Function at 0x4c4870
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x8c8600]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4c4b2e
sub esp, 0x30
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x4c48c8
dec ebp
mov dword [esp + 0x28], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add ebp, esi
mov esi, dword [esp + 0x28]
mov esi, eax
mov eax, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x28]
mov ecx, edx
mov edx, edi
mov edi, ebx
mov ebx, ecx
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x4c4aee
xchg edi, eax
mov byte [esp + 0x22], al
xchg edi, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], ecx
movzx eax, byte [eax]
mov byte [esp + 0x23], al
cmp al, 0x20
jbe 0x4c4a12
cmp al, 0x22
je 0x4c4914
cmp al, 0x5c
jne 0x4c4a22
inc edx
mov edi, edx
mov edx, ebx
mov ecx, ebp
mov eax, esi
movzx ebx, byte [esp + 0x22]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
jmp 0x4c489b
mov dword [esp + 0x24], edx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov eax, edx
shr edx, 0x1f
lea ecx, [edx + eax]
sar ecx, 1
mov dword [esp + 0xc], ecx
call fcn.004c47e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x24]
test ebx, 1
jne 0x4c49c6
movzx ebx, byte [esp + 0x22]
test bl, bl
je 0x4c49b9
mov ebp, dword [esp + 0x28]
cmp ebp, 1
jle 0x4c49b3
mov esi, dword [esp + 0x2c]
cmp byte [esi + 1], 0x22
jne 0x4c49c1
inc edx
cmp ecx, edx
jae 0x4c49aa
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6c0100]
mov dword [esp + 0x10], eax
call fcn.00472770
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x22]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov byte [edx + eax - 1], 0x22
dec ebp
inc esi
jmp 0x4c49c1
mov esi, dword [esp + 0x2c]
jmp 0x4c49c1
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
xor ebx, 1
jmp 0x4c4a0b
inc edx
cmp ecx, edx
jae 0x4c49f9
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6c0100]
mov dword [esp + 0x10], eax
call fcn.00472770
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov byte [edx + eax - 1], 0x22
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x22]
xor edi, edi
jmp 0x4c489b
cmp al, 9
je 0x4c4a1c
cmp al, 0x20
jne 0x4c4a22
xchg edi, eax
test al, al
xchg edi, eax
je 0x4c4aa1
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.004c47e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
inc ecx
mov edx, dword [esp + 0x10]
cmp eax, ecx
jae 0x4c4a75
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6c0100]
mov dword [esp + 0x10], eax
call fcn.00472770
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
movzx edi, byte [esp + 0x23]
xchg edi, eax
mov byte [ecx + edx - 1], al
xchg edi, eax
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
xor edi, edi
movzx ebx, byte [esp + 0x22]
mov ebx, edx
mov edx, ecx
mov ecx, eax
mov eax, ebx
movzx ebx, byte [esp + 0x22]
jmp 0x4c489b
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.004c47e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edx
mov eax, dword [esp + 0x28]
dec eax
mov ecx, eax
neg eax
sar eax, 0x1f
and eax, 1
mov edx, dword [esp + 0x2c]
add eax, edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], ecx
add esp, 0x30
ret
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.004c47e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
add esp, 0x30
ret
call fcn.00475ee0
jmp fcn.004c4870