Function at 0x4bed87
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
and word [ebp - 0x1c], 0
push ebx
push esi
push edi
xor eax, eax
lea edi, [ebp - 0x1a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0
sub esp, 0x10
lea esi, [ebp + 8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f9794
add esp, 0x14
test eax, eax
jne 0x4bedec
movzx eax, word [ebp + 0x14]
push eax
movzx eax, word [ebp + 0x12]
push eax
movzx eax, word [ebp + 0x10]
push eax
movzx eax, word [ebp + 0xe]
push eax
movzx eax, word [ebp + 0xa]
push eax
movzx eax, word [ebp + 8]
push eax
push str.:3:An_invalid_date_was_passed_into_SetLastTimeInternetAccessGOOD__:__04d__02d__02d____02d:_02d._02d
call fcn.0042bd38
add esp, 0x1c
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
xor esi, esi
mov ebx, str.intsg.dat
push 0x2cd
push str..Security.c
push ebx
push 0
call fcn.00493030
pop ecx
pop ecx
mov edx, 0x54f4b4
mov ecx, eax
call fcn.00434df1
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 8], eax
jne 0x4bee65
push 0x15e
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 3
jl 0x4bedf3
movzx eax, word [ebp + 0x14]
push eax
movzx eax, word [ebp + 0x12]
push eax
movzx eax, word [ebp + 0x10]
push eax
movzx eax, word [ebp + 0xe]
push eax
movzx eax, word [ebp + 0xa]
push eax
movzx eax, word [ebp + 8]
push eax
push ebx
push 0
call fcn.00493030
pop ecx
pop ecx
push eax
push str.:7:SetLastTimeInternetAccessGOOD___FAILED:_fopen___s____wb___FAILED:__04d__02d__02d____02d:_02d._02d
call fcn.0042b70b
add esp, 0x20
jmp 0x4bede5
lea esi, [ebp + 8]
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0046b2ee
mov ecx, eax
call fcn.004707d3
test eax, eax
mov dword [ebp - 0xc], eax
jne 0x4bee8d
push str.:7:SetLastTimeInternetAccessGOOD___was_called_before_the_TAMS_server_ip_address_was_initialized__
call fcn.0042bd38
pop ecx
and dword [ebp - 4], 0
mov eax, dword [ebp - 4]
mov cl, byte [ebp + eax - 0x1c]
push dword [ebp - 8]
add cl, al
add cl, 2
movzx eax, cl
push eax
call fcn.00531f15
cmp eax, 0xffffffff
pop ecx
pop ecx
je 0x4beeea
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x14
jb 0x4bee91
xor eax, eax
push 0x64
inc eax
call fcn.00468c65
mov esi, eax
test esi, esi
pop ecx
jl 0x4beee5
push dword [ebp - 8]
call fcn.00531157
cdq
mov ecx, 0xff
idiv ecx
push edx
call fcn.00531f15
dec esi
pop ecx
pop ecx
jns 0x4beeca
xor esi, esi
inc esi
jmp 0x4bef25
movzx eax, word [ebp + 0x14]
push eax
movzx eax, word [ebp + 0x12]
push eax
movzx eax, word [ebp + 0x10]
push eax
movzx eax, word [ebp + 0xe]
push eax
movzx eax, word [ebp + 0xa]
push eax
movzx eax, word [ebp + 8]
push eax
push dword [ebp - 4]
push ebx
push 0
call fcn.00493030
pop ecx
pop ecx
push eax
push str.:9:SetLastTimeInternetAccessGOOD___FAILED:_fputc___s___FAILED:_idx___d:__04d__02d__02d____02d:_02d._02d
call fcn.0042b70b
add esp, 0x24
xor esi, esi
mov ecx, dword [ebp - 8]
call fcn.00435239
mov eax, esi
jmp 0x4bede7