Function at 0x414f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x28
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov esi, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [eax + esi + 2], 0
lea esi, [esi + 2]
jne 0x414f80
mov edi, dword [ecx + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0x414fa0
sar esi, 1
sar eax, 1
lea ecx, [esi + eax]
add ecx, 2
test ecx, ecx
jns 0x414fc0
mov eax, 0xffffffff
jmp 0x414fc7
add eax, esi
add eax, eax
add eax, 4
push eax
call fcn.00408d80
add esp, 4
mov ebx, eax
movzx ecx, word [edi]
test cx, cx
je 0x414ff1
add edi, 2
mov eax, ebx
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x414fe0
mov word [eax], 0x5c
add eax, 2
mov edx, dword [ebp + 0x10]
movzx ecx, word [edx]
test cx, cx
je 0x415021
add edx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x415010
mov word [eax], 0
lea eax, [esp + 0xc]
push 0x60
push 3
push 0x120089
push eax
push ebx
call fcn.00438c30
add esp, 0x14
not eax
shr eax, 0x1f
mov eax, dword [eax*4 + 0x440530]
mov ecx, 0xeeba600e
xor ecx, dword [0x440538]
add eax, ecx
inc eax
jmp eax
xor ecx, ecx
cmp esi, ebx
setne cl
xor eax, eax
jmp dword [ecx*4 + 0x442818]
movzx ecx, word [ebx]
test cx, cx
mov dword [esp + 0x10], ebx
je 0x420431
xor eax, eax
mov edx, ebx
jmp 0x4203fe
xor edx, edx
cmp eax, 4
sete dl
mov eax, 0x20119
xor ecx, ecx
jmp dword [edx*4 + 0x4427f8]
jmp dword [ecx*4 + 0x442758]
pop ss
mov dword [esp + 0x80], 0xbbe094e
add byte [eax], al
add byte [esi + 9], cl
mov esi, 0x2484c70b
test byte [eax], al
add byte [eax], al
mov ebx, 0xc70f4f0d
test byte [eax + ecx*4], ah
add byte [eax], al
add byte [edx - 0x38fcb8ff], dh
test byte [esp + ecx*4], ah
add byte [eax], al
add byte [eax - 0x38f844fb], ch
test byte [eax + edx*4], ah
add byte [eax], al
add byte [eax], al
loope 0x41fd5b
fnstcw word [ebx - 0x39]
test byte [esp + edx*4], ah
add byte [eax], al
add dh, ch
jge 0x41fccf
jg 0x41fcb7
test byte [eax + ebx*4], ah
add byte [eax], al
add bl, ah
jno 0x41fce6
jae 0x41fcc2
test byte [esp + ebx*4], ah
add byte [eax], al
add dl, dl
jne 0x41fce6
ja 0x41fccd
test byte [eax], ah
add byte [eax], al
add ah, al
imul ebx, ebp, 0x2484c76b
movsb byte es:[edi], byte [esi]
add byte [eax], al
add ch, dh
insd dword es:[edi], dx
invalid
outsd dx, dword [esi]
mov dword [esp + 0xa8], 0x63fd61c4
mov dword [esp + 0xac], 0x67f565f3
mov dword [esp + 0xb0], 0x5b1959f4
mov dword [esp + 0xb4], 0x5fcc5dc9
mov dword [esp + 0xb8], 0x53f751c2
mov dword [esp + 0xbc], 0x57c255ca
mov dword [esp + 0xc0], 0x4bef49fe
mov dword [esp + 0xc4], 0x4fdd4dde
mov dword [esp + 0xc8], 0x43dd41d9
mov dword [esp + 0xcc], 0x47ea45da
mov dword [esp + 0xd0], 0xbb24b90d
mov dword [esp + 0xd4], 0xbf20bd25
mov dword [esp + 0xd8], 0xb326b123
mov dword [esp + 0xdc], 0xb72ab515
mov dword [esp + 0xe0], 0xabaaa934
mov dword [esp + 0xe8], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 0x93
ja 0x41fe34
add byte [eax], al
add byte [esi + 9], cl
mov esi, 0x2484c70b
test byte [eax], al
add byte [eax], al
mov ebx, 0xc70f4f0d
or eax, edi
test byte [esp + eax*4], ah
add byte [eax], al
add byte [ebx - 0x38f0b0f3], bh
invalid
test byte [eax + ecx*4], ah
add byte [eax], al
add byte [edx - 0x38fcb8ff], dh
add eax, edi
test byte [esp + ecx*4], ah
add byte [eax], al
add byte [eax - 0x38f844fb], ch
test byte [eax + edx*4], ah
add byte [eax], al
add byte [eax], al
loope 0x41fd5b
invalid
add byte [eax], al
loope 0x41fd5b
fnstcw word [ebx - 0x39]
jnp 0x41fcac
test byte [esp + edx*4], ah
and al, 0x94
add byte [eax], al
add dh, ch
jge 0x41fccf
jg 0x41fcb7
test byte [eax + ebx*4], ah
add byte [eax], al
add bl, ah
jno 0x41fce6
jae 0x41fcc2
test byte [esp + ebx*4], ah
add byte [eax], al
add dl, dl
jne 0x41fce6
ja 0x41fccd
test byte [eax], ah
add byte [eax], al
add ah, al
imul ebx, ebp, 0x2484c76b
movsb byte es:[edi], byte [esi]
add byte [eax], al
add ch, dh
insd dword es:[edi], dx
invalid
ret 0xc757
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x58]
lea edi, [ecx + 0x88]
and edi, edx
add ecx, edx
add edi, edi
sub ecx, edi
add ecx, 0xc7471988
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x28]
add cl, 0x48
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x58], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 0x94
jb 0x41fdf0
lea ecx, [esp + 0x14]
lea edx, [esp + 0x58]
push 0
push 0
push eax
push ecx
push edx
call fcn.00439450
add esp, 0x14
shr eax, 0x1f
jmp dword [eax*4 + 0x442770]
lea eax, [esp + 0x54]
lea ecx, [esp + 0x18]
push 0
push 0
push 0
push 0
push eax
push ecx
push 0
push 0
push dword [esp + 0x34]
call fcn.00439860
add esp, 0x24
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x442778]
mov eax, dword [esp + 0x18]
mov ecx, eax
shl ecx, 9
lea eax, [ecx + eax*8]
mov esi, dword [esp + 0xc]
add eax, esi
push eax
push ebx
call fcn.00436150
add esp, 8
mov dword [esp + 0x10], eax
lea esi, [eax + esi*2]
xor ebx, ebx
xor eax, eax
cmp ebx, dword [esp + 0x18]
setb al
jmp dword [eax*4 + 0x442780]
inc ebx
xor eax, eax
cmp ebx, dword [esp + 0x18]
setb al
jmp dword [eax*4 + 0x442780]
mov edi, dword [esp + 0x54]
mov eax, edi
inc eax
jns 0x41fef0
mov eax, 0xffffffff
jmp 0x41fef6
lea eax, [edi + edi]
add eax, 2
push eax
call fcn.00408d80
add esp, 4
mov dword [esp + 0x50], edi
mov edi, eax
lea eax, [esp + 0x50]
push eax
push edi
push ebx
push dword [esp + 0x20]
call fcn.00439590
add esp, 0x10
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x442798]
jmp dword [0x4427b0]
lea eax, [esp + 0x24]
push dword [esp + 0x14]
push 0
push 0x20019
push eax
push edi
call fcn.00439450
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4427a0]
jmp dword [0x4427b0]
mov dword [esp + 0x4c], 0x800
mov dword [esp + 0x28], 0x8beb85c2
mov dword [esp + 0x2c], 0x8f18891f
mov dword [esp + 0x30], 0xb3eb8de2
mov dword [esp + 0x34], 0xb7c2b12d
mov dword [esp + 0x38], 0xbb27b5d1
mov dword [esp + 0x3c], 0xbfb8b9d1
lea eax, [esp + 0x40]
mov dword [eax + 3], 0
mov dword [eax], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x1e
ja 0x420000
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x28]
lea edx, [eax + ecx]
add edx, 0xa4b87e95
add eax, 0xa4b87e95
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 4], edx
mov eax, dword [esp + 4]
add al, 0xed
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x1f
jb 0x41ffc0
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x28]
push eax
lea eax, [esp + 0x5c]
push eax
push 0
push ecx
push dword [esp + 0x34]
call fcn.00439ec0
add esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp + 0xc], edi
jmp dword [eax*4 + 0x4427a8]
jmp 0x420059
movzx eax, word [esp + 0x58]
test ax, ax
je 0x420051
lea ecx, [esp + 0x5a]
nop
nop
nop
mov word [esi], ax
add esi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x420040
mov word [esi], 0xa
add esi, 2
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], 0xead5d4d7
lea eax, [esp + 0x40]
mov byte [eax - 0x10], 0
mov dword [eax - 0x14], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 8
ja 0x4200ce
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x28]
lea edx, [eax + ecx]
add eax, 0x5d
and eax, ecx
add eax, eax
sub edx, eax
add edx, 0xdee99c5d
mov dword [esp + 4], edx
mov eax, dword [esp + 4]
add al, 0x75
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 9
jb 0x420090
mov ecx, dword [0x44826c]
test ecx, ecx
je 0x420120
mov edx, dword [esp + 0x28]
xor edi, edi
mov eax, dword [0x448270]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [eax + edi*8], 0x11081610
je 0x420100
inc edi
cmp ecx, edi
jne 0x4200f0
jmp 0x420120
mov eax, dword [eax + edi*8 + 4]
cmp eax, edx
je 0x420120
push dword [esp + 0x1c]
push 1
push dword [0x448274]
push eax
call fcn.00436280
add esp, 0x10
nop
nop
nop
mov edi, dword [esp + 0xc]
jmp dword [0x4427b0]
push edi
call fcn.00408d90
add esp, 4
inc ebx
xor eax, eax
cmp ebx, dword [esp + 0x18]
setb al
jmp dword [eax*4 + 0x442780]
mov eax, dword [case.0x41fe4e.9]
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov ebx, dword [esp + 0x10]
jmp dword [0x4427b8]
mov word [esi], 0
mov eax, esi
sub eax, ebx
sar eax, 1
mov dword [esp + 0xc], eax
jmp dword [0x4427c0]
mov word [esi], 0
mov word [esi], 0
mov eax, esi
sub eax, ebx
sar eax, 1
mov dword [esp + 0xc], eax
jmp dword [0x4427c0]
mov dword [esp + 0x10], ebx
jmp dword [0x4427cc]
mov eax, 4
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x4427f0]
xor eax, eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x4427f0]
cmp dword [edi + ebx*8], 0x11081610
je 0x420200
inc ebx
cmp ecx, ebx
jne 0x4201f0
jmp case.0x420026.9
mov ecx, dword [edi + ebx*8 + 4]
cmp ecx, edx
je case.0x420026.9
push eax
push 1
push dword [0x448274]
push ecx
call fcn.00436280
add esp, 0x10
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x14]
mov dword [esp + 0x58], 0xead5d4d7
lea ecx, [esp + 0x5c]
mov byte [ecx + 4], 0
mov dword [ecx], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 8
ja 0x42028f
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x58]
lea edi, [ecx + edx]
add ecx, 0x5d
and ecx, edx
add ecx, ecx
sub edi, ecx
add edi, 0xdee99c5d
mov dword [esp + 0x28], edi
mov ecx, dword [esp + 0x28]
add cl, 0x75
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x58], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 9
jb 0x420250
mov ecx, dword [0x44826c]
test ecx, ecx
je 0x4202e0
mov edx, dword [esp + 0x58]
xor ebx, ebx
mov edi, dword [0x448270]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + ebx*8], 0x11081610
je 0x4202c0
inc ebx
cmp ecx, ebx
jne 0x4202b0
jmp 0x4202e0
mov ecx, dword [edi + ebx*8 + 4]
cmp ecx, edx
je 0x4202e0
push eax
push 1
push dword [0x448274]
push ecx
call fcn.00436280
add esp, 0x10
nop
nop
nop
nop
nop
nop
jmp dword [0x4427d0]
lea eax, [esp + 0x58]
push eax
call fcn.00438a10
add esp, 4
movzx eax, al
jmp dword [eax*4 + 0x4427d8]
xor eax, eax
cmp dword [esp + 0x58], 1
sete al
jmp dword [eax*4 + 0x4427e0]
xor eax, eax
mov ecx, 1
mov ebx, dword [esp + 0x10]
jmp dword [ecx*4 + 0x4427e8]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x58], 0xead5d4d7
lea ecx, [esp + 0x5c]
mov byte [ecx + 4], 0
mov dword [ecx], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 8
ja 0x42038f
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x58]
lea edi, [ecx + edx]
add ecx, 0x5d
and ecx, edx
add ecx, ecx
sub edi, ecx
add edi, 0xdee99c5d
mov dword [esp + 0x28], edi
mov ecx, dword [esp + 0x28]
add cl, 0x75
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x58], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 9
jb 0x420350
mov ecx, dword [0x44826c]
test ecx, ecx
je case.0x420026.9
mov edx, dword [esp + 0x58]
xor ebx, ebx
mov edi, dword [0x448270]
jmp 0x4201f0
mov eax, 2
xor ecx, ecx
mov ebx, dword [esp + 0x10]
jmp dword [ecx*4 + 0x4427e8]
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x4427f0]
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x442800]
mov eax, 0x20119
xor ecx, ecx
jmp dword [0x442814]
add eax, edi
movzx ecx, word [edx + 2]
add edx, 2
test cx, cx
je 0x420431
test esi, esi
je 0x420406
cmp edx, esi
jae 0x420431
movzx ebx, cx
xor ecx, ecx
cmp ebx, 0x800
setb byte [esp + 0xc]
mov edi, 1
cmp ebx, 0x80
jb 0x4203f0
movzx ebx, byte [esp + 0xc]
mov cl, bl
xor ecx, 3
mov edi, ecx
jmp 0x4203f0
lea ecx, [eax + 1]
push ecx
mov edi, eax
call fcn.00408d80
add esp, 4
mov edx, edi
and edx, 1
mov dword [esp + 0x48], edi
mov ecx, edi
xor ecx, 1
lea ecx, [ecx + edx*2]
lea edx, [eax + ecx]
dec edx
mov ebx, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0xc], edx
cmp edx, eax
jbe 0x420512
mov ebx, dword [esp + 0x20]
mov eax, ebx
add eax, ecx
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x10]
jmp 0x420496
mov byte [ebx], cl
mov edi, 1
add edx, 2
add ebx, edi
cmp ebx, dword [esp + 0xc]
jae 0x420512
test esi, esi
je 0x42049e
cmp edx, esi
jae 0x420512
movzx ecx, word [edx]
test cx, cx
je 0x420512
cmp cx, 0x7f
jbe 0x420480
mov eax, ebx
not eax
add eax, dword [esp + 0x1c]
cmp eax, 2
jb 0x4204e0
movzx edi, cx
cmp edi, 0x7ff
ja 0x4204e0
mov eax, ecx
shr eax, 6
add al, 0xc0
mov byte [ebx], al
and cl, 0x3f
or cl, 0x80
mov byte [ebx + 1], cl
mov edi, 2
jmp 0x420487
xor edi, edi
cmp eax, 3
jb 0x420487
movzx edi, cx
mov eax, edi
shr eax, 0xc
or al, 0xe0
mov byte [ebx], al
mov eax, edi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [ebx + 1], al
and cl, 0x3f
or cl, 0x80
mov byte [ebx + 2], cl
mov edi, 3
jmp 0x420487
mov ecx, dword [ebp + 8]
mov byte [ebx], 0
mov dword [esp + 0x58], 0xe7f0fec3
mov dword [esp + 0x5c], 0xfae8c8e3
mov dword [esp + 0x60], 0xefeae9b6
mov byte [esp + 0x64], 0x60
mov dword [esp + 0x69], 0
mov dword [esp + 0x65], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x14
ja 0x4205a0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x58]
lea esi, [eax + edx]
add esi, 0x9e05f392
add eax, 0x9e05f392
and eax, edx
add eax, eax
sub esi, eax
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x28]
add al, 2
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x58], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x15
jb 0x420560
lea eax, [esp + 0x58]
push dword [esp + 0x48]
mov esi, dword [esp + 0x24]
push esi
push eax
call fcn.00409710
mov ebx, dword [esp + 0x10]
jmp dword [0x442820]
push esi
mov esi, eax
call fcn.00408d90
mov eax, esi
add esp, 4
push ebx
mov ebx, eax
call fcn.004344d0
add esp, 4
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret