Function at 0x439fc0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x458
mov eax, dword [0x4ea5e0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor eax, eax
push esi
mov esi, ecx
xor ebx, ebx
cmp byte [esi + 0x22], al
push edi
sete al
xor ecx, ecx
cmp byte [esi + 0x12], cl
mov edi, edx
movzx edx, word [esi + 0x24]
sete cl
mov dword [ebp - 0x1c], edx
movzx edx, byte [esi + 0x2a]
push 0x400
mov dword [ebp - 0x10], edx
cmp ecx, eax
movzx eax, word [esi + 0x26]
movzx ecx, word [esi + 0x28]
mov dword [ebp - 0x18], eax
movzx eax, byte [esi + 0x2b]
mov dword [ebp - 0x14], ecx
movzx ecx, byte [esi + 0x2c]
lea edx, [ebp - 0x428]
push ebx
push edx
mov dword [ebp - 0x44c], esi
mov dword [ebp - 0x43c], edi
mov dword [ebp - 0x438], ebx
setne byte [ebp - 0x429]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
call fcn.004b2d10
mov edx, dword [ebp + 8]
add esp, 0xc
mov dword [ebp - 0x434], ebx
mov dword [ebp - 0x430], ebx
test edx, edx
jle 0x43a23c
lea ecx, [ecx]
cmp dword [ebp - 0x430], edi
jge 0x43a23c
mov eax, edx
sub eax, ebx
xor ecx, ecx
mov dword [ebp - 0x440], ecx
mov dword [ebp - 0x458], eax
test eax, eax
jle 0x43a208
mov eax, edi
sub eax, dword [ebp - 0x430]
add eax, 0xfffffff9
mov dword [ebp - 0x454], eax
mov eax, edi
imul eax, dword [ebp - 0x434]
mov dword [ebp - 0x448], eax
jmp 0x43a0c2
mov ecx, dword [ebp - 0x440]
mov edi, dword [ebp - 0x43c]
mov eax, dword [ebp - 0x448]
cmp ecx, dword [ebp - 0x454]
jge 0x43a208
add eax, ecx
add eax, dword [ebp - 0x430]
cmp byte [ebp - 0x429], 0
mov ecx, dword [esi + 0x1984]
lea edi, [ecx + eax*2]
movzx eax, word [edi]
je 0x43a0f2
rol ax, 8
movzx eax, ax
movzx ecx, word [ebp - 0x10]
movzx eax, ax
mov edx, eax
shr edx, cl
movzx ecx, word [ebp - 0xc]
and edx, dword [ebp - 0x1c]
mov esi, eax
shr esi, cl
movzx ecx, word [ebp - 8]
and esi, dword [ebp - 0x18]
shr eax, cl
add edi, 2
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x444], edi
and eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, 7
add dword [ebp - 0x438], eax
mov dword [ebp - 0x450], eax
jmp 0x43a143
mov edx, dword [ebp - 0x28]
cmp byte [ebp - 0x429], 0
mov eax, dword [ebp - 0x444]
movzx eax, word [eax]
je 0x43a15c
rol ax, 8
movzx eax, ax
movzx ecx, word [ebp - 0x10]
movzx edi, ax
mov ebx, edi
shr ebx, cl
movzx ecx, word [ebp - 0xc]
and ebx, dword [ebp - 0x1c]
mov eax, ebx
sub eax, edx
cdq
mov dword [ebp - 0x28], ebx
mov ebx, edi
mov esi, eax
shr ebx, cl
movzx ecx, word [ebp - 8]
and ebx, dword [ebp - 0x18]
xor esi, edx
sub esi, edx
mov eax, ebx
sub eax, dword [ebp - 0x24]
shr edi, cl
cdq
xor eax, edx
and edi, dword [ebp - 0x14]
sub eax, edx
add esi, eax
mov eax, edi
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], ebx
cdq
xor eax, edx
sub eax, edx
add esi, eax
mov dword [ebp - 0x20], edi
cmp esi, 0xff
jle 0x43a1b7
mov esi, 0xff
inc dword [ebp + esi*4 - 0x428]
add dword [ebp - 0x444], 2
dec dword [ebp - 0x450]
lea esi, [ebp + esi*4 - 0x428]
jne 0x43a140
mov eax, dword [ebp - 0x440]
mov ecx, dword [ebp - 0x43c]
add dword [ebp - 0x448], ecx
mov edx, dword [ebp + 8]
mov esi, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x440], eax
cmp eax, dword [ebp - 0x458]
jl 0x43a0b0
mov edi, ecx
cmp edi, edx
jle 0x43a21e
add dword [ebp - 0x430], edx
mov dword [ebp - 0x434], 0
jmp 0x43a22e
add dword [ebp - 0x434], edi
mov dword [ebp - 0x430], 0
mov ebx, dword [ebp - 0x434]
cmp ebx, edx
jl 0x43a060
mov eax, dword [ebp - 0x428]
add eax, dword [ebp - 0x424]
mov ebx, dword [ebp - 0x438]
imul eax, eax, 0x64
cdq
idiv ebx
cmp eax, 0x5a
jl 0x43a26e
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret 4
xor eax, eax
mov ecx, 1
jmp 0x43a280
mov edx, dword [ebp + ecx*4 - 0x428]
mov esi, edx
imul esi, ecx
imul esi, ecx
add eax, esi
test edx, edx
je 0x43a259
mov esi, dword [ebp + ecx*4 - 0x42c]
add esi, esi
cmp edx, esi
jg 0x43a259
inc ecx
cmp ecx, 8
jl 0x43a280
xor esi, esi
xor edi, edi
cmp ecx, 0x100
jge 0x43a310
mov edx, pe_nt_image_headers32
sub edx, ecx
cmp edx, 2
jl 0x43a2ef
lea edx, [ecx + 1]
mov ebx, dword [ebp + ecx*4 - 0x428]
imul ebx, ecx
imul ebx, ecx
add esi, ebx
mov ebx, dword [ebp + ecx*4 - 0x424]
imul ebx, edx
imul ebx, edx
add ecx, 2
add edi, ebx
add edx, 2
cmp ecx, 0xff
jl 0x43a2c3
cmp ecx, 0x100
jge 0x43a306
mov edx, dword [ebp + ecx*4 - 0x428]
imul edx, ecx
imul edx, ecx
add eax, edx
mov ebx, dword [ebp - 0x438]
add edi, esi
add eax, edi
sub ebx, dword [ebp - 0x428]
mov ecx, dword [ebp - 4]
pop edi
xor edx, edx
div ebx
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret 4