Function at 0x460ff0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
mov ebx, dword [ebp + 0x10]
mov eax, ecx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
cmp edi, edx
je 0x461387
test edi, edi
js 0x461367
test esi, esi
js 0x461367
je 0x461035
xor edx, edx
mov eax, 0x7fffffff
div esi
cmp edi, eax
jg 0x461367
mov ecx, edi
imul ecx, esi
mov dword [ebp - 0x18], ecx
test ecx, ecx
js 0x461367
test ebx, ebx
js 0x461367
je 0x461060
xor edx, edx
mov eax, 0x7fffffff
div ebx
cmp ecx, eax
jg 0x461367
mov eax, ecx
imul eax, ebx
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x14], eax
test eax, eax
je 0x461367
mov dword [ebp + 8], 0
test ebx, ebx
jle 0x461323
mov edx, dword [ebp - 8]
lea ebx, [esi - 1]
mov dword [ebp - 0x10], eax
lea ecx, [edx*8 - 0xa]
add ecx, edi
imul edx, esi
mov esi, dword [ebp - 4]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], edx
nop word [eax + eax]
cmp ecx, 0x19
ja case.0x4610c0.3
movzx ecx, byte [ecx + 0x4613c4]
jmp dword [ecx*4 + 0x461390]
mov edx, ebx
test edx, edx
js 0x4612fe
sub edx, 1
mov cl, byte [esi]
mov byte [eax], cl
lea esi, [esi + 1]
mov byte [eax + 1], 0xff
lea eax, [eax + 2]
jns 0x4610d1
jmp 0x4612fe
mov edx, ebx
test edx, edx
js 0x4612fe
sub edx, 1
mov cl, byte [esi]
mov byte [eax + 2], cl
lea esi, [esi + 1]
mov byte [eax + 1], cl
lea eax, [eax + 3]
mov byte [eax - 3], cl
jns 0x4610f3
jmp 0x4612fe
mov edx, ebx
test edx, edx
js 0x4612fe
sub edx, 1
mov cl, byte [esi]
mov byte [eax + 2], cl
lea esi, [esi + 1]
mov byte [eax + 1], cl
lea eax, [eax + 4]
mov byte [eax - 4], cl
mov byte [eax - 1], 0xff
jns 0x461118
jmp 0x4612fe
mov edx, ebx
test edx, edx
js 0x4612fe
sub edx, 1
mov cl, byte [esi]
mov byte [eax], cl
lea esi, [esi + 2]
lea eax, [eax + 1]
jns 0x461141
jmp 0x4612fe
mov edx, ebx
test edx, edx
js 0x4612fe
nop
sub edx, 1
mov cl, byte [esi]
mov byte [eax + 2], cl
lea esi, [esi + 2]
mov byte [eax + 1], cl
lea eax, [eax + 3]
mov byte [eax - 3], cl
jns 0x461160
jmp 0x4612fe
mov edx, ebx
test edx, edx
js 0x4612fe
sub edx, 1
mov cl, byte [esi]
mov byte [eax + 2], cl
lea esi, [esi + 2]
mov byte [eax + 1], cl
lea eax, [eax + 4]
mov byte [eax - 4], cl
movzx ecx, byte [esi - 1]
mov byte [eax - 1], cl
jns 0x461185
jmp 0x4612fe
mov edx, ebx
test edx, edx
js 0x4612fe
sub edx, 1
movzx ecx, byte [esi]
mov byte [eax], cl
lea esi, [esi + 3]
movzx ecx, byte [esi - 2]
lea eax, [eax + 4]
mov byte [eax - 3], cl
movzx ecx, byte [esi - 1]
mov byte [eax - 2], cl
mov byte [eax - 1], 0xff
jns 0x4611b1
jmp 0x4612fe
mov edi, ebx
test edi, edi
js 0x4612fe
movzx ecx, byte [esi + 1]
lea esi, [esi + 3]
imul edx, ecx, 0x96
lea eax, [eax + 1]
movzx ecx, byte [esi - 1]
imul ecx, ecx, 0x1d
add edx, ecx
movzx ecx, byte [esi - 3]
imul ecx, ecx, 0x4d
add edx, ecx
shr edx, 8
sub edi, 1
mov byte [eax - 1], dl
jns 0x4611e2
jmp 0x4612fe
mov edi, ebx
test edi, edi
js 0x4612fe
nop
movzx ecx, byte [esi + 1]
lea esi, [esi + 3]
imul edx, ecx, 0x96
lea eax, [eax + 2]
movzx ecx, byte [esi - 1]
imul ecx, ecx, 0x1d
add edx, ecx
movzx ecx, byte [esi - 3]
imul ecx, ecx, 0x4d
mov byte [eax - 1], 0xff
add edx, ecx
shr edx, 8
sub edi, 1
mov byte [eax - 2], dl
jns 0x461220
jmp 0x4612fe
mov edi, ebx
test edi, edi
js 0x4612fe
movzx ecx, byte [esi + 1]
lea esi, [esi + 4]
imul edx, ecx, 0x96
lea eax, [eax + 1]
movzx ecx, byte [esi - 2]
imul ecx, ecx, 0x1d
add edx, ecx
movzx ecx, byte [esi - 4]
imul ecx, ecx, 0x4d
add edx, ecx
shr edx, 8
sub edi, 1
mov byte [eax - 1], dl
jns 0x461260
jmp 0x4612fe
mov edi, ebx
test edi, edi
js 0x4612fe
nop dword [eax]
movzx ecx, byte [esi + 1]
lea esi, [esi + 4]
imul edx, ecx, 0x96
lea eax, [eax + 2]
movzx ecx, byte [esi - 2]
imul ecx, ecx, 0x1d
add edx, ecx
movzx ecx, byte [esi - 4]
imul ecx, ecx, 0x4d
add edx, ecx
shr edx, 8
sub edi, 1
mov byte [eax - 2], dl
mov cl, byte [esi - 1]
mov byte [eax - 1], cl
jns 0x4612a0
jmp 0x4612fe
mov edx, ebx
test edx, edx
js 0x4612fe
nop dword [eax + eax]
sub edx, 1
movzx ecx, byte [esi]
mov byte [eax], cl
lea esi, [esi + 4]
movzx ecx, byte [esi - 3]
lea eax, [eax + 3]
mov byte [eax - 2], cl
movzx ecx, byte [esi - 2]
mov byte [eax - 1], cl
jns 0x4612e0
mov ecx, dword [ebp + 8]
mov esi, dword [ebp - 0xc]
inc ecx
mov eax, dword [ebp - 0x10]
add esi, dword [ebp - 8]
add eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + 0x10]
mov dword [ebp + 8], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x10], eax
jl 0x4610b0
push dword [ebp - 4]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [ebp - 0x14]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [ebp - 4]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
push dword [ebp - 0x14]
call esi
mov eax, dword fs:[0x2c]
add esp, 8
mov eax, dword [eax]
pop edi
pop esi
pop ebx
mov dword [eax + 0x10], str.unsupported
xor eax, eax
mov esp, ebp
pop ebp
ret
push dword [ebp - 4]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword fs:[0x2c]
add esp, 4
mov eax, dword [eax]
mov dword [eax + 0x10], str.outofmem
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret