Function at 0x4f7890
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
enter 0x4e4, 1
push ebx
push ecx
push edx
mov dword [ebp - 8], esp
push 0x54661e
mov eax, dword [ebp + 8]
push eax
call fcn.004720d0
call fcn.004f5e90
push 0x546625
mov eax, dword [ebp + 8]
lea eax, [eax + 0x48c]
push eax
call fcn.004720d0
push 0x54662d
mov eax, dword [ebp + 8]
lea eax, [eax + 0x4b0]
push eax
call fcn.004720d0
push 0x546636
mov eax, dword [ebp + 8]
lea eax, [eax + 0x484]
push eax
call fcn.004720d0
push 0x546640
mov eax, dword [ebp + 8]
lea eax, [eax + 0x488]
push eax
call fcn.004720d0
push 0x546643
mov eax, dword [ebp + 8]
movsx eax, word [eax + 0x4d4]
bound eax, qword [0x52c428]
push eax
call fcn.0047d300
push 0x546648
mov eax, dword [ebp + 8]
movsx eax, word [eax + 0x4d6]
bound eax, qword [0x52c428]
push eax
call fcn.0047d300
push 0x54664d
mov eax, dword [ebp + 8]
movsx eax, word [eax + 0x4d8]
bound eax, qword [0x52c428]
push eax
call fcn.0047d300
mov edi, dword [ebp + 8]
lea eax, [edi + 0x10]
push eax
call fcn.004462d0
cmp ax, 0
jle 0x4f79aa
mov edi, dword [0x546654]
mov dword [ebp - 0x3d8], edi
mov eax, dword [ebp + 8]
lea eax, [eax + 0x10]
push eax
call fcn.004462d0
movsx eax, ax
bound eax, qword [0x53b293]
movzx eax, al
movsx eax, word [eax*2 + 0x555620]
bound eax, qword [0x52c428]
mov edi, dword [ebp - 0x3d8]
cdq
idiv edi
bound eax, qword [0x52c420]
mov word [ebp - 0x110], ax
jmp 0x4f79b3
mov word [ebp - 0x110], 0
push 0x546658
movsx eax, word [ebp - 0x110]
bound eax, qword [0x52c428]
push eax
call fcn.0047d300
push 0x54665c
movsx eax, word [0x555fd0]
bound eax, qword [0x535a83]
movzx edx, al
imul eax, edx, 0x13
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x14]
push eax
movzx edx, byte [0x5487be]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
movsx eax, word [0x555fd0]
bound eax, qword [0x535a83]
movzx edx, al
imul eax, edx, 0x13
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x14]
push eax
lea edx, [ebp - 0x14c]
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004f5e10
push 0x546663
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487be]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
mov eax, 0
mov dword [ebp - 0x3dc], eax
call fcn.0045f5b0
movsx edx, ax
mov eax, dword [ebp - 0x3dc]
sub edx, eax
jl 0x4f7afb
inc edx
mov word [ebp - 0x3d8], dx
mov word [ebp - 0xc], ax
jmp 0x4f7a82
inc word [ebp - 0xc]
push 0xff
lea eax, [ebp - 0x10c]
mov byte [eax], 0
push eax
movsx eax, word [ebp - 0xc]
bound eax, qword [0x52c428]
push eax
push 0
call fcn.00406ab0
add esp, 8
mov esi, 0x54666d
lea edi, [ebp - 0x4dc]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov eax, edi
push eax
movsx edx, word [ebp - 0xc]
bound edx, qword [0x535a83]
movzx eax, dl
imul eax, eax, 0x13
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x14]
push eax
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
dec word [ebp - 0x3d8]
jne 0x4f7a7e
push 0x546674
mov eax, dword [ebp + 8]
lea edx, [eax + 0x228]
push edx
push 1
call fcn.0047d210
push 0x54667b
mov eax, dword [ebp + 8]
lea edx, [eax + 0x202]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x546685
mov eax, dword [ebp + 8]
lea edx, [eax + 0x215]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
movzx edx, byte [0x54880f]
bound edx, qword [0x52c894]
movsx eax, dx
test eax, eax
jle 0x4f7c4d
mov word [ebp - 0x3e0], ax
mov word [ebp - 0xc], 0
inc word [ebp - 0xc]
push 0xff
lea eax, [ebp - 0x10c]
mov byte [eax], 0
push eax
movsx eax, word [ebp - 0xc]
bound eax, qword [0x52c428]
push eax
push 0
call fcn.00406ab0
add esp, 8
mov esi, 0x54668f
lea edi, [ebp - 0x4e0]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov eax, edi
push eax
movsx edx, word [ebp - 0xc]
bound edx, qword [0x535a7b]
movzx eax, dl
imul eax, eax, 0x13
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x251]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
mov esi, 0x546697
lea edi, [ebp - 0x4e0]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov eax, edi
push eax
movsx edx, word [ebp - 0xc]
bound edx, qword [0x535a73]
movzx eax, dl
imul eax, eax, 0x13
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x348]
push eax
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
dec word [ebp - 0x3e0]
jne 0x4f7b7a
push 0x5466a0
mov eax, dword [ebp + 8]
lea edx, [eax + 0x35b]
push edx
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466a9
mov eax, dword [ebp + 8]
lea edx, [eax + 0x335]
push edx
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466b1
mov eax, dword [ebp + 8]
lea edx, [eax + 0x322]
push edx
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466ba
mov eax, dword [ebp + 8]
lea edx, [eax + 0x348]
push edx
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466c5
mov eax, dword [ebp + 8]
lea edx, [eax + 0x419]
push edx
movzx eax, byte [0x5487c1]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466ce
mov eax, dword [ebp + 8]
lea edx, [eax + 0x42c]
push edx
movzx eax, byte [0x5487c1]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466d8
mov eax, dword [ebp + 8]
lea edx, [eax + 0x43f]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466e4
mov eax, dword [ebp + 8]
lea edx, [eax + 0x452]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466f0
mov eax, dword [ebp + 8]
lea edx, [eax + 0x465]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x5466fb
mov eax, dword [ebp + 8]
lea edx, [eax + 0x4da]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x546704
mov eax, dword [ebp + 8]
lea edx, [eax + 0x4ed]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x54670e
mov eax, dword [ebp + 8]
lea edx, [eax + 0x500]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x546717
mov eax, dword [ebp + 8]
lea edx, [eax + 0x513]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x54671d
mov eax, dword [ebp + 8]
lea edx, [eax + 0x526]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
mov word [ebp - 0x3e4], 3
mov word [ebp - 0xc], 0
inc word [ebp - 0xc]
push 0xff
lea eax, [ebp - 0x10c]
mov byte [eax], 0
push eax
movsx eax, word [ebp - 0xc]
bound eax, qword [0x52c428]
push eax
push 0
call fcn.00406ab0
add esp, 8
mov esi, 0x546726
lea edi, [ebp - 0x4e4]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov eax, edi
push eax
movsx edx, word [ebp - 0xc]
bound edx, qword [0x5362b0]
movzx eax, dl
imul eax, eax, 0x20
mov edi, dword [ebp + 8]
push dword [edi + eax + 0x519]
call fcn.0047d300
mov esi, 0x546730
lea edi, [ebp - 0x4e4]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov eax, edi
push eax
movsx edx, word [ebp - 0xc]
bound edx, qword [0x5362b0]
movzx eax, dl
imul eax, eax, 0x20
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x51d]
push eax
call fcn.004bd5f0
mov esi, 0x54673a
lea edi, [ebp - 0x4e4]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov eax, edi
push eax
movsx edx, word [ebp - 0xc]
bound edx, qword [0x5362b0]
movzx eax, dl
imul eax, eax, 0x20
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x526]
push eax
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
dec word [ebp - 0x3e4]
jne 0x4f7e38
mov eax, dword [ebp + 8]
lea edx, [eax + 0x599]
push edx
push edx
call fcn.004bd5f0
mov word [ebp - 0x3e8], 6
mov word [ebp - 0xc], 0xffff
inc word [ebp - 0xc]
push 0xff
lea eax, [ebp - 0x10c]
mov byte [eax], 0
push eax
movsx eax, word [ebp - 0xc]
bound eax, qword [0x52c428]
push eax
push 0
call fcn.00406ab0
add esp, 8
mov esi, 0x546745
lea edi, [ebp - 0x4e8]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov eax, edi
push eax
movsx edx, word [ebp - 0xc]
bound edx, qword [0x535a6b]
movzx eax, dl
imul eax, eax, 0x13
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x5a2]
push eax
push 2
call fcn.0047d210
dec word [ebp - 0x3e8]
jne 0x4f7f5c
push 0x54674b
mov eax, dword [ebp + 8]
lea edx, [eax + 0x614]
push edx
call fcn.004720d0
push 0x546753
mov eax, dword [ebp + 8]
lea edx, [eax + 0x618]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x54675b
mov eax, dword [ebp + 8]
lea edx, [eax + 0x66d]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x546764
mov eax, dword [ebp + 8]
lea edx, [eax + 0x680]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x680]
push eax
lea edx, [edi + 0x4da]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.00402a50
lea eax, [ebp - 0x14c]
push eax
mov edi, dword [ebp + 8]
lea edx, [edi + 0x4ed]
push edx
lea eax, [ebp - 0x124]
push eax
call fcn.00430a80
push 0x54676f
lea eax, [ebp - 0x124]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x335]
push eax
lea edx, [edi + 0x66d]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x546778
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487bf]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x322]
push eax
lea edx, [edi + 0x66d]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x546781
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487bf]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x322]
push eax
lea edx, [edi + 0x680]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x54678b
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x419]
push eax
push 0x548324
call fcn.004274a0
test al, al
je 0x4f81c8
mov eax, dword [ebp + 8]
lea edx, [eax + 0x465]
push edx
lea eax, [eax + 0x419]
push eax
movzx edx, byte [0x5487be]
bound edx, qword [0x52c894]
push edx
push 2
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a90
jmp 0x4f81de
mov eax, dword [ebp + 8]
lea esi, [eax + 0x35b]
lea edi, [ebp - 0x14c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 0x546796
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487be]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
push 0
push dword [ebp + 8]
lea eax, [ebp - 0x14c]
push eax
lea edx, [ebp - 0x3d4]
push edx
call fcn.004f5b20
push 0x5467a1
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487bf]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x348]
push eax
lea edx, [edi + 0x66d]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x5467a8
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487bf]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x419]
push eax
lea edx, [edi + 0x500]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.00402a50
mov esi, dword [ebp + 8]
lea eax, [esi + 0x264]
push eax
lea edx, [esi + 0x66d]
push edx
lea eax, [ebp - 0x160]
push eax
call fcn.00402a50
lea eax, [ebp - 0x160]
push eax
push 0x54834c
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
push 2
push eax
call fcn.00426a90
lea eax, [ebp - 0x160]
push eax
mov edi, dword [ebp + 8]
lea edx, [edi + 0x500]
push edx
push eax
call fcn.00402a50
lea eax, [ebp - 0x160]
push eax
push 0x548324
call fcn.004274a0
test al, al
je 0x4f8320
lea eax, [ebp - 0x14c]
push eax
lea edx, [ebp - 0x160]
push edx
push 1
push 2
push eax
call fcn.00426a90
jmp 0x4f8332
mov esi, 0x548324
lea edi, [ebp - 0x14c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 0x5467b4
lea eax, [ebp - 0x14c]
push eax
push 1
call fcn.0047d210
movsx edx, word [0x555fd0]
bound edx, qword [0x535a83]
movzx eax, dl
imul eax, eax, 0x13
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x14]
push eax
lea eax, [edi + 0x322]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004f5a80
push 0x5467be
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0047d210
movsx edx, word [0x555fd0]
bound edx, qword [0x535a83]
movzx eax, dl
imul eax, eax, 0x13
mov edi, dword [ebp + 8]
lea eax, [edi + eax + 0x14]
push eax
lea eax, [edi + 0x335]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004f5a80
push 0x5467c7
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x43f]
push eax
lea edx, [edi + 0x452]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.004f5a80
push 0x5467d0
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x42c]
push eax
lea edx, [edi + 0x335]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.00426a10
push 0x5467d8
lea eax, [ebp - 0x138]
push eax
movzx edx, byte [0x5487bf]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x43f]
push eax
lea edx, [ebp - 0x138]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.004f5a80
push 0x5467e4
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0047d210
mov edi, dword [ebp + 8]
lea eax, [edi + 0x215]
push eax
lea edx, [ebp - 0x124]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.00430a80
mov esi, dword [ebp + 8]
lea eax, [esi + 0x618]
push eax
push 0x548324
call fcn.00403900
test al, al
je 0x4f84f8
lea eax, [ebp - 0x14c]
push eax
mov edi, dword [ebp + 8]
lea edx, [edi + 0x618]
push edx
push 0
push 1
lea eax, [ebp - 0x160]
push eax
call fcn.00426a90
mov esi, dword [ebp + 8]
lea eax, [esi + 0x618]
push eax
lea edx, [ebp - 0x160]
push edx
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x5467ef
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
pop edx
pop ecx
pop ebx
leave
ret 4