Function at 0x41fd14
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
mov ebx, ecx
test byte [ebp + 0x18], 2
mov al, byte [ebx + 0x3a67]
push esi
mov si, word [ebx + 0x3a63]
mov byte [ebp - 4], al
mov ax, word [ebx + 0x3a61]
push edi
mov di, word [ebx + 0x3a65]
mov word [ebp - 0x10], ax
mov al, byte [ebx + 0x3a68]
mov dword [ebp - 0x18], esi
mov byte [ebp - 3], al
mov al, byte [ebx + 0x3a69]
mov byte [ebp - 2], al
mov dword [ebp - 0x14], edi
je 0x41fdd1
lea eax, [ebp - 8]
push 4
push eax
call fcn.004186a8
mov eax, dword [ebp - 8]
mov cl, byte [ebp - 2]
shr eax, cl
movzx edi, di
and eax, edi
xor edx, edx
imul eax, eax, 0xff
div edi
mov cl, byte [ebp - 3]
xor edx, edx
movzx esi, si
movzx edi, al
mov eax, dword [ebp - 8]
or edi, 0x200
shr eax, cl
mov cl, byte [ebp - 4]
shl edi, 8
and eax, esi
imul eax, eax, 0xff
div esi
xor edx, edx
movzx eax, al
or edi, eax
mov eax, dword [ebp - 8]
shr eax, cl
movzx ecx, word [ebp - 0x10]
and eax, ecx
imul eax, eax, 0xff
div ecx
shl edi, 8
movzx eax, al
or edi, eax
mov dword [0x47a610], edi
jmp 0x41fdd7
mov edi, dword [0x47a610]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x38], eax
add eax, ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x34], eax
add eax, ecx
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x38]
push eax
mov ecx, ebx
call fcn.00416091
test byte [ebp + 0x18], 4
je 0x41fe79
lea eax, [ebp - 0xc]
push 4
push eax
mov ecx, ebx
call fcn.004186a8
mov eax, dword [ebp - 0xc]
mov cl, byte [ebp - 2]
movzx edi, word [ebp - 0x14]
shr eax, cl
xor edx, edx
mov cl, byte [ebp - 3]
movzx esi, word [ebp - 0x18]
and eax, edi
imul eax, eax, 0xff
div edi
xor edx, edx
movzx edi, al
mov eax, dword [ebp - 0xc]
or edi, 0x200
shr eax, cl
mov cl, byte [ebp - 4]
shl edi, 8
and eax, esi
imul eax, eax, 0xff
div esi
xor edx, edx
movzx eax, al
or edi, eax
mov eax, dword [ebp - 0xc]
shr eax, cl
movzx ecx, word [ebp - 0x10]
and eax, ecx
imul eax, eax, 0xff
div ecx
shl edi, 8
movzx eax, al
or edi, eax
mov dword [0x47a614], edi
test byte [ebp + 0x18], 8
je 0x42001f
lea eax, [ebp - 1]
push 1
push eax
mov ecx, ebx
call fcn.004186a8
test byte [ebp + 0x18], 0x10
mov edi, dword [ebx + 0xbc]
movzx eax, byte [ebp - 1]
je 0x41ffb1
lea eax, [eax + eax*2]
mov ecx, ebx
shl eax, 1
push eax
push edi
call fcn.004186a8
and dword [ebp + 0x18], 0
cmp byte [ebp - 1], 0
jbe 0x42001f
movzx eax, byte [ebp - 2]
mov dword [ebp - 0x1c], eax
movzx eax, word [ebp - 0x14]
mov dword [ebp + 0x14], eax
movzx eax, byte [ebp - 3]
mov dword [ebp - 0x20], eax
movzx eax, word [ebp - 0x18]
mov dword [ebp - 0x18], eax
movzx eax, byte [ebp - 4]
mov dword [ebp - 0x24], eax
movzx eax, word [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, dword [edi]
mov ecx, dword [ebp - 0x1c]
shr eax, cl
xor edx, edx
mov ecx, dword [ebp - 0x20]
and eax, dword [ebp + 0x14]
imul eax, eax, 0xff
div dword [ebp + 0x14]
xor edx, edx
movzx esi, al
mov eax, dword [edi]
or esi, 0x200
shr eax, cl
mov ecx, dword [ebp - 0x24]
shl esi, 8
and eax, dword [ebp - 0x18]
imul eax, eax, 0xff
div dword [ebp - 0x18]
xor edx, edx
movzx eax, al
or esi, eax
mov eax, dword [edi]
shr eax, cl
shl esi, 8
add edi, 4
and eax, dword [ebp - 0x14]
imul eax, eax, 0xff
div dword [ebp - 0x14]
movzx eax, al
or esi, eax
mov dword [0x47a614], esi
push esi
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc edi
mov edx, eax
mov dword [ebp - 0x10], ecx
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc ecx
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
add edx, eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x10]
add eax, edx
inc edi
mov dword [ebp - 0x38], eax
add eax, ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
add eax, ecx
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x38]
push eax
mov ecx, ebx
call fcn.00416091
movzx eax, byte [ebp - 1]
inc dword [ebp + 0x18]
cmp dword [ebp + 0x18], eax
jl 0x41feea
jmp 0x42001f
shl eax, 1
push eax
push edi
mov ecx, ebx
call fcn.004186a8
and dword [ebp + 0x18], 0
cmp byte [ebp - 1], 0
jbe 0x42001f
movzx eax, byte [edi]
mov edx, eax
and eax, 0xf
shr edx, 4
inc edi
mov esi, eax
push dword [0x47a614]
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc ecx
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
add eax, esi
mov esi, dword [ebp + 8]
add edx, esi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], edx
add edx, ecx
mov ecx, dword [ebp + 0x10]
inc edi
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x30], edx
call fcn.00416091
movzx eax, byte [ebp - 1]
inc dword [ebp + 0x18]
cmp dword [ebp + 0x18], eax
jl 0x41ffc6
pop edi
pop esi
pop ebx
leave
ret 0x14