Function at 0x438bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov eax, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
add edx, ebp
sub edx, dword [esp + 0x48]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
cmp edx, ebp
jbe 0x438f38
mov esi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
dec eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0xc], 0
mov dword [esp], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x20], edx
jmp 0x438c5d
mov dword [eax + ecx*4], ebp
add ebx, 4
mov ecx, dword [esp + 0x38]
mov dword [ecx + 4], ebx
add ebp, dword [esp + 0x1c]
mov dword [esp + 0xc], ebx
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x44]
inc ebp
mov dword [esp], eax
cmp ebp, edx
jae 0x438f38
test esi, esi
je 0x438c66
cmp byte [esi], 0x3f
je 0x438c72
movzx eax, byte [ebp]
cmp al, byte [ebx]
jne 0x438cf0
cmp dword [esp + 0x48], 2
jb 0x438cb0
xor eax, eax
jmp 0x438c96
movzx ecx, byte [ebp + eax + 1]
cmp cl, byte [ebx + eax + 1]
jne 0x438dff
inc eax
cmp dword [esp + 0x1c], eax
je 0x438cb0
test esi, esi
je 0x438c80
cmp byte [esi + eax + 1], 0x3f
jne 0x438c80
jmp 0x438c8f
mov edx, dword [esp]
mov eax, edx
mov ebx, dword [esp + 0xc]
xor eax, ebx
mov edi, edx
not edi
mov esi, edi
and esi, ebx
add esi, esi
sub esi, eax
sar esi, 2
cmp ebx, dword [esp + 0x18]
je 0x438cf8
mov ecx, ebx
sub ecx, edx
sar ecx, 2
mov eax, edx
cmp ecx, esi
jae 0x438c30
jmp 0x438e85
mov eax, dword [esp]
jmp 0x438c51
lea eax, [esi + 1]
sub ebx, edx
mov dword [esp + 0x10], ebx
mov ecx, ebx
sar ecx, 2
mov ebx, ecx
shr ebx, 1
mov dword [esp + 8], ecx
add ebx, ecx
mov ecx, ebx
cmp ebx, eax
mov ebx, edx
ja 0x438d1a
mov ecx, eax
mov dword [esp + 0x18], ecx
lea eax, [ecx*4]
push eax
call fcn.00408cd0
add esp, 4
test ebx, ebx
mov edx, ebx
je 0x438e5f
cmp eax, edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 4], eax
jbe 0x438e09
lea ecx, [edx + ebx]
cmp ecx, eax
jbe 0x438e09
test ebx, ebx
je 0x438e4d
mov eax, dword [esp]
add eax, ebx
dec eax
mov ecx, dword [esp + 4]
add ecx, ebx
dec ecx
add edi, dword [esp + 0xc]
mov dword [esp + 0x14], edi
mov edi, ebx
and edi, 7
je 0x438d94
neg edi
xor edx, edx
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edx]
mov byte [ecx + edx], bl
dec edx
cmp edi, edx
jne 0x438d80
add eax, edx
add ecx, edx
add dword [esp + 0x10], edx
mov edx, dword [esp + 0x14]
cmp edx, 7
mov edi, dword [esp + 0x10]
jb 0x438e4d
neg edi
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax + edx]
mov byte [ecx + edx], bl
movzx ebx, byte [eax + edx - 1]
mov byte [ecx + edx - 1], bl
movzx ebx, byte [eax + edx - 2]
mov byte [ecx + edx - 2], bl
movzx ebx, byte [eax + edx - 3]
mov byte [ecx + edx - 3], bl
movzx ebx, byte [eax + edx - 4]
mov byte [ecx + edx - 4], bl
movzx ebx, byte [eax + edx - 5]
mov byte [ecx + edx - 5], bl
movzx ebx, byte [eax + edx - 6]
mov byte [ecx + edx - 6], bl
movzx ebx, byte [eax + edx - 7]
mov byte [ecx + edx - 7], bl
add edx, 0xfffffff8
cmp edi, edx
jne 0x438db0
jmp 0x438e4d
add ebp, eax
mov eax, dword [esp]
jmp 0x438c51
mov ecx, ebx
shr ecx, 2
mov eax, edx
mov edi, dword [esp + 4]
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, edx
mov edx, ebx
and edx, 0xfffffffc
mov ecx, dword [esp + 4]
lea edi, [ecx + edx]
add edx, eax
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov eax, edx
mov dword [esp + 0x14], edi
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
test bl, 1
je 0x438e4d
and ebx, 2
movzx eax, byte [edx + ebx]
mov ecx, dword [esp + 0x14]
mov byte [ecx + ebx], al
mov ebx, dword [esp]
push ebx
call fcn.00408ce0
mov edx, ebx
add esp, 4
mov eax, dword [esp + 4]
mov edi, dword [esp + 0x38]
mov dword [edi], eax
lea ebx, [eax + esi*4]
mov dword [edi + 4], ebx
mov ecx, dword [esp + 0x18]
lea ecx, [eax + ecx*4]
mov dword [esp + 0x18], ecx
mov dword [edi + 8], ecx
mov ecx, dword [esp + 8]
cmp ecx, esi
jae 0x438c30
lea edx, [edx + esi*4]
mov dword [esp + 0x10], edx
mov edi, dword [esp + 0xc]
sub edx, edi
lea esi, [eax + ecx*4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
lea eax, [eax + ecx*4]
add eax, 4
mov dword [esp], esi
lea ecx, [esi + edx]
cmp ecx, eax
jbe 0x438edc
cmp dword [esp + 0x10], edi
mov esi, eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
je 0x438c30
push edx
push dword [esp + 4]
push esi
call fcn.00408d60
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
add esp, 0xc
jmp 0x438c30
mov ecx, edx
shr ecx, 2
mov esi, dword [esp]
mov edi, eax
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov esi, edx
and esi, 0xfffffffc
add eax, esi
add esi, dword [esp]
mov ecx, edx
shr ecx, 1
and ecx, 1
mov edi, esi
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov edi, eax
mov eax, dword [esp]
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
test dl, 1
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
je 0x438c30
and edx, 2
movzx ecx, byte [esi + edx]
mov esi, dword [esp + 0xc]
mov byte [esi + edx], cl
mov ecx, dword [esp + 8]
jmp 0x438c30
mov eax, dword [esp + 0x38]
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret