
dec eax
je 0x140024a55
lea rax, [fcn.140037310]
lea ecx, [r10 - 4]
add rcx, rax
movzx eax, r8b
mov r8b, byte [rcx]
add r8b, byte [rsp + rax + 0x20]
jmp 0x140024a84
cvttsd2si rcx, xmm4
shr ecx, 0x18
jmp 0x140024a78
cvttsd2si rcx, xmm4
shr ecx, 0x10
jmp 0x140024a78
cvttsd2si rcx, xmm4
shr ecx, 8
jmp 0x140024a78
cvttsd2si rcx, xmm4
movzx eax, r8b
mov r8b, byte [rsp + rax + 0x20]
add r8b, cl
add r10d, r12d
cmp r10d, 0x14
jb 0x140024a94
xor r10d, r10d
add r8b, 0x14
movzx eax, r8b
add ebx, r12d
and eax, r11d
cmp ebx, 0xb
jbe 0x140024aaa
xor edx, edx
div r9d
mov eax, edx
cmp eax, r9d
ja 0x140024a25
cmp r9d, eax
je 0x140024ad5
mov edx, eax
mov ecx, r9d
mov al, byte [rsp + rdx + 0x20]
xor byte [rsp + rcx + 0x20], al
mov al, byte [rsp + rcx + 0x20]
xor byte [rsp + rdx + 0x20], al
mov al, byte [rsp + rdx + 0x20]
xor byte [rsp + rcx + 0x20], al
dec r9d
jne 0x140024a0e
movzx edx, byte [rsp + 0x27]
movzx edi, byte [rsp + 0x21]
mov r14b, byte [rsp + 0x25]
mov sil, byte [rsp + rdi + 0x20]
movzx eax, r8b
lea r13, [fcn.1400372e2]
movzx ecx, byte [rsp + rax + 0x20]
add sil, byte [rsp + 0x23]
mov bl, byte [r13 + r12]
movzx r10d, byte [rsp + rcx + 0x20]
mov al, byte [r13]
mov r9d, ecx
shl al, 4
movzx r8d, sil
add dil, r12b
movzx r11d, dil
add bl, 0x62
lea r12, [r13 + 2]
or bl, al
mov al, byte [rsp + r8 + 0x20]
inc dil
mov byte [rsp + rcx + 0x20], al
mov al, byte [rsp + rdx + 0x20]
lea r13, [rsp + 0x20]
mov byte [rsp + r8 + 0x20], al
mov al, byte [rsp + r11 + 0x20]
mov byte [rsp + rdx + 0x20], al
mov byte [rsp + r11 + 0x20], r10b
add r14b, byte [rsp + r10 + 0x20]
add sil, byte [rsp + r11 + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r9 + 0x20]
movzx r9d, sil
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r8 + 0x20]
movzx r8d, bl
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx r10d, byte [rsp + r8 + 0x20]
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
mov dl, byte [r12 + 1]
xor cl, byte [rsp + rax + 0x20]
mov al, byte [r12]
add dl, 0x62
shl al, 4
xor cl, bl
mov ebx, 1
or dl, al
mov al, byte [rsp + r9 + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rbp + 0x60], dl
movzx edx, cl
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, dil
add r13, rax
mov al, byte [r13]
mov byte [rsp + rdx + 0x20], al
mov byte [r13], r10b
add r14b, byte [rsp + r10 + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r8 + 0x20]
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r9 + 0x20]
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
mov dl, byte [rbp + 0x60]
xor cl, byte [rsp + rax + 0x20]
xor cl, dl
mov byte [r15], cl
mov qword [rbp + 0x60], 9
add sil, byte [r13]
movzx r8d, dl
movzx edx, cl
movzx r10d, byte [rsp + r8 + 0x20]
movzx r9d, sil
lea r12, [r12 + 2]
mov al, byte [r12]
mov r11b, byte [r12 + 1]
inc dil
shl al, 4
add r11b, 0x62
lea r13, [rsp + 0x20]
or r11b, al
mov al, byte [rsp + r9 + 0x20]
inc rbx
mov byte [rsp + r8 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, dil
add r13, rax
mov al, byte [r13]
mov byte [rsp + rdx + 0x20], al
mov byte [r13], r10b
add r14b, byte [rsp + r10 + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r8 + 0x20]
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r9 + 0x20]
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
mov dl, r11b
xor cl, byte [rsp + rax + 0x20]
xor cl, r11b
test rbx, rbx
jle 0x140024cd8
mov byte [rbx + r15 - 1], cl
dec qword [rbp + 0x60]
jne 0x140024c31
movzx r9d, dl
movzx edx, cl
lea r13, [fcn.1400372e2]
movzx r10d, byte [rsp + r9 + 0x20]
mov bl, byte [r13 + 0x17]
mov al, byte [r13 + 0x16]
shl al, 4
add bl, 0x62
lea r12, [r13 + 0x18]
or bl, al
movzx eax, dil
inc dil
add sil, byte [rsp + rax + 0x20]
movzx r11d, dil
inc dil
movzx r8d, sil
lea r13, [rsp + 0x20]
mov al, byte [rsp + r8 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r8 + 0x20], al
mov al, byte [rsp + r11 + 0x20]
mov byte [rsp + rdx + 0x20], al
mov byte [rsp + r11 + 0x20], r10b
add r14b, byte [rsp + r10 + 0x20]
add sil, byte [rsp + r11 + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r9 + 0x20]
movzx r9d, sil
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r8 + 0x20]
movzx r8d, bl
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx r10d, byte [rsp + r8 + 0x20]
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
xor cl, byte [rsp + rax + 0x20]
xor cl, bl
mov ebx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov byte [r15 + 0xa], cl
mov dl, byte [r12 + 1]
mov al, byte [r12]
shl al, 4
add dl, 0x62
or dl, al
mov al, byte [rsp + r9 + 0x20]
mov byte [rsp + r8 + 0x20], al
mov byte [rbp + 0x60], dl
movzx edx, cl
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, dil
add r13, rax
mov al, byte [r13]
mov byte [rsp + rdx + 0x20], al
mov byte [r13], r10b
add r14b, byte [rsp + r10 + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r8 + 0x20]
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r9 + 0x20]
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
mov dl, byte [rbp + 0x60]
xor cl, byte [rsp + rax + 0x20]
mov qword [rbp + 0x60], 0xa
xor cl, dl
mov byte [r15 + 0xb], cl
add sil, byte [r13]
movzx r8d, dl
movzx edx, cl
movzx r10d, byte [rsp + r8 + 0x20]
movzx r9d, sil
lea r12, [r12 + 2]
mov al, byte [r12]
mov r11b, byte [r12 + 1]
inc dil
shl al, 4
add r11b, 0x62
lea r13, [rsp + 0x20]
or r11b, al
mov al, byte [rsp + r9 + 0x20]
inc rbx
mov byte [rsp + r8 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r9 + 0x20], al
movzx eax, dil
add r13, rax
mov al, byte [r13]
mov byte [rsp + rdx + 0x20], al
mov byte [r13], r10b
add r14b, byte [rsp + r10 + 0x20]
movzx eax, r14b
movzx ecx, byte [rsp + rax + 0x20]
movzx eax, byte [rsp + rdx + 0x20]
add ecx, eax
movzx eax, byte [rsp + r8 + 0x20]
add ecx, eax
movzx eax, cl
movzx ecx, byte [rsp + r9 + 0x20]
movzx edx, byte [rsp + rax + 0x20]
add ecx, r10d
movzx eax, cl
mov cl, byte [rsp + rdx + 0x20]
mov dl, r11b
xor cl, byte [rsp + rax + 0x20]
xor cl, r11b
test rbx, rbx
jle 0x140024ecc
mov byte [rbx + r15 - 1], cl
dec qword [rbp + 0x60]
jne 0x140024e25
movzx eax, dil
movzx edx, cl
movzx r9d, r11b
add sil, byte [rsp + rax + 0x20]
movzx r11d, byte [rsp + r9 + 0x20]
inc dil
movzx r10d, sil
movzx ecx, dil
mov byte [r15 + 0x16], 0
mov al, byte [rsp + r10 + 0x20]
mov byte [rsp + r9 + 0x20], al
mov al, byte [rsp + rdx + 0x20]
mov byte [rsp + r10 + 0x20], al
mov al, byte [rsp + rcx + 0x20]
mov byte [rsp + rdx + 0x20], al
mov byte [rsp + rcx + 0x20], r11b
lea r11, [rsp + 0x130]
mov rax, r15
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret