Function at 0x1000180c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x1004a150
sub esp, 0x4c
mov eax, dword [0x100e1f80]
xor eax, esp
mov dword [esp + 0x48], eax
push ebx
mov ebx, dword [esp + 0x54]
xor al, al
push ebp
xor cl, cl
mov byte [esp + 0x28], 0xe8
xor ebp, ebp
mov dword [esp + 0x29], 0
push esi
push edi
mov byte [esp + 0x20], 0xe9
mov dword [esp + 0x21], 0
mov word [esp + 0x28], 0x800f
mov dword [esp + 0x2a], 0
mov byte [esp + 0x12], al
mov byte [esp + 0x13], cl
mov dword [esp + 0x14], ebp
mov dword [ebx + 0xc], ebp
mov dword [ebx + 0x10], ebp
mov edi, dword [ebx + 8]
movzx esi, al
add esi, dword [ebx]
movzx eax, cl
mov dword [esp + 0x38], eax
add edi, eax
lea eax, [esp + 0x3c]
push eax
push esi
call fcn.10005dfd
add esp, 8
mov ecx, eax
test dword [esp + 0x54], 0x1000
mov dword [esp + 0x18], ecx
jne 0x1004a42a
cmp byte [esp + 0x12], 5
mov dword [esp + 0x1c], esi
jb 0x1004a206
mov eax, esi
mov dword [esp + 0x14], 1
sub eax, edi
mov ecx, 5
sub eax, 5
mov dword [esp + 0x21], eax
lea eax, [esp + 0x20]
jmp 0x1004a332
mov dl, byte [esp + 0x42]
cmp dl, 0xe8
jne 0x1004a231
movzx eax, byte [esp + 0x3c]
mov ecx, 5
sub eax, edi
add eax, 0xfffffffb
add eax, dword [esp + 0x4c]
add eax, esi
mov dword [esp + 0x31], eax
lea eax, [esp + 0x30]
jmp 0x1004a332
mov al, dl
and al, 0xfd
cmp al, 0xe9
jne 0x1004a28f
movzx ecx, byte [esp + 0x3c]
add ecx, esi
cmp dl, 0xeb
jne 0x1004a24e
movsx eax, byte [esp + 0x4c]
add ecx, eax
jmp 0x1004a252
add ecx, dword [esp + 0x4c]
mov eax, dword [ebx]
cmp eax, ecx
ja 0x1004a26f
add eax, 5
cmp ecx, eax
jae 0x1004a26f
cmp ebp, ecx
cmovae ecx, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
jmp 0x1004a33a
sub ecx, edi
lea eax, [esp + 0x20]
sub ecx, 5
cmp esi, ebp
mov dword [esp + 0x21], ecx
mov ecx, 5
sbb edx, edx
inc edx
mov dword [esp + 0x14], edx
jmp 0x1004a332
mov dh, byte [esp + 0x43]
mov ah, dl
and ah, 0xf0
cmp ah, 0x70
je 0x1004a2c4
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x1004a2c4
mov al, dh
and al, 0xf0
cmp al, 0x80
je 0x1004a2c4
and dl, 0xfe
cmp dl, 0xc2
jne 0x1004a33a
cmp esi, ebp
sbb edx, edx
inc edx
mov dword [esp + 0x14], edx
jmp 0x1004a33a
mov al, byte [esp + 0x3c]
movzx ecx, al
add ecx, esi
cmp ah, 0x70
je 0x1004a2e0
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x1004a2e0
add ecx, dword [esp + 0x4c]
jmp 0x1004a2e7
movsx eax, byte [esp + 0x4c]
add ecx, eax
mov eax, dword [ebx]
cmp eax, ecx
ja 0x1004a301
add eax, 5
cmp ecx, eax
jae 0x1004a301
cmp ebp, ecx
cmovae ecx, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
jmp 0x1004a33a
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x1004a42a
movzx eax, dl
cmp dl, 0xf
jne 0x1004a318
movzx eax, dh
and al, 0xf
sub ecx, edi
or al, 0x80
sub ecx, 6
mov byte [esp + 0x29], al
lea eax, [esp + 0x28]
mov dword [esp + 0x2a], ecx
mov ecx, 6
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
cmp esi, ebp
jae 0x1004a34b
movzx eax, byte [esp + 0x3c]
cmp ecx, eax
jne 0x1004a42a
mov esi, dword [esp + 0x38]
lea eax, [esi + ecx]
cmp eax, 0x20
ja 0x1004a42a
mov eax, dword [ebx + 0x10]
cmp eax, 8
jae 0x1004a42a
mov dl, byte [esp + 0x12]
mov byte [eax + ebx + 0x14], dl
mov eax, dword [ebx + 0x10]
mov dl, byte [esp + 0x13]
mov byte [ebx + eax + 0x1c], dl
mov edi, dword [ebx + 8]
inc dword [ebx + 0x10]
add edi, esi
mov esi, dword [esp + 0x1c]
mov al, byte [esp + 0x12]
rep movsb byte es:[edi], byte [esi]
add al, byte [esp + 0x3c]
mov cl, dl
add cl, byte [esp + 0x18]
mov edx, dword [esp + 0x14]
mov byte [esp + 0x13], cl
mov byte [esp + 0x12], al
test edx, edx
je 0x1004a1a7
cmp al, 5
jae 0x1004a412
mov edi, dword [ebx]
movzx esi, al
mov eax, 5
sub eax, esi
push eax
lea ebp, [edi + esi]
push ebp
call fcn.1004a500
add esp, 8
test eax, eax
jne 0x1004a412
cmp byte [esp + 0x12], 2
jae 0x1004a3e7
mov eax, 2
sub eax, esi
push eax
push ebp
call fcn.1004a500
add esp, 8
test eax, eax
je 0x1004a42a
lea eax, [edi - 5]
push eax
call fcn.100049df
add esp, 4
test eax, eax
je 0x1004a42a
mov eax, dword [ebx]
sub eax, 5
push 5
push eax
call fcn.1004a500
add esp, 8
test eax, eax
je 0x1004a42a
mov dword [ebx + 0xc], 1
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.10002d8d
add esp, 0x4c
ret
mov ecx, dword [esp + 0x58]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10002d8d
add esp, 0x4c
ret