Function at 0x9065d24
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x90d2dd5
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x1394
call fcn.090cde60
mov eax, dword [0x91154f8]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebx + 0xc]
and dword [ebp - 0x1368], 0
and dword [ebp - 4], 0
mov esi, dword [ebx + 8]
cmp dword [eax + 0x54], 0x52474220
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
mov dword [ebp - 0x1358], esi
mov dword [ebp - 0x1378], eax
mov dword [ebp - 0x1350], ecx
mov dword [ebp - 0x1334], edx
jne 0x906686a
cmp dword [ecx + 0x54], 0x434d594b
jne 0x906686a
mov edi, dword [eax + 4]
mov dword [ebp - 0x1354], edi
lea eax, [edi + 8]
push eax
push 0x3ed8
mov dword [ebp - 0x1370], eax
call fcn.09094540
pop ecx
pop ecx
mov ecx, eax
mov dword [ebp - 0x136c], ecx
mov byte [ebp - 4], 1
test ecx, ecx
je 0x9065dfe
xor eax, eax
push eax
push eax
push eax
push 0x434d594b
push 0x52474220
push edi
call fcn.09094540
mov edi, eax
jmp 0x9065e00
xor edi, edi
mov al, byte [esi + 0x3ea0]
lea ecx, [ebp - 0x1330]
mov byte [edi + 0x3ea0], al
mov al, byte [esi + 0x3ebc]
mov byte [edi + 0x3ebc], al
mov dword [edi + 0x3ebd], 0x1000000
mov al, byte [esi + 0x50]
mov byte [edi + 0x50], al
mov al, byte [esi + 0x3ec1]
mov byte [edi + 0x3ec1], al
mov ax, word [esi + 0x3ec4]
mov word [edi + 0x3ec4], ax
mov ax, word [esi + 0x3ec6]
mov esi, dword [ebp - 0x1354]
push 0x46308
push esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x1368], edi
mov word [edi + 0x3ec6], ax
call fcn.09094540
mov eax, dword [ebp - 0x1330]
push esi
mov byte [ebp - 4], 2
mov dword [ebp - 0x1338], eax
call fcn.09094540
pop ecx
push eax
lea ecx, [ebp - 0x134c]
call fcn.09094540
push 0x46308
push esi
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 3
call fcn.09094540
mov eax, dword [ebp - 0x330]
xor ecx, ecx
movsd xmm1, qword [0x90e7a60]
mov edx, ecx
movsd xmm3, qword [0x90e89b0]
movsd xmm2, qword [0x90dd3c8]
mov byte [ebp - 4], 4
mov dword [ebp - 0x1370], eax
mov dword [ebp - 0x133c], eax
movsd qword [ebp - 0x1380], xmm1
movd xmm0, edx
mov eax, edx
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp - 0x1348], ecx
addsd xmm0, qword [eax*8 + 0x90e7bc0]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [ebp - 0x1374], eax
mov eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp - 0x1340], ecx
addsd xmm0, qword [eax*8 + 0x90e7bc0]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [ebp - 0x136c], eax
mov esi, dword [ebp - 0x133c]
mov eax, dword [ebp - 0x1374]
add dword [ebp - 0x133c], 8
mov word [esi + 2], ax
mov eax, dword [ebp - 0x136c]
mov word [esi + 4], ax
mov eax, dword [ebp - 0x1340]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x90e7bc0]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov word [esi + 6], ax
mov eax, dword [ebp - 0x1340]
mov esi, dword [ebp - 0x1354]
inc eax
mov dword [ebp - 0x1340], eax
cmp eax, 0x21
jb 0x9065f47
mov eax, dword [ebp - 0x1348]
inc eax
mov dword [ebp - 0x1348], eax
cmp eax, 0x21
jb 0x9065f17
inc edx
cmp edx, 0x21
jb 0x9065ee3
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push dword [ebp - 0x1334]
push dword [ebp - 0x134c]
push dword [ebp - 0x1378]
call fcn.0900932b
add esp, 0x3c
lea ecx, [ebp - 0x1344]
push eax
call fcn.09094540
mov ecx, dword [ebp - 0x1344]
push 0
push 0x5058595a
push 0x50524742
push 0x8c61
push dword [ebp - 0x1338]
mov byte [ebp - 4], 5
push dword [ebp - 0x1370]
call fcn.09094540
lea ecx, [ebp - 0x1344]
mov byte [ebp - 4], 4
call fcn.09019907
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 3
call fcn.0900e47f
xor eax, eax
push eax
push eax
push eax
push 1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x1334]
push dword [ebp - 0x134c]
push dword [ebp - 0x1350]
call fcn.0900932b
add esp, 0x3c
lea ecx, [ebp - 0x1344]
push eax
call fcn.09094540
mov byte [ebp - 4], 6
xor ecx, ecx
mov eax, 0x8000
mov edx, 0x100
mov word [ebp + ecx*8 - 0xa1c], ax
mov eax, ecx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp + ecx*8 - 0xa20], 0x80008000
addsd xmm0, qword [eax*8 + 0x90e7bc0]
mulsd xmm0, qword [0x90e7a60]
divsd xmm0, qword [0x90dd3d8]
addsd xmm0, qword [0x90dd3c8]
cvttsd2si eax, xmm0
mov word [ebp + ecx*8 - 0xa1a], ax
inc ecx
mov eax, 0x8000
cmp ecx, edx
jb 0x906608f
mov ecx, dword [ebp - 0x1344]
lea eax, [ebp - 0x1220]
push 0
push 0x5058595a
push 0x434d594b
push edx
push eax
lea eax, [ebp - 0xa20]
push eax
call fcn.09094540
xor ecx, ecx
mov ax, word [ebp + ecx*8 - 0x121c]
mov word [ebp + ecx*2 - 0x220], ax
inc ecx
cmp ecx, 0x100
jb 0x906610e
lea ecx, [ebp - 0x1344]
mov byte [ebp - 4], 3
call fcn.09019907
mov ax, word [ebp - 0x220]
cmp ax, word [ebp - 0x22]
jb 0x9066187
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x90d62d0]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0x1358]
call fcn.09007319
lea ecx, [ebp - 0x134c]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.0901e5f6
lea ecx, [ebp - 0x1330]
mov byte [ebp - 4], 0
call fcn.0900e47f
mov eax, esi
jmp 0x9066875
push 0x46308
mov ecx, esi
call fcn.09094540
movzx ecx, word [ebp - 0x220]
mov esi, eax
movsd xmm2, qword [0x90dd3d0]
movaps xmm3, xmm2
mov dword [ebp - 0x1348], esi
mov dword [ebp - 0x1340], 0x21
movd xmm0, ecx
mov ecx, dword [ebp - 0x1338]
mov edx, ecx
cvtdq2pd xmm0, xmm0
movzx eax, word [ecx + 4]
mulsd xmm0, qword [0x90e76d8]
subsd xmm3, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x90e76d8]
subsd xmm2, xmm0
divsd xmm3, xmm2
movsd xmm2, qword [ebp - 0x1380]
mov dword [ebp - 0x133c], 0x21
mov dword [ebp - 0x1344], 0x21
movzx eax, word [edx + 2]
mov ecx, 0x8000
sub ecx, eax
movaps xmm0, xmm2
movd xmm1, ecx
mov ecx, 0x8000
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
movaps xmm0, xmm2
mov word [edx + 2], ax
movzx eax, word [edx + 4]
sub ecx, eax
movd xmm1, ecx
mov ecx, 0x8000
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
movaps xmm0, xmm2
mov word [edx + 4], ax
movzx eax, word [edx + 6]
sub ecx, eax
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
mov word [edx + 6], ax
add edx, 8
sub dword [ebp - 0x1344], 1
jne 0x906620b
sub dword [ebp - 0x133c], 1
jne 0x9066201
sub dword [ebp - 0x1340], 1
jne 0x90661f7
xor eax, eax
push eax
push eax
push eax
push 1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x1334]
push dword [ebp - 0x1350]
push dword [ebp - 0x134c]
call fcn.0900932b
add esp, 0x3c
lea ecx, [ebp - 0x1334]
push eax
call fcn.09094540
mov ecx, dword [ebp - 0x1334]
push 0
push 0x434d594b
push 0x5058595a
push 0x8c61
push esi
push dword [ebp - 0x1338]
mov byte [ebp - 4], 7
call fcn.09094540
mov ecx, dword [ebp - 0x1334]
xor eax, eax
push eax
push 0x434d594b
push 0x5058595a
mov dword [ebp - 0x135a], eax
mov word [ebp - 0x1356], ax
lea eax, [ebp - 0x1380]
push 1
push eax
lea eax, [ebp - 0x135c]
push eax
call fcn.09094540
lea ecx, [ebp - 0x1334]
mov byte [ebp - 4], 3
call fcn.09019907
xor ecx, ecx
movzx eax, word [esi + ecx*2]
imul eax, eax, 0xffff
sar eax, 0xf
not eax
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, 0x23184
jb 0x9066345
mov ecx, dword [ebp - 0x1338]
lea edx, [ebp - 0x36e]
movss xmm4, dword [0x90e7a70]
add esi, 6
sub ecx, dword [ebp - 0x1348]
mov dword [ebp - 0x1344], edx
mov dword [ebp - 0x1338], ecx
mov dword [ebp - 0x133c], 0x21
mov dword [ebp - 0x1334], 0xff
mov ax, word [esi - 6]
mov word [edx - 2], ax
mov ax, word [esi - 4]
mov word [edx], ax
mov ax, word [esi - 2]
mov word [edx + 2], ax
mov ax, word [esi]
mov word [edx + 4], ax
xor eax, eax
mov dword [esi - 6], eax
xor edx, edx
mov dword [esi - 2], 0xffff0000
movzx eax, word [esi + ecx - 2]
movzx ecx, word [ebp + edx*2 - 0x220]
mov dword [ebp - 0x1350], ecx
cmp ax, cx
mov ecx, dword [ebp - 0x1338]
jb 0x906649f
cmp ax, word [ebp - 0x1350]
je 0x9066481
jbe 0x906640e
movzx ecx, word [ebp + edx*2 - 0x21e]
cmp ax, cx
mov ecx, dword [ebp - 0x1338]
jb 0x9066421
cmp edx, 0xfe
je 0x906647d
inc edx
cmp edx, dword [ebp - 0x1334]
jb 0x90663cf
jmp 0x906649f
movzx ecx, word [ebp + edx*2 - 0x220]
sub eax, ecx
movd xmm1, eax
movzx eax, word [ebp + edx*2 - 0x21e]
sub eax, ecx
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [ebp - 0x1334]
cvtdq2ps xmm0, xmm0
sub eax, edx
divss xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x90e7bc0]
cvtpd2ps xmm0, xmm0
subss xmm0, xmm1
mulss xmm0, xmm4
divss xmm0, dword [0x90e8afc]
cvttss2si eax, xmm0
jmp 0x9066496
xor eax, eax
jmp 0x906649c
imul ecx, edx, 0xffff
mov eax, 0xfeff01
xor edx, edx
sub eax, ecx
div dword [ebp - 0x1334]
mov ecx, dword [ebp - 0x1338]
mov word [esi], ax
mov edx, dword [ebp - 0x1344]
mov ax, word [esi]
add esi, 0x2318
mov word [edx + 6], ax
add edx, 0xa
sub dword [ebp - 0x133c], 1
mov dword [ebp - 0x1344], edx
jne 0x906639e
movss xmm2, dword [0x90db17c]
mov esi, 0x4620
mov edx, dword [ebp - 0x1348]
push 0x10
pop ecx
mov eax, ecx
movss dword [ebp - 0x133c], xmm2
mov dword [ebp - 0x1334], eax
add eax, esi
mov dword [ebp - 0x1358], 0xe665
movzx eax, word [edx + eax*8 + 4]
cmp ax, word [ebp - 0x1358]
jae 0x906652e
mov eax, dword [ebp - 0x1334]
inc ecx
add esi, 0x462
dec eax
mov dword [ebp - 0x1334], eax
cmp esi, 0x90a2
jb 0x90664ee
movss xmm3, dword [0x90e8910]
jmp 0x906656f
sub ecx, dword [ebp - 0x1334]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm3, dword [0x90e8910]
divss xmm2, xmm4
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x90e7bc0]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm3
divss xmm2, xmm0
movss dword [ebp - 0x133c], xmm2
xor esi, esi
mov dword [ebp - 0x1334], esi
xor eax, eax
mov dword [ebp - 0x1338], eax
xor edx, edx
mov dword [ebp - 0x1340], edx
cmp esi, eax
jne 0x9066593
cmp esi, edx
je 0x90667a0
cmp dword [ebp - 0x1338], edx
mov ecx, dword [ebp - 0x1348]
cmovl eax, edx
mov edx, esi
cmp esi, eax
cmovl edx, eax
imul eax, esi, 0x21
and dword [ebp - 0x1388], 0
and dword [ebp - 0x1384], 0
and dword [ebp - 0x1380], 0
add eax, dword [ebp - 0x1338]
imul esi, eax, 0x21
add esi, dword [ebp - 0x1340]
movzx eax, word [ecx + esi*8]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 2]
divss xmm0, xmm4
movss dword [ebp - 0x1398], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 4]
divss xmm0, xmm4
movss dword [ebp - 0x1394], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 6]
imul ecx, edx, 0xa
divss xmm0, xmm4
movss dword [ebp - 0x1390], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x370]
divss xmm0, xmm4
movss dword [ebp - 0x138c], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36e]
divss xmm0, xmm4
movss dword [ebp - 0x1364], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36c]
divss xmm0, xmm4
movss dword [ebp - 0x1360], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36a]
divss xmm0, xmm4
movss dword [ebp - 0x135c], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x368]
mov ecx, dword [ebp - 0x1340]
cmp dword [ebp - 0x1338], ecx
divss xmm0, xmm4
movss dword [ebp - 0x1358], xmm0
movd xmm0, eax
mov eax, ecx
cmovl eax, dword [ebp - 0x1338]
cvtdq2ps xmm0, xmm0
mov ecx, dword [ebp - 0x1334]
cmp ecx, eax
cmovl eax, ecx
sub edx, eax
lea eax, [ebp - 0x13a8]
push eax
divss xmm0, xmm4
lea eax, [ebp - 0x1388]
push eax
lea eax, [ebp - 0x1364]
movss dword [ebp - 0x137c], xmm0
movd xmm0, edx
cvtdq2pd xmm0, xmm0
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x90e7bc0]
cvtpd2ps xmm1, xmm0
xorps xmm0, xmm0
mulss xmm1, xmm3
movups xmmword [ebp - 0x13a8], xmm0
mulss xmm1, xmm2
push eax
push ecx
lea eax, [ebp - 0x1398]
movss dword [esp], xmm1
push eax
call fcn.09094540
movups xmm1, xmmword [ebp - 0x13a8]
add esp, 0x14
mov ecx, dword [ebp - 0x1348]
movss xmm4, dword [0x90e7a70]
movaps xmm0, xmm1
mov edx, dword [ebp - 0x1340]
mulss xmm0, xmm4
cvttss2si eax, xmm0
movaps xmm0, xmm1
shufps xmm0, xmm1, 0x55
mulss xmm0, xmm4
mov word [ecx + esi*8], ax
cvttss2si eax, xmm0
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xaa
mulss xmm0, xmm4
mov word [ecx + esi*8 + 2], ax
shufps xmm1, xmm1, 0xff
mulss xmm1, xmm4
cvttss2si eax, xmm0
mov word [ecx + esi*8 + 4], ax
cvttss2si eax, xmm1
mov word [ecx + esi*8 + 6], ax
mov esi, dword [ebp - 0x1334]
mov eax, dword [ebp - 0x1338]
jmp 0x90667a6
mov ecx, dword [ebp - 0x1348]
movss xmm2, dword [ebp - 0x133c]
inc edx
movss xmm3, dword [0x90e8910]
mov dword [ebp - 0x1340], edx
cmp edx, 0x21
jb 0x9066587
inc eax
mov dword [ebp - 0x1338], eax
cmp eax, 0x21
jb 0x906657f
inc esi
mov dword [ebp - 0x1334], esi
cmp esi, 0x21
jb 0x9066577
mov esi, dword [ebp - 0x1354]
push 0x434d594b
push 0x52474220
push 0x21
push ecx
push esi
call fcn.0906527c
add esp, 0x14
mov dword [edi + 0x70], eax
mov ecx, edi
call fcn.09094540
mov ecx, edi
call fcn.09094540
push dword [ebp - 0x1348]
mov ecx, esi
call fcn.09094540
lea ecx, [ebp - 0x134c]
mov byte [ebp - 4], 2
call fcn.0901e5f6
lea ecx, [ebp - 0x1330]
mov byte [ebp - 4], 0
call fcn.0900e47f
mov eax, edi
jmp 0x9066875
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.09007319
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.09002290
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret