Function at 0x6a8aa4
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff7c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x28], ebx
mov edi, ecx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
xor eax, eax
push ebp
push 0x6a922f
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 7
mov eax, dword [ebp - 0x18]
call fcn.00503f4c
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x30]
test eax, eax
je 0x6a8af3
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x24]
test eax, eax
jne 0x6a8b07
mov edx, ebx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov edx, ebx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, edi
call sym.StartupControl.exe__Acalphaimagelist_TacCharListItems_GetItem_qqri
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x14]
movzx edx, byte [edx + 0x48]
call fcn.004fc9e4
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x14]
movzx edx, byte [edx + 0x49]
call fcn.004fc99c
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x14]
movzx edx, byte [edx + 0x59]
call fcn.004fca24
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 0x2c]
call fcn.004fc8f8
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
mov eax, dword [eax + 0xc]
xor edx, edx
call fcn.004fc5e0
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x14]
movzx edx, word [edx + 0x44]
call fcn.004c2704
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
mov eax, dword [eax + 0xc]
push eax
mov dword [ebp - 0x70], ebx
fild dword [ebp - 0x70]
mov eax, dword [ebp - 0x14]
fmul qword [eax + 0x50]
call fcn.004c0080
mov edx, eax
pop eax
call fcn.004fc86c
push 0
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x18]
call sym.StartupControl.exe__Acntutils_MkRect_qqrp16Graphics_TBitmap
lea edx, [ebp - 0x80]
mov ecx, 0xffffff
mov eax, dword [ebp - 0x18]
call sym.StartupControl.exe__Salphagraph_FillRect32_qqrpx16Graphics_TBitmaprx11Types_TRectx15Graphics_TColoruc
mov eax, dword [ebp + 0x10]
push esi
mov esi, eax
lea edi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
mov eax, dword [ebp - 0x14]
cmp byte [eax + 0x58], 0
je 0x6a8c17
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
push 0
push 1
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
lea ecx, [ebp - 0x5c]
mov edx, dword [ebp - 0x28]
movzx edx, word [edx]
call fcn.006a8224
jmp 0x6a8c3e
push 0xf00
lea eax, [ebp - 0x5c]
push eax
push 1
mov eax, dword [ebp - 0x28]
call fcn.004c27ac
push eax
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
call fcn.004fdd24
push eax
call sub.USER32.DLL_DrawTextW
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edi, eax
lea eax, [ebp - 0x5c]
xor edx, edx
call sym.StartupControl.exe__Acntutils_WidthOf_qqrrx11Types_TRectxo
sub edi, eax
sar edi, 1
jns 0x6a8c5b
adc edi, 0
mov dword [ebp - 0x6c], edi
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x24]
mov edi, eax
lea eax, [ebp - 0x5c]
xor edx, edx
call sym.StartupControl.exe__Acntutils_HeightOf_qqrrx11Types_TRectxo
sub edi, eax
sar edi, 1
jns 0x6a8c7b
adc edi, 0
mov dword [ebp - 0x68], edi
lea eax, [ebp - 0x5c]
xor edx, edx
call sym.StartupControl.exe__Acntutils_WidthOf_qqrrx11Types_TRectxo
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x5c]
xor edx, edx
call sym.StartupControl.exe__Acntutils_HeightOf_qqrrx11Types_TRectxo
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x60], eax
test esi, esi
je 0x6a8cc0
mov dword [ebp - 0x70], esi
fild dword [ebp - 0x70]
mov eax, dword [ebp - 0x14]
fmul qword [eax + 0x50]
call fcn.004c0080
lea edx, [ebp - 0x6c]
mov ecx, eax
xor eax, eax
xchg edx, eax
call fcn.004a7ca8
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xc], 0
je 0x6a8d92
mov eax, dword [ebp - 0x14]
cmp byte [eax + 0x58], 0
je 0x6a8d06
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xc]
push eax
push 0
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x28]
movzx edx, word [edx]
call fcn.006a8224
jmp 0x6a8def
mov eax, dword [ebp - 0x18]
call sym.StartupControl.exe__Sgraphutils_CreateBmpLike_qqrpx16Graphics_TBitmap
mov ebx, eax
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
mov eax, dword [eax + 0xc]
push eax
mov eax, ebx
call fcn.00502d6c
mov eax, dword [eax + 0xc]
pop edx
mov ecx, dword [eax]
call dword [ecx + 8]
call fcn.006a85d8
push 0xb04
lea eax, [ebp - 0x6c]
push eax
push 1
mov eax, dword [ebp - 0x28]
call fcn.004c27ac
push eax
mov eax, ebx
call fcn.00502d6c
call fcn.004fdd24
push eax
call sub.USER32.DLL_DrawTextW
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xc]
mov ecx, 0x168
cdq
idiv ecx
push edx
lea edx, [ebp - 0x80]
mov eax, ebx
call sym.StartupControl.exe__Acntutils_MkRect_qqrp16Graphics_TBitmap
lea eax, [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
call fcn.004fdd24
mov edx, ebx
pop ecx
call sym.StartupControl.exe__Acgputils_acgpDrawRotatedBitmap_qqrp5HDC__p16Graphics_TBitmaprx11Types_TRecti
mov eax, ebx
call fcn.004c09bc
jmp 0x6a8def
mov eax, dword [ebp - 0x14]
cmp byte [eax + 0x58], 0
je 0x6a8dc3
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x28]
movzx edx, word [edx]
call fcn.006a8224
jmp 0x6a8def
call fcn.006a85d8
push 0xb04
lea eax, [ebp - 0x6c]
push eax
push 1
mov eax, dword [ebp - 0x28]
call fcn.004c27ac
push eax
mov eax, dword [ebp - 0x18]
call fcn.00502d6c
call fcn.004fdd24
push eax
call sub.USER32.DLL_DrawTextW
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x88]
cmp ebx, 0x1fffffff
je 0x6a8e13
mov eax, ebx
xor edx, edx
call sym.StartupControl.exe__Svclutils_acColorToRGB_qqr15Graphics_TColorp14System_TObject
call sym.StartupControl.exe__Salphagraph_SwapRedBlue_qqrx15Graphics_TColor
mov dword [ebp - 0x10], eax
jmp 0x6a8e39
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax + 0x38]
cmp ebx, 0x1fffffff
je 0x6a8e34
mov eax, ebx
xor edx, edx
call sym.StartupControl.exe__Svclutils_acColorToRGB_qqr15Graphics_TColorp14System_TObject
call sym.StartupControl.exe__Salphagraph_SwapRedBlue_qqrx15Graphics_TColor
mov dword [ebp - 0x10], eax
jmp 0x6a8e39
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x40], 0x1fffffff
je 0x6a8e92
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x88]
cmp ebx, 0x1fffffff
je 0x6a8e6c
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x38]
xor edx, edx
call sym.StartupControl.exe__Svclutils_acColorToRGB_qqr15Graphics_TColorp14System_TObject
call sym.StartupControl.exe__Salphagraph_SwapRedBlue_qqrx15Graphics_TColor
cmp ebx, eax
je 0x6a8e92
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x9c], 0x1fffffff
jne 0x6a8e92
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x40]
xor edx, edx
call sym.StartupControl.exe__Svclutils_acColorToRGB_qqr15Graphics_TColorp14System_TObject
call sym.StartupControl.exe__Salphagraph_SwapRedBlue_qqrx15Graphics_TColor
mov dword [ebp - 0xc], eax
jmp 0x6a8e99
mov dword [ebp - 0xc], 0x1fffffff
lea ecx, [ebp - 8]
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x18]
call sym.StartupControl.exe__Sgraphutils_InitLine_qqrp16Graphics_TBitmaprpvri
test al, al
je 0x6a9212
cmp dword [ebp - 0xc], 0x1fffffff
jne 0x6a8fd5
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xb0], 0
jne 0x6a8f62
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xad], 0xff
je 0x6a8f62
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x24]
dec eax
test eax, eax
jl 0x6a9212
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 8]
imul dword [ebp - 0x2c]
add eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
dec edx
test edx, edx
jl 0x6a8f55
inc edx
xor esi, esi
mov eax, dword [ebp - 0x24]
lea edi, [eax + esi*4]
movzx eax, byte [edi + 2]
movzx ecx, byte [edi + 1]
add ecx, ecx
add eax, ecx
movzx ecx, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
mov ecx, dword [ebp - 0x10]
mov dword [edi], ecx
movzx eax, al
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0xad]
imul eax, ecx
shr eax, 8
mov byte [edi + 3], al
inc esi
dec edx
jne 0x6a8f16
inc dword [ebp - 0x2c]
dec dword [ebp - 0x4c]
jne 0x6a8ef8
jmp 0x6a9212
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x24]
dec eax
test eax, eax
jl 0x6a9212
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 8]
imul dword [ebp - 0x2c]
add eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
dec edx
test edx, edx
jl 0x6a8fc8
inc edx
xor esi, esi
mov eax, dword [ebp - 0x24]
lea edi, [eax + esi*4]
movzx eax, byte [edi + 2]
movzx ecx, byte [edi + 1]
add ecx, ecx
add eax, ecx
movzx ecx, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
mov ecx, dword [ebp - 0x10]
mov dword [edi], ecx
mov byte [edi + 3], al
inc esi
dec edx
jne 0x6a8f9c
inc dword [ebp - 0x2c]
dec dword [ebp - 0x4c]
jne 0x6a8f7e
jmp 0x6a9212
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x24]
mov esi, eax
dec esi
movzx eax, byte [ebp - 0xc]
movzx edx, byte [ebp - 0x10]
movzx ecx, dl
sub eax, ecx
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x40]
wait
movzx eax, byte [ebp - 0xb]
movzx ecx, byte [ebp - 0xf]
movzx ebx, cl
sub eax, ebx
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x44]
wait
movzx edi, byte [ebp - 0xa]
movzx eax, byte [ebp - 0xe]
movzx ebx, al
sub edi, ebx
mov dword [ebp - 0x70], edi
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x48]
wait
movzx edx, dl
mov dword [ebp - 0x70], edx
fild dword [ebp - 0x70]
fstp dword [ebp - 0x34]
wait
movzx edx, cl
mov dword [ebp - 0x70], edx
fild dword [ebp - 0x70]
fstp dword [ebp - 0x38]
wait
movzx eax, al
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
fstp dword [ebp - 0x3c]
wait
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xb0], 0
jne 0x6a9160
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xad], 0xff
je 0x6a9160
test esi, esi
jl 0x6a9212
inc esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x2c], 0
fld dword [ebp - 0x34]
call fcn.004c0080
mov byte [ebp - 0x30], al
fld dword [ebp - 0x38]
call fcn.004c0080
mov byte [ebp - 0x2f], al
fld dword [ebp - 0x3c]
call fcn.004c0080
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 8]
imul dword [ebp - 0x2c]
add eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
dec edx
test edx, edx
jl 0x6a9131
inc edx
xor esi, esi
mov eax, dword [ebp - 0x24]
lea edi, [eax + esi*4]
movzx eax, byte [edi + 2]
movzx ecx, byte [edi + 1]
add ecx, ecx
add eax, ecx
movzx ecx, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
test al, al
jne 0x6a9112
xor ecx, ecx
mov dword [edi], ecx
jmp 0x6a9117
mov ecx, dword [ebp - 0x30]
mov dword [edi], ecx
movzx eax, al
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0xad]
imul eax, ecx
shr eax, 8
mov byte [edi + 3], al
inc esi
dec edx
jne 0x6a90e8
fld dword [ebp - 0x34]
fadd dword [ebp - 0x40]
fstp dword [ebp - 0x34]
wait
fld dword [ebp - 0x38]
fadd dword [ebp - 0x44]
fstp dword [ebp - 0x38]
wait
fld dword [ebp - 0x3c]
fadd dword [ebp - 0x48]
fstp dword [ebp - 0x3c]
wait
inc dword [ebp - 0x2c]
dec dword [ebp - 0x4c]
jne 0x6a90a9
jmp 0x6a9212
test esi, esi
jl 0x6a9212
inc esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x2c], 0
fld dword [ebp - 0x34]
call fcn.004c0080
mov byte [ebp - 0x30], al
fld dword [ebp - 0x38]
call fcn.004c0080
mov byte [ebp - 0x2f], al
fld dword [ebp - 0x3c]
call fcn.004c0080
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 8]
imul dword [ebp - 0x2c]
add eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
dec edx
test edx, edx
jl 0x6a91e8
inc edx
xor esi, esi
mov eax, dword [ebp - 0x24]
lea edi, [eax + esi*4]
movzx eax, byte [edi + 2]
movzx ecx, byte [edi + 1]
add ecx, ecx
add eax, ecx
movzx ecx, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
test al, al
jne 0x6a91dc
xor ecx, ecx
mov dword [edi], ecx
jmp 0x6a91e1
mov ecx, dword [ebp - 0x30]
mov dword [edi], ecx
mov byte [edi + 3], al
inc esi
dec edx
jne 0x6a91b2
fld dword [ebp - 0x34]
fadd dword [ebp - 0x40]
fstp dword [ebp - 0x34]
wait
fld dword [ebp - 0x38]
fadd dword [ebp - 0x44]
fstp dword [ebp - 0x38]
wait
fld dword [ebp - 0x3c]
fadd dword [ebp - 0x48]
fstp dword [ebp - 0x3c]
wait
inc dword [ebp - 0x2c]
dec dword [ebp - 0x4c]
jne 0x6a9173
push ebp
call fcn.006a85dc
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6a9236
lea eax, [ebp - 0x28]
call fcn.004c25d0
ret