Function at 0x4f5020
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
enter 0xb6c, 1
push ebx
push ecx
push edx
mov dword [ebp - 8], esp
mov ax, word [ebp + 0xc]
push eax
call fcn.004721c0
mov ax, word [ebp + 0xc]
push eax
lea eax, [ebp - 0xb68]
push eax
push 0x545f9c
mov ax, word [0x5487bc]
push eax
call fcn.0045f540
lea eax, [ebp - 0xb68]
push eax
lea eax, [ebp - 0x590]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
lea eax, [ebp - 0xb68]
push eax
push 0x545fa7
mov ax, word [0x5487bc]
push eax
call fcn.0045f540
lea eax, [ebp - 0xb68]
push eax
lea eax, [ebp - 0x3db]
push eax
movzx eax, byte [0x5487c1]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
lea eax, [ebp - 0xb68]
push eax
push 0x545fb0
mov ax, word [0x5487bc]
push eax
call fcn.0045f540
lea eax, [ebp - 0xb68]
push eax
lea eax, [ebp - 0x3c8]
push eax
movzx eax, byte [0x5487c1]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
push 0x545fba
lea eax, [ebp - 0x590]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x545fc3
lea eax, [ebp - 0x3db]
push eax
movzx eax, byte [0x5487c1]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
push 0x545fcc
lea eax, [ebp - 0x3c8]
push eax
movzx eax, byte [0x5487c1]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
call fcn.004f5e90
lea eax, [ebp - 0x7f4]
push eax
call fcn.0045f4c0
push 0x545fd6
lea eax, [ebp - 0x187]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0047d210
mov al, byte [ebp + 8]
test al, al
je 0x4f5a76
lea eax, [ebp - 0xb68]
push eax
mov ax, word [ebp + 0xc]
push eax
push 0x545fdf
call fcn.0041d400
lea edi, [ebp - 0x10c]
lea esi, [ebp - 0xb68]
call fcn.00401940
lea esi, [ebp - 0x10b]
lea edi, [ebp - 0xa6c]
push 1
call fcn.00401d30
lea edi, [ebp - 0x7e4]
lea esi, [ebp - 0xa6c]
push 3
call fcn.00401950
push 0xff
lea eax, [ebp - 0x10c]
mov byte [eax], 0
push eax
movsx eax, word [0x555fd0]
bound eax, qword [0x52c428]
push eax
push 0
call fcn.00406ab0
add esp, 8
mov esi, 0x545fe7
lea edi, [ebp - 0xb68]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov edi, esi
lea esi, [ebp - 0xb68]
call fcn.00401940
mov ax, word [ebp + 0xc]
push eax
mov eax, edi
push eax
movsx eax, word [0x555fd0]
bound eax, qword [0x535a83]
movzx eax, al
imul eax, eax, 0x13
lea eax, [ebp + eax - 0x7e0]
push eax
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x545ff1
lea eax, [ebp - 0x31a]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x545ffb
lea eax, [ebp - 0x307]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x546006
lea eax, [ebp - 0x2f4]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x546010
lea eax, [ebp - 0x2e1]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x546017
lea eax, [ebp - 0x4d2]
push eax
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x546020
lea eax, [ebp - 0x4bf]
push eax
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x546028
lea eax, [ebp - 0x4ac]
push eax
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x546033
lea eax, [ebp - 0x38f]
push eax
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x54603e
lea eax, [ebp - 0x3b5]
push eax
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
mov ax, word [ebp + 0xc]
push eax
push 0x54604a
lea eax, [ebp - 0x3a2]
push eax
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
movzx eax, byte [0x54880f]
bound eax, qword [0x52c894]
movsx eax, ax
test eax, eax
jle 0x4f547b
mov word [ebp - 0xa6c], ax
mov word [ebp - 0xc], 0
inc word [ebp - 0xc]
push 0xff
lea eax, [ebp - 0x10c]
mov byte [eax], 0
push eax
movsx eax, word [ebp - 0xc]
bound eax, qword [0x52c428]
push eax
push 0
call fcn.00406ab0
add esp, 8
mov esi, 0x546055
lea edi, [ebp - 0xb6c]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov edi, esi
lea esi, [ebp - 0xb6c]
call fcn.00401940
mov ax, word [ebp + 0xc]
push eax
mov eax, edi
push eax
movsx eax, word [ebp - 0xc]
bound eax, qword [0x535a73]
movzx eax, al
imul eax, eax, 0x13
lea eax, [ebp + eax - 0x4ac]
push eax
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
dec word [ebp - 0xa6c]
jne 0x4f53e8
movzx eax, byte [0x54880f]
bound eax, qword [0x52c894]
movsx eax, ax
dec eax
jle 0x4f5533
mov word [ebp - 0xa70], ax
mov word [ebp - 0xc], 1
inc word [ebp - 0xc]
push 0xff
lea eax, [ebp - 0x10c]
mov byte [eax], 0
push eax
movsx eax, word [ebp - 0xc]
bound eax, qword [0x52c428]
push eax
push 0
call fcn.00406ab0
add esp, 8
mov esi, 0x54605c
lea edi, [ebp - 0xb70]
call fcn.00401b30
lea esi, [ebp - 0x10c]
call fcn.00401af0
mov edi, esi
lea esi, [ebp - 0xb70]
call fcn.00401940
mov ax, word [ebp + 0xc]
push eax
mov eax, edi
push eax
movsx eax, word [ebp - 0xc]
bound eax, qword [0x535a7b]
movzx eax, al
imul eax, eax, 0x13
lea eax, [ebp + eax - 0x5a3]
push eax
movzx eax, byte [0x5487c0]
bound eax, qword [0x52c894]
push eax
call fcn.0041c730
dec word [ebp - 0xa70]
jne 0x4f54a0
push 0x546066
lea eax, [ebp - 0x10c]
push eax
call fcn.004720d0
lea eax, [ebp - 0x7e4]
push eax
call fcn.004462d0
cmp ax, 0
jle 0x4f55a0
mov edi, dword [0x54606d]
mov dword [ebp - 0xa74], edi
lea eax, [ebp - 0x7e4]
push eax
call fcn.004462d0
movsx eax, ax
bound eax, qword [0x53b293]
movzx eax, al
movsx eax, word [eax*2 + 0x555620]
bound eax, qword [0x52c428]
mov edi, dword [ebp - 0xa74]
cdq
idiv edi
bound eax, qword [0x52c420]
mov word [ebp - 0x110], ax
jmp 0x4f55a9
mov word [ebp - 0x110], 0
push 0x546071
movsx eax, word [ebp - 0x110]
bound eax, qword [0x52c428]
push eax
call fcn.0047d300
push 0x546075
movsx eax, word [0x555fd0]
bound eax, qword [0x535a83]
movzx edx, al
imul eax, edx, 0x13
lea eax, [ebp + eax - 0x7e0]
push eax
movzx edx, byte [0x5487be]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
movsx eax, word [0x555fd0]
bound eax, qword [0x535a83]
movzx edx, al
imul eax, edx, 0x13
lea eax, [ebp + eax - 0x7e0]
push eax
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x7e4]
push eax
call fcn.004f5e10
push 0x54607c
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487be]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x7f4]
push eax
call fcn.0045f4c0
push 0x546086
lea eax, [ebp - 0x174]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x174]
push eax
lea edx, [ebp - 0x31a]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.00402a50
lea eax, [ebp - 0x14c]
push eax
lea edx, [ebp - 0x307]
push edx
lea eax, [ebp - 0x124]
push eax
call fcn.00430a80
push 0x546091
lea eax, [ebp - 0x124]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x4bf]
push eax
lea edx, [ebp - 0x187]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x54609a
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x4d2]
push eax
lea edx, [ebp - 0x187]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x5460a3
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x4d2]
push eax
lea edx, [ebp - 0x174]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x5460ad
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x3db]
push eax
push 0x548324
call fcn.004274a0
test al, al
je 0x4f57db
lea eax, [ebp - 0x38f]
push eax
lea edx, [ebp - 0x3db]
push edx
movzx eax, byte [0x5487be]
bound eax, qword [0x52c894]
push eax
push 2
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a90
jmp 0x4f57ee
lea esi, [ebp - 0x499]
lea edi, [ebp - 0x14c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 0x5460b8
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487be]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
push 0
lea eax, [ebp - 0x7f4]
push eax
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0xa68]
push eax
call fcn.004f5b20
push 0x5460c3
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x4ac]
push eax
lea edx, [ebp - 0x187]
push edx
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00426a10
push 0x5460ca
lea eax, [ebp - 0x14c]
push eax
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x3db]
push eax
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.00402a50
lea eax, [ebp - 0x590]
push eax
lea edx, [ebp - 0x187]
push edx
lea eax, [ebp - 0x160]
push eax
call fcn.00402a50
lea eax, [ebp - 0x160]
push eax
push 0x54834c
movzx edx, byte [0x5487c0]
bound edx, qword [0x52c894]
push edx
push 2
push eax
call fcn.00426a90
lea eax, [ebp - 0x160]
push eax
lea edx, [ebp - 0x2f4]
push edx
push eax
call fcn.00402a50
lea eax, [ebp - 0x160]
push eax
push 0x548324
call fcn.004274a0
test al, al
je 0x4f5928
lea eax, [ebp - 0x14c]
push eax
lea edx, [ebp - 0x160]
push edx
push 1
push 2
push eax
call fcn.00426a90
jmp 0x4f593a
mov esi, 0x548324
lea edi, [ebp - 0x14c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 0x5460d6
lea eax, [ebp - 0x14c]
push eax
push 1
call fcn.0047d210
movsx edx, word [0x555fd0]
bound edx, qword [0x535a83]
movzx eax, dl
imul eax, eax, 0x13
lea eax, [ebp + eax - 0x7e0]
push eax
lea eax, [ebp - 0x4d2]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004f5a80
push 0x5460e0
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0047d210
movsx edx, word [0x555fd0]
bound edx, qword [0x535a83]
movzx eax, dl
imul eax, eax, 0x13
lea eax, [ebp + eax - 0x7e0]
push eax
lea eax, [ebp - 0x4bf]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004f5a80
push 0x5460e9
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0047d210
lea edx, [ebp - 0x3b5]
push edx
lea eax, [ebp - 0x3a2]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004f5a80
push 0x5460f2
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0047d210
lea edx, [ebp - 0x3c8]
push edx
lea eax, [ebp - 0x4bf]
push eax
movzx eax, byte [0x5487bf]
bound eax, qword [0x52c894]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.00426a10
push 0x5460fa
lea eax, [ebp - 0x138]
push eax
movzx edx, byte [0x5487bf]
bound edx, qword [0x52c894]
push edx
call fcn.0047d210
lea eax, [ebp - 0x3b5]
push eax
lea edx, [ebp - 0x138]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.004f5a80
push 0x546106
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0047d210
pop edx
pop ecx
pop ebx
leave
ret 8