Function at 0x4f4a70
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x20
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
cmp dword [esi + 4], ebx
jne 0x4f4a90
xor al, al
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x28]
mov edi, 1
cmp eax, ebx
jne 0x4f4b5f
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x14], ebx
cmp ecx, ebx
jle 0x4f4bc3
xor eax, eax
mov dword [esp + 0x18], eax
cdq
idiv ecx
mov dword [esi + 0x144], eax
mov eax, dword [esi + 0x148]
test eax, eax
jne 0x4f4bc3
mov eax, dword [esi + 0xc]
xor ebx, ebx
test eax, eax
jle 0x4f4b3e
mov eax, dword [esp + 0x14]
push 1
push eax
lea ecx, [esp + 0x24]
push ebx
push ecx
mov ecx, esi
call fcn.004e6d50
mov eax, dword [eax]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x21]
and ecx, 0xff
and eax, 0xff
lea edx, [ecx + ecx*2]
lea edx, [edx + edx*4]
lea edx, [edx + edx*4]
lea ebp, [ecx + edx*8]
mov edx, dword [esp + 0x22]
and edx, 0xff
mov ecx, edx
shl ecx, 4
add ecx, edx
lea edx, [eax + eax*2]
lea ecx, [ecx + ecx*8]
lea eax, [eax + edx*4]
lea ecx, [ebp + ecx*2]
lea eax, [eax + eax*8]
add ecx, eax
sar ecx, 0xa
cmp ecx, edi
jbe 0x4f4b36
mov edi, ecx
mov eax, dword [esi + 0xc]
inc ebx
cmp ebx, eax
jl 0x4f4ad5
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 0x10]
inc edx
add eax, 0x32
cmp edx, ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
jl 0x4f4ab5
jmp 0x4f4bc3
jle 0x4f4bc3
lea ecx, [esp + 0x1c]
push ebx
push ecx
mov ecx, esi
call fcn.004e6b10
mov eax, dword [eax]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x21]
and ecx, 0xff
and eax, 0xff
lea edx, [ecx + ecx*2]
lea edx, [edx + edx*4]
lea edx, [edx + edx*4]
lea ebp, [ecx + edx*8]
mov edx, dword [esp + 0x22]
and edx, 0xff
mov ecx, edx
shl ecx, 4
add ecx, edx
lea edx, [eax + eax*2]
lea ecx, [ecx + ecx*8]
lea eax, [eax + edx*4]
lea ecx, [ebp + ecx*2]
lea eax, [eax + eax*8]
add ecx, eax
sar ecx, 0xa
cmp ecx, edi
jbe 0x4f4bbb
mov edi, ecx
mov eax, dword [esi + 0x28]
inc ebx
cmp ebx, eax
jl 0x4f4b61
mov dword [esp + 0x20], edi
xor edi, edi
mov dword [esp + 0x24], edi
mov eax, dword [esi + 0x28]
fild qword [esp + 0x20]
cmp eax, edi
fadd qword [0xad5408]
fldln2
fxch st(1)
fyl2x
fdivr qword [0xad5558]
fstp qword [esp + 0x28]
jne 0x4f4cab
mov ecx, dword [esi + 0x10]
xor ebx, ebx
cmp ecx, edi
jle 0x4f4d13
xor ebp, ebp
mov eax, ebp
cdq
idiv ecx
add eax, 0x32
mov dword [esi + 0x144], eax
mov eax, dword [esi + 0x148]
test eax, eax
jne 0x4f4d13
mov eax, dword [esi + 0xc]
xor edi, edi
test eax, eax
jle 0x4f4c92
push 1
push ebx
lea ecx, [esp + 0x24]
push edi
push ecx
mov ecx, esi
call fcn.004e6d50
mov eax, dword [eax]
push eax
call fcn.004eadf0
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x26]
and edx, 0xff
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
fild dword [esp + 0x1c]
fadd qword [0xad5408]
fldln2
fxch st(1)
fyl2x
fmul qword [esp + 0x2c]
call sub.msvcrt.dll__ftol
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x18]
push eax
call fcn.004ead00
add esp, 8
mov ecx, esi
push 0
push eax
push ebx
push edi
call fcn.004e70a0
mov eax, dword [esi + 0xc]
inc edi
cmp edi, eax
jl 0x4f4c26
mov ecx, dword [esi + 0x10]
inc ebx
add ebp, 0x32
cmp ebx, ecx
jl 0x4f4c01
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
jle 0x4f4d13
lea ecx, [esp + 0x1c]
push edi
push ecx
mov ecx, esi
call fcn.004e6b10
mov eax, dword [eax]
push eax
call fcn.004eadf0
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x26]
and edx, 0xff
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
fild dword [esp + 0x1c]
fadd qword [0xad5408]
fldln2
fxch st(1)
fyl2x
fmul qword [esp + 0x2c]
call sub.msvcrt.dll__ftol
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x18]
push eax
call fcn.004ead00
add esp, 8
mov ecx, esi
push eax
push edi
call fcn.004e6a50
mov eax, dword [esi + 0x28]
inc edi
cmp edi, eax
jl 0x4f4cad
pop edi
mov al, 1
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret