Function at 0x420560
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, ecx
push edi
push esi
push ebx
sub esp, 0x2c
mov esi, dword [esp + 0x40]
mov al, byte [0x486218]
test al, al
je 0x420710
mov cl, byte [esi]
test cl, cl
je 0x420750
mov ebx, esi
xor edi, edi
mov al, 0x10
mov dword [esp + 0x18], ebp
nop
inc ebx
mov dl, al
sub edx, ebx
and ecx, 0xff
add edx, esi
add edi, ecx
movsx ebp, byte [ebx]
movsx edx, dl
imul edx, ebp
mov ecx, ebp
test edx, edx
jne 0x420590
mov ecx, 0x65
mov eax, edi
xor edx, edx
mov ebp, dword [esp + 0x18]
div ecx
lea eax, [edx + edx*2]
mov ebx, dword [ebp + eax*4]
test ebx, ebx
jne 0x4205e0
jmp 0x4206f0
jg 0x4206f0
mov ebx, dword [ebx]
test ebx, ebx
je 0x4206f0
mov dword [esp + 4], esi
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4205d0
mov edi, dword [ebx + 0xc]
add ebx, 8
xor eax, eax
test edi, edi
jne 0x420702
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call sub.msvcrt.dll__strdup
mov dword [esp], esi
mov dword [esp + 0x1c], eax
call sub.msvcrt.dll__strdup
mov esi, eax
mov cl, byte [eax]
test cl, cl
je 0x4207d1
mov ebx, eax
mov dword [esp + 0x18], edi
xor eax, eax
nop
inc ebx
mov dl, 0x10
sub edx, ebx
and ecx, 0xff
add edx, esi
add eax, ecx
movsx edi, byte [ebx]
movsx edx, dl
imul edx, edi
mov ecx, edi
test edx, edx
jne 0x420630
mov ecx, 0x65
xor edx, edx
mov edi, dword [esp + 0x18]
div ecx
lea eax, [edx + edx*2]
lea edx, [ebp + eax*4]
mov ebx, dword [edx]
test ebx, ebx
je 0x42075b
mov dword [esp + 0x18], edx
jmp 0x42068c
je 0x4207ad
mov eax, dword [ebx]
mov edi, ebx
test eax, eax
je 0x420757
mov ebx, eax
mov dword [esp + 4], esi
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jle 0x420678
mov dword [esp], 0x10
call fcn.0041c330
test edi, edi
mov edx, dword [esp + 0x18]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x1c]
mov dword [eax], ebx
mov byte [eax + 8], 0
mov dword [eax + 0xc], esi
je 0x4207fe
mov dword [edi], eax
mov esi, dword [edx + 8]
mov al, 1
inc esi
mov dword [edx + 8], esi
mov edi, dword [ebp + 0x4bc]
inc edi
mov dword [ebp + 0x4bc], edi
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret 8
mov ebx, 0x486268
xor eax, eax
mov edi, dword [ebx + 4]
test edi, edi
je 0x420603
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret 8
mov dword [esp], 0x486218
call fcn.00480440
test eax, eax
je 0x42057a
mov dword [esp], 0x486218
mov dword [0x486268], 0
mov dword [0x48626c], 0
call fcn.00480510
mov cl, byte [esi]
test cl, cl
jne 0x420584
nop
xor edx, edx
jmp 0x4205bd
mov edx, dword [esp + 0x18]
mov ebx, dword [edx + 4]
mov dword [esp + 0x18], edx
test ebx, ebx
mov dword [esp], 0x10
je 0x4207d8
call fcn.0041c330
mov edx, dword [esp + 0x18]
mov ecx, dword [edx + 4]
mov edi, dword [esp + 0x1c]
mov dword [eax], 0
mov dword [eax + 4], esi
mov byte [eax + 8], 0
mov dword [eax + 0xc], edi
mov dword [ecx], eax
mov dword [edx + 4], eax
mov eax, dword [edx + 8]
inc eax
mov dword [edx + 8], eax
mov eax, dword [ebp + 0x4bc]
inc eax
mov dword [ebp + 0x4bc], eax
mov al, 1
jmp 0x4206df
mov eax, dword [0x4b61c0]
mov dword [esp + 8], str.Duplicate_hash_
mov dword [esp], eax
mov dword [esp + 4], str.hashtable_tpl::put
call fcn.004256d0
mov al, 1
jmp 0x4206df
xor edx, edx
jmp 0x42065b
call fcn.0041c330
mov edx, dword [esp + 0x18]
mov ecx, dword [edx]
mov edi, dword [esp + 0x1c]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], esi
mov byte [eax + 8], 0
mov dword [eax + 0xc], edi
test ecx, ecx
mov dword [edx], eax
jne 0x420792
jmp 0x42078f
mov dword [edx], eax
jmp 0x4206c9