Function at 0x906ea90
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push 0x68
mov eax, 0x90a9c47
call fcn.09007236
mov ebx, ecx
mov eax, dword [ebp + 0xc]
push dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x54], eax
mov eax, dword [ebx]
mov dword [ebp - 0x64], edi
mov esi, dword [eax + 0x64]
mov ecx, esi
call dword [0x90ac2d4]
mov ecx, ebx
call esi
cmp dword [ebp + 0x10], eax
jae 0x906ee62
mov ecx, ebx
mov dword [ebp - 0x74], ebx
call fcn.0901658c
and dword [ebp - 4], 0
lea eax, [ebp - 0x50]
cmp dword [ebp + 0x10], 0
jne 0x906ec49
push str.Curves
push dword [ebp - 0x54]
mov dword [edi], 0x73743164
push str._s_s
push eax
call fcn.0909b970
push 0
lea eax, [ebp - 0x50]
push eax
push dword [ebx + 4]
call fcn.09006785
mov ecx, dword [edi + 0x40]
add esp, 0x1c
cmp dword [ebp + 8], 0x73686673
mov dword [edi + 4], eax
jne 0x906eb97
test ecx, ecx
je 0x906ec14
lea esi, [ebx + 0x46e]
mov edi, 0x100
mov edx, 0x4000
movzx eax, word [esi + 0x200]
imul eax, eax, 0xff
add eax, edx
shr eax, 0xf
not al
mov byte [ecx], al
lea ecx, [ecx + 4]
movzx eax, word [esi]
lea esi, [esi - 2]
imul eax, eax, 0xff
add eax, edx
shr eax, 0xf
not al
mov byte [ecx - 3], al
movzx eax, word [esi - 0x1fe]
imul eax, eax, 0xff
add eax, edx
shr eax, 0xf
not al
mov byte [ecx - 2], al
movzx eax, word [esi + 0x402]
imul eax, eax, 0xff
add eax, edx
shr eax, 0xf
not al
mov byte [ecx - 1], al
sub edi, 1
jne 0x906eb33
jmp 0x906ec11
test ecx, ecx
je 0x906ec14
lea esi, [ebx + 0x46e]
mov edi, 0x100
mov edx, 0x4000
movzx eax, word [esi - 0x200]
imul eax, eax, 0xffff
add eax, edx
sar eax, 0xf
not eax
mov word [ecx], ax
lea ecx, [ecx + 8]
movzx eax, word [esi]
lea esi, [esi - 2]
imul eax, eax, 0xffff
add eax, edx
sar eax, 0xf
not eax
mov word [ecx - 6], ax
movzx eax, word [esi + 0x202]
imul eax, eax, 0xffff
add eax, edx
sar eax, 0xf
not eax
mov word [ecx - 4], ax
movzx eax, word [esi + 0x402]
imul eax, eax, 0xffff
add eax, edx
sar eax, 0xf
not eax
mov word [ecx - 2], ax
sub edi, 1
jne 0x906ebab
mov edi, dword [ebp - 0x64]
push 0x881a
push 0
xor esi, esi
inc esi
push esi
push 0x100
push edi
call fcn.0909b970
add esp, 0x14
cmp dword [ebp + 8], 0x73686673
jne 0x906ee50
mov dword [edi + 0x44], 0x100
mov dword [edi + 0x48], esi
jmp 0x906ee42
push str.Table
push dword [ebp - 0x54]
mov dword [edi], 0x73743364
push str._s_s
push eax
call fcn.0909b970
push 0
lea eax, [ebp - 0x50]
push eax
push dword [ebx + 4]
call fcn.09006785
mov esi, dword [edi + 0x40]
add esp, 0x1c
cmp dword [ebp + 8], 0x73686673
mov dword [edi + 4], eax
jne 0x906ed50
test esi, esi
je 0x906ee0c
xor edi, edi
mov dword [ebp - 0x60], edi
push 0x50
pop ecx
cmp edi, ecx
push 9
cmovl ecx, edi
pop edi
mov eax, ecx
cdq
idiv edi
push 8
pop eax
sub eax, edx
mov dword [ebp - 0x68], eax
mov eax, ecx
cdq
idiv edi
push 8
pop edx
mov ecx, edx
sub ecx, eax
xor edi, edi
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x5c], edi
cmp edi, edx
mov ecx, edx
mov eax, edx
cmovl ecx, edi
xor edi, edi
sub eax, ecx
mov dword [ebp - 0x58], edi
imul eax, eax, 9
add eax, dword [ebp - 0x68]
imul eax, eax, 9
add eax, dword [ebp - 0x6c]
imul eax, eax, 3
mov dword [ebp - 0x54], eax
cmp edi, edx
mov eax, edx
mov ecx, edx
cmovl eax, edi
mov edi, dword [ebp - 0x54]
sub ecx, eax
mov eax, dword [ebx + ecx*4 + 0x870]
mov al, byte [edi + eax + 2]
mov byte [esi], al
mov eax, dword [ebx + ecx*4 + 0x870]
mov al, byte [edi + eax + 1]
mov byte [esi + 1], al
mov eax, dword [ebx + ecx*4 + 0x870]
mov ecx, edi
mov edi, dword [ebp - 0x58]
mov al, byte [ecx + eax]
mov byte [esi + 2], al
mov byte [esi + 3], 0xff
add esi, 4
inc edi
mov dword [ebp - 0x58], edi
cmp edi, 0x10
jl 0x906ece1
mov edi, dword [ebp - 0x5c]
inc edi
mov dword [ebp - 0x5c], edi
cmp edi, 0x10
jl 0x906ecbf
mov edi, dword [ebp - 0x60]
inc edi
mov dword [ebp - 0x60], edi
cmp edi, 0x80
jl 0x906ec93
jmp 0x906ee09
test esi, esi
je 0x906ee0c
xor edi, edi
mov dword [ebp - 0x58], edi
push 0x50
pop ecx
cmp edi, ecx
push 9
cmovl ecx, edi
pop edi
mov eax, ecx
cdq
idiv edi
push 8
pop eax
sub eax, edx
mov dword [ebp - 0x6c], eax
mov eax, ecx
push 0xfffffffffffffff7
cdq
pop ecx
idiv ecx
xor edi, edi
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x5c], edi
push 8
pop edx
cmp edi, edx
push 8
cmovl edx, edi
pop ecx
sub ecx, edx
xor edx, edx
imul eax, ecx, 9
mov ecx, dword [ebp - 0x68]
add ecx, 8
mov dword [ebp - 0x60], edx
add eax, dword [ebp - 0x6c]
imul eax, eax, 9
add eax, ecx
imul eax, eax, 3
mov dword [ebp - 0x70], eax
push 8
pop eax
cmp edx, eax
push 8
cmovl eax, edx
pop ecx
sub ecx, eax
xor edi, edi
mov dword [ebp - 0x54], ecx
mov edx, ecx
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebx + edx*4 + 0x870]
add ecx, edi
mov al, byte [ecx + eax]
mov byte [esi], al
inc esi
inc edi
cmp edi, 3
jl 0x906edc2
mov edx, dword [ebp - 0x60]
mov byte [esi], 0
inc esi
inc edx
mov dword [ebp - 0x60], edx
cmp edx, 0x10
jl 0x906edae
mov edi, dword [ebp - 0x5c]
inc edi
mov dword [ebp - 0x5c], edi
cmp edi, 0x10
jl 0x906ed85
mov edi, dword [ebp - 0x58]
inc edi
mov dword [ebp - 0x58], edi
cmp edi, 0x80
jl 0x906ed5d
mov edi, dword [ebp - 0x64]
push 0x1907
xor esi, esi
inc esi
push esi
push 0
push 0x80
push 0x10
push 0x10
push edi
call fcn.0909b970
add esp, 0x1c
cmp dword [ebp + 8], 0x73686673
jne 0x906ee50
push 0x10
pop eax
mov dword [edi + 0x44], eax
mov dword [edi + 0x48], eax
mov dword [edi + 0x4c], 0x80
mov dword [edi + 0x58], 0x15
and dword [edi + 0x54], 0
mov dword [edi + 0x50], esi
mov ecx, ebx
mov dword [ebp - 4], esi
call fcn.09016859
call fcn.09008fc6
ret 0x10
push 0x7061726d
call fcn.0909b970
int3