Function at 0x9059a5c
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x90a8e36
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x14e4
call fcn.090a4f00
mov eax, dword [0x90e460c]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebx + 0xc]
and dword [ebp - 0x14b8], 0
and dword [ebp - 4], 0
mov esi, dword [ebx + 8]
cmp dword [eax + 0x38], 0x52474220
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
mov dword [ebp - 0x14a8], esi
mov dword [ebp - 0x14c8], eax
mov dword [ebp - 0x149c], ecx
mov dword [ebp - 0x1484], edx
jne 0x905a577
cmp dword [ecx + 0x38], 0x434d594b
jne 0x905a577
mov edi, dword [eax + 4]
mov dword [ebp - 0x14a4], edi
lea eax, [edi + 8]
push eax
push 0x3eb8
mov dword [ebp - 0x14c0], eax
call fcn.09029284
pop ecx
pop ecx
mov dword [ebp - 0x14bc], eax
mov byte [ebp - 4], 1
test eax, eax
je 0x9059b37
push 0
push 0
push 0
push 0x434d594b
push 0x52474220
push edi
mov ecx, eax
call fcn.09029284
mov edi, eax
jmp 0x9059b39
xor edi, edi
mov al, byte [esi + 0x3e84]
lea ecx, [ebp - 0x1480]
mov byte [edi + 0x3e84], al
mov al, byte [esi + 0x3ea0]
mov byte [edi + 0x3ea0], al
mov dword [edi + 0x3ea1], 0x1000000
mov al, byte [esi + 0x4c]
mov byte [edi + 0x4c], al
mov al, byte [esi + 0x3ea5]
mov byte [edi + 0x3ea5], al
mov ax, word [esi + 0x3ea8]
mov word [edi + 0x3ea8], ax
mov ax, word [esi + 0x3eaa]
mov esi, dword [ebp - 0x14a4]
push 0x46308
push esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x14b8], edi
mov word [edi + 0x3eaa], ax
call fcn.09029284
mov eax, dword [ebp - 0x1480]
push esi
mov byte [ebp - 4], 2
mov dword [ebp - 0x1488], eax
call fcn.09029284
pop ecx
push eax
lea ecx, [ebp - 0x14a0]
call fcn.09029284
push 0x46308
push esi
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 3
call fcn.09029284
mov eax, dword [ebp - 0x338]
xor ecx, ecx
movsd xmm1, qword [0x90bce18]
mov edx, ecx
movsd xmm3, qword [0x90bdc18]
movsd xmm2, qword [0x90b2760]
mov byte [ebp - 4], 4
mov dword [ebp - 0x14c0], eax
mov dword [ebp - 0x148c], eax
movsd qword [ebp - 0x14d0], xmm1
movd xmm0, edx
mov eax, edx
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp - 0x1498], ecx
addsd xmm0, qword [eax*8 + 0x90bcf90]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [ebp - 0x14c4], eax
mov eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp - 0x1490], ecx
addsd xmm0, qword [eax*8 + 0x90bcf90]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [ebp - 0x14bc], eax
mov esi, dword [ebp - 0x148c]
mov eax, dword [ebp - 0x14c4]
add dword [ebp - 0x148c], 8
mov word [esi + 2], ax
mov eax, dword [ebp - 0x14bc]
mov word [esi + 4], ax
mov eax, dword [ebp - 0x1490]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x90bcf90]
mulsd xmm0, xmm1
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov word [esi + 6], ax
mov eax, dword [ebp - 0x1490]
mov esi, dword [ebp - 0x14a4]
inc eax
mov dword [ebp - 0x1490], eax
cmp eax, 0x21
jb 0x9059c80
mov eax, dword [ebp - 0x1498]
inc eax
mov dword [ebp - 0x1498], eax
cmp eax, 0x21
jb 0x9059c50
inc edx
cmp edx, 0x21
jb 0x9059c1c
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push dword [ebp - 0x1484]
push dword [ebp - 0x14a0]
push dword [ebp - 0x14c8]
call fcn.09008007
add esp, 0x3c
lea ecx, [ebp - 0x1494]
push eax
call fcn.09029284
mov ecx, dword [ebp - 0x1494]
push 0
push 0x5058595a
push 0x50524742
push 0x8c61
push dword [ebp - 0x1488]
mov byte [ebp - 4], 5
push dword [ebp - 0x14c0]
call fcn.09029284
lea ecx, [ebp - 0x1494]
call fcn.09029284
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 3
call fcn.09029284
xor eax, eax
push eax
push eax
push eax
push 1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x1484]
push dword [ebp - 0x14a0]
push dword [ebp - 0x149c]
call fcn.09008007
add esp, 0x3c
lea ecx, [ebp - 0x1494]
push eax
call fcn.09029284
mov byte [ebp - 4], 6
xor ecx, ecx
mov eax, 0x8000
mov edx, 0x100
mov word [ebp + ecx*8 - 0xb6c], ax
mov eax, ecx
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mov dword [ebp + ecx*8 - 0xb70], 0x80008000
addsd xmm0, qword [eax*8 + 0x90bcf90]
mulsd xmm0, qword [0x90bce18]
divsd xmm0, qword [0x90b2770]
addsd xmm0, qword [0x90b2760]
cvttsd2si eax, xmm0
mov word [ebp + ecx*8 - 0xb6a], ax
inc ecx
mov eax, 0x8000
cmp ecx, edx
jb 0x9059dc4
mov ecx, dword [ebp - 0x1494]
lea eax, [ebp - 0x1370]
push 0
push 0x5058595a
push 0x434d594b
push edx
push eax
lea eax, [ebp - 0xb70]
push eax
call fcn.09029284
xor ecx, ecx
mov ax, word [ebp + ecx*8 - 0x136c]
mov word [ebp + ecx*2 - 0x220], ax
inc ecx
cmp ecx, 0x100
jb 0x9059e43
lea ecx, [ebp - 0x1494]
mov byte [ebp - 4], 3
call fcn.09029284
mov ax, word [ebp - 0x220]
cmp ax, word [ebp - 0x22]
jb 0x9059e9c
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x90ac2d4]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0x14a8]
call fcn.0900637a
mov edi, eax
jmp 0x905a535
push 0x46308
mov ecx, esi
call fcn.09029284
movzx ecx, word [ebp - 0x220]
mov esi, eax
movsd xmm2, qword [0x90b2768]
movaps xmm3, xmm2
mov dword [ebp - 0x1498], esi
mov dword [ebp - 0x1490], 0x21
movd xmm0, ecx
mov ecx, dword [ebp - 0x1488]
mov edx, ecx
cvtdq2pd xmm0, xmm0
movzx eax, word [ecx + 4]
mulsd xmm0, qword [0x90bca88]
subsd xmm3, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x90bca88]
subsd xmm2, xmm0
divsd xmm3, xmm2
movsd xmm2, qword [ebp - 0x14d0]
mov dword [ebp - 0x148c], 0x21
mov dword [ebp - 0x1494], 0x21
movzx eax, word [edx + 2]
mov ecx, 0x8000
sub ecx, eax
movaps xmm0, xmm2
movd xmm1, ecx
mov ecx, 0x8000
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
movaps xmm0, xmm2
mov word [edx + 2], ax
movzx eax, word [edx + 4]
sub ecx, eax
movd xmm1, ecx
mov ecx, 0x8000
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
movaps xmm0, xmm2
mov word [edx + 4], ax
movzx eax, word [edx + 6]
sub ecx, eax
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm3
subsd xmm0, xmm1
cvttsd2si eax, xmm0
mov word [edx + 6], ax
add edx, 8
sub dword [ebp - 0x1494], 1
jne 0x9059f20
sub dword [ebp - 0x148c], 1
jne 0x9059f16
sub dword [ebp - 0x1490], 1
jne 0x9059f0c
xor eax, eax
push eax
push eax
push eax
push 1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x1484]
push dword [ebp - 0x149c]
push dword [ebp - 0x14a0]
call fcn.09008007
add esp, 0x3c
lea ecx, [ebp - 0x1484]
push eax
call fcn.09029284
mov ecx, dword [ebp - 0x1484]
push 0
push 0x434d594b
push 0x5058595a
push 0x8c61
push esi
push dword [ebp - 0x1488]
mov byte [ebp - 4], 7
call fcn.09029284
mov ecx, dword [ebp - 0x1484]
xor eax, eax
push eax
push 0x434d594b
push 0x5058595a
mov dword [ebp - 0x14aa], eax
mov word [ebp - 0x14a6], ax
lea eax, [ebp - 0x14d0]
push 1
push eax
lea eax, [ebp - 0x14ac]
push eax
call fcn.09029284
lea ecx, [ebp - 0x1484]
mov byte [ebp - 4], 3
call fcn.09029284
xor ecx, ecx
movzx eax, word [esi + ecx*2]
imul eax, eax, 0xffff
sar eax, 0xf
not eax
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, 0x23184
jb 0x905a05a
mov ecx, dword [ebp - 0x1488]
lea edx, [ebp - 0x36e]
movss xmm4, dword [0x90bce30]
add esi, 6
sub ecx, dword [ebp - 0x1498]
mov dword [ebp - 0x1494], edx
mov dword [ebp - 0x1488], ecx
mov dword [ebp - 0x148c], 0x21
mov dword [ebp - 0x1484], 0xff
mov ax, word [esi - 6]
mov word [edx - 2], ax
mov ax, word [esi - 4]
mov word [edx], ax
mov ax, word [esi - 2]
mov word [edx + 2], ax
mov ax, word [esi]
mov word [edx + 4], ax
xor eax, eax
mov dword [esi - 6], eax
xor edx, edx
mov dword [esi - 2], 0xffff0000
movzx eax, word [esi + ecx - 2]
movzx ecx, word [ebp + edx*2 - 0x220]
mov dword [ebp - 0x149c], ecx
cmp ax, cx
mov ecx, dword [ebp - 0x1488]
jb 0x905a1b4
cmp ax, word [ebp - 0x149c]
je 0x905a196
jbe 0x905a123
movzx ecx, word [ebp + edx*2 - 0x21e]
cmp ax, cx
mov ecx, dword [ebp - 0x1488]
jb 0x905a136
cmp edx, 0xfe
je 0x905a192
inc edx
cmp edx, dword [ebp - 0x1484]
jb 0x905a0e4
jmp 0x905a1b4
movzx ecx, word [ebp + edx*2 - 0x220]
sub eax, ecx
movd xmm1, eax
movzx eax, word [ebp + edx*2 - 0x21e]
sub eax, ecx
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [ebp - 0x1484]
cvtdq2ps xmm0, xmm0
sub eax, edx
divss xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x90bcf90]
cvtpd2ps xmm0, xmm0
subss xmm0, xmm1
mulss xmm0, xmm4
divss xmm0, dword [0x90bdd5c]
cvttss2si eax, xmm0
jmp 0x905a1ab
xor eax, eax
jmp 0x905a1b1
imul ecx, edx, 0xffff
mov eax, 0xfeff01
xor edx, edx
sub eax, ecx
div dword [ebp - 0x1484]
mov ecx, dword [ebp - 0x1488]
mov word [esi], ax
mov edx, dword [ebp - 0x1494]
mov ax, word [esi]
add esi, 0x2318
mov word [edx + 6], ax
add edx, 0xa
sub dword [ebp - 0x148c], 1
mov dword [ebp - 0x1494], edx
jne 0x905a0b3
movss xmm2, dword [0x90bcac8]
mov esi, 0x4620
mov edx, dword [ebp - 0x1498]
push 0x10
pop ecx
mov eax, ecx
movss dword [ebp - 0x148c], xmm2
mov dword [ebp - 0x1484], eax
add eax, esi
mov dword [ebp - 0x14a8], 0xe665
movzx eax, word [edx + eax*8 + 4]
cmp ax, word [ebp - 0x14a8]
jae 0x905a243
mov eax, dword [ebp - 0x1484]
inc ecx
add esi, 0x462
dec eax
mov dword [ebp - 0x1484], eax
cmp esi, 0x90a2
jb 0x905a203
movss xmm3, dword [0x90bdb80]
jmp 0x905a284
sub ecx, dword [ebp - 0x1484]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm3, dword [0x90bdb80]
divss xmm2, xmm4
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x90bcf90]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm3
divss xmm2, xmm0
movss dword [ebp - 0x148c], xmm2
xor esi, esi
mov dword [ebp - 0x1484], esi
xor eax, eax
mov dword [ebp - 0x1488], eax
xor edx, edx
mov dword [ebp - 0x1490], edx
cmp esi, eax
jne 0x905a2a8
cmp esi, edx
je 0x905a4b5
cmp dword [ebp - 0x1488], edx
mov ecx, dword [ebp - 0x1498]
cmovl eax, edx
mov edx, esi
cmp esi, eax
cmovl edx, eax
imul eax, esi, 0x21
and dword [ebp - 0x14d8], 0
and dword [ebp - 0x14d4], 0
and dword [ebp - 0x14d0], 0
add eax, dword [ebp - 0x1488]
imul esi, eax, 0x21
add esi, dword [ebp - 0x1490]
movzx eax, word [ecx + esi*8]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 2]
divss xmm0, xmm4
movss dword [ebp - 0x14e8], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 4]
divss xmm0, xmm4
movss dword [ebp - 0x14e4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx + esi*8 + 6]
imul ecx, edx, 0xa
divss xmm0, xmm4
movss dword [ebp - 0x14e0], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x370]
divss xmm0, xmm4
movss dword [ebp - 0x14dc], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36e]
divss xmm0, xmm4
movss dword [ebp - 0x14b4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36c]
divss xmm0, xmm4
movss dword [ebp - 0x14b0], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x36a]
divss xmm0, xmm4
movss dword [ebp - 0x14ac], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [ebp + ecx - 0x368]
mov ecx, dword [ebp - 0x1490]
cmp dword [ebp - 0x1488], ecx
divss xmm0, xmm4
movss dword [ebp - 0x14a8], xmm0
movd xmm0, eax
mov eax, ecx
cmovl eax, dword [ebp - 0x1488]
cvtdq2ps xmm0, xmm0
mov ecx, dword [ebp - 0x1484]
cmp ecx, eax
cmovl eax, ecx
sub edx, eax
lea eax, [ebp - 0x14f8]
push eax
divss xmm0, xmm4
lea eax, [ebp - 0x14d8]
push eax
lea eax, [ebp - 0x14b4]
movss dword [ebp - 0x14cc], xmm0
movd xmm0, edx
cvtdq2pd xmm0, xmm0
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x90bcf90]
cvtpd2ps xmm1, xmm0
xorps xmm0, xmm0
mulss xmm1, xmm3
movups xmmword [ebp - 0x14f8], xmm0
mulss xmm1, xmm2
push eax
push ecx
lea eax, [ebp - 0x14e8]
movss dword [esp], xmm1
push eax
call fcn.09029284
movups xmm1, xmmword [ebp - 0x14f8]
add esp, 0x14
mov ecx, dword [ebp - 0x1498]
movss xmm4, dword [0x90bce30]
movaps xmm0, xmm1
mov edx, dword [ebp - 0x1490]
mulss xmm0, xmm4
cvttss2si eax, xmm0
movaps xmm0, xmm1
shufps xmm0, xmm1, 0x55
mulss xmm0, xmm4
mov word [ecx + esi*8], ax
cvttss2si eax, xmm0
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xaa
mulss xmm0, xmm4
mov word [ecx + esi*8 + 2], ax
shufps xmm1, xmm1, 0xff
mulss xmm1, xmm4
cvttss2si eax, xmm0
mov word [ecx + esi*8 + 4], ax
cvttss2si eax, xmm1
mov word [ecx + esi*8 + 6], ax
mov esi, dword [ebp - 0x1484]
mov eax, dword [ebp - 0x1488]
jmp 0x905a4bb
mov ecx, dword [ebp - 0x1498]
movss xmm2, dword [ebp - 0x148c]
inc edx
movss xmm3, dword [0x90bdb80]
mov dword [ebp - 0x1490], edx
cmp edx, 0x21
jb 0x905a29c
inc eax
mov dword [ebp - 0x1488], eax
cmp eax, 0x21
jb 0x905a294
inc esi
mov dword [ebp - 0x1484], esi
cmp esi, 0x21
jb 0x905a28c
mov esi, dword [ebp - 0x14a4]
push 0x434d594b
push 0x52474220
push 0x21
push ecx
push esi
call fcn.0905918d
add esp, 0x14
mov dword [edi + 0x68], eax
mov ecx, edi
call fcn.09029284
mov ecx, edi
call fcn.09029284
push dword [ebp - 0x1498]
mov ecx, esi
call fcn.09029284
lea ecx, [ebp - 0x14a0]
call fcn.09029284
lea ecx, [ebp - 0x1480]
call fcn.09029284
mov eax, edi
jmp 0x905a582
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.0900637a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.09001fa0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret