Function at 0x4cb4d4
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff7c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ecx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
xor eax, eax
push ebp
push 0x4cbc74
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 7
mov eax, dword [ebp - 0x14]
call fcn.00438ee4
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
test eax, eax
je 0x4cb523
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
test eax, eax
jne 0x4cb537
mov edx, ebx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov edx, ebx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x9c]
mov edx, edi
call fcn.004cc4b8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov dl, byte [edx + 0x48]
call fcn.0043275c
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov dl, byte [edx + 0x49]
call fcn.0043271c
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov dl, byte [edx + 0x59]
call fcn.00432794
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x2c]
call fcn.00432678
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
mov eax, dword [eax + 0xc]
xor edx, edx
call fcn.004323d0
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x10]
mov dx, word [edx + 0x44]
call fcn.004061a4
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
mov eax, dword [eax + 0xc]
push eax
mov dword [ebp - 0x70], ebx
fild dword [ebp - 0x70]
mov eax, dword [ebp - 0x10]
fmul qword [eax + 0x50]
call fcn.004039dc
mov edx, eax
pop eax
call fcn.00432630
push 0
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x14]
call fcn.0057a538
lea edx, [ebp - 0x80]
mov ecx, 0xffffff
mov eax, dword [ebp - 0x14]
call fcn.004b995c
mov eax, dword [ebp + 0x10]
push esi
mov esi, eax
lea edi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x58], 0
je 0x4cb644
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
push 0
push 1
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
lea ecx, [ebp - 0x5c]
mov edx, dword [ebp - 0x2c]
mov dx, word [edx]
call fcn.004cac54
jmp 0x4cb66b
push 0xf00
lea eax, [ebp - 0x5c]
push eax
push 1
mov eax, dword [ebp - 0x2c]
call fcn.004062b8
push eax
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
call fcn.0043377c
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edi, eax
lea eax, [ebp - 0x5c]
xor edx, edx
call fcn.0057a698
sub edi, eax
sar edi, 1
jns 0x4cb688
adc edi, 0
mov dword [ebp - 0x6c], edi
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edi, eax
lea eax, [ebp - 0x5c]
xor edx, edx
call fcn.0057a6ac
sub edi, eax
sar edi, 1
jns 0x4cb6a8
adc edi, 0
mov dword [ebp - 0x68], edi
lea eax, [ebp - 0x5c]
xor edx, edx
call fcn.0057a698
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x5c]
xor edx, edx
call fcn.0057a6ac
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x60], eax
test esi, esi
je 0x4cb6ed
mov dword [ebp - 0x70], esi
fild dword [ebp - 0x70]
mov eax, dword [ebp - 0x10]
fmul qword [eax + 0x50]
call fcn.004039dc
lea edx, [ebp - 0x6c]
mov ecx, eax
xor eax, eax
xchg edx, eax
call fcn.00408244
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0xc], 0
je 0x4cb7bf
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x58], 0
je 0x4cb733
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xc]
push eax
push 0
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x2c]
mov dx, word [edx]
call fcn.004cac54
jmp 0x4cb81c
mov eax, dword [ebp - 0x14]
call fcn.0056e708
mov ebx, eax
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
mov eax, dword [eax + 0xc]
push eax
mov eax, ebx
call fcn.00437ef4
mov eax, dword [eax + 0xc]
pop edx
mov ecx, dword [eax]
call dword [ecx + 8]
call fcn.004caffc
push 0xb04
lea eax, [ebp - 0x6c]
push eax
push 1
mov eax, dword [ebp - 0x2c]
call fcn.004062b8
push eax
mov eax, ebx
call fcn.00437ef4
call fcn.0043377c
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xc]
mov ecx, 0x168
cdq
idiv ecx
push edx
lea edx, [ebp - 0x80]
mov eax, ebx
call fcn.0057a538
lea eax, [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
call fcn.0043377c
mov edx, ebx
pop ecx
call fcn.004b5294
mov eax, ebx
call fcn.00404a08
jmp 0x4cb81c
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x58], 0
je 0x4cb7f0
mov eax, ebx
mov ecx, 0x30
cdq
idiv ecx
inc eax
push eax
push 0
push 0
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x2c]
mov dx, word [edx]
call fcn.004cac54
jmp 0x4cb81c
call fcn.004caffc
push 0xb04
lea eax, [ebp - 0x6c]
push eax
push 1
mov eax, dword [ebp - 0x2c]
call fcn.004062b8
push eax
mov eax, dword [ebp - 0x14]
call fcn.00437ef4
call fcn.0043377c
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x80]
cmp ebx, 0x1fffffff
je 0x4cb840
mov eax, ebx
xor edx, edx
call fcn.00571958
call fcn.004b9934
mov dword [ebp - 0x18], eax
jmp 0x4cb866
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x38]
cmp ebx, 0x1fffffff
je 0x4cb861
mov eax, ebx
xor edx, edx
call fcn.00571958
call fcn.004b9934
mov dword [ebp - 0x18], eax
jmp 0x4cb866
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x40], 0x1fffffff
je 0x4cb8bf
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x80]
cmp ebx, 0x1fffffff
je 0x4cb899
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x38]
xor edx, edx
call fcn.00571958
call fcn.004b9934
cmp ebx, eax
je 0x4cb8bf
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x94], 0x1fffffff
jne 0x4cb8bf
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x40]
xor edx, edx
call fcn.00571958
call fcn.004b9934
mov dword [ebp - 0x24], eax
jmp 0x4cb8c6
mov dword [ebp - 0x24], 0x1fffffff
lea ecx, [ebp - 8]
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x14]
call fcn.00560d2c
test al, al
je 0x4cbc57
cmp dword [ebp - 0x24], 0x1fffffff
jne 0x4cba0a
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa8], 0
jne 0x4cb994
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xa5], 0xff
je 0x4cb994
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
dec eax
test eax, eax
jl 0x4cbc57
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
dec edx
test edx, edx
jl 0x4cb987
inc edx
xor esi, esi
mov eax, dword [ebp - 0xc]
lea edi, [eax + esi*4]
xor eax, eax
mov al, byte [edi + 2]
xor ecx, ecx
mov cl, byte [edi + 1]
add ecx, ecx
add eax, ecx
xor ecx, ecx
mov cl, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
mov ecx, dword [ebp - 0x18]
mov dword [edi], ecx
and eax, 0xff
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0xa5]
imul eax, ecx
shr eax, 8
mov byte [edi + 3], al
inc esi
dec edx
jne 0x4cb943
inc dword [ebp - 0x28]
dec dword [ebp - 0x4c]
jne 0x4cb925
jmp 0x4cbc57
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
dec eax
test eax, eax
jl 0x4cbc57
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
dec edx
test edx, edx
jl 0x4cb9fd
inc edx
xor esi, esi
mov eax, dword [ebp - 0xc]
lea edi, [eax + esi*4]
xor eax, eax
mov al, byte [edi + 2]
xor ecx, ecx
mov cl, byte [edi + 1]
add ecx, ecx
add eax, ecx
xor ecx, ecx
mov cl, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
mov ecx, dword [ebp - 0x18]
mov dword [edi], ecx
mov byte [edi + 3], al
inc esi
dec edx
jne 0x4cb9ce
inc dword [ebp - 0x28]
dec dword [ebp - 0x4c]
jne 0x4cb9b0
jmp 0x4cbc57
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x20]
mov esi, eax
dec esi
xor eax, eax
mov al, byte [ebp - 0x24]
mov dl, byte [ebp - 0x18]
xor ecx, ecx
mov cl, dl
sub eax, ecx
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x40]
wait
xor eax, eax
mov al, byte [ebp - 0x23]
mov cl, byte [ebp - 0x17]
xor ebx, ebx
mov bl, cl
sub eax, ebx
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x44]
wait
movzx edi, byte [ebp - 0x22]
mov al, byte [ebp - 0x16]
xor ebx, ebx
mov bl, al
sub edi, ebx
mov dword [ebp - 0x70], edi
fild dword [ebp - 0x70]
mov dword [ebp - 0x84], esi
fild dword [ebp - 0x84]
fdivp st(1)
fstp dword [ebp - 0x48]
wait
and edx, 0xff
mov dword [ebp - 0x70], edx
fild dword [ebp - 0x70]
fstp dword [ebp - 0x34]
wait
xor edx, edx
mov dl, cl
mov dword [ebp - 0x70], edx
fild dword [ebp - 0x70]
fstp dword [ebp - 0x38]
wait
and eax, 0xff
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
fstp dword [ebp - 0x3c]
wait
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa8], 0
jne 0x4cbba2
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xa5], 0xff
je 0x4cbba2
test esi, esi
jl 0x4cbc57
inc esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x28], 0
fld dword [ebp - 0x34]
call fcn.004039dc
mov byte [ebp - 0x30], al
fld dword [ebp - 0x38]
call fcn.004039dc
mov byte [ebp - 0x2f], al
fld dword [ebp - 0x3c]
call fcn.004039dc
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
dec edx
test edx, edx
jl 0x4cbb73
inc edx
xor esi, esi
mov eax, dword [ebp - 0xc]
lea edi, [eax + esi*4]
xor eax, eax
mov al, byte [edi + 2]
xor ecx, ecx
mov cl, byte [edi + 1]
add ecx, ecx
add eax, ecx
xor ecx, ecx
mov cl, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
test al, al
jne 0x4cbb52
xor ecx, ecx
mov dword [edi], ecx
jmp 0x4cbb57
mov ecx, dword [ebp - 0x30]
mov dword [edi], ecx
and eax, 0xff
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0xa5]
imul eax, ecx
shr eax, 8
mov byte [edi + 3], al
inc esi
dec edx
jne 0x4cbb25
fld dword [ebp - 0x34]
fadd dword [ebp - 0x40]
fstp dword [ebp - 0x34]
wait
fld dword [ebp - 0x38]
fadd dword [ebp - 0x44]
fstp dword [ebp - 0x38]
wait
fld dword [ebp - 0x3c]
fadd dword [ebp - 0x48]
fstp dword [ebp - 0x3c]
wait
inc dword [ebp - 0x28]
dec dword [ebp - 0x4c]
jne 0x4cbae6
jmp 0x4cbc57
test esi, esi
jl 0x4cbc57
inc esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x28], 0
fld dword [ebp - 0x34]
call fcn.004039dc
mov byte [ebp - 0x30], al
fld dword [ebp - 0x38]
call fcn.004039dc
mov byte [ebp - 0x2f], al
fld dword [ebp - 0x3c]
call fcn.004039dc
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 8]
imul dword [ebp - 0x28]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
dec edx
test edx, edx
jl 0x4cbc2d
inc edx
xor esi, esi
mov eax, dword [ebp - 0xc]
lea edi, [eax + esi*4]
xor eax, eax
mov al, byte [edi + 2]
xor ecx, ecx
mov cl, byte [edi + 1]
add ecx, ecx
add eax, ecx
xor ecx, ecx
mov cl, byte [edi]
add eax, ecx
shr eax, 2
push eax
mov al, 0xff
pop ecx
sub al, cl
test al, al
jne 0x4cbc21
xor ecx, ecx
mov dword [edi], ecx
jmp 0x4cbc26
mov ecx, dword [ebp - 0x30]
mov dword [edi], ecx
mov byte [edi + 3], al
inc esi
dec edx
jne 0x4cbbf4
fld dword [ebp - 0x34]
fadd dword [ebp - 0x40]
fstp dword [ebp - 0x34]
wait
fld dword [ebp - 0x38]
fadd dword [ebp - 0x44]
fstp dword [ebp - 0x38]
wait
fld dword [ebp - 0x3c]
fadd dword [ebp - 0x48]
fstp dword [ebp - 0x3c]
wait
inc dword [ebp - 0x28]
dec dword [ebp - 0x4c]
jne 0x4cbbb5
push ebp
call fcn.004cb000
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4cbc7b
lea eax, [ebp - 0x2c]
call fcn.0040608c
ret