Function at 0x906f404
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push 0x64
mov eax, 0x90a2fe4
call fcn.0900621d
push dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x14]
mov ebx, ecx
mov eax, dword [ebx]
mov dword [ebp - 0x68], ebx
call dword [eax + 0x64]
cmp dword [ebp + 0x10], eax
jb 0x906f43d
push 0x90d0748
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x54], 0x7061726d
call sub.MSVCR100.dll__CxxThrowException
mov ecx, ebx
mov dword [ebp - 0x6c], ebx
call fcn.0900e991
and dword [ebp - 4], 0
cmp dword [ebp + 0x10], 0
lea eax, [ebp - 0x50]
jne 0x906f61d
push str.Curves
push edi
push str._s_s
push eax
mov dword [esi], 0x73743164
call fcn.09001f91
mov eax, dword [ebx + 4]
push 0
lea ecx, [ebp - 0x50]
push ecx
push eax
call fcn.09005c51
add esp, 0x1c
cmp dword [ebp + 8], 0x73686673
mov dword [esi + 4], eax
jne 0x906f521
mov edi, dword [esi + 0x40]
test edi, edi
je 0x906f5bb
lea ecx, [ebx + 0x456]
mov dword [ebp - 0x54], pe_nt_image_headers32
mov eax, 0x4000
movzx edx, word [ecx + 0x200]
imul edx, edx, 0xff
add edx, eax
sar edx, 0xf
or bl, 0xff
sub bl, dl
mov byte [edi], bl
movzx edx, word [ecx]
imul edx, edx, 0xff
add edx, eax
sar edx, 0xf
or bl, 0xff
sub bl, dl
mov byte [edi + 1], bl
movzx edx, word [ecx - 0x200]
imul edx, edx, 0xff
add edx, eax
sar edx, 0xf
or bl, 0xff
sub bl, dl
mov byte [edi + 2], bl
movzx edx, word [ecx + 0x400]
imul edx, edx, 0xff
add edx, eax
sar edx, 0xf
or bl, 0xff
sub bl, dl
mov byte [edi + 3], bl
add edi, 4
sub ecx, 2
dec dword [ebp - 0x54]
jne 0x906f4ae
jmp 0x906f5b8
mov ecx, dword [esi + 0x40]
test ecx, ecx
je 0x906f5bb
lea edx, [ebx + 0x456]
mov dword [ebp - 0x54], pe_nt_image_headers32
mov eax, 0x4000
movzx edi, word [edx - 0x200]
imul edi, edi, 0xffff
add edi, eax
sar edi, 0xf
mov ebx, 0xffff
sub ebx, edi
mov word [ecx], bx
movzx edi, word [edx]
imul edi, edi, 0xffff
add edi, eax
sar edi, 0xf
mov ebx, 0xffff
sub ebx, edi
mov word [ecx + 2], bx
movzx edi, word [edx + 0x200]
imul edi, edi, 0xffff
add edi, eax
sar edi, 0xf
mov ebx, 0xffff
sub ebx, edi
mov word [ecx + 4], bx
movzx edi, word [edx + 0x400]
imul edi, edi, 0xffff
add edi, eax
sar edi, 0xf
mov ebx, 0xffff
sub ebx, edi
mov word [ecx + 6], bx
add ecx, 8
sub edx, 2
dec dword [ebp - 0x54]
jne 0x906f53e
mov ebx, dword [ebp - 0x68]
xor eax, eax
xor edi, edi
inc eax
cmp dword [ebp + 8], 0x73686673
mov dword [esi + 8], 0xde0
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], 0x881a
mov edx, pe_nt_image_headers32
mov dword [esi + 0x14], edx
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], 0x1908
mov dword [esi + 0x28], 0x1403
mov ecx, 0x2600
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x30], ecx
mov dword [esi + 0x38], 0x812f
jne 0x906f857
mov dword [esi + 0x44], edx
mov dword [esi + 0x48], eax
mov dword [esi + 0x50], eax
jmp 0x906f84d
push str.Table
push edi
push str._s_s
push eax
mov dword [esi], 0x73743364
call fcn.09001f91
mov eax, dword [ebx + 4]
push 0
lea ecx, [ebp - 0x50]
push ecx
push eax
call fcn.09005c51
add esp, 0x1c
cmp dword [ebp + 8], 0x73686673
mov dword [esi + 4], eax
jne 0x906f720
mov edi, dword [esi + 0x40]
test edi, edi
je 0x906f7eb
and dword [ebp - 0x58], 0
push 8
pop ebx
push 0x50
pop eax
cmp dword [ebp - 0x58], eax
jge 0x906f673
mov eax, dword [ebp - 0x58]
cdq
push 9
pop ecx
idiv ecx
mov eax, ebx
sub eax, edx
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x58]
cmp eax, 0x50
jl 0x906f68b
push 0x50
pop eax
push 9
cdq
pop ecx
idiv ecx
mov ecx, ebx
sub ecx, eax
and dword [ebp - 0x5c], 0
mov dword [ebp - 0x54], ecx
jmp 0x906f6a1
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], ebx
jl 0x906f6ab
mov edx, ebx
and dword [ebp - 0x60], 0
mov eax, ebx
sub eax, edx
imul eax, eax, 9
add eax, dword [ebp - 0x64]
imul eax, eax, 9
add eax, ecx
imul eax, eax, 3
mov edx, dword [ebp - 0x60]
cmp dword [ebp - 0x60], ebx
jl 0x906f6cb
mov edx, ebx
mov ecx, ebx
sub ecx, edx
mov edx, dword [ebp - 0x68]
lea ecx, [edx + ecx*4 + 0x858]
mov edx, dword [ecx]
mov dl, byte [eax + edx + 2]
mov byte [edi], dl
mov edx, dword [ecx]
mov dl, byte [eax + edx + 1]
mov byte [edi + 1], dl
mov ecx, dword [ecx]
mov cl, byte [eax + ecx]
mov byte [edi + 2], cl
mov byte [edi + 3], 0xff
add edi, 4
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0x10
jl 0x906f6c1
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 0x10
jl 0x906f69e
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0x80
jl 0x906f668
jmp 0x906f7e8
mov eax, dword [esi + 0x40]
test eax, eax
je 0x906f7eb
and dword [ebp - 0x58], 0
push 8
mov dword [ebp - 0x54], eax
pop ebx
mov eax, dword [ebp - 0x58]
push 0x50
pop ecx
cmp eax, ecx
jl 0x906f741
mov eax, ecx
cdq
push 9
pop edi
idiv edi
mov eax, dword [ebp - 0x58]
mov edi, ebx
sub edi, edx
mov dword [ebp - 0x70], edi
cmp eax, ecx
jl 0x906f757
mov eax, ecx
push 9
cdq
pop ecx
idiv ecx
mov ecx, ebx
sub ecx, eax
and dword [ebp - 0x60], 0
mov dword [ebp - 0x6c], ecx
jmp 0x906f770
mov edi, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x60]
cmp dword [ebp - 0x60], ebx
jl 0x906f77a
mov edx, ebx
and dword [ebp - 0x5c], 0
mov eax, ebx
sub eax, edx
imul eax, eax, 9
add eax, edi
imul eax, eax, 9
add eax, ecx
imul eax, eax, 3
mov edx, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], ebx
jl 0x906f799
mov edx, ebx
mov ecx, ebx
sub ecx, edx
mov edx, dword [ebp - 0x68]
and dword [ebp - 0x64], 0
lea ecx, [edx + ecx*4 + 0x858]
mov edx, dword [ecx]
mov edi, dword [ebp - 0x64]
add edx, eax
mov dl, byte [edx + edi]
mov edi, dword [ebp - 0x54]
inc dword [ebp - 0x54]
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 3
mov byte [edi], dl
jl 0x906f7ab
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 0x10
jl 0x906f78f
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0x10
jl 0x906f76a
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0x80
jl 0x906f735
mov ebx, dword [ebp - 0x68]
mov eax, 0x1907
mov dword [esi + 0x10], eax
mov dword [esi + 0x24], eax
push 0x10
pop ecx
mov dword [esi + 8], 0x806f
xor edi, edi
cmp dword [ebp + 8], 0x73686673
mov dword [esi + 0xc], edi
mov dword [esi + 0x14], ecx
mov dword [esi + 0x18], ecx
mov dword [esi + 0x20], edi
mov dword [esi + 0x28], 0x1401
mov eax, 0x2601
lea edx, [ecx + 0x70]
mov dword [esi + 0x1c], edx
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
mov eax, 0x812f
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x34], eax
jne 0x906f857
mov dword [esi + 0x44], ecx
mov dword [esi + 0x48], ecx
mov dword [esi + 0x4c], edx
mov dword [esi + 0x50], 1
mov dword [esi + 0x58], 0x15
mov dword [esi + 0x54], edi
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
call fcn.09001f91
call fcn.0900804d
ret 0x10