Function at 0x41f5bd
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
mov ebx, ecx
and dword [ebp - 8], 0
push esi
mov al, byte [ebx + 0x3a67]
mov cl, byte [ebx + 0x3a69]
mov dx, word [ebx + 0x3a65]
mov byte [ebp - 2], al
mov ax, word [ebx + 0x3a61]
push edi
test byte [ebp + 0x18], 2
mov edi, dword [ebp + 0x1c]
mov word [ebp - 0x10], ax
mov al, byte [ebx + 0x3a68]
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 1], al
mov ax, word [ebx + 0x3a63]
mov word [ebp - 0xc], ax
mov byte [ebp - 3], cl
mov dword [ebp - 0x14], edx
je 0x41f682
mov ax, word [edi]
mov dword [ebp - 8], 2
movzx eax, ax
mov dword [ebp + 0x1c], eax
shr eax, cl
movzx esi, dx
and eax, esi
mov cl, byte [ebp - 1]
imul eax, eax, 0xff
cdq
idiv esi
movzx esi, al
mov eax, dword [ebp + 0x1c]
or esi, 0x200
shr eax, cl
movzx ecx, word [ebp - 0xc]
and eax, ecx
imul eax, eax, 0xff
cdq
idiv ecx
mov cl, byte [ebp - 2]
shl esi, 8
movzx eax, al
or esi, eax
mov eax, dword [ebp + 0x1c]
shr eax, cl
movzx ecx, word [ebp - 0x10]
and eax, ecx
imul eax, eax, 0xff
cdq
idiv ecx
shl esi, 8
movzx eax, al
or esi, eax
mov dword [0x47a610], esi
jmp 0x41f688
mov esi, dword [0x47a610]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x2c], eax
add eax, ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x28], eax
add eax, ecx
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
mov ecx, ebx
call fcn.00416091
test byte [ebp + 0x18], 4
je 0x41f734
movzx ecx, word [ebp - 0xc]
mov eax, dword [ebp - 8]
mov dword [ebp + 0x1c], ecx
movzx ecx, word [ebp - 0x10]
mov ax, word [eax + edi]
mov dword [ebp + 0x10], ecx
mov cl, byte [ebp - 3]
add dword [ebp - 8], 2
movzx esi, word [ebp - 0x14]
movzx eax, ax
mov dword [ebp + 0x14], eax
shr eax, cl
mov cl, byte [ebp - 1]
and eax, esi
imul eax, eax, 0xff
cdq
idiv esi
movzx esi, al
mov eax, dword [ebp + 0x14]
or esi, 0x200
shr eax, cl
mov cl, byte [ebp - 2]
shl esi, 8
and eax, dword [ebp + 0x1c]
imul eax, eax, 0xff
cdq
idiv dword [ebp + 0x1c]
movzx eax, al
or esi, eax
mov eax, dword [ebp + 0x14]
shr eax, cl
shl esi, 8
and eax, dword [ebp + 0x10]
imul eax, eax, 0xff
cdq
idiv dword [ebp + 0x10]
movzx eax, al
or esi, eax
mov dword [0x47a614], esi
jmp 0x41f73a
mov esi, dword [0x47a614]
test byte [ebp + 0x18], 8
je 0x41f8aa
mov eax, dword [ebp - 8]
add edi, eax
mov al, byte [edi]
inc edi
test byte [ebp + 0x18], 0x10
movzx eax, al
je 0x41f842
test eax, eax
jle 0x41f8aa
movzx ecx, byte [ebp - 3]
mov dword [ebp - 8], ecx
movzx ecx, word [ebp - 0x14]
mov dword [ebp + 0x14], ecx
mov dword [ebp - 0x14], eax
movzx ecx, byte [ebp - 1]
mov dword [ebp - 0x18], ecx
movzx ecx, word [ebp - 0xc]
mov dword [ebp + 0x1c], ecx
movzx ecx, byte [ebp - 2]
mov dword [ebp - 0xc], ecx
movzx ecx, word [ebp - 0x10]
mov dword [ebp + 0x10], ecx
movzx ebx, word [edi]
mov ecx, dword [ebp - 8]
mov eax, ebx
shr eax, cl
mov ecx, dword [ebp - 0x18]
and eax, dword [ebp + 0x14]
imul eax, eax, 0xff
cdq
idiv dword [ebp + 0x14]
movzx esi, al
mov eax, ebx
or esi, 0x200
shr eax, cl
mov ecx, dword [ebp - 0xc]
shl esi, 8
and eax, dword [ebp + 0x1c]
imul eax, eax, 0xff
cdq
idiv dword [ebp + 0x1c]
movzx eax, al
or esi, eax
mov eax, ebx
shr eax, cl
shl esi, 8
and eax, dword [ebp + 0x10]
imul eax, eax, 0xff
cdq
idiv dword [ebp + 0x10]
movzx eax, al
or esi, eax
inc edi
inc edi
mov dword [0x47a614], esi
push esi
movzx eax, byte [edi]
mov edx, eax
and eax, 0xf
shr edx, 4
inc edi
mov ebx, eax
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc ecx
inc eax
mov dword [ebp + 0x18], eax
mov eax, dword [ebp + 0xc]
add eax, ebx
mov ebx, dword [ebp + 8]
add edx, ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], edx
add edx, ecx
mov ecx, dword [ebp + 0x18]
inc edi
add eax, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x24], edx
call fcn.00416091
dec dword [ebp - 0x14]
jne 0x41f78e
jmp 0x41f8aa
test eax, eax
jle 0x41f8aa
mov dword [ebp + 0x1c], eax
jmp 0x41f851
mov esi, dword [0x47a614]
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc edi
mov edx, eax
mov dword [ebp + 0x10], ecx
push esi
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc ecx
inc eax
mov dword [ebp + 0x18], eax
mov eax, dword [ebp + 0xc]
add edx, eax
mov eax, dword [ebp + 8]
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0x10]
add eax, edx
inc edi
mov dword [ebp - 0x2c], eax
add eax, ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x28], eax
add eax, ecx
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
mov ecx, ebx
call fcn.00416091
dec dword [ebp + 0x1c]
jne 0x41f84b
pop edi
pop esi
pop ebx
leave
ret 0x18