Function at 0x43a330
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x458
mov eax, dword [0x4ea5e0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor eax, eax
push esi
mov esi, ecx
xor ebx, ebx
cmp byte [esi + 0x22], al
push edi
sete al
xor ecx, ecx
cmp byte [esi + 0x12], cl
mov edi, edx
movzx edx, word [esi + 0x24]
sete cl
mov dword [ebp - 0x1c], edx
movzx edx, byte [esi + 0x2a]
push 0x400
mov dword [ebp - 0x10], edx
cmp ecx, eax
movzx eax, word [esi + 0x26]
movzx ecx, word [esi + 0x28]
mov dword [ebp - 0x18], eax
movzx eax, byte [esi + 0x2b]
mov dword [ebp - 0x14], ecx
movzx ecx, byte [esi + 0x2c]
lea edx, [ebp - 0x428]
push ebx
push edx
mov dword [ebp - 0x44c], esi
mov dword [ebp - 0x43c], edi
mov dword [ebp - 0x438], ebx
setne byte [ebp - 0x429]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
call fcn.004b2d10
mov edx, dword [ebp + 8]
add esp, 0xc
mov dword [ebp - 0x434], ebx
mov dword [ebp - 0x430], ebx
test edx, edx
jle 0x43a5d2
lea ecx, [ecx]
cmp dword [ebp - 0x430], edi
jge 0x43a5d2
mov eax, edx
sub eax, ebx
xor ecx, ecx
mov dword [ebp - 0x440], ecx
mov dword [ebp - 0x458], eax
test eax, eax
jle 0x43a59e
mov eax, edi
sub eax, dword [ebp - 0x430]
add eax, 0xfffffff9
mov dword [ebp - 0x454], eax
mov eax, edi
imul eax, dword [ebp - 0x434]
mov dword [ebp - 0x448], eax
jmp 0x43a432
mov ecx, dword [ebp - 0x440]
mov edi, dword [ebp - 0x43c]
mov eax, dword [ebp - 0x448]
cmp ecx, dword [ebp - 0x454]
jge 0x43a59e
add eax, ecx
add eax, dword [ebp - 0x430]
cmp byte [ebp - 0x429], 0
mov ecx, dword [esi + 0x1984]
lea edi, [ecx + eax*4]
mov eax, dword [edi]
je 0x43a47d
mov edx, eax
mov ecx, eax
shr ecx, 0x10
and edx, 0xff0000
or edx, ecx
mov ecx, eax
and eax, 0xff00
shl ecx, 0x10
or eax, ecx
shr edx, 8
shl eax, 8
or eax, edx
mov ecx, dword [ebp - 0x10]
mov edx, eax
shr edx, cl
mov ecx, dword [ebp - 0xc]
mov esi, eax
shr esi, cl
mov ecx, dword [ebp - 8]
and edx, dword [ebp - 0x1c]
shr eax, cl
and esi, dword [ebp - 0x18]
add edi, 4
mov dword [ebp - 0x24], esi
and eax, dword [ebp - 0x14]
mov dword [ebp - 0x444], edi
mov dword [ebp - 0x20], eax
mov eax, 7
add dword [ebp - 0x438], eax
mov dword [ebp - 0x450], eax
jmp 0x43a4c3
mov edx, dword [ebp - 0x28]
cmp byte [ebp - 0x429], 0
mov eax, dword [ebp - 0x444]
mov edi, dword [eax]
je 0x43a4f8
mov ecx, edi
mov eax, edi
shr eax, 0x10
and ecx, 0xff0000
or ecx, eax
mov eax, edi
and edi, 0xff00
shl eax, 0x10
or edi, eax
shr ecx, 8
shl edi, 8
or edi, ecx
mov ecx, dword [ebp - 0x10]
mov ebx, edi
shr ebx, cl
mov ecx, dword [ebp - 0xc]
and ebx, dword [ebp - 0x1c]
mov eax, ebx
sub eax, edx
cdq
mov dword [ebp - 0x28], ebx
mov ebx, edi
mov esi, eax
shr ebx, cl
mov ecx, dword [ebp - 8]
xor esi, edx
sub esi, edx
and ebx, dword [ebp - 0x18]
shr edi, cl
mov eax, ebx
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], ebx
and edi, dword [ebp - 0x14]
cdq
xor eax, edx
sub eax, edx
add esi, eax
mov eax, edi
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], edi
cdq
xor eax, edx
sub eax, edx
add esi, eax
cmp esi, 0xff
jle 0x43a54d
mov esi, 0xff
inc dword [ebp + esi*4 - 0x428]
add dword [ebp - 0x444], 4
dec dword [ebp - 0x450]
lea esi, [ebp + esi*4 - 0x428]
jne 0x43a4c0
mov eax, dword [ebp - 0x440]
mov ecx, dword [ebp - 0x43c]
add dword [ebp - 0x448], ecx
mov edx, dword [ebp + 8]
mov esi, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x440], eax
cmp eax, dword [ebp - 0x458]
jl 0x43a420
mov edi, ecx
cmp edi, edx
jle 0x43a5b4
add dword [ebp - 0x430], edx
mov dword [ebp - 0x434], 0
jmp 0x43a5c4
add dword [ebp - 0x434], edi
mov dword [ebp - 0x430], 0
mov ebx, dword [ebp - 0x434]
cmp ebx, edx
jl 0x43a3d0
mov eax, dword [ebp - 0x428]
add eax, dword [ebp - 0x424]
mov ebx, dword [ebp - 0x438]
imul eax, eax, 0x64
cdq
idiv ebx
cmp eax, 0x5a
jl 0x43a604
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret 4
xor eax, eax
mov ecx, 1
jmp 0x43a610
mov edx, dword [ebp + ecx*4 - 0x428]
mov esi, edx
imul esi, ecx
imul esi, ecx
add eax, esi
test edx, edx
je 0x43a5ef
mov esi, dword [ebp + ecx*4 - 0x42c]
add esi, esi
cmp edx, esi
jg 0x43a5ef
inc ecx
cmp ecx, 8
jl 0x43a610
xor esi, esi
xor edi, edi
cmp ecx, 0x100
jge 0x43a6a0
mov edx, pe_nt_image_headers32
sub edx, ecx
cmp edx, 2
jl 0x43a67f
lea edx, [ecx + 1]
mov ebx, dword [ebp + ecx*4 - 0x428]
imul ebx, ecx
imul ebx, ecx
add esi, ebx
mov ebx, dword [ebp + ecx*4 - 0x424]
imul ebx, edx
imul ebx, edx
add ecx, 2
add edi, ebx
add edx, 2
cmp ecx, 0xff
jl 0x43a653
cmp ecx, 0x100
jge 0x43a696
mov edx, dword [ebp + ecx*4 - 0x428]
imul edx, ecx
imul edx, ecx
add eax, edx
mov ebx, dword [ebp - 0x438]
add edi, esi
add eax, edi
sub ebx, dword [ebp - 0x428]
mov ecx, dword [ebp - 4]
pop edi
xor edx, edx
div ebx
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret 4