Function at 0x905a94b
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x90ab40b
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x1394
call fcn.090a6f20
mov eax, dword [0x90e6610]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebx + 0xc]
and dword [ebp - 0x1368], 0
and dword [ebp - 4], 0
mov esi, dword [ebx + 8]
cmp dword [eax + 0x38], 0x52474220
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
mov dword [ebp - 0x1358], esi
mov dword [ebp - 0x1378], eax
mov dword [ebp - 0x1350], ecx
mov dword [ebp - 0x1334], edx
jne 0x905b491
cmp dword [ecx + 0x38], 0x434d594b
jne 0x905b491
mov edi, dword [eax + 4]
mov dword [ebp - 0x1354], edi
lea eax, [edi + 8]
push eax
push 0x3eb8
mov dword [ebp - 0x1370], eax
call fcn.09041741
pop ecx
pop ecx
mov ecx, eax
mov dword [ebp - 0x136c], ecx
mov byte [ebp - 4], 1
test ecx, ecx
je 0x905aa25
xor eax, eax
push eax
push eax
push eax
push 0x434d594b
push 0x52474220
push edi
call fcn.09041741
mov edi, eax
jmp 0x905aa27
xor edi, edi
mov al, byte [esi + 0x3e84]
lea ecx, [ebp - 0x1330]
mov byte [edi + 0x3e84], al
mov al, byte [esi + 0x3ea0]
mov byte [edi + 0x3ea0], al
mov dword [edi + 0x3ea1], 0x1000000
mov al, byte [esi + 0x4c]
mov byte [edi + 0x4c], al
mov al, byte [esi + 0x3ea5]
mov byte [edi + 0x3ea5], al
mov ax, word [esi + 0x3ea8]
mov word [edi + 0x3ea8], ax
mov ax, word [esi + 0x3eaa]
mov esi, dword [ebp - 0x1354]
push 0x46308
push esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x1368], edi
mov word [edi + 0x3eaa], ax
call fcn.09041741
mov eax, dword [ebp - 0x1330]
push esi
mov byte [ebp - 4], 2
mov dword [ebp - 0x1338], eax
call fcn.09041741
pop ecx
push eax
lea ecx, [ebp - 0x134c]
call fcn.09041741
push 0x46308
push esi
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 3
call fcn.09041741
mov eax, dword [ebp - 0x330]
xor ecx, ecx
movsd xmm1, qword [0x90bee38]
mov edx, ecx
movsd xmm3, qword [0x90bfc20]
movsd xmm2, qword [0x90b4780]
mov byte [ebp - 4], 4
mov dword [ebp - 0x1370], eax
mov dword [ebp - 0x133c], eax
movsd qword [ebp - 0x1380], xmm1
movd xmm0, edx
mov eax, edx
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp - 0x1348], ecx
addsd xmm0, qword [eax*8 + 0x90befa0]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [ebp - 0x1374], eax
mov eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp - 0x1340], ecx
addsd xmm0, qword [eax*8 + 0x90befa0]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [ebp - 0x136c], eax
mov esi, dword [ebp - 0x133c]
mov eax, dword [ebp - 0x1374]
add dword [ebp - 0x133c], 8
mov word [esi + 2], ax
mov eax, dword [ebp - 0x136c]
mov word [esi + 4], ax
mov eax, dword [ebp - 0x1340]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x90befa0]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov word [esi + 6], ax
mov eax, dword [ebp - 0x1340]
mov esi, dword [ebp - 0x1354]
inc eax
mov dword [ebp - 0x1340], eax
cmp eax, 0x21
jb 0x905ab6e
mov eax, dword [ebp - 0x1348]
inc eax
mov dword [ebp - 0x1348], eax
cmp eax, 0x21
jb 0x905ab3e
inc edx
cmp edx, 0x21
jb 0x905ab0a
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push dword [ebp - 0x1334]
push dword [ebp - 0x134c]
push dword [ebp - 0x1378]
call fcn.09008247
add esp, 0x3c
lea ecx, [ebp - 0x1344]
push eax
call fcn.09041741
mov ecx, dword [ebp - 0x1344]
push 0
push 0x5058595a
push 0x50524742
push 0x8c61
push dword [ebp - 0x1338]
mov byte [ebp - 4], 5
push dword [ebp - 0x1370]
call fcn.09041741
lea ecx, [ebp - 0x1344]
mov byte [ebp - 4], 4
call fcn.09017177
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 3
call fcn.0900bf08
xor eax, eax
push eax
push eax
push eax
push 1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x1334]
push dword [ebp - 0x134c]
push dword [ebp - 0x1350]
call fcn.09008247
add esp, 0x3c
lea ecx, [ebp - 0x1344]
push eax
call fcn.09041741
mov byte [ebp - 4], 6
xor ecx, ecx
mov eax, 0x8000
mov edx, 0x100
mov word [ebp + ecx*8 - 0xa1c], ax
mov eax, ecx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp + ecx*8 - 0xa20], 0x80008000
addsd xmm0, qword [eax*8 + 0x90befa0]
mulsd xmm0, qword [0x90bee38]
divsd xmm0, qword [0x90b4790]
addsd xmm0, qword [0x90b4780]
cvttsd2si eax, xmm0
mov word [ebp + ecx*8 - 0xa1a], ax
inc ecx
mov eax, 0x8000
cmp ecx, edx
jb 0x905acb6
mov ecx, dword [ebp - 0x1344]
lea eax, [ebp - 0x1220]
push 0
push 0x5058595a
push 0x434d594b
push edx
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.09041741
xor ecx, ecx
mov ax, word [ebp + ecx*8 - 0x121c]
mov word [ebp + ecx*2 - 0x220], ax
inc ecx
cmp ecx, 0x100
jb 0x905ad35
lea ecx, [ebp - 0x1344]
mov byte [ebp - 4], 3
call fcn.09017177
mov ax, word [ebp - 0x220]
cmp ax, word [ebp - 0x22]
jb 0x905adae
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x90ae2d0]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0x1358]
call fcn.090065a9
lea ecx, [ebp - 0x134c]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.0901b295
lea ecx, [ebp - 0x1330]
mov byte [ebp - 4], 0
call fcn.0900bf08
mov eax, esi
jmp 0x905b49c
push 0x46308
mov ecx, esi
call fcn.09041741
movzx ecx, word [ebp - 0x220]
mov esi, eax
movsd xmm2, qword [0x90b4788]
movaps xmm3, xmm2
mov dword [ebp - 0x1348], esi
mov dword [ebp - 0x1340], 0x21
movd xmm0, ecx
mov ecx, dword [ebp - 0x1338]
mov edx, ecx
cvtdq2pd xmm0, xmm0
movzx eax, word [ecx + 4]
mulsd xmm0, qword [0x90beaa8]
subsd xmm3, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x90beaa8]
subsd xmm2, xmm0
divsd xmm3, xmm2
movsd xmm2, qword [ebp - 0x1380]
mov dword [ebp - 0x133c], 0x21
mov dword [ebp - 0x1344], 0x21
movzx eax, word [edx + 2]
mov ecx, 0x8000
sub ecx, eax
movaps xmm0, xmm2
movd xmm1, ecx
mov ecx, 0x8000
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
movaps xmm0, xmm2
mov word [edx + 2], ax
movzx eax, word [edx + 4]
sub ecx, eax
movd xmm1, ecx
mov ecx, 0x8000
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
movaps xmm0, xmm2
mov word [edx + 4], ax
movzx eax, word [edx + 6]
sub ecx, eax
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
mov word [edx + 6], ax
add edx, 8
sub dword [ebp - 0x1344], 1
jne 0x905ae32
sub dword [ebp - 0x133c], 1
jne 0x905ae28
sub dword [ebp - 0x1340], 1
jne 0x905ae1e
xor eax, eax
push eax
push eax
push eax
push 1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x1334]
push dword [ebp - 0x1350]
push dword [ebp - 0x134c]
call fcn.09008247
add esp, 0x3c
lea ecx, [ebp - 0x1334]
push eax
call fcn.09041741
mov ecx, dword [ebp - 0x1334]
push 0
push 0x434d594b
push 0x5058595a
push 0x8c61
push esi
push dword [ebp - 0x1338]
mov byte [ebp - 4], 7
call fcn.09041741
mov ecx, dword [ebp - 0x1334]
xor eax, eax
push eax
push 0x434d594b
push 0x5058595a
mov dword [ebp - 0x135a], eax
mov word [ebp - 0x1356], ax
lea eax, [ebp - 0x1380]
push 1
push eax
lea eax, [ebp - 0x135c]
push eax
call fcn.09041741
lea ecx, [ebp - 0x1334]
mov byte [ebp - 4], 3
call fcn.09017177
xor ecx, ecx
movzx eax, word [esi + ecx*2]
imul eax, eax, 0xffff
sar eax, 0xf
not eax
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, 0x23184
jb 0x905af6c
mov ecx, dword [ebp - 0x1338]
lea edx, [ebp - 0x36e]
movss xmm4, dword [0x90bee48]
add esi, 6
sub ecx, dword [ebp - 0x1348]
mov dword [ebp - 0x1344], edx
mov dword [ebp - 0x1338], ecx
mov dword [ebp - 0x133c], 0x21
mov dword [ebp - 0x1334], 0xff
mov ax, word [esi - 6]
mov word [edx - 2], ax
mov ax, word [esi - 4]
mov word [edx], ax
mov ax, word [esi - 2]
mov word [edx + 2], ax
mov ax, word [esi]
mov word [edx + 4], ax
xor eax, eax
mov dword [esi - 6], eax
xor edx, edx
mov dword [esi - 2], 0xffff0000
movzx eax, word [esi + ecx - 2]
movzx ecx, word [ebp + edx*2 - 0x220]
mov dword [ebp - 0x1350], ecx
cmp ax, cx
mov ecx, dword [ebp - 0x1338]
jb 0x905b0c6
cmp ax, word [ebp - 0x1350]
je 0x905b0a8
jbe 0x905b035
movzx ecx, word [ebp + edx*2 - 0x21e]
cmp ax, cx
mov ecx, dword [ebp - 0x1338]
jb 0x905b048
cmp edx, 0xfe
je 0x905b0a4
inc edx
cmp edx, dword [ebp - 0x1334]
jb 0x905aff6
jmp 0x905b0c6
movzx ecx, word [ebp + edx*2 - 0x220]
sub eax, ecx
movd xmm1, eax
movzx eax, word [ebp + edx*2 - 0x21e]
sub eax, ecx
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [ebp - 0x1334]
cvtdq2ps xmm0, xmm0
sub eax, edx
divss xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x90befa0]
cvtpd2ps xmm0, xmm0
subss xmm0, xmm1
mulss xmm0, xmm4
divss xmm0, dword [0x90bfd64]
cvttss2si eax, xmm0
jmp 0x905b0bd
xor eax, eax
jmp 0x905b0c3
imul ecx, edx, 0xffff
mov eax, 0xfeff01
xor edx, edx
sub eax, ecx
div dword [ebp - 0x1334]
mov ecx, dword [ebp - 0x1338]
mov word [esi], ax
mov edx, dword [ebp - 0x1344]
mov ax, word [esi]
add esi, 0x2318
mov word [edx + 6], ax
add edx, 0xa
sub dword [ebp - 0x133c], 1
mov dword [ebp - 0x1344], edx
jne 0x905afc5
movss xmm2, dword [0x90beae8]
mov esi, 0x4620
mov edx, dword [ebp - 0x1348]
push 0x10
pop ecx
mov eax, ecx
movss dword [ebp - 0x133c], xmm2
mov dword [ebp - 0x1334], eax
add eax, esi
mov dword [ebp - 0x1358], 0xe665
movzx eax, word [edx + eax*8 + 4]
cmp ax, word [ebp - 0x1358]
jae 0x905b155
mov eax, dword [ebp - 0x1334]
inc ecx
add esi, 0x462
dec eax
mov dword [ebp - 0x1334], eax
cmp esi, 0x90a2
jb 0x905b115
movss xmm3, dword [0x90bfb8c]
jmp 0x905b196
sub ecx, dword [ebp - 0x1334]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm3, dword [0x90bfb8c]
divss xmm2, xmm4
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x90befa0]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm3
divss xmm2, xmm0
movss dword [ebp - 0x133c], xmm2
xor esi, esi
mov dword [ebp - 0x1334], esi
xor eax, eax
mov dword [ebp - 0x1338], eax
xor edx, edx
mov dword [ebp - 0x1340], edx
cmp esi, eax
jne 0x905b1ba
cmp esi, edx
je 0x905b3c7
cmp dword [ebp - 0x1338], edx
mov ecx, dword [ebp - 0x1348]
cmovl eax, edx
mov edx, esi
cmp esi, eax
cmovl edx, eax
imul eax, esi, 0x21
and dword [ebp - 0x1388], 0
and dword [ebp - 0x1384], 0
and dword [ebp - 0x1380], 0
add eax, dword [ebp - 0x1338]
imul esi, eax, 0x21
add esi, dword [ebp - 0x1340]
movzx eax, word [ecx + esi*8]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 2]
divss xmm0, xmm4
movss dword [ebp - 0x1398], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 4]
divss xmm0, xmm4
movss dword [ebp - 0x1394], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 6]
imul ecx, edx, 0xa
divss xmm0, xmm4
movss dword [ebp - 0x1390], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x370]
divss xmm0, xmm4
movss dword [ebp - 0x138c], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36e]
divss xmm0, xmm4
movss dword [ebp - 0x1364], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36c]
divss xmm0, xmm4
movss dword [ebp - 0x1360], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36a]
divss xmm0, xmm4
movss dword [ebp - 0x135c], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x368]
mov ecx, dword [ebp - 0x1340]
cmp dword [ebp - 0x1338], ecx
divss xmm0, xmm4
movss dword [ebp - 0x1358], xmm0
movd xmm0, eax
mov eax, ecx
cmovl eax, dword [ebp - 0x1338]
cvtdq2ps xmm0, xmm0
mov ecx, dword [ebp - 0x1334]
cmp ecx, eax
cmovl eax, ecx
sub edx, eax
lea eax, [ebp - 0x13a8]
push eax
divss xmm0, xmm4
lea eax, [ebp - 0x1388]
push eax
lea eax, [ebp - 0x1364]
movss dword [ebp - 0x137c], xmm0
movd xmm0, edx
cvtdq2pd xmm0, xmm0
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x90befa0]
cvtpd2ps xmm1, xmm0
xorps xmm0, xmm0
mulss xmm1, xmm3
movups xmmword [ebp - 0x13a8], xmm0
mulss xmm1, xmm2
push eax
push ecx
lea eax, [ebp - 0x1398]
movss dword [esp], xmm1
push eax
call fcn.09041741
movups xmm1, xmmword [ebp - 0x13a8]
add esp, 0x14
mov ecx, dword [ebp - 0x1348]
movss xmm4, dword [0x90bee48]
movaps xmm0, xmm1
mov edx, dword [ebp - 0x1340]
mulss xmm0, xmm4
cvttss2si eax, xmm0
movaps xmm0, xmm1
shufps xmm0, xmm1, 0x55
mulss xmm0, xmm4
mov word [ecx + esi*8], ax
cvttss2si eax, xmm0
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xaa
mulss xmm0, xmm4
mov word [ecx + esi*8 + 2], ax
shufps xmm1, xmm1, 0xff
mulss xmm1, xmm4
cvttss2si eax, xmm0
mov word [ecx + esi*8 + 4], ax
cvttss2si eax, xmm1
mov word [ecx + esi*8 + 6], ax
mov esi, dword [ebp - 0x1334]
mov eax, dword [ebp - 0x1338]
jmp 0x905b3cd
mov ecx, dword [ebp - 0x1348]
movss xmm2, dword [ebp - 0x133c]
inc edx
movss xmm3, dword [0x90bfb8c]
mov dword [ebp - 0x1340], edx
cmp edx, 0x21
jb 0x905b1ae
inc eax
mov dword [ebp - 0x1338], eax
cmp eax, 0x21
jb 0x905b1a6
inc esi
mov dword [ebp - 0x1334], esi
cmp esi, 0x21
jb 0x905b19e
mov esi, dword [ebp - 0x1354]
push 0x434d594b
push 0x52474220
push 0x21
push ecx
push esi
call fcn.0905a090
add esp, 0x14
mov dword [edi + 0x68], eax
mov ecx, edi
call fcn.09041741
mov ecx, edi
call fcn.09041741
push dword [ebp - 0x1348]
mov ecx, esi
call fcn.09041741
lea ecx, [ebp - 0x134c]
mov byte [ebp - 4], 2
call fcn.0901b295
lea ecx, [ebp - 0x1330]
mov byte [ebp - 4], 0
call fcn.0900bf08
mov eax, edi
jmp 0x905b49c
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.090065a9
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.09001f80
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret