Function at 0x411500
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push 0xffffffffffffffff
push 0x57accb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push ebp
mov ebp, dword [esp + 0x40]
push esi
push edi
mov edi, ecx
test ebp, ebp
mov dword [esp + 0x1c], edi
je 0x4115b8
mov esi, 0x5de4fc
mov eax, ebp
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x41155d
test cl, cl
je 0x411559
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x41155d
add eax, 2
add esi, 2
test cl, cl
jne 0x411535
xor eax, eax
jmp 0x411562
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4115b8
push ebp
lea ecx, [esp + 0x1c]
call fcn.00401d60
lea eax, [esp + 0x18]
lea ecx, [esp + 0x20]
add edi, 0x60
push eax
push ecx
mov ecx, edi
mov dword [esp + 0x48], 0
mov dword [esp + 0x1c], edi
call fcn.004140d0
mov bl, byte [eax + 4]
lea ecx, [esp + 0x18]
mov dword [esp + 0x40], 0xffffffff
call fcn.00401e10
test bl, bl
je 0x4115cf
push ebp
push str.model_named____s___has_existed.
push 0
call fcn.00404080
add esp, 0xc
xor al, al
mov ecx, dword [esp + 0x38]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x34
ret 0xc
mov ebx, dword [esp + 0x1c]
lea eax, [esp + 0x10]
push 0
mov dword [esp + 0x14], 0
mov edx, dword [ebx + 8]
push eax
push ebp
mov ecx, dword [edx + 0x64]
call fcn.004bf520
test al, al
jne 0x4115fa
push ebp
push str.model_named____s___cannot_be_loaded.
jmp 0x4115ae
mov esi, dword [esp + 0x4c]
mov eax, 0x5de4fc
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x411627
test cl, cl
je 0x411623
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x411627
add eax, 2
add esi, 2
test cl, cl
jne 0x411603
xor eax, eax
jmp 0x41162c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x411696
mov ecx, dword [ebx + 0xc]
test ecx, ecx
je 0x411696
mov ebp, dword [esp + 0x50]
mov eax, 0x5de4fc
mov esi, ebp
mov bl, byte [eax]
mov dl, bl
cmp bl, byte [esi]
jne 0x411666
test dl, dl
je 0x411662
mov bl, byte [eax + 1]
mov dl, bl
cmp bl, byte [esi + 1]
jne 0x411666
add eax, 2
add esi, 2
test dl, dl
jne 0x411642
xor eax, eax
jmp 0x41166b
sbb eax, eax
sbb eax, 0xffffffff
neg eax
mov edx, dword [esp + 0x10]
push 0
sbb eax, eax
and eax, ebp
push eax
mov eax, dword [esp + 0x54]
push eax
push edx
call fcn.004b4fe0
test al, al
jne 0x4116b9
mov eax, dword [esp + 0x48]
push eax
push str.model_named____s___cannot_be_link_to_father.
jmp 0x4115ae
lea ecx, [ebx + 0x10]
sub esp, 0xc
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ecx, dword [ecx + 8]
mov dword [edx + 8], ecx
mov ecx, dword [esp + 0x1c]
call fcn.004b8750
jmp 0x4116c1
mov ebp, dword [esp + 0x48]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
push ebp
lea ecx, [esp + 0x4c]
mov dword [eax + 0x72c], 0x413a50
mov dword [eax + 0x730], ebx
call fcn.00401d60
mov eax, dword [edi + 4]
mov ebp, dword [edi + 0x14]
inc eax
mov dword [esp + 0x40], 1
cmp eax, ebp
mov dword [esp + 0x50], ebp
jbe 0x4117f0
push eax
call fcn.00414770
mov esi, eax
add esp, 4
cmp esi, ebp
mov dword [esp + 0x4c], esi
jbe 0x4117f0
lea edx, [esi*4]
mov dword [esp + 0x30], esi
push edx
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [esp + 0x28], eax
test esi, esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], esi
je 0x411750
mov ecx, dword [esp + 0x2c]
mov eax, ecx
add ecx, 4
test eax, eax
mov dword [esp + 0x2c], ecx
je 0x41174d
mov dword [eax], 0
dec esi
jne 0x411736
xor ebx, ebx
mov byte [esp + 0x40], 2
test ebp, ebp
jbe 0x4117d5
mov eax, dword [edi + 8]
mov edi, dword [eax + ebx*4]
test edi, edi
je 0x4117cc
lea ecx, [edi + 8]
call fcn.00402370
mov ebp, eax
xor esi, esi
mov al, byte [ebp]
test al, al
je 0x41179a
and eax, 0xff
push eax
call dword [sym.imp.MSVCRT.dll_tolower]
mov ecx, esi
add esp, 4
shl ecx, 5
sub ecx, esi
add eax, ecx
inc ebp
mov esi, eax
mov al, byte [ebp]
test al, al
jne 0x411778
mov eax, esi
xor edx, edx
div dword [esp + 0x4c]
mov eax, dword [esp + 0x14]
mov esi, dword [edi]
mov ecx, dword [eax + 8]
mov dword [ecx + ebx*4], esi
mov ecx, dword [esp + 0x28]
mov ecx, dword [ecx + edx*4]
mov dword [edi], ecx
mov ecx, dword [esp + 0x28]
mov dword [ecx + edx*4], edi
mov edx, dword [eax + 8]
mov edi, dword [edx + ebx*4]
test edi, edi
jne 0x411765
mov ebp, dword [esp + 0x50]
mov edi, dword [esp + 0x14]
inc ebx
cmp ebx, ebp
jb 0x41175b
lea eax, [esp + 0x28]
lea ecx, [edi + 8]
push eax
call fcn.00414520
lea ecx, [esp + 0x28]
mov byte [esp + 0x40], 1
call fcn.00414070
mov esi, dword [edi + 0x14]
lea ecx, [esp + 0x48]
push ecx
mov ecx, edi
call fcn.004147a0
xor edx, edx
div esi
mov ebp, edx
mov edx, dword [edi + 8]
mov edi, dword [edx + ebp*4]
test edi, edi
mov esi, edi
je 0x41184f
mov bl, 3
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.00401dc0
push ecx
lea edx, [esi + 8]
mov ecx, esp
mov dword [esp + 0x58], esp
push edx
mov byte [esp + 0x4c], bl
call fcn.00401dc0
mov byte [esp + 0x48], 1
call fcn.00402660
add esp, 8
test al, al
jne 0x41188d
mov esi, dword [esi]
test esi, esi
jne 0x411813
push 0xc
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x4c], eax
test eax, eax
mov byte [esp + 0x40], 4
je 0x41187a
lea ecx, [esp + 0x10]
push edi
lea edx, [esp + 0x4c]
push ecx
push edx
mov ecx, eax
call fcn.004144c0
jmp 0x41187c
xor eax, eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 8]
mov dword [edx + ebp*4], eax
mov eax, dword [ecx + 4]
inc eax
mov dword [ecx + 4], eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x40], 0xffffffff
call fcn.00401e10
mov al, 1
jmp 0x4115ba