Function at 0x836030
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
fld qword [0x88f578]
fld qword [0x88f578]
push esi
push edi
xor edi, edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], edi
fld st(0)
fmul st(1)
fld st(0)
fmul qword [0x8be718]
fsub st(1)
fxch st(1)
fmul qword [0x89d688]
fadd qword [0x8be710]
fdivp st(1)
faddp st(2)
fld st(1)
fcomp qword [0x8be708]
fnstsw ax
test ah, 0x41
jne 0x836088
fld st(0)
fmul qword [0x8be700]
fsubp st(2)
fadd qword [0x896500]
fcom qword [0x8be6f8]
fnstsw ax
test ah, 1
jne 0x83604f
fxch st(1)
fst qword [ebp - 0x44]
fxch st(1)
fstp st(0)
fcomp qword [0x88f578]
fnstsw ax
test ah, 1
je 0x836106
pop ebx
das
pop ebp
dec esi
inc edx
das
pop esp
push esp
aaa
pop esi
push 0x5c
dec edx
outsd dx, dword [esi]
dec edx
pop esp
daa
cmp al, 0x4e
pop esp
pop edi
cmp dword [ebx], edi
push edx
inc esp
imul sp, bp, 0xffd0
out 0xc8, eax
jmp 0xe75549a8
mov dword [ebp - 0x30], 0x8360d1
mov dword [ebp - 0x34], 0x8360b1
xor eax, eax
mov byte [ebp + eax - 0x15c], al
inc eax
cmp eax, 0x100
jb 0x836116
fld qword [ebp - 0x44]
mov byte [ebp - 0xc], 0
mov eax, 0xff
mov esi, dword [ebp - 0xc]
push ebx
mov dword [ebp - 0x18], eax
mov ebx, 1
mov dword [ebp - 0x1c], 0
cmp eax, ebx
jbe 0x836150
lea ebx, [ebx + ebx + 1]
cmp ebx, eax
jb 0x836148
cmp edi, 3
ja case.default.0x836155
jmp dword [edi*4 + 0x836ab8]
fld st(0)
and esi, 0xff
call fcn.0083dce4
mov cl, byte [ebp + esi - 0x15c]
jmp 0x8361d1
fld st(0)
and esi, 0xff
call fcn.0083dce4
mov cl, byte [ebp + esi - 0x15c]
shr eax, 8
jmp 0x8361d1
fld st(0)
and esi, 0xff
call fcn.0083dce4
mov cl, byte [ebp + esi - 0x15c]
shr eax, 0x10
jmp 0x8361d1
fld st(0)
and esi, 0xff
call fcn.0083dce4
mov cl, byte [ebp + esi - 0x15c]
shr eax, 0x18
jmp 0x8361d1
mov eax, dword [ebp - 0x34]
and esi, 0xff
mov cl, byte [eax + edi - 4]
mov al, byte [ebp + esi - 0x15c]
add cl, al
inc edi
cmp edi, 0x24
mov byte [ebp - 0xc], cl
jb 0x8361e4
xor edi, edi
add cl, 0x24
mov byte [ebp - 0xc], cl
mov esi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edx, esi
and edx, 0xff
and edx, ebx
inc eax
cmp eax, 0xb
mov dword [ebp - 0x1c], eax
jbe 0x836204
mov eax, edx
xor edx, edx
div dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, edx
jb 0x836150
je 0x83623c
mov bl, byte [ebp + eax - 0x15c]
lea edx, [ebp + edx - 0x15c]
lea ecx, [ebp + eax - 0x15c]
mov al, byte [edx]
xor bl, al
mov byte [ecx], bl
mov al, bl
mov bl, byte [edx]
xor bl, al
mov byte [edx], bl
mov al, byte [ecx]
mov dl, bl
xor al, dl
mov byte [ecx], al
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
jne 0x836138
mov edi, dword [ebp - 0x30]
mov dl, byte [ebp - 0x155]
and esi, 0xff
mov byte [ebp - 0x28], dl
mov dl, byte [edi + 1]
mov bl, byte [ebp - 0x159]
mov al, byte [ebp + esi - 0x15c]
add dl, 0x3c
mov byte [ebp - 0x2c], al
mov al, byte [edi]
add al, 0xc
xor esi, esi
shl al, 4
or al, dl
mov cl, byte [ebp - 0x157]
mov byte [ebp - 0x1c], al
mov eax, dword [ebp - 0x2c]
and eax, 0xff
fstp st(0)
mov dl, byte [ebp + eax - 0x15c]
lea edi, [ebp + eax - 0x15c]
mov byte [ebp - 8], dl
mov edx, dword [ebp - 0x15b]
mov eax, edx
and eax, 0xff
mov al, byte [ebp + eax - 0x15c]
add al, bl
inc dl
mov byte [ebp - 0x24], al
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x24]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
lea edx, [ebp + edx - 0x15c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0xc], edx
lea ebx, [ebp + ebx - 0x15c]
mov dword [ebp - 0x10], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0x10]
and edx, 0xff
lea edx, [ebp + edx - 0x15c]
mov dword [ebp - 0x14], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0x14]
mov dl, byte [ebp - 8]
mov byte [ebx], dl
mov edx, dword [ebp - 8]
and edx, 0xff
mov dword [ebp - 0x20], edx
mov bl, byte [ebp + edx - 0x15c]
add cl, bl
mov ebx, dword [ebp - 0x10]
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x18]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x15c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
mov edi, dword [ebp - 0x20]
and edx, 0xff
xor ebx, ebx
mov bl, byte [ebp + edx - 0x15c]
mov edx, dword [ebp - 0xc]
mov dl, byte [edx]
mov bl, byte [ebp + ebx - 0x15c]
add edx, edi
mov edi, dword [ebp - 0x30]
and edx, 0xff
xor bl, byte [ebp + edx - 0x15c]
mov dl, byte [ebp - 0x1c]
mov byte [ebp - 0x2c], dl
xor bl, dl
mov byte [ebp - 0x28], bl
mov dword [ebp - 0x34], 9
jmp 0x83638d
mov edi, dword [ebp - 0x40]
mov dl, byte [edi + 2]
mov bl, byte [edi + 3]
add edi, 2
add dl, 0xc
shl dl, 4
add bl, 0x3c
mov dword [ebp - 0x40], edi
or dl, bl
inc esi
mov byte [ebp - 0x1c], dl
mov edx, dword [ebp - 0x2c]
and edx, 0xff
lea edi, [ebp + edx - 0x15c]
mov dl, byte [ebp + edx - 0x15c]
mov byte [ebp - 8], dl
mov edx, dword [ebp - 0x14]
mov bl, byte [edx]
mov dl, byte [ebp - 4]
add al, bl
inc dl
mov byte [ebp - 0x24], al
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x24]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
lea edx, [ebp + edx - 0x15c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0xc], edx
lea ebx, [ebp + ebx - 0x15c]
mov dword [ebp - 0x10], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0x10]
and edx, 0xff
lea edx, [ebp + edx - 0x15c]
mov dword [ebp - 0x14], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0x14]
mov dl, byte [ebp - 8]
mov byte [ebx], dl
mov edx, dword [ebp - 8]
and edx, 0xff
mov dword [ebp - 0x20], edx
mov bl, byte [ebp + edx - 0x15c]
add cl, bl
mov ebx, dword [ebp - 0x10]
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x18]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x15c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
mov edx, dword [ebp - 0xc]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x20]
add ebx, edx
mov dl, byte [ebp + edi - 0x15c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x15c]
mov bl, byte [ebp - 0x1c]
mov byte [ebp - 0x2c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x83649e
mov byte [ebp + esi - 0x5d], dl
mov edx, dword [ebp - 0x34]
dec edx
mov dword [ebp - 0x34], edx
jne 0x83638a
mov edi, dword [ebp - 0x30]
inc esi
mov bl, byte [edi + esi*2]
mov dl, byte [edi + esi*2 + 1]
add bl, 0xc
add dl, 0x3c
shl bl, 4
or dl, bl
mov byte [ebp - 0x1c], dl
mov edx, dword [ebp - 0x2c]
and edx, 0xff
lea edi, [ebp + edx - 0x15c]
mov dl, byte [ebp + edx - 0x15c]
mov byte [ebp - 8], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
mov dl, byte [ebp - 4]
add al, bl
inc dl
mov byte [ebp - 0x24], al
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x24]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
lea edx, [ebp + edx - 0x15c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0xc], edx
lea ebx, [ebp + ebx - 0x15c]
mov dword [ebp - 0x10], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0x10]
and edx, 0xff
lea edx, [ebp + edx - 0x15c]
mov dword [ebp - 0x14], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0x14]
mov dl, byte [ebp - 8]
mov byte [ebx], dl
mov edx, dword [ebp - 8]
and edx, 0xff
mov dword [ebp - 0x20], edx
mov bl, byte [ebp + edx - 0x15c]
add cl, bl
mov ebx, dword [ebp - 0x10]
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x18]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x15c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
mov edx, dword [ebp - 0xc]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x20]
add ebx, edx
mov dl, byte [ebp + edi - 0x15c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x15c]
mov bl, byte [ebp - 0x1c]
mov byte [ebp - 0x2c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x8365c5
mov byte [ebp + esi - 0x5d], dl
mov edi, dword [ebp - 0x30]
inc esi
xor edx, edx
mov dl, byte [edi + esi*2]
mov bl, byte [edi + esi*2 + 1]
sub edx, 0xe4
add bl, 0x3c
shl edx, 4
or bl, dl
mov edx, dword [ebp - 0x2c]
and edx, 0xff
mov byte [ebp - 0x1c], bl
lea edi, [ebp + edx - 0x15c]
mov dl, byte [ebp + edx - 0x15c]
mov byte [ebp - 8], dl
mov edx, dword [ebp - 0x14]
mov bl, byte [edx]
mov dl, byte [ebp - 4]
add al, bl
inc dl
mov byte [ebp - 0x24], al
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x24]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
lea edx, [ebp + edx - 0x15c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0xc], edx
lea ebx, [ebp + ebx - 0x15c]
mov dword [ebp - 0x10], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0x10]
and edx, 0xff
lea edx, [ebp + edx - 0x15c]
mov dword [ebp - 0x14], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0x14]
mov dl, byte [ebp - 8]
mov byte [ebx], dl
mov edx, dword [ebp - 8]
and edx, 0xff
mov dword [ebp - 0x20], edx
mov bl, byte [ebp + edx - 0x15c]
add cl, bl
mov ebx, dword [ebp - 0x10]
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x18]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x15c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
mov edx, dword [ebp - 0xc]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x20]
add ebx, edx
mov dl, byte [ebp + edi - 0x15c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x15c]
mov bl, byte [ebp - 0x1c]
mov byte [ebp - 0x2c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x8366d9
mov byte [ebp + esi - 0x5d], dl
mov edx, dword [ebp - 0x30]
inc esi
xor ebx, ebx
mov bl, byte [edx + esi*2]
mov edi, ebx
xor ebx, ebx
mov bl, byte [edx + esi*2 + 1]
add edi, 0xffffff1c
mov edx, ebx
shl edi, 4
sub edx, 0xc4
mov ebx, edi
or bl, dl
mov edx, dword [ebp - 0x2c]
and edx, 0xff
mov byte [ebp - 0x1c], bl
lea edi, [ebp + edx - 0x15c]
mov dl, byte [ebp + edx - 0x15c]
mov byte [ebp - 8], dl
mov edx, dword [ebp - 0x14]
mov bl, byte [edx]
mov dl, byte [ebp - 4]
add al, bl
inc dl
mov byte [ebp - 0x24], al
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x24]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
lea edx, [ebp + edx - 0x15c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0xc], edx
lea ebx, [ebp + ebx - 0x15c]
mov dword [ebp - 0x10], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0x10]
and edx, 0xff
lea edx, [ebp + edx - 0x15c]
mov dword [ebp - 0x14], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0x14]
mov dl, byte [ebp - 8]
mov byte [ebx], dl
mov edx, dword [ebp - 8]
and edx, 0xff
mov dword [ebp - 0x20], edx
mov bl, byte [ebp + edx - 0x15c]
add cl, bl
mov ebx, dword [ebp - 0x10]
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x18]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x15c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
mov edx, dword [ebp - 0xc]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x20]
add ebx, edx
mov dl, byte [ebp + edi - 0x15c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x15c]
mov bl, byte [ebp - 0x1c]
mov byte [ebp - 0x2c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x8367f8
mov byte [ebp + esi - 0x5d], dl
lea ebx, [esi + 1]
cmp ebx, 0x18
jge 0x836937
mov edx, dword [ebp - 0x30]
lea edi, [edx + esi*2]
mov edx, 0x18
sub edx, ebx
mov dword [ebp - 0x34], edx
jmp 0x836819
mov edi, dword [ebp - 0x40]
mov bl, byte [edi + 2]
mov dl, byte [edi + 3]
add edi, 2
add bl, 0xc
add dl, 0x3c
mov dword [ebp - 0x40], edi
shl bl, 4
or dl, bl
inc esi
mov byte [ebp - 0x1c], dl
mov edx, dword [ebp - 0x2c]
and edx, 0xff
lea edi, [ebp + edx - 0x15c]
mov dl, byte [ebp + edx - 0x15c]
mov byte [ebp - 8], dl
mov edx, dword [ebp - 0x14]
mov bl, byte [edx]
mov dl, byte [ebp - 4]
add al, bl
inc dl
mov byte [ebp - 0x24], al
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x24]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
lea edx, [ebp + edx - 0x15c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0xc], edx
lea ebx, [ebp + ebx - 0x15c]
mov dword [ebp - 0x10], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0x10]
and edx, 0xff
lea edx, [ebp + edx - 0x15c]
mov dword [ebp - 0x14], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0x14]
mov dl, byte [ebp - 8]
mov byte [ebx], dl
mov edx, dword [ebp - 8]
and edx, 0xff
mov dword [ebp - 0x20], edx
mov bl, byte [ebp + edx - 0x15c]
add cl, bl
mov ebx, dword [ebp - 0x10]
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x18]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x15c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
mov edx, dword [ebp - 0xc]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x20]
add ebx, edx
mov dl, byte [ebp + edi - 0x15c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x15c]
mov bl, byte [ebp - 0x1c]
mov byte [ebp - 0x2c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x83692a
mov byte [ebp + esi - 0x5d], dl
mov edx, dword [ebp - 0x34]
dec edx
mov dword [ebp - 0x34], edx
jne 0x836816
mov edx, dword [ebp - 0x1c]
inc esi
and edx, 0xff
lea edi, [ebp + edx - 0x15c]
mov dl, byte [ebp + edx - 0x15c]
mov byte [ebp - 8], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
add al, bl
mov bl, byte [ebp - 4]
mov byte [ebp - 0x24], al
inc bl
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], bl
and eax, 0xff
mov dl, byte [ebp + eax - 0x15c]
lea eax, [ebp + eax - 0x15c]
mov byte [edi], dl
mov edx, dword [ebp - 0x28]
and edx, 0xff
mov bl, byte [ebp + edx - 0x15c]
lea edx, [ebp + edx - 0x15c]
mov byte [eax], bl
mov ebx, dword [ebp - 4]
and ebx, 0xff
mov dword [ebp - 0x10], edx
test esi, esi
lea ebx, [ebp + ebx - 0x15c]
mov dword [ebp - 0x14], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov ebx, dword [ebp - 0x14]
mov dl, byte [ebp - 8]
mov byte [ebx], dl
jbe 0x836a3c
mov edx, dword [ebp - 8]
mov al, byte [eax]
and edx, 0xff
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x30]
mov bl, byte [edx + esi*2 + 1]
mov dl, byte [edx + esi*2]
sub dl, 4
add bl, 0x3c
shl dl, 4
or bl, dl
mov edx, dword [ebp - 0x20]
mov dl, byte [ebp + edx - 0x15c]
add dl, cl
and edx, 0xff
mov cl, byte [ebp + edx - 0x15c]
mov edx, dword [ebp - 0x10]
mov dl, byte [edx]
add ecx, edx
mov dl, byte [edi]
mov edi, dword [ebp - 0x20]
add ecx, edx
and ecx, 0xff
xor edx, edx
add eax, edi
mov dl, byte [ebp + ecx - 0x15c]
and eax, 0xff
mov cl, byte [ebp + edx - 0x15c]
xor bl, cl
mov cl, byte [ebp + eax - 0x15c]
xor bl, cl
mov byte [ebp + esi - 0x5d], bl
mov byte [ebp - 0x45], 0
pop ebx
call fcn.00846e30
mov ecx, dword [ebp + 8]
mov esi, eax
push ecx
push 0x2712
push esi
call fcn.0084a7f0
push 0x836ad0
push 0x4e2b
push esi
call fcn.0084a7f0
lea edx, [ebp - 0x3c]
push edx
push 0x2711
push esi
call fcn.0084a7f0
push 0
push 0x40
push esi
call fcn.0084a7f0
lea eax, [ebp - 0x5c]
push eax
push 0x2722
push esi
call fcn.0084a7f0
push 1
push 0x34
push esi
call fcn.0084a7f0
add esp, 0x48
push esi
call fcn.00846e70
push esi
call fcn.00846fe0
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
add esp, 8
pop edi
pop esi
mov esp, ebp
pop ebp
ret