Function at 0x42b2af
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
sub esp, 0x254
mov eax, dword [0x483e00]
xor eax, esp
mov dword [esp + 0x250], eax
and dword [esp + 0xc], 0
lea eax, [esp + 0xc]
and dword [esp + 0x10], 0
push ebx
push ebp
mov ebp, dword [esp + 0x260]
push esi
push edi
push eax
call fcn.004019e6
mov esi, dword [esp + 0x274]
xor ebx, ebx
pop ecx
mov dword [esp + 0x1c], eax
push str.Zatlat
push 0x485c50
call fcn.0040151b
push eax
call fcn.00402dfb
mov eax, ebx
mov byte [esp + ebx + 0x6c], bl
cdq
add esp, 0xc
idiv dword [esp + 0x274]
mov al, byte [edx + esi]
mov byte [esp + ebx + 0x160], al
inc ebx
cmp ebx, 0x100
jl 0x42b2f0
xor esi, esi
xor edi, edi
mov dl, byte [esp + esi + 0x60]
movzx eax, byte [esp + esi + 0x160]
add edi, eax
movzx ecx, dl
add edi, ecx
and edi, 0x800000ff
jns 0x42b350
dec edi
or edi, 0xffffff00
inc edi
mov al, byte [esp + edi + 0x60]
mov byte [esp + esi + 0x60], al
inc esi
mov byte [esp + edi + 0x60], dl
cmp esi, 0x100
jl 0x42b32d
xor eax, eax
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x10], edi
cmp dword [esp + 0x26c], eax
jle 0x42b50a
inc eax
and eax, 0x800000ff
jns 0x42b38b
dec eax
or eax, 0xffffff00
inc eax
mov bl, byte [esp + eax + 0x60]
movzx esi, bl
add ecx, esi
mov dword [esp + 0x14], eax
and ecx, 0x800000ff
jns 0x42b3a8
dec ecx
or ecx, 0xffffff00
inc ecx
push 0
push 0
push 0
mov dword [esp + 0x24], ecx
call dword [sym.imp.USER32.dll_OffsetRect]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov al, byte [esp + edx + 0x60]
mov byte [esp + ecx + 0x60], al
mov byte [esp + edx + 0x60], bl
xor ebx, ebx
movzx eax, byte [esp + ecx + 0x60]
lea ecx, [esp + 0x60]
add eax, esi
mov dword [esp + 0x3c], ebx
movzx eax, al
add eax, ecx
mov dword [esp + 0x40], ebx
push eax
push ebx
lea ecx, [esp + 0x44]
mov dword [esp + 0x4c], ebx
call fcn.00401d6f
lea eax, [esp + 0x10]
mov dword [esp + 0x30], ebx
push eax
push ebx
lea ecx, [esp + 0x38]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
call fcn.00401e37
push 0x42c5c4
lea ecx, [esp + 0x4c]
call fcn.0040338f
xor esi, esi
mov ecx, 0x485c50
inc esi
push esi
call fcn.00403ecc
push eax
call fcn.00402dfb
cmp dword [esp + 0x60], 0xf
lea eax, [esp + 0x4c]
cmova eax, dword [esp + 0x4c]
push eax
call fcn.004123be
pop ecx
pop ecx
push esi
push esi
push esi
push 0x42c5c8
push 0x485d10
mov dword [esp + 0x24], eax
call fcn.004016c5
pop ecx
pop ecx
mov ecx, eax
call fcn.00403fc9
mov ecx, eax
call fcn.00403fc9
mov ecx, eax
call fcn.00403fc9
push eax
call fcn.00402e24
pop ecx
push 5
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
pop esi
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x28]
call fcn.00401d43
sub esi, 1
jne 0x42b48b
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
push 3
mov ecx, dword [edx + 4]
mov esi, dword [eax + ecx*4]
mov ecx, dword [edx + 0x10]
mov eax, dword [esp + 0x40]
mov al, byte [ecx + eax]
mov ecx, 0x485c50
xor byte [esi + ebp], al
call fcn.00403ecc
push eax
call fcn.00402dfb
pop ecx
lea ecx, [esp + 0x24]
call fcn.00406602
lea ecx, [esp + 0x48]
call fcn.0040664e
lea ecx, [esp + 0x30]
call fcn.00406602
lea ecx, [esp + 0x3c]
call fcn.004065df
mov eax, dword [esp + 0x14]
inc edi
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x10], edi
cmp edi, dword [esp + 0x26c]
jl 0x42b37c
lea eax, [esp + 0x1c]
push eax
mov ecx, eax
call fcn.00401fbd
mov ecx, dword [esp + 0x260]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0040ce32
add esp, 0x254
ret