Function at 0x43bf60
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
sub esp, 0x34
mov eax, ecx
xor ecx, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
mov edx, dword [eax]
cmp dword [eax + 0x10], ecx
jle 0x43c514
push ebx
push ebp
push esi
push edi
nop
mov eax, dword [eax + 0x18]
mov edi, edx
mov ebp, dword [edi]
lea edx, [edx + eax*4]
dec ebp
mov dword [esp + 0x24], edx
test ebp, ebp
jle 0x43c4f4
mov eax, dword [edi + 4]
add edi, 4
mov ebx, dword [esp + 0x48]
xor esi, esi
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 8]
add edx, ecx
mov ecx, dword [ebx]
mov eax, dword [ecx + 0xc]
imul eax, edx
sub edx, dword [ebx + 0x10]
add eax, dword [ecx]
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x14], eax
mov eax, edx
cdq
idiv dword [ecx + 0x18]
imul edx, dword [ecx + 0xc]
add edx, dword [ecx]
sub ebp, 1
mov ecx, dword [esp + 0x30]
mov dword [ebx + 0x18], edx
mov dword [esp + 0x34], ebp
js 0x43c356
mov eax, dword [edi + 4]
add edi, 8
mov dword [esp + 0x18], eax
mov dword [esp + 0x40], edi
mov eax, dword [edi]
mov dword [esp + 0x20], eax
cdq
and edx, 0xff
lea ebp, [edx + eax]
mov eax, ecx
cdq
and edx, 0xff
sar ebp, 8
mov dword [esp + 0x3c], ebp
lea edi, [edx + eax]
sar edi, 8
mov dword [esp + 0x14], edi
cmp ebp, edi
jne 0x43c035
mov eax, dword [esp + 0x20]
sub eax, ecx
imul eax, dword [esp + 0x18]
add esi, eax
mov eax, dword [esp + 0x20]
jmp 0x43c345
movzx eax, cl
mov ecx, 0x100
sub ecx, eax
imul ecx, dword [esp + 0x18]
lea eax, [esi + ecx]
cdq
and edx, 0xff
lea ecx, [edx + eax]
sar ecx, 8
test ecx, ecx
jle 0x43c1eb
mov eax, dword [ebx]
mov edx, dword [ebx + 0x14]
mov esi, dword [eax + 0x10]
mov eax, dword [ebx + 0xc]
imul esi, edi
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x38], eax
mov eax, edi
add esi, edx
mov dword [esp + 0x1c], esi
cmp ecx, 0xff
jl 0x43c130
sub eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
cdq
mov ebx, dword [ebx + 8]
idiv dword [ecx + 0x14]
mov eax, dword [esp + 0x48]
mov edi, edx
mov edx, 0x100
imul edi, dword [ecx + 0x10]
add edi, dword [eax + 0x18]
movzx ecx, byte [edi + 1]
or ecx, 0xff0000
imul ecx, ebx
shr ecx, 8
and ecx, 0xff00ff
mov eax, ecx
shr eax, 0x10
sub edx, eax
movzx eax, byte [esi + 1]
movzx esi, byte [edi + 2]
imul eax, edx
shl esi, 0x10
shr eax, 8
add eax, ecx
mov dword [esp + 0x38], eax
movzx eax, byte [edi]
mov edi, dword [esp + 0x1c]
or esi, eax
imul esi, ebx
movzx ecx, byte [edi + 2]
movzx eax, byte [edi]
shl ecx, 0x10
or ecx, eax
shr esi, 8
imul ecx, edx
and esi, 0xff00ff
mov edx, dword [esp + 0x38]
shr ecx, 8
and ecx, 0xff00ff
add esi, ecx
mov ecx, 0x100
mov eax, esi
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, edx
shr eax, 8
neg al
or al, dl
jmp 0x43c1ce
sub eax, dword [ebx + 0xc]
mov ebp, dword [ebx + 8]
imul ebp, ecx
mov ecx, dword [ebx + 4]
cdq
idiv dword [ecx + 0x14]
sar ebp, 8
mov edi, edx
mov edx, 0x100
imul edi, dword [ecx + 0x10]
add edi, dword [ebx + 0x18]
movzx ebx, byte [esi + 1]
movzx ecx, byte [edi + 1]
movzx esi, byte [edi + 2]
or ecx, 0xff0000
imul ecx, ebp
shl esi, 0x10
shr ecx, 8
and ecx, 0xff00ff
mov eax, ecx
shr eax, 0x10
sub edx, eax
movzx eax, byte [edi]
mov edi, dword [esp + 0x1c]
or esi, eax
imul ebx, edx
imul esi, ebp
mov ebp, dword [esp + 0x3c]
movzx eax, byte [edi]
shr ebx, 8
add ebx, ecx
shr esi, 8
movzx ecx, byte [edi + 2]
and esi, 0xff00ff
shl ecx, 0x10
or ecx, eax
imul ecx, edx
shr ecx, 8
and ecx, 0xff00ff
add esi, ecx
mov ecx, 0x100
mov eax, esi
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, ebx
shr eax, 8
neg al
or al, bl
mov ebx, dword [esp + 0x48]
or ecx, esi
mov byte [edi + 1], al
and ecx, 0xff00ff
mov eax, ecx
shr eax, 0x10
mov byte [edi + 2], al
mov byte [edi], cl
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test edx, edx
jle 0x43c33b
inc edi
sub ebp, edi
test ebp, ebp
jle 0x43c33b
mov eax, dword [ebx]
mov eax, dword [eax + 0x10]
mov ecx, eax
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 8]
imul ecx, edi
sub edi, dword [ebx + 0xc]
imul eax, edx
add ecx, dword [ebx + 0x14]
sar eax, 8
mov dword [esp + 0x1c], eax
cmp eax, 0xfe
jge 0x43c300
nop
mov esi, dword [ebx + 4]
mov eax, edi
cdq
inc edi
mov dword [esp + 0x14], edi
dec ebp
idiv dword [esi + 0x14]
mov ebx, dword [esi + 0x10]
mov esi, 0x100
mov eax, dword [esp + 0x48]
imul ebx, edx
add ebx, dword [eax + 0x18]
movzx edx, byte [ebx + 1]
or edx, 0xff0000
movzx edi, byte [ebx + 2]
imul edx, dword [esp + 0x1c]
shl edi, 0x10
shr edx, 8
and edx, 0xff00ff
mov eax, edx
shr eax, 0x10
sub esi, eax
movzx eax, byte [ecx + 1]
imul eax, esi
shr eax, 8
add eax, edx
movzx edx, byte [ecx + 2]
mov dword [esp + 0x3c], eax
movzx eax, byte [ebx]
or edi, eax
mov ebx, dword [esp + 0x3c]
movzx eax, byte [ecx]
imul edi, dword [esp + 0x1c]
shl edx, 0x10
or edx, eax
imul edx, esi
shr edi, 8
and edi, 0xff00ff
shr edx, 8
and edx, 0xff00ff
add edi, edx
mov edx, 0x100
mov eax, edi
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, ebx
shr eax, 8
or edx, edi
mov edi, dword [esp + 0x14]
neg al
or al, bl
and edx, 0xff00ff
mov ebx, dword [esp + 0x48]
mov byte [ecx + 1], al
mov eax, edx
shr eax, 0x10
mov byte [ecx + 2], al
mov byte [ecx], dl
add ecx, dword [esp + 0x30]
test ebp, ebp
jg 0x43c230
jmp 0x43c337
mov esi, dword [ebx + 4]
mov eax, edi
cdq
dec ebp
inc edi
idiv dword [esi + 0x14]
mov esi, dword [esi + 0x10]
imul esi, edx
add esi, dword [ebx + 0x18]
mov ax, word [esi]
mov dl, byte [esi + 2]
mov word [esp + 0x10], ax
movzx eax, al
mov byte [ecx], al
movzx eax, byte [esp + 0x11]
mov byte [ecx + 1], al
mov byte [ecx + 2], dl
add ecx, dword [esp + 0x30]
test ebp, ebp
jg 0x43c300
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
movzx esi, al
imul esi, edx
sub dword [esp + 0x34], 1
mov ecx, eax
mov edi, dword [esp + 0x40]
jns 0x43bfe3
mov eax, esi
cdq
and edx, 0xff
lea esi, [edx + eax]
sar esi, 8
test esi, esi
jle 0x43c4f0
mov edi, dword [ebx + 0xc]
mov eax, ecx
mov ecx, dword [ebx]
cdq
and edx, 0xff
add eax, edx
mov edx, dword [ebx + 0x14]
mov ebp, dword [ecx + 0x10]
mov ecx, dword [ebx + 4]
sar eax, 8
imul ebp, eax
sub eax, edi
add ebp, edx
cdq
idiv dword [ecx + 0x14]
mov edi, edx
mov edx, 0x100
imul edi, dword [ecx + 0x10]
cmp esi, 0xff
jl 0x43c44e
mov eax, dword [esp + 0x48]
mov ebx, dword [ebx + 8]
add edi, dword [eax + 0x18]
movzx ecx, byte [edi + 1]
or ecx, 0xff0000
movzx esi, byte [edi + 2]
imul ecx, ebx
shl esi, 0x10
shr ecx, 8
and ecx, 0xff00ff
mov eax, ecx
shr eax, 0x10
sub edx, eax
movzx eax, byte [ebp + 1]
imul eax, edx
shr eax, 8
add eax, ecx
movzx ecx, byte [ebp + 2]
mov dword [esp + 0x40], eax
movzx eax, byte [edi]
or esi, eax
shl ecx, 0x10
movzx eax, byte [ebp]
or ecx, eax
imul esi, ebx
imul ecx, edx
mov edx, dword [esp + 0x40]
shr esi, 8
shr ecx, 8
and esi, 0xff00ff
and ecx, 0xff00ff
add esi, ecx
mov ecx, 0x100
mov eax, esi
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, edx
shr eax, 8
or ecx, esi
neg al
and ecx, 0xff00ff
or al, dl
mov byte [ebp], cl
mov byte [ebp + 1], al
mov eax, ecx
shr eax, 0x10
mov byte [ebp + 2], al
jmp 0x43c4f0
add edi, dword [ebx + 0x18]
mov dword [esp + 0x34], ebp
mov ebp, dword [ebx + 8]
imul ebp, esi
movzx ecx, byte [edi + 1]
or ecx, 0xff0000
movzx esi, byte [edi + 2]
shl esi, 0x10
sar ebp, 8
imul ecx, ebp
shr ecx, 8
and ecx, 0xff00ff
mov eax, ecx
shr eax, 0x10
sub edx, eax
mov eax, dword [esp + 0x34]
movzx ebx, byte [eax + 1]
movzx eax, byte [edi]
mov edi, dword [esp + 0x34]
or esi, eax
imul ebx, edx
imul esi, ebp
movzx eax, byte [edi]
shr ebx, 8
add ebx, ecx
shr esi, 8
movzx ecx, byte [edi + 2]
and esi, 0xff00ff
shl ecx, 0x10
or ecx, eax
imul ecx, edx
shr ecx, 8
and ecx, 0xff00ff
add esi, ecx
mov ecx, 0x100
mov eax, esi
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, ebx
shr eax, 8
or ecx, esi
neg al
and ecx, 0xff00ff
or al, bl
mov byte [edi], cl
mov byte [edi + 1], al
mov eax, ecx
shr eax, 0x10
mov byte [edi + 2], al
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, dword [ecx + 0x10]
mov ecx, eax
mov eax, dword [esp + 0x2c]
jl 0x43bf80
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret 4