Function at 0x4e27b8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
int3
push ebp
mov ebp, esp
sub esp, 0x2d4
push ebx
push esi
push edi
mov ax, word [0x506798]
mov word [ebp - 8], ax
mov cl, byte [0x50679a]
mov byte [ebp - 6], cl
cmp dword [ebp + 0x10], 0
push eax
add byte [eax + 0x7d83fa4d], cl
adc byte [eax], al
jne 0x4e28d2
pushfd
pushal
jmp 0x4e2810
sub edx, edx
jo 0x4e27f6
jmp 0x4e2807
xor ecx, ecx
je 0x4e27ee
jmp 0x4e2800
stc
xor ecx, 3
je 0x4e2786
jmp 0x4e27fd
jmp 0x4e280b
jae 0x4e27f9
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e27f0
jmp 0x4e27ea
sbb al, 0xdb
jmp 0x4e2813
jmp 0x4e27e4
popal
popfd
push 0x2cc
push 0
lea edx, [ebp - 0x2d4]
push edx
call fcn.004e3700
add esp, 0xc
pushal
xor eax, eax
jne 0x4e2832
jmp 0x4e2847
jmp 0x4e2867
xor eax, eax
jne 0x4e284f
jp 0x4e2845
jo 0x4e2849
push cs
jmp 0x4e284a
jb 0x4e284e
jns 0x4e2833
call dword [0x74097900]
invalid
jns 0x4e2850
je 0x4e2839
jmp 0x4e27d2
xchg ebx, ebx
jp 0x4e283e
mov al, byte [0x85c76133]
sub al, 0xfd
invalid
xor esp, dword [ecx - 0x39]
test dword [edi*8 + 0x1ffff], ebp
add dword [eax], eax
popal
mov dword [ebp - 0x2d4], 0x10001
pushal
xor eax, eax
jne 0x4e2862
jmp 0x4e2877
jmp 0x4e2897
xor eax, eax
jne 0x4e287f
jp 0x4e2875
jo 0x4e2879
jmp 0x4e287a
jb 0x4e287e
jns 0x4e2863
call dword [0x74097900]
invalid
jns 0x4e2880
je 0x4e2869
jmp 0x4e2802
xchg ebx, ebx
jp 0x4e286e
mov al, byte [0x858d6133]
sub al, 0xfd
invalid
xor esp, dword [ecx - 0x73]
test dword [edi*8 - 0x74af0001], ebp
dec ebp
or byte [ebx - 0xadfbaf], cl
adc eax, sym.imp.KERNEL32.dll_GetThreadContext
popal
lea eax, [ebp - 0x2d4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
pushfd
pushal
jmp 0x4e28c4
sub edx, edx
jo 0x4e28aa
jmp 0x4e28bb
xor ecx, ecx
je 0x4e28a2
jmp 0x4e28b4
stc
xor ecx, 3
je 0x4e283a
jmp 0x4e28b1
jmp 0x4e28bf
jae 0x4e28ad
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e28a4
jmp 0x4e289e
sbb al, 0xdb
jmp 0x4e28c7
jmp 0x4e2898
popal
popfd
mov eax, dword [ebp - 0x21c]
mov dword [ebp + 0x10], eax
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
test ecx, ecx
je 0x4e2974
lea edx, [ebp - 4]
push edx
push 2
push 0x509a78
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
pushal
xor eax, eax
jne 0x4e2905
jmp 0x4e291a
jmp 0x4e293a
xor eax, eax
jne 0x4e2922
jp 0x4e2918
jo 0x4e291c
jmp 0x4e291d
jb 0x4e2921
jns 0x4e2906
call dword [0x74097900]
invalid
jns 0x4e2923
je 0x4e290c
jmp 0x4e28a5
xchg ebx, ebx
jp 0x4e2911
mov al, byte [0x458d6133]
xor esp, dword [ecx - 0x73]
inc ebp
popal
lea eax, [ebp - 4]
cld
push eax
push 2
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
pushfd
pushal
jmp 0x4e296d
or byte [ebx + 0x15ff5108], cl
inc esp
popal
push eax
add byte [eax + 0x70d22beb], bl
push cs
sub edx, edx
jo 0x4e2953
jmp 0x4e2964
xor ecx, ecx
je 0x4e294b
jmp 0x4e295d
stc
xor ecx, 3
je 0x4e28e3
jmp 0x4e295a
jmp 0x4e2968
jae 0x4e2956
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e294d
jmp 0x4e2947
sbb al, 0xdb
jmp 0x4e2970
jmp 0x4e2941
popal
popfd
jmp 0x4e29c3
lea edx, [ebp - 4]
push edx
push 2
push 0x509a78
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
pushfd
pushal
jmp 0x4e29be
sub edx, edx
jo 0x4e29a4
jmp 0x4e29b5
xor ecx, ecx
je 0x4e299c
jmp 0x4e29ae
stc
xor ecx, 3
je 0x4e2934
jmp 0x4e29ab
jmp 0x4e29b9
jae 0x4e29a7
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e299e
jmp 0x4e2998
sbb al, 0xdb
jmp 0x4e29c1
jmp 0x4e2992
popal
popfd
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret