Function at 0x4d3374
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff7c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ecx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
xor eax, eax
push ebp
push 0x4d3b14
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 7
mov eax, dword [ebp - 0x14]
call fcn.00429cdc
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
test eax, eax
je 0x4d33c3
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
test eax, eax
jne 0x4d33d7
mov edx, ebx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov edx, ebx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x9c]
mov edx, edi
call fcn.004d4358
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov dl, byte [edx + 0x48]
call fcn.004239d0
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov dl, byte [edx + 0x49]
call fcn.0042399c
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov dl, byte [edx + 0x59]
call fcn.00423a00
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x2c]
call fcn.004238f8
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
mov eax, dword [eax + 0xc]
xor edx, edx
call fcn.004236d0
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x10]
mov dx, word [edx + 0x44]
call fcn.004053ec
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
mov eax, dword [eax + 0xc]
push eax
mov dword [ebp - 0x70], ebx
fild dword [ebp - 0x70]
mov eax, dword [ebp - 0x10]
fmul qword [eax + 0x50]
call fcn.00402fc4
mov edx, eax
pop eax
call fcn.004238b8
push 0
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x14]
call fcn.00533e9c
lea edx, [ebp - 0x80]
mov ecx, 0xffffff
mov eax, dword [ebp - 0x14]
call fcn.00506cc8
mov eax, dword [ebp + 0x10]
push esi
mov esi, eax
lea edi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x58], 0
je 0x4d34e4
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
push 0
push 1
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
lea ecx, [ebp - 0x5c]
mov edx, dword [ebp - 0x2c]
mov dx, word [edx]
call fcn.004d2af4
jmp 0x4d350b
push 0xf00
lea eax, [ebp - 0x5c]
push eax
push 1
mov eax, dword [ebp - 0x2c]
call fcn.00405478
push eax
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
call fcn.00424800
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edi, eax
lea eax, [ebp - 0x5c]
xor edx, edx
call fcn.00533ffc
sub edi, eax
sar edi, 1
jns 0x4d3528
adc edi, 0
mov dword [ebp - 0x6c], edi
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edi, eax
lea eax, [ebp - 0x5c]
xor edx, edx
call fcn.00534010
sub edi, eax
sar edi, 1
jns 0x4d3548
adc edi, 0
mov dword [ebp - 0x68], edi
lea eax, [ebp - 0x5c]
xor edx, edx
call fcn.00533ffc
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x5c]
xor edx, edx
call fcn.00534010
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x60], eax
test esi, esi
je 0x4d358d
mov dword [ebp - 0x70], esi
fild dword [ebp - 0x70]
mov eax, dword [ebp - 0x10]
fmul qword [eax + 0x50]
call fcn.00402fc4
lea edx, [ebp - 0x6c]
mov ecx, eax
xor eax, eax
xchg edx, eax
call fcn.004073a0
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0xc], 0
je 0x4d365f
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x58], 0
je 0x4d35d3
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xc]
push eax
push 0
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x2c]
mov dx, word [edx]
call fcn.004d2af4
jmp 0x4d36bc
mov eax, dword [ebp - 0x14]
call fcn.0052a920
mov ebx, eax
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
mov eax, dword [eax + 0xc]
push eax
mov eax, ebx
call fcn.00428ccc
mov eax, dword [eax + 0xc]
pop edx
mov ecx, dword [eax]
call dword [ecx + 8]
call fcn.004d2e9c
push 0xb04
lea eax, [ebp - 0x6c]
push eax
push 1
mov eax, dword [ebp - 0x2c]
call fcn.00405478
push eax
mov eax, ebx
call fcn.00428ccc
call fcn.00424800
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xc]
mov ecx, 0x168
cdq
idiv ecx
push edx
lea edx, [ebp - 0x80]
mov eax, ebx
call fcn.00533e9c
lea eax, [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
call fcn.00424800
mov edx, ebx
pop ecx
call fcn.0052ee18
mov eax, ebx
call fcn.00403d64
jmp 0x4d36bc
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x58], 0
je 0x4d3690
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
push 0
push 0
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x2c]
mov dx, word [edx]
call fcn.004d2af4
jmp 0x4d36bc
call fcn.004d2e9c
push 0xb04
lea eax, [ebp - 0x6c]
push eax
push 1
mov eax, dword [ebp - 0x2c]
call fcn.00405478
push eax
mov eax, dword [ebp - 0x14]
call fcn.00428ccc
call fcn.00424800
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x80]
cmp ebx, 0x1fffffff
je 0x4d36e0
mov eax, ebx
xor edx, edx
call fcn.00517808
call fcn.00506ca0
mov dword [ebp - 0x18], eax
jmp 0x4d3706
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x38]
cmp ebx, 0x1fffffff
je 0x4d3701
mov eax, ebx
xor edx, edx
call fcn.00517808
call fcn.00506ca0
mov dword [ebp - 0x18], eax
jmp 0x4d3706
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x40], 0x1fffffff
je 0x4d375f
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x80]
cmp ebx, 0x1fffffff
je 0x4d3739
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x38]
xor edx, edx
call fcn.00517808
call fcn.00506ca0
cmp ebx, eax
je 0x4d375f
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x94], 0x1fffffff
jne 0x4d375f
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x40]
xor edx, edx
call fcn.00517808
call fcn.00506ca0
mov dword [ebp - 0x24], eax
jmp 0x4d3766
mov dword [ebp - 0x24], 0x1fffffff
lea ecx, [ebp - 8]
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x14]
call fcn.0051dea4
test al, al
je 0x4d3af7
cmp dword [ebp - 0x24], 0x1fffffff
jne 0x4d38aa
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa8], 0
jne 0x4d3834
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xa5], 0xff
je 0x4d3834
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
dec eax
test eax, eax
jl 0x4d3af7
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
dec edx
test edx, edx
jl 0x4d3827
inc edx
xor esi, esi
mov eax, dword [ebp - 0xc]
lea edi, [eax + esi*4]
xor eax, eax
mov al, byte [edi + 2]
xor ecx, ecx
mov cl, byte [edi + 1]
add ecx, ecx
add eax, ecx
xor ecx, ecx
mov cl, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
mov ecx, dword [ebp - 0x18]
mov dword [edi], ecx
and eax, 0xff
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0xa5]
imul eax, ecx
shr eax, 8
mov byte [edi + 3], al
inc esi
dec edx
jne 0x4d37e3
inc dword [ebp - 0x28]
dec dword [ebp - 0x4c]
jne 0x4d37c5
jmp 0x4d3af7
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
dec eax
test eax, eax
jl 0x4d3af7
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
dec edx
test edx, edx
jl 0x4d389d
inc edx
xor esi, esi
mov eax, dword [ebp - 0xc]
lea edi, [eax + esi*4]
xor eax, eax
mov al, byte [edi + 2]
xor ecx, ecx
mov cl, byte [edi + 1]
add ecx, ecx
add eax, ecx
xor ecx, ecx
mov cl, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
mov ecx, dword [ebp - 0x18]
mov dword [edi], ecx
mov byte [edi + 3], al
inc esi
dec edx
jne 0x4d386e
inc dword [ebp - 0x28]
dec dword [ebp - 0x4c]
jne 0x4d3850
jmp 0x4d3af7
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
mov esi, eax
dec esi
xor eax, eax
mov al, byte [ebp - 0x24]
mov dl, byte [ebp - 0x18]
xor ecx, ecx
mov cl, dl
sub eax, ecx
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x40]
wait
xor eax, eax
mov al, byte [ebp - 0x23]
mov cl, byte [ebp - 0x17]
xor ebx, ebx
mov bl, cl
sub eax, ebx
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x44]
wait
movzx edi, byte [ebp - 0x22]
mov al, byte [ebp - 0x16]
xor ebx, ebx
mov bl, al
sub edi, ebx
mov dword [ebp - 0x70], edi
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x48]
wait
and edx, 0xff
mov dword [ebp - 0x70], edx
fild dword [ebp - 0x70]
fstp dword [ebp - 0x34]
wait
xor edx, edx
mov dl, cl
mov dword [ebp - 0x70], edx
fild dword [ebp - 0x70]
fstp dword [ebp - 0x38]
wait
and eax, 0xff
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
fstp dword [ebp - 0x3c]
wait
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa8], 0
jne 0x4d3a42
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xa5], 0xff
je 0x4d3a42
test esi, esi
jl 0x4d3af7
inc esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x28], 0
fld dword [ebp - 0x34]
call fcn.00402fc4
mov byte [ebp - 0x30], al
fld dword [ebp - 0x38]
call fcn.00402fc4
mov byte [ebp - 0x2f], al
fld dword [ebp - 0x3c]
call fcn.00402fc4
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
dec edx
test edx, edx
jl 0x4d3a13
inc edx
xor esi, esi
mov eax, dword [ebp - 0xc]
lea edi, [eax + esi*4]
xor eax, eax
mov al, byte [edi + 2]
xor ecx, ecx
mov cl, byte [edi + 1]
add ecx, ecx
add eax, ecx
xor ecx, ecx
mov cl, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
test al, al
jne 0x4d39f2
xor ecx, ecx
mov dword [edi], ecx
jmp 0x4d39f7
mov ecx, dword [ebp - 0x30]
mov dword [edi], ecx
and eax, 0xff
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0xa5]
imul eax, ecx
shr eax, 8
mov byte [edi + 3], al
inc esi
dec edx
jne 0x4d39c5
fld dword [ebp - 0x34]
fadd dword [ebp - 0x40]
fstp dword [ebp - 0x34]
wait
fld dword [ebp - 0x38]
fadd dword [ebp - 0x44]
fstp dword [ebp - 0x38]
wait
fld dword [ebp - 0x3c]
fadd dword [ebp - 0x48]
fstp dword [ebp - 0x3c]
wait
inc dword [ebp - 0x28]
dec dword [ebp - 0x4c]
jne 0x4d3986
jmp 0x4d3af7
test esi, esi
jl 0x4d3af7
inc esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x28], 0
fld dword [ebp - 0x34]
call fcn.00402fc4
mov byte [ebp - 0x30], al
fld dword [ebp - 0x38]
call fcn.00402fc4
mov byte [ebp - 0x2f], al
fld dword [ebp - 0x3c]
call fcn.00402fc4
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
dec edx
test edx, edx
jl 0x4d3acd
inc edx
xor esi, esi
mov eax, dword [ebp - 0xc]
lea edi, [eax + esi*4]
xor eax, eax
mov al, byte [edi + 2]
xor ecx, ecx
mov cl, byte [edi + 1]
add ecx, ecx
add eax, ecx
xor ecx, ecx
mov cl, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
test al, al
jne 0x4d3ac1
xor ecx, ecx
mov dword [edi], ecx
jmp 0x4d3ac6
mov ecx, dword [ebp - 0x30]
mov dword [edi], ecx
mov byte [edi + 3], al
inc esi
dec edx
jne 0x4d3a94
fld dword [ebp - 0x34]
fadd dword [ebp - 0x40]
fstp dword [ebp - 0x34]
wait
fld dword [ebp - 0x38]
fadd dword [ebp - 0x44]
fstp dword [ebp - 0x38]
wait
fld dword [ebp - 0x3c]
fadd dword [ebp - 0x48]
fstp dword [ebp - 0x3c]
wait
inc dword [ebp - 0x28]
dec dword [ebp - 0x4c]
jne 0x4d3a55
push ebp
call fcn.004d2ea0
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d3b1b
lea eax, [ebp - 0x2c]
call fcn.004052dc
ret