Function at 0x4b5220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov dword [esp + 0x10], edx
mov dword [esp], ecx
cmp dword [esp + 0x30], 0
js 0x4b579b
mov eax, dword [esp + 0x10]
movzx ebp, word [eax + 2]
xor edx, edx
test ebp, ebp
mov eax, 0x8a
mov ecx, 7
cmove ecx, eax
setne dl
add edx, 3
mov edi, 0xffffffff
xor eax, eax
xor esi, esi
jmp 0x4b5292
xor ecx, ecx
cmp ebx, ebp
sete cl
mov edx, 4
sub edx, ecx
xor ecx, 7
mov edi, ebx
lea ebx, [eax + 1]
cmp eax, dword [esp + 0x30]
mov eax, ebx
je 0x4b579b
mov ebx, ebp
mov ebp, dword [esp + 0x10]
movzx ebp, word [ebp + eax*4 + 6]
mov dword [esp + 4], esi
inc esi
cmp esi, ecx
jge 0x4b52aa
cmp ebx, ebp
je 0x4b5283
cmp esi, edx
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], eax
mov dword [esp + 8], ebx
jge 0x4b5380
mov eax, dword [esp]
mov ecx, dword [eax + 0x16bc]
jmp 0x4b52e3
add ecx, edx
mov dword [eax + 0x16bc], ecx
dec esi
mov ebx, dword [esp + 8]
je 0x4b577a
movzx edx, word [eax + ebx*4 + 0xa7e]
mov ebp, 0x10
sub ebp, edx
movzx edi, word [eax + ebx*4 + 0xa7c]
mov ebx, edi
shl ebx, cl
or bx, word [eax + 0x16b8]
mov word [eax + 0x16b8], bx
cmp ecx, ebp
jle 0x4b52d0
mov ecx, dword [eax + 8]
mov dword [esp + 4], ecx
mov ebp, dword [eax + 0x14]
lea eax, [ebp + 1]
mov ecx, dword [esp]
mov dword [ecx + 0x14], eax
mov eax, dword [esp + 4]
mov byte [eax + ebp], bl
mov eax, dword [esp]
movzx eax, byte [eax + 0x16b9]
mov byte [esp + 4], al
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov ebx, dword [esp]
mov ebx, dword [ebx + 0x14]
lea ebp, [ebx + 1]
mov eax, dword [esp]
mov dword [eax + 0x14], ebp
movzx eax, byte [esp + 4]
mov byte [ecx + ebx], al
mov eax, dword [esp]
mov ebx, dword [eax + 0x16bc]
mov cl, 0x10
sub cl, bl
shr edi, cl
mov word [eax + 0x16b8], di
lea ecx, [edx + ebx]
add ecx, 0xfffffff0
jmp 0x4b52d2
mov edx, dword [esp]
mov ecx, dword [edx + 0x16bc]
test ebx, ebx
je 0x4b539e
cmp ebx, edi
jne 0x4b543d
mov dword [esp + 4], esi
jmp 0x4b5546
movzx esi, word [edx + 0x16b8]
cmp dword [esp + 4], 9
jg 0x4b54b1
movzx ebp, word [edx + 0xac2]
movzx edi, word [edx + 0xac0]
mov eax, edi
shl eax, cl
or esi, eax
mov eax, 0x10
sub eax, ebp
cmp ecx, eax
mov eax, dword [esp]
jle 0x4b5640
mov word [eax + 0x16b8], si
mov eax, dword [esp]
mov dword [esp + 0xc], ebp
mov ebp, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea ebx, [ecx + 1]
mov eax, esi
mov edx, dword [esp]
mov dword [edx + 0x14], ebx
mov byte [ebp + ecx], al
mov eax, dword [esp]
movzx eax, byte [eax + 0x16b9]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 1]
mov edx, dword [esp]
mov dword [edx + 0x14], ebp
mov byte [ecx + ebx], al
mov eax, dword [esp]
mov ebx, dword [eax + 0x16bc]
mov cl, 0x10
sub cl, bl
shr edi, cl
mov ecx, dword [esp + 0xc]
add ecx, ebx
add ecx, 0xfffffff0
mov ebx, edi
jmp 0x4b5644
movzx esi, word [edx + ebx*4 + 0xa7e]
mov eax, 0x10
sub eax, esi
movzx edi, word [edx + ebx*4 + 0xa7c]
mov ebx, edi
shl ebx, cl
or bx, word [edx + 0x16b8]
mov word [edx + 0x16b8], bx
cmp ecx, eax
jle 0x4b553e
mov eax, dword [edx + 8]
mov ecx, dword [edx + 0x14]
lea ebp, [ecx + 1]
mov dword [edx + 0x14], ebp
mov byte [eax + ecx], bl
movzx eax, byte [edx + 0x16b9]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 1]
mov dword [edx + 0x14], ebp
mov byte [ecx + ebx], al
mov ebx, dword [edx + 0x16bc]
mov cl, 0x10
sub cl, bl
shr edi, cl
mov word [edx + 0x16b8], di
lea ecx, [esi + ebx]
add ecx, 0xfffffff0
jmp 0x4b5540
movzx ebp, word [edx + 0xac6]
movzx edi, word [edx + 0xac4]
mov eax, edi
shl eax, cl
or esi, eax
mov eax, 0x10
sub eax, ebp
cmp ecx, eax
mov eax, dword [esp]
jle 0x4b56c5
mov word [eax + 0x16b8], si
mov eax, dword [esp]
mov dword [esp + 0xc], ebp
mov ebp, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea ebx, [ecx + 1]
mov eax, esi
mov edx, dword [esp]
mov dword [edx + 0x14], ebx
mov byte [ebp + ecx], al
mov eax, dword [esp]
movzx eax, byte [eax + 0x16b9]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 1]
mov edx, dword [esp]
mov dword [edx + 0x14], ebp
mov byte [ecx + ebx], al
mov eax, dword [esp]
mov ebx, dword [eax + 0x16bc]
mov cl, 0x10
sub cl, bl
shr edi, cl
mov ecx, dword [esp + 0xc]
add ecx, ebx
add ecx, 0xfffffff0
mov ebx, edi
jmp 0x4b56c9
add ecx, esi
mov dword [edx + 0x16bc], ecx
movzx esi, word [edx + 0xabe]
mov eax, 0x10
movzx edi, word [edx + 0xabc]
mov ebx, edi
shl ebx, cl
sub eax, esi
or bx, word [edx + 0x16b8]
cmp ecx, eax
jle 0x4b55ac
mov word [edx + 0x16b8], bx
mov eax, dword [edx + 8]
mov ecx, dword [edx + 0x14]
lea ebp, [ecx + 1]
mov dword [edx + 0x14], ebp
mov byte [eax + ecx], bl
movzx eax, byte [edx + 0x16b9]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 1]
mov dword [edx + 0x14], ebp
mov byte [ecx + ebx], al
mov ebx, dword [edx + 0x16bc]
mov cl, 0x10
sub cl, bl
shr edi, cl
lea ecx, [esi + ebx]
add ecx, 0xfffffff0
mov ebx, edi
jmp 0x4b55ae
add ecx, esi
mov eax, edx
mov edx, dword [esp + 4]
mov dword [eax + 0x16bc], ecx
add edx, 0xfffd
cmp ecx, 0xf
jl 0x4b562d
movzx esi, dx
shl edx, cl
or ebx, edx
mov word [eax + 0x16b8], bx
mov eax, dword [esp]
mov eax, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [ecx + 1]
mov edi, dword [esp]
mov dword [edi + 0x14], edx
mov byte [eax + ecx], bl
mov eax, dword [esp]
movzx eax, byte [eax + 0x16b9]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov edx, dword [edx + 0x14]
lea edi, [edx + 1]
mov ebx, dword [esp]
mov dword [ebx + 0x14], edi
mov byte [ecx + edx], al
mov eax, dword [esp]
mov edx, dword [eax + 0x16bc]
mov cl, 0x10
sub cl, dl
shr esi, cl
mov ecx, edx
mov word [eax + 0x16b8], si
add ecx, 0xfffffff2
jmp 0x4b5770
shl edx, cl
or ebx, edx
mov word [eax + 0x16b8], bx
add ecx, 2
jmp 0x4b5770
add ecx, ebp
mov ebx, esi
mov dword [eax + 0x16bc], ecx
mov edx, dword [esp + 4]
add edx, 0xfffe
cmp ecx, 0xe
jl 0x4b5743
movzx esi, dx
shl edx, cl
or ebx, edx
mov word [eax + 0x16b8], bx
mov eax, dword [esp]
mov eax, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [ecx + 1]
mov edi, dword [esp]
mov dword [edi + 0x14], edx
mov byte [eax + ecx], bl
mov eax, dword [esp]
movzx eax, byte [eax + 0x16b9]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov edx, dword [edx + 0x14]
lea edi, [edx + 1]
mov ebx, dword [esp]
mov dword [ebx + 0x14], edi
mov byte [ecx + edx], al
mov eax, dword [esp]
mov edx, dword [eax + 0x16bc]
mov cl, 0x10
sub cl, dl
shr esi, cl
mov ecx, edx
mov word [eax + 0x16b8], si
add ecx, 0xfffffff3
jmp 0x4b5770
add ecx, ebp
mov ebx, esi
mov dword [eax + 0x16bc], ecx
mov edx, dword [esp + 4]
add edx, 0xfff6
cmp ecx, 0xa
jl 0x4b5753
movzx esi, dx
shl edx, cl
or ebx, edx
mov word [eax + 0x16b8], bx
mov eax, dword [esp]
mov eax, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [ecx + 1]
mov edi, dword [esp]
mov dword [edi + 0x14], edx
mov byte [eax + ecx], bl
mov eax, dword [esp]
movzx eax, byte [eax + 0x16b9]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov edx, dword [edx + 0x14]
lea edi, [edx + 1]
mov ebx, dword [esp]
mov dword [ebx + 0x14], edi
mov byte [ecx + edx], al
mov eax, dword [esp]
mov edx, dword [eax + 0x16bc]
mov cl, 0x10
sub cl, dl
shr esi, cl
mov ecx, edx
mov word [eax + 0x16b8], si
add ecx, 0xfffffff7
jmp 0x4b5770
shl edx, cl
or ebx, edx
mov word [eax + 0x16b8], bx
add ecx, 3
jmp 0x4b5770
shl edx, cl
or ebx, edx
mov word [eax + 0x16b8], bx
add ecx, 7
nop word cs:[eax + eax]
mov ebx, dword [esp + 8]
mov dword [eax + 0x16bc], ecx
xor esi, esi
mov ebp, dword [esp + 0x18]
test ebp, ebp
mov eax, dword [esp + 0x14]
jne 0x4b5270
mov ecx, 0x8a
mov edx, 3
jmp 0x4b5281
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret