Function at 0x6bb084
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff80
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov esi, ecx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp + 8]
xor eax, eax
push ebp
push 0x6bb7bc
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 7
mov eax, dword [ebp - 0x14]
call fcn.00537404
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xc0]
mov edx, esi
call fcn.006bc034
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x18]
movzx edx, byte [edx + 0x20]
call fcn.0052e188
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x18]
movzx edx, byte [edx + 0x30]
call fcn.0052e134
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x18]
movzx edx, byte [edx + 0x28]
call fcn.0052e204
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x18]
mov edx, dword [edx + 0x2c]
call fcn.0052e090
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
mov eax, dword [eax + 0x40]
xor edx, edx
call fcn.0052dcc8
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 0x18]
movzx edx, word [edx + 0x18]
call fcn.0040b2d4
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
mov eax, dword [eax + 0x40]
push eax
fild dword [ebp + 0xc]
mov eax, dword [ebp - 0x18]
fmul qword [eax + 0x38]
call fcn.0040785c
mov edx, eax
pop eax
call fcn.0052dfd0
push 0
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 0x14]
call fcn.00741430
lea edx, [ebp - 0x78]
mov ecx, 0xffffff
mov eax, dword [ebp - 0x14]
call fcn.006a2f60
mov esi, dword [ebp + 0x10]
lea edi, [ebp - 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
cmp byte [eax + 0x40], 0
je 0x6bb1bf
mov eax, dword [ebp + 0xc]
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
push 0
push 1
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
lea ecx, [ebp - 0x58]
mov edx, dword [ebp - 0x24]
movzx edx, word [edx]
call fcn.006ba654
jmp 0x6bb1e6
push 0xf00
lea eax, [ebp - 0x58]
push eax
push 1
mov eax, dword [ebp - 0x24]
call fcn.0040b370
push eax
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
call fcn.0052fb1c
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x30]
mov esi, eax
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.00741598
sub esi, eax
sar esi, 1
jns 0x6bb203
adc esi, 0
mov dword [ebp - 0x68], esi
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x24]
mov esi, eax
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.007415ac
sub esi, eax
sar esi, 1
jns 0x6bb223
adc esi, 0
mov dword [ebp - 0x64], esi
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.00741598
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.007415ac
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x5c], eax
test ebx, ebx
je 0x6bb268
mov dword [ebp - 0x7c], ebx
fild dword [ebp - 0x7c]
mov eax, dword [ebp - 0x18]
fmul qword [eax + 0x38]
call fcn.0040785c
lea edx, [ebp - 0x68]
mov ecx, eax
xor eax, eax
xchg edx, eax
call fcn.00413b78
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0xc], 0
je 0x6bb33d
mov eax, dword [ebp - 0x18]
cmp byte [eax + 0x40], 0
je 0x6bb2af
mov eax, dword [ebp + 0xc]
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
push eax
push 0
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
lea ecx, [ebp - 0x68]
mov edx, dword [ebp - 0x24]
movzx edx, word [edx]
call fcn.006ba654
jmp 0x6bb39d
mov eax, dword [ebp - 0x14]
call fcn.007719f4
mov ebx, eax
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
mov eax, dword [eax + 0x40]
push eax
mov eax, ebx
call fcn.00535ff0
mov eax, dword [eax + 0x40]
pop edx
mov ecx, dword [eax]
call dword [ecx + 8]
push ebp
call fcn.006ba9a4
pop ecx
push 0xb04
lea eax, [ebp - 0x68]
push eax
push 1
mov eax, dword [ebp - 0x24]
call fcn.0040b370
push eax
mov eax, ebx
call fcn.00535ff0
call fcn.0052fb1c
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov ecx, 0x168
cdq
idiv ecx
push edx
lea edx, [ebp - 0x78]
mov eax, ebx
call fcn.00741430
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
call fcn.0052fb1c
mov edx, ebx
pop ecx
call fcn.0069fd20
mov eax, ebx
call fcn.0040893c
jmp 0x6bb39d
mov eax, dword [ebp - 0x18]
cmp byte [eax + 0x40], 0
je 0x6bb36f
mov eax, dword [ebp + 0xc]
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
push 0
push 0
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
lea ecx, [ebp - 0x68]
mov edx, dword [ebp - 0x24]
movzx edx, word [edx]
call fcn.006ba654
jmp 0x6bb39d
push ebp
call fcn.006ba9a4
pop ecx
push 0xb04
lea eax, [ebp - 0x68]
push eax
push 1
mov eax, dword [ebp - 0x24]
call fcn.0040b370
push eax
mov eax, dword [ebp - 0x14]
call fcn.00535ff0
call fcn.0052fb1c
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0xa8]
cmp ebx, 0x1fffffff
je 0x6bb3c1
mov eax, ebx
xor edx, edx
call fcn.006fc7cc
call fcn.006a2f34
mov dword [ebp - 0x10], eax
jmp 0x6bb3e7
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax + 0x24]
cmp ebx, 0x1fffffff
je 0x6bb3e2
mov eax, ebx
xor edx, edx
call fcn.006fc7cc
call fcn.006a2f34
mov dword [ebp - 0x10], eax
jmp 0x6bb3e7
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x44], 0x1fffffff
je 0x6bb431
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0xa8]
cmp ebx, 0x1fffffff
je 0x6bb41a
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
xor edx, edx
call fcn.006fc7cc
call fcn.006a2f34
cmp ebx, eax
je 0x6bb431
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x44]
xor edx, edx
call fcn.006fc7cc
call fcn.006a2f34
mov dword [ebp - 0xc], eax
jmp 0x6bb438
mov dword [ebp - 0xc], 0x1fffffff
lea ecx, [ebp - 8]
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x14]
call fcn.00765f88
test al, al
je 0x6bb79f
cmp dword [ebp - 0xc], 0x1fffffff
jne 0x6bb574
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xcc], 0
jne 0x6bb501
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xc9], 0xff
je 0x6bb501
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x24]
dec eax
test eax, eax
jl 0x6bb79f
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
dec edx
test edx, edx
jl 0x6bb4f4
inc edx
xor esi, esi
mov eax, dword [ebp - 0x20]
lea edi, [eax + esi*4]
movzx eax, byte [edi + 2]
movzx ecx, byte [edi + 1]
add ecx, ecx
add eax, ecx
movzx ecx, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
mov ecx, dword [ebp - 0x10]
mov dword [edi], ecx
movzx eax, al
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0xc9]
imul eax, ecx
shr eax, 8
mov byte [edi + 3], al
inc esi
dec edx
jne 0x6bb4b5
inc dword [ebp - 0x28]
dec dword [ebp - 0x48]
jne 0x6bb497
jmp 0x6bb79f
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x24]
dec eax
test eax, eax
jl 0x6bb79f
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
dec edx
test edx, edx
jl 0x6bb567
inc edx
xor esi, esi
mov eax, dword [ebp - 0x20]
lea edi, [eax + esi*4]
movzx eax, byte [edi + 2]
movzx ecx, byte [edi + 1]
add ecx, ecx
add eax, ecx
movzx ecx, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
mov ecx, dword [ebp - 0x10]
mov dword [edi], ecx
mov byte [edi + 3], al
inc esi
dec edx
jne 0x6bb53b
inc dword [ebp - 0x28]
dec dword [ebp - 0x48]
jne 0x6bb51d
jmp 0x6bb79f
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x24]
mov esi, eax
dec esi
movzx eax, byte [ebp - 0xc]
movzx edx, byte [ebp - 0x10]
movzx ecx, dl
sub eax, ecx
mov dword [ebp - 0x7c], eax
fild dword [ebp - 0x7c]
mov dword [ebp - 0x80], esi
fild dword [ebp - 0x80]
fdivp st(1)
fstp dword [ebp - 0x3c]
wait
movzx eax, byte [ebp - 0xb]
movzx ecx, byte [ebp - 0xf]
movzx ebx, cl
sub eax, ebx
mov dword [ebp - 0x7c], eax
fild dword [ebp - 0x7c]
mov dword [ebp - 0x80], esi
fild dword [ebp - 0x80]
fdivp st(1)
fstp dword [ebp - 0x40]
wait
movzx edi, byte [ebp - 0xa]
movzx eax, byte [ebp - 0xe]
movzx ebx, al
sub edi, ebx
mov dword [ebp - 0x7c], edi
fild dword [ebp - 0x7c]
mov dword [ebp - 0x80], esi
fild dword [ebp - 0x80]
fdivp st(1)
fstp dword [ebp - 0x44]
wait
movzx edx, dl
mov dword [ebp - 0x7c], edx
fild dword [ebp - 0x7c]
fstp dword [ebp - 0x30]
wait
movzx edx, cl
mov dword [ebp - 0x7c], edx
fild dword [ebp - 0x7c]
fstp dword [ebp - 0x34]
wait
movzx eax, al
mov dword [ebp - 0x7c], eax
fild dword [ebp - 0x7c]
fstp dword [ebp - 0x38]
wait
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xcc], 0
jne 0x6bb6ed
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xc9], 0xff
je 0x6bb6ed
test esi, esi
jl 0x6bb79f
inc esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x28], 0
fld dword [ebp - 0x30]
call fcn.0040785c
mov byte [ebp - 0x2c], al
fld dword [ebp - 0x34]
call fcn.0040785c
mov byte [ebp - 0x2b], al
fld dword [ebp - 0x38]
call fcn.0040785c
mov byte [ebp - 0x2a], al
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
dec edx
test edx, edx
jl 0x6bb6be
inc edx
xor esi, esi
mov eax, dword [ebp - 0x20]
lea edi, [eax + esi*4]
movzx eax, byte [edi + 2]
movzx ecx, byte [edi + 1]
add ecx, ecx
add eax, ecx
movzx ecx, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
test al, al
jne 0x6bb69f
xor ecx, ecx
mov dword [edi], ecx
jmp 0x6bb6a4
mov ecx, dword [ebp - 0x2c]
mov dword [edi], ecx
movzx eax, al
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0xc9]
imul eax, ecx
shr eax, 8
mov byte [edi + 3], al
inc esi
dec edx
jne 0x6bb675
fld dword [ebp - 0x30]
fadd dword [ebp - 0x3c]
fstp dword [ebp - 0x30]
wait
fld dword [ebp - 0x34]
fadd dword [ebp - 0x40]
fstp dword [ebp - 0x34]
wait
fld dword [ebp - 0x38]
fadd dword [ebp - 0x44]
fstp dword [ebp - 0x38]
wait
inc dword [ebp - 0x28]
dec dword [ebp - 0x48]
jne 0x6bb636
jmp 0x6bb79f
test esi, esi
jl 0x6bb79f
inc esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x28], 0
fld dword [ebp - 0x30]
call fcn.0040785c
mov byte [ebp - 0x2c], al
fld dword [ebp - 0x34]
call fcn.0040785c
mov byte [ebp - 0x2b], al
fld dword [ebp - 0x38]
call fcn.0040785c
mov byte [ebp - 0x2a], al
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
dec edx
test edx, edx
jl 0x6bb775
inc edx
xor esi, esi
mov eax, dword [ebp - 0x20]
lea edi, [eax + esi*4]
movzx eax, byte [edi + 2]
movzx ecx, byte [edi + 1]
add ecx, ecx
add eax, ecx
movzx ecx, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
test al, al
jne 0x6bb769
xor ecx, ecx
mov dword [edi], ecx
jmp 0x6bb76e
mov ecx, dword [ebp - 0x2c]
mov dword [edi], ecx
mov byte [edi + 3], al
inc esi
dec edx
jne 0x6bb73f
fld dword [ebp - 0x30]
fadd dword [ebp - 0x3c]
fstp dword [ebp - 0x30]
wait
fld dword [ebp - 0x34]
fadd dword [ebp - 0x40]
fstp dword [ebp - 0x34]
wait
fld dword [ebp - 0x38]
fadd dword [ebp - 0x44]
fstp dword [ebp - 0x38]
wait
inc dword [ebp - 0x28]
dec dword [ebp - 0x48]
jne 0x6bb700
push ebp
call fcn.006ba9e0
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6bb7c3
lea eax, [ebp - 0x24]
call fcn.0040a7ec
ret