Function at 0x1e768e5
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push edx
jmp 0x1fd4308
je 0x1af8bb6
lea ebx, [ebp - 0x114]
rcl dl, 0x3d
sub ebx, eax
jmp 0x1afd7e9
cmp byte [esi + 1], 0x23
movsx cx, cl
not cx
bswap cx
lea ecx, [esi + 1]
je 0x1f6c2ca
push 0
jmp 0x1ae96ee
mov esp, ebp
mov ebp, esi
not bp
bswap bp
pop ebp
jmp 0x1ee171f
inc edi
jmp 0x1af8bac
push ecx
jmp 0x1d141c5
jne 0x1ad80b0
cmp byte [ebp + 0x10], 0
jmp 0x1d82b36
je 0x1e4b38b
mov cl, byte [esi + 1]
jmp 0x1aff228
inc eax
stc
cmp edi, ecx
jb 0x1afd7e9
lea ecx, [ebp - 0x114]
nop
bswap eax
push ecx
mov byte [ebp + edi - 0x114], 0
movzx eax, cx
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x1dcff3b
mov dl, byte [eax]
test dl, dl
jmp 0x1e768e5
inc esi
test cl, cl
jmp 0x1e7f528
mov esp, ebp
pop ebp
ret
pop esi
jmp 0x1dfe553
jae 0x1e7f52e
sub edi, edi
stc
test ecx, ecx
jmp 0x1ad68ba
push edi
jmp 0x284d817
ja 0x1fd1629
movsx eax, cl
shr cl, cl
mov cl, byte [esi]
clc
lea edx, [edx + edx*4]
clc
cmp al, 6
lea edx, [eax + edx*2 - 0x30]
jmp 0x1f45c2a
je 0x1e7f52e
mov edx, dword [ebp + 8]
cmp edi, edx
jmp 0x1aeb341
call fcn.0285fa15
add esp, 4
test eax, eax
jmp 0x284a358
je 0x1f86079
mov eax, 0x5a4d
test esi, 0x6ab32c1f
jmp 0x1edda3e
jmp 0x1f589c4
je 0x1d9629c
mov edi, dword [ebp + 0xc]
sbb cx, si
sar bl, cl
shrd esi, ebx, 0x26
lea ecx, [ebp - 0x114]
cmovae esi, ebx
btr esi, eax
xor eax, eax
sar bx, 0x7e
sub edi, ecx
not cl
lea esp, [esp]
mov cl, al
mov ebx, 0x1c602ac
rol ebx, cl
or si, 0x6567
lea esi, [ebp + eax - 0x114]
lea ecx, [eax + ebx]
cmp bp, bx
xor cl, byte [edi + esi]
mov byte [esi], cl
jmp 0x288142b
je 0x1f86079
mov eax, dword [eax + ecx + 0x7c]
push ebx
push edi
jmp 0x2838522
mov eax, dword [ebp + 0xc]
jmp 0x283844a
mov dword [ebp - 0xc], eax
js 0x1e4638f
jmp 0x1e37149
call eax
mov edi, eax
test bh, 0xe5
cmc
cmp cl, dl
test edi, edi
jne 0x1d78bd7
lea edx, [ebp - 0x114]
push edx
bswap ax
cmovg ax, sp
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov edi, eax
cmc
test edi, edi
jmp 0x1d78bd1
jb 0x1e84a28
mov esi, dword [ebp - 0x10]
test ebp, 0x3f74492
test si, bx
add esi, edx
cmc
cmp eax, esi
jmp 0x1f559b5
ja 0x1f64fd7
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
jmp 0x282ac96
mov eax, dword [ecx + 0x3c]
test ch, 8
cmp dword [eax + ecx], 0x4550
jmp 0x1e05018
mov esp, ebp
movsx ebp, di
pop ebp
ret
jne 0x1f86079
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
test edx, edx
jmp 0x1d932c0
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
adc esi, esp
lea esi, [edi + ebx]
cmp ebp, 0x4dec38d3
test eax, ebp
sar esi, 1
cmc
clc
cmp dh, dh
mov eax, dword [eax + esi*4]
test bx, di
push edx
mov edx, dword [ebp + 0xc]
clc
add eax, ecx
jmp 0x1d7cff8
mov eax, dword [ebp + 8]
not edx
mov ecx, dword [ebp - 4]
sar dx, cl
shl dh, 0x68
cmp di, 0x7d0
mov edx, dword [ecx + eax + 0x24]
cmc
movzx ecx, cx
lea ecx, [edx + esi*2]
rcl edx, 0x23
sbb edx, 0x3ac825a5
bts dx, bx
movzx edx, word [ecx + eax]
sbb cx, 0x2c2a
mov dword [ebp - 8], edx
shrd cx, dx, 0xa4
inc cl
mov ecx, eax
mov edx, dword [ebp - 4]
shl eax, cl
inc ah
mov eax, dword [ebp - 8]
stc
cmp eax, dword [edx + ecx + 0x14]
jae 0x1e7f52e
mov esi, dword [edx + ecx + 0x1c]
jmp 0x1e74458
mov ecx, esi
sub ecx, eax
cmp ecx, 0x104
jmp 0x1d102e1
jle 0x1e37146
jmp 0x1e46388
lea eax, [esi + eax*4]
test di, dx
cmp bx, 0x12a9
clc
mov eax, dword [eax + ecx]
test eax, eax
jmp 0x2881269
je 0x1af8bb6
mov byte [ebx + eax], dl
jmp 0x1ae4041
jne 0x1f3d5d2
pop edi
pop ebx
bts si, di
sub eax, eax
not si
mov si, sp
pop esi
mov esp, ebp
not bp
movzx ebp, si
pop ebp
ret
pop edi
sbb esi, eax
pop ebx
add eax, ecx
xchg esi, esi
cmovns esi, esp
pop esi
jmp 0x1efe707
push ebp
mov ebp, esp
mov ecx, dword [ebp + 8]
cmp eax, 0x70434c57
lea esp, [esp - 0x114]
test sp, si
push esi
test bh, ah
test ah, 0x11
test ecx, ecx
je 0x1f86079
mov esi, dword [ebp + 0xc]
test esp, 0x65ac7111
clc
stc
test esi, esi
jmp 0x1d7e033
cmp word [ecx], ax
jmp 0x1f86073
ret
mov esp, ebp
pop ebp
jmp 0x1fde04b
ret
je 0x1e7f52e
cmp cl, 0x2e
jmp 0x1aedabf
test cl, cl
jmp 0x1fd1623
jae 0x1e84a28
add eax, ecx
mov cl, byte [eax]
mov esi, eax
cmp si, ax
test cl, cl
jmp 0x1f3d5cc
jle 0x1e46348
lea ebx, [esi + 1]
mov ecx, esp
stc
sub cl, ah
mov ecx, dword [ebp + 8]
stc
cmp edi, edi
cmp ebx, edi
jmp 0x1e5aac6
cmp esi, 0xffff
jmp 0x1df552c
mov edi, dword [edx + ecx + 0x18]
test edi, edi
je 0x1e4638f
mov eax, dword [edx + ecx + 0x20]
cmp esp, edi
lea eax, [eax + ecx]
xor ebx, ebx
jmp 0x2852551
sub edx, edx
test cl, cl
je 0x1fd1629
lea eax, [ecx - 0x30]
jmp 0x1fdd647
mov cl, byte [esi + 2]
lea esi, [esi + 2]
jmp 0x1f69658
mov esp, ebp
xchg bp, bp
pop ebp
jmp 0x1f0356f
je 0x1df894e
sub eax, eax
xchg esi, esi
not si
pop esi
jmp 0x1adaf58
jb 0x1d82b65
lea eax, [ebp - 0x114]
jmp 0x1dccd63
jne 0x1f69662
push 0
jmp 0x1ad2771
push edi
call fcn.01ed7759
add esp, 0xc
movzx esi, dx
pop edi
mov esi, eax
movsx ebx, ax
pop ebx
xchg esi, esi
not si
pop esi
jmp 0x1b0e115
inc esi
test cx, 0x39d0
cmp al, 9
jmp 0x1d178b5
ret
mov dword [ebp - 8], eax
jmp 0x1e4638f
push eax
push edx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
cmovbe bx, sp
not si
pop ebx
cmova esi, ebx
mov si, 0x6646
pop esi
jmp 0x1f82ca6
mov dword [ebp - 0x10], eax
cmp edi, 0x9767927
cmp si, ax
mov dword [ebp - 8], 0xffffffff
jmp 0x1f5fcf4
jns 0x1f589b6
lea edi, [esi - 1]
jmp 0x1d7f365
call fcn.01ed7759
add esp, 0xc
mov si, dx
movzx ebx, di
pop edi
pop ebx
movsx esi, dx
cmovs si, si
jmp 0x1d0baf0
dec edi
jmp 0x1da1e9b
je 0x1e7f52e
cmp eax, edx
jmp 0x1de5f1d
je 0x1fa9af1
inc eax
cmp eax, 0x104
jmp 0x1fa9aeb