Function at 0x90619bc
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push 8
push 0xa78
mov eax, 0x90a29ac
call fcn.0909e922
mov esi, dword [ebx + 8]
mov eax, dword [esi + 4]
add eax, 0x78
mov edi, ecx
push 0
push eax
mov dword [ebp - 0xa50], edi
mov dword [ebp - 0xa54], esi
call fcn.09029bb6
cmp dword [edi], 0
pop ecx
pop ecx
jne 0x9061a0d
mov eax, dword [esi + 4]
push 0
push 0x300
push 0x3000
push eax
call fcn.09029bb6
add esp, 0x10
mov dword [edi], eax
cmp dword [edi + 4], 0
jne 0x9061a2e
mov eax, dword [esi + 4]
push 0
push 0x600
push 0x6000
push eax
call fcn.09029bb6
add esp, 0x10
mov dword [edi + 4], eax
mov ecx, esi
mov dword [ebp - 0xa60], esi
call fcn.0900e991
and dword [ebp - 4], 0
xor edx, edx
lea eax, [ebp - 0xa3c]
inc edx
mov ecx, edx
shr ecx, 1
movzx ecx, cx
mov word [eax - 2], cx
mov word [eax], cx
mov word [eax + 2], cx
add edx, 0x101
add eax, 8
cmp edx, 0x10101
jb 0x9061a48
mov ecx, dword [ebp - 0xa54]
push 0
mov esi, 0x50524742
push esi
push esi
mov edi, pe_nt_image_headers32
push edi
lea eax, [ebp - 0xa40]
push eax
push eax
call fcn.09029bb6
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0xa44]
movzx ecx, word [ebp + eax*8 - 0xa3a]
push ecx
movzx ecx, word [ebp + eax*8 - 0xa3c]
movzx eax, word [ebp + eax*8 - 0xa3e]
push ecx
push eax
call fcn.09029bb6
mov ecx, dword [ebp - 0xa44]
add esp, 0xc
inc dword [ebp - 0xa44]
mov word [ebp + ecx*2 - 0x238], ax
cmp dword [ebp - 0xa44], edi
jb 0x9061a94
lea ecx, [ebp - 0x238]
call fcn.0905f132
test al, al
jne 0x9061af3
lea ecx, [ebp - 0x238]
call fcn.0905f118
push 2
lea ecx, [ebp - 0x238]
call fcn.09029bb6
mov eax, dword [ebp - 0xa50]
xor edx, edx
add eax, 0x208
movzx ecx, word [ebp + edx*2 - 0x238]
mov word [eax - 0x200], cx
mov word [eax], cx
mov word [eax + 0x200], cx
inc edx
add eax, 2
cmp edx, edi
jb 0x9061b0d
lea eax, [ebp - 0xa40]
push eax
lea ecx, [ebp - 0x238]
call fcn.09029bb6
lea eax, [ebp - 0x34]
mov dword [ebp - 0xa48], eax
mov dword [ebp - 0xa44], 7
mov eax, dword [ebp - 0xa44]
push 0xf
pop ecx
xor edx, edx
div ecx
lea ecx, [ebp - 0xa40]
push eax
call fcn.09029bb6
mov ecx, dword [ebp - 0xa48]
add dword [ebp - 0xa44], 0x8000
add dword [ebp - 0xa48], 2
cmp dword [ebp - 0xa44], 0x80007
mov word [ecx], ax
jb 0x9061b53
and dword [ebp - 0xa5c], 0
and dword [ebp - 0xa48], 0
lea eax, [ebp - 0x34]
mov dword [ebp - 0xa58], eax
jmp 0x9061bb5
mov esi, 0x50524742
mov edi, pe_nt_image_headers32
mov eax, dword [ebp - 0xa58]
movzx eax, word [eax]
and dword [ebp - 0xa44], 0
mov dword [ebp - 0xa4c], eax
lea eax, [ebp - 0xa3c]
xor ecx, ecx
mov dx, word [ebp - 0xa4c]
mov word [eax - 2], dx
mov edx, dword [ebp - 0xa44]
movzx edx, word [ebp + edx*2 - 0x34]
mov word [eax], dx
mov dx, word [ebp + ecx*2 - 0x34]
mov word [eax + 2], dx
inc ecx
add eax, 8
cmp ecx, 0x10
jb 0x9061bd3
inc dword [ebp - 0xa44]
cmp dword [ebp - 0xa44], 0x10
jb 0x9061bd1
mov ecx, dword [ebp - 0xa54]
push 0
push esi
push esi
push edi
lea eax, [ebp - 0xa40]
push eax
push eax
call fcn.09029bb6
mov eax, dword [ebp - 0xa50]
push 1
push 0x300
push dword [ebp - 0xa48]
lea ecx, [ebp - 0xa74]
push dword [eax]
call fcn.09029bb6
lea ecx, [ebp - 0xa74]
mov byte [ebp - 4], 1
call fcn.09005145
lea edi, [ebp - 0xa40]
add eax, 2
mov dword [ebp - 0xa4c], 0x10
mov dword [ebp - 0xa44], 0x10
mov edx, dword [edi]
mov esi, dword [edi + 4]
shr edx, 0x10
imul edx, edx, 0xff
mov ecx, 0x4000
add edx, ecx
shr edx, 0xf
mov byte [eax - 2], dl
movzx edx, si
imul edx, edx, 0xff
add edx, ecx
shr edx, 0xf
mov byte [eax - 1], dl
shr esi, 0x10
mov edx, esi
imul edx, edx, 0xff
add edx, ecx
shr edx, 0xf
mov byte [eax], dl
add eax, 3
add edi, 8
dec dword [ebp - 0xa44]
jne 0x9061c71
dec dword [ebp - 0xa4c]
jne 0x9061c67
mov eax, dword [ebp - 0xa50]
push 1
mov edi, 0x600
push edi
push dword [ebp - 0xa5c]
lea ecx, [ebp - 0xa88]
push dword [eax + 4]
call fcn.09029bb6
lea ecx, [ebp - 0xa88]
mov byte [ebp - 4], 2
call fcn.09005145
lea esi, [ebp - 0xa40]
lea edx, [eax + 4]
mov dword [ebp - 0xa44], 0x10
mov dword [ebp - 0xa4c], 0x10
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov word [edx - 2], ax
shr ecx, 0x10
shr eax, 0x10
mov word [edx - 4], cx
mov word [edx], ax
add edx, 6
add esi, 8
dec dword [ebp - 0xa4c]
jne 0x9061d13
dec dword [ebp - 0xa44]
jne 0x9061d09
lea ecx, [ebp - 0xa88]
mov byte [ebp - 4], 1
call fcn.09005177
lea ecx, [ebp - 0xa74]
mov byte [ebp - 4], 0
call fcn.09005177
add dword [ebp - 0xa48], 0x300
add dword [ebp - 0xa58], 2
add dword [ebp - 0xa5c], edi
cmp dword [ebp - 0xa48], 0x3000
jb 0x9061bab
mov ecx, dword [ebp - 0xa54]
or dword [ebp - 4], 0xffffffff
call fcn.09029bb6
mov ecx, dword [ebp - 0x14]
call fcn.0909e9fd
ret 4